Content protection key management

摘要

This disclosure is directed to content protection key management. In general, devices may include secure processing resources configured to derive content keys (e.g., for use in decrypting secure content) using key ladders. In one embodiment, a device may comprise, for example, at least a secure processing module to derive content keys for use in decrypting secure content. The secure processing module may include, for example, a key ladder storage module and a secure key storage module. The key ladder storage module may be to store at least one key ladder for use in deriving at least one content key. The secure key storage module may be to store the at least one content key derived using the key ladder.

主权项

1. A device, comprising:
a secure processing module to derive content keys for use in decrypting secure content, the secure processing module including at least:
a key ladder storage module to store at least one key ladder including a data structure identifying at least one intermediate key for use in deriving at least one content key;a secure key storage module to store the at least one content key; anda content key derivation module to derive the at least one content key using the at least one intermediate key identified by the at least one key ladder;wherein the at least one key ladder comprises at least one property corresponding to the at least one intermediate key, the at least one property describing rights for the at least one intermediate key, the rights including at least one of encrypt/decrypt rights or sign/verify rights.