| 摘要 |
A system for making digital content data available to an end user station (26.1) comprises a source (12) for generating source encrypted data comprising the content data encrypted with a key (15) of a content encryption key (CEK) pair and share data relating to the CEK. The share data being encrypted with a first key of a second encryption key pair, which second key pair is associated with a targeted intermediate station 18.1. The intermediate station 18.1 comprises a processor 22.1 for receiving the source encrypted data. The processor at the intermediate station is configured to be placed in data communication with a portable storage device (PSD), which is associated with the end user station 26.1. The end user station is associated with a third encryption key pair. The processor 22.1 is configured to generate intermediate station encrypted data by decrypting the encrypted share data utilizing a key of the second key pair and encrypting resulting decrypted data utilizing a key of the third key pair. A CEK reconstruction processor is configured to utilize an algorithm and input share data to reconstruct the CEK. A decryption processor is configured to use the reconstructed CEK, to decrypt the encrypted content data. |
