Verfahren und Vorrichtung zur inkrementalen Übertragung von Zugangsrechten

摘要

The method initially involves dividing data defining access rights into subgroups. These subgroups are then transmitted, in messages, to the processor as authenticated data. A current cryptographic key is derived using the data in a current message when that message is received. Each subgroup is stored in a corresponding storage bank which each have an associated validity designation for the cryptographic key. The current key is compared to one from a prior message under which subgroups stored in said storage banks were authenticated. If the keys match, the matching keys' validity designation is unchanged for any storage bank not storing data authenticated by the current message, otherwise the designation of these banks is set to invalid. Access is limited to that provided by access rights contained in storage banks with a designation for the current key in a valid state.