Binding Table for Cryptographic Authentication Without Public Key Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional broadcast encryption systems lack the ability to mimic digital signature functionality, leading to security vulnerabilities in applications like electronic sell-through, where anonymity hinders the authentication of legitimate servers and content origin, and incur significant computational overhead, making them inefficient and error-prone.
Innovation Solution
A cryptographic authentication system using an authentication media key block with media key precursors, where transformed keys are generated by applying a function to data values, and a binding table is created by encrypting media keys with these precursors, allowing media players to verify the authenticity of content and mitigate unauthorized attacks without the need for public-key cryptography's computational overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional broadcast encryption systems use message authentication codes (MACs) for validity testing, then anonymity is maintained and computational resources are reduced, but the ability to authenticate legitimate servers and verify content origin is lost
Solution Approach 1:
The system segments the authentication mechanism by introducing a binding table that separates the authentication function from the content decryption function. The binding table contains authentication data that verifies the legitimacy of servers and content origin, while the broadcast encryption mechanism maintains anonymity for content playback. This segmentation allows both authentication capability and anonymity to coexist.
Solution Approach 2:
The binding table acts as an intermediary between the broadcast encryption system and the authentication requirement. It contains authentication data that mediates the verification of server legitimacy and content origin without requiring the content itself to reveal identity information. The binding table is processed separately from the content decryption process.
2Reliability
If public-key cryptography is used to provide digital signature functionality, then authentication and identification are improved, but computational overhead increases significantly
Solution Approach 1:
The system extracts the authentication function from the content decryption process. The binding table contains authentication data that is verified separately from the broadcast encryption decryption process. This extraction allows authentication to be performed using lightweight cryptographic operations rather than computationally intensive public-key operations.
Solution Approach 2:
The binding table serves as a disposable authentication structure that is created for each content distribution and discarded after verification. It provides the necessary authentication functionality without requiring the establishment of long-term public-key infrastructure, reducing computational overhead while maintaining security.
3Reliability
If broadcast encryption revocation information is tied to the media key block, then content protection is strengthened, but the size of the media key block increases significantly
Solution Approach 1:
The system moves revocation information from the traditional media key block structure to a separate binding table structure. This dimensional change allows revocation data to be organized and stored efficiently without increasing the core media key block size. The binding table provides a separate namespace for authentication and revocation information.
Data Source
AI summary
A cryptographic authentication system comprises an authentication media key block that comprises media key precursors. The system generates transformed keys by applying a function to a media ID of a media and each of the media key precursors, and generates entries in a binding table by applying an encrypting function to a media key of an encrypted content and each of the transformed keys. To play encrypted content, a media player processes the authentication media key block using a device key to extract a media key precursor, extracts a media key from the binding table using the extracted media key precursor and the media ID, and verifies that the extracted media key matches the media key of the encrypted content, allowing the media device to decrypt and play the encrypted content.