Dynamic Group Management via Media Key Block Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In dynamic group management methods, ensuring scalability and efficient management of communication devices belonging to multiple groups is challenging due to the need for each device to hold multiple key information sets, leading to increased complexity and communication load.
Innovation Solution
The use of a Media Key Block (MKB) allows a single device key to manage affiliation with multiple groups efficiently, distributing a group key only to devices belonging to a particular group, and appending identification information to specify target devices for group operations, thereby reducing network load and preventing unintended group withdrawals.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If dynamic group management is implemented to allow flexible device affiliation with multiple groups, then adaptability is improved, but device complexity increases due to the need for each device to hold multiple key information sets
Solution Approach 1:
The patent merges multiple group key information sets into a single Media Key Block (MKB) structure. The MKB contains encrypted group keys that can be processed by devices belonging to multiple groups using their single device key, eliminating the need for devices to maintain separate key information for each group while preserving flexible multi-group affiliation capabilities
Solution Approach 2:
The Media Key Block serves as a universal data structure that can manage multiple group keys simultaneously. A single MKB can be processed by devices affiliated with different groups, making the key management system universally applicable across multiple groups without requiring group-specific key management procedures
2Adaptability or versatility
If group key information is distributed to all devices for dynamic group management, then adaptability is improved, but communication load increases
Solution Approach 1:
The patent extracts and distributes only the essential Media Key Block containing encrypted group keys, rather than distributing complete group key information to all devices. Devices process the MKB using their device keys to obtain only the group keys relevant to their affiliations, reducing unnecessary data transmission and processing overhead across the network
Solution Approach 2:
Instead of distributing complete group key information to all potential group members, the system distributes a compact MKB structure that contains all necessary encrypted keys. Each device performs partial decryption based on its specific group affiliations, receiving and processing only the minimal necessary information for its particular group memberships
3Ease of operation
If group operations are broadcast to all devices, then ease of operation is improved, but unintended group withdrawals occur due to lack of target device specification
Solution Approach 1:
The patent incorporates identification information within the Media Key Block that specifies which target devices should process the group operation. This localized identification data enables devices to determine whether they are the intended recipients of group operations, allowing broad broadcasting while preventing unintended devices from executing operations or withdrawing from groups
Data Source
AI summary
A communication control device includes an extracting unit and an output unit. The extracting unit extracts, from a media key block containing a plurality of elements, partial information that contains elements which can be processed by a communication device having a device ID thereof identified in identification information for identifying one or more device IDs. The output unit outputs a group ID for identifying a group, the identification information, and the partial information, to a plurality of the communication devices that include all of the communication devices belonging to the group.