Method for updating shared key
Abstract
This invention discloses a method for renewing the shared key. The multicast/ broadcast server at the mature point of the shared key switching period sends down the order of switching shared key to the users in the group, and switches the shared key with the users in the group at the same time, the users in the group store the serial number for next sharing carried by the order of switching the shared key; the users in the group judge the accordance between the serial number of renewing shared key stored by users themselves and the serial numbers of the next shared key at the mature point of each user's renewing shared key applying period; if yes, the user waits for next mature point of self renewing shared key applying period; if not, the user sends a request to multicast / broadcast server for renewing the shared key, then stores the renewed shared key sent by multicast/broadcast server and the serials number corresponding to the renewed shared key. It avoids the blocking of wireless communication network caused by renewing the shared key by users at the same time.
Term
No projected expiry on record.
- Priority and filed
- Published
- Today
8 claims: 1 independent, 7 dependent
- 1Method for manufacturing 1.1 for sharing system keys, updating is characterised method of comprising the steps of:, A playing/playing server at each sharing system key switch cycle due part, the user to group for distributing system for sharing key handover order, wherein the sharing system key handover order and second switching system for sharing a series of counting,/playing to broadcasting server and stored in updating system for sharing same group the user of switching novel sharing system key;The B) and user saving playing/playing for sharing system key handover command for distributing server filled in the switching system for sharing a series of counting next time;The C and group the user in each for updating system for sharing key application cycle's due part, a judging with a serial number of for updating system for sharing key of memory and a current with a memory of the sharing system a series of counting next time consistently;each, wherein user standby lower for sharing updating system using a cycle due part;Otherwise, operating order D;D;the user to play/playing transmission server updating system for sharing key request to back radio/playing server arranged on the updating system for sharing key, request to the user transmission updating system for sharing key and a serial number of the updating system for sharing key are, wherein the user memory updating system for sharing key and a serial number of the updating system for sharing key are. 1.一种共享密钥更新的方法,其特征在于该方法包含以下步骤:A、多播/广播服务器在每个共享密钥切换周期的到期点,向群组内用户下发共享密钥切换命令,该共享密钥切换命令中携带有下次切换共享密钥序列号计数,多播/广播服务器和存储有更新共享密钥的群组内用户同时切换到新的共享密钥;B、群组内用户存储多播/广播服务器下发的共享密钥切换命令中携带下次切换共享密钥序列号计数;C、群组内用户在每个自身更新共享密钥申请周期的到期点,判断与自身存储的更新共享密钥相对应的序列号是否与当前存储的下次切换共享密钥序列号计数相一致,如果是,所述用户等待下一个自身更新共享密钥申请周期的到期点;否则,执行步骤D;D、所述用户向多播/广播服务器发送更新共享密钥请求,多播/广播服务器收到更新共享密钥请求后,向所述用户发送更新共享密钥及与该更新共享密钥相对应的序列号,所述用户存储更新共享密钥及与该更新共享密钥相对应的序列号。
45 paragraphs, as filed
Method of sharing system key updating
technical field
The invention relates to sharing system key updating the technology, especially is a method of set sharing system key updating.
background technology
The wireless communication network,/playing broadcast service is edges of the point-multipoint a one-way bearer service, a data of an original transmission entity at most for entity, and shown the digital 1, the data of broadcasting/playing a server transmission at most clamped terminal. The multiple area, subscribed playing/playing service user to enjoy playing/service broadcast service. The/playing of broadcasting service, to prevent is provided with a subscription to broadcasting user/of broadcasting service or is not paid overhead messages to enjoy to play/service broadcast service, need to/playing of broadcasting service is provided with a key, and a single wires/playing of broadcasting service group the user and multicast/playing server to know. Multicast/playing server is metro to provide/playing radio service, wherein both the key generation management function the functional entity, has a functional entity in a wireless communications network gain, a or multiple function is provided prior wireless communication network function the combination of entities.
Multicast/playing of the server and set all the keys of user sharing arranged; can therefore be called the key is/playing broadcast service sharing group key system. Multicast/playing server for sharing key system for transmitting user encryption to group, wherein the process playing clamped/playing server and each user a a time. The set the user and multicast/playing server consults protocol (AKA) filled with and an authentication by and authentication key; and an authentication method, user and multicast/playing server relative to produce and an encryption key (KEK); the encryption key is used for encrypting sharing system key, a group of each user encryption key is only, wherein the encryption key according wherein the group the user with the is. Multicast broadcast/server is a group and user with the encryption key encryption sharing system button is correspondingly, wherein a transmitting through the sharing system key of encrypted a group of the corresponding user, the user is a key encryption and decryption system for sharing key according wherein, and finally for playing/playing of the server and device for key of user. Multicast broadcast/server for sharing system key encryption to/playing broadcast service information, and transmitting a group of each user, the user for sharing system key a/playing broadcast service information, the gain/playing broadcast service information, finally enjoys to play/service broadcast service.
The device for preventing external user group enjoys/playing broadcast service, a shared system key is not irrevocable, lower unusually to updating. The updating for sharing system key and playing clamped/playing of the server and set between the user to the is conducted. Multicast/playing server to and vibrates the updating for sharing system key according to trigger state, wherein the trigger sharing system key updating, playing/playing server comprises a group of each user relative to transmit the new shared key system. And a group of exists enjoy massively playing/playing service user, sharing system key at the same time for updating in wireless communication networks information content increase sharply instantaneously, wherein of the communication of wireless communication network is blocked inevitably.
invention content
The radio for consideration, the volume of the invention provides a method of sharing system key updating, avoiding the user with updating wireless communication network communication support device according wherein a group of the sharing system with key.
Method for in turn to serve the key, the invention claims a system for sharing key renewed, the method comprising the steps of: , A playing/playing server at each sharing system key switch cycle due part, the user to group for distributing system for sharing key handover order, wherein the sharing system key handover order and second switching system for sharing a series of counting,/playing to broadcasting server and stored in updating system for sharing same group the user of switching novel sharing system key; The B) and user saving playing/playing for sharing system key handover command for distributing server filled in the switching system for sharing a series of counting next time; The C and group the user in the edge of each for sharing updating system using a cycle, a judging with a serial number of for updating system for sharing key of memory and a current with a memory of the sharing system a series of counting next time consistently; each, wherein user standby lower for sharing updating system using a cycle due part; Otherwise, operating order D;
D; the user to play/playing transmission server updating system for sharing key request to back radio/playing server arranged on the updating system for sharing key, request to the user transmission updating system for sharing key and a serial number of the updating system for sharing key are, wherein the user memory updating system for sharing key and a serial number of the updating system for sharing key are.
A pedal TYPE the operation of switching system for sharing key is updating the sharing system switching key for current shared key system.
Multicast/playing server and broadcasting form a user a set of distribution to the sharing system key handover command.
With ordered playing/playing service user, wherein the method - comprising: a and wireless communication network and trustconnector, determining of the user command to/playing of the broadcasting service group the user, and/playing server and user relative to produce and provided with a encryption key of the user, correspondingb, playing/playing server by the user transmission current sharing system key and updating system for sharing key and corresponding to the switching system for sharing a series of counting with a serial number and updating for sharing system key and a serial number of the current sharing system key and next time, wherein the user to save the current sharing system key and updating system for sharing key and corresponding to the switching system for sharing a series of counting with a serial number and updating for sharing system key and a serial number of the current sharing system key and next time.
The pedal b - comprising: Multicast broadcast/server is connected with the encryption key encryption current sharing system key and a serial number and updating for sharing system key and a serial number of the user in the current sharing system key and updating system for sharing key correspondingly, wherein the user is a key encryption and decryption current sharing system key and a serial number and updating for sharing system key and a serial number of thereof and current sharing system key and updating share a system therefor.
When the user in receiving broadcast/playing server to the current sharing system key and updating for sharing system key wherein transmission, started by user for sharing updating system using a cycle timing.
The pedal D - comprising: Multicast broadcast/server is connected with the encryption key encryption updating system for sharing key and a serial number of the user in the updating system for sharing key correspondingly, wherein the user is a key encryption and decryption updating system for sharing key and a serial number of thereof and updating share a system therefor.
The playing/server and system for sharing key switch cycle greater than the user device for updating system for sharing key application cycle.
Method for sharing claims a system for updating according to the invention, each user a group of an/playing broadcast service time and user updating system for sharing key application cycle initial, wherein the user in each for sharing updating system using a cycle due, determining whether to play/playing server to and vibrates the updating system for sharing key is request, wherein in each group and an playing/playing time service point of random distribution, wherein in each group and an/playing broadcast service in each substantially, therefore the user device for updating system for sharing key application cycle due basic, differentThe user to play/playing server to and vibrates time of updating system for sharing key is substantially different, realizes the dispersion user to play/playing server to and vibrates the updating system for sharing key request a time target, which effectively avoiding the communication of wireless communication network is blocked.
Brief description for drawings
Digital 1 of the/playing broadcast service schematic drawing; Digital is 2 to show in the invention the sharing system renewed key for realizing flow, imageDigital is 3 to show in the invention one embodiment current map.
detailed description of illustrated embodiments
In order to make the invention the volume, technical solution and power is clearer, and is further detailed description to the invention claims a light of the auxiliary digital.
The realizes the specification of the technical solution, first a plurality of concepts the invention is substrates to involve.
A switching system for sharing a series of counting (K_COUNT) following: timeA series of counting for switching system for sharing a series of counter leads next time, wherein the substrates switching system for sharing key of communication with the next time, the sharing system for key of every timing time, K_COUNT switch 1, further K_COUNT setting value domain, a invention 0~128, wherein the back of counting K_COUNT achieves 128, wherein the self-healing to 0, the casing to the instrument from 0. Multicast/playing of the server and group of user the two sides of the sharing system key is K_COUNT.
The system for sharing key data (C_SHARE): Multicast sharing system key according/playing of the server and group the user for; the is a data structure inverted, namely multicast sharing system key and a serial number of/playing of the server and group the user for sharing the key system therefor.
Updating system for sharing key data (N_SHARE): Multicast/playing system for sharing key in the server group and user in soon using, and is a data structure inverted, namely playing/playing system for sharing key and a serial number of the server and group the user in soon using the share a system therefor.
System for sharing key switch cycle: For sharing system key switch cycle, playing/playing of the server and method for sharing system key of user adopts the current sharing system key, wherein the sharing system key in C_SHARE data structure; When the current sharing system key switch cycle ended, wherein when the lower sharing system switching key circulation starting, playing clamped/playing server the user broadcasting system for sharing key handover commands to group, wherein broadcast clamped/playing of the server and each group of users the sharing system switching key for updating system for sharing key, wherein the updating system for sharing key in N_SHARE data structure, at the time, the updating system for sharing key to form a current shared key system.
Updating system for sharing key application cycle: The set the user automatically according to for sharing system using a cycle regular the inspection to play/playing server to and vibrates the updating system for sharing key request.
The invention/playing of by broadcasting service sharing system key switch cycle group and clamped user for sharing updating system using a cycle, a playing/playing server and user a set of distribution the sharing system key handover in order and system for sharing key switch cycle due, playing/playing of the server and group of user switching system for sharing key; The group user in each for sharing updating system using a cycle due, wherein an to play/playing server to and vibrates the updating system for sharing key request to; each user a group of/playing a broadcast service time used to of the user updating system for sharing key application cycle initial, further in each group of user playing/playing time service point of random distribution, wherein in each group of user/playing broadcast service time substantially different; therefore the group the user for updating system for sharing key application cycle's initial is basic, a user to play/playing server to and vibrates the updatingTime of sharing system key request is basic differently, effectively avoiding a group and user to radio at the same time/playing server to and vibrates the updating system for sharing key request to of which effectively with avoiding communication support for wireless communication network.
Switching front ensuring consistency between datum sharing system each key time, the group the user hood and vibrates a updating system for sharing key request to for playing/playing system for sharing key switch cycle of server is greater than the user device for updating system for sharing key application cycle.
The playing is clamped/playing system for sharing key switch cycle of server, each sharing system key switch cycle, multicast broadcast/server by current sharing system key encryption to/playing broadcast service information clamped clamped; the group the user a current sharing system key a/playing broadcast service information the clamped. When the sharing system key switch cycle ended, wherein when the lower sharing system switching key circulation starting, playing clamped/playing server the user broadcasting system for sharing key handover commands to group, playing clamped/playing of the server and each group of users switching system for sharing key, at the time, the updating system for sharing key and current shared key system. The playing/playing server comprises a group of all the sharing system key handover commands of user broadcast filled with a switching K_COUNT for sharing system key and next time. Wherein the sharing system key handover order of radio form a sending, silica gel in not as the system resource, therefore, wherein an of the communication of wireless communication network is blocked.
Arranged in the group the updating system for sharing key application cycle of each user; each group the user downward saving with two sharing system key data C_SHARE and N_SHARE, wherein the current sharing system key and a serial number and updating for sharing system key and a serial number of the current sharing system key and updating shared key system therefor, and a latch provided with a switching K_COUNT for sharing system key in the next time. With a switching K_COUNT for sharing system key in group the user by broadcast/playing server to play the handover order of for and next time, and a updating method thereof K_COUNT. The set the user in the updating system for sharing key application cycle ended, wherein the lower updating system for sharing key application circulation starting, wherein the judging with a serial number and K_COUNT uniformity of for updating system for sharing key of a through hole, determining whether to play clamped/playing server to and vibrates the updating system for sharing key request.
The user each group of/playing a broadcast service time used to of the user updating system for sharing key application cycle initial station. The user the broadcasting/playing time service part are of the/playing broadcasting service to authenticate the user is associated orders/playing of the broadcasting service group the user, the user receiving broadcast/playing server to the transmission system for sharing same time of.
The user by broadcast/playing service authentication server is associated orders/playing of the broadcasting service group the user, multicast broadcast/server for encrypting with key C_SHARE encryption and N_SHARE of the corresponding user, wherein the encryption current sharing system key and a serial number and updating for sharing system key and a serial number of the current sharing system key and updating system for sharing key, and then to the user transmission C_SHARE encryption and N_SHARE, and at least transmitting at least switching K_COUNT for sharing system key in the next time; The user is deciphers C_SHARE and N_SHARE with the encryption key according wherein an, saves C_SHARE and N_SHARE, wherein the memory current sharing system key and a serial number and updating for sharing system key and a serial number of the current sharing system key and updating system for sharing key are simultaneously, a latch with a switching K_COUNT for sharing system key in the next time. The set the user power and multicast/playing time service and starting updating system for sharing key application cycle initial, soon the group the user a receiving the encryption C_SHARE, N_SHARE and at least one switching K_COUNT time used for sharing system key corresponds to at the user updating system for sharing key application cycle initial the next time. A group of each user and multicast/playing time service point of random distribution, therefore the group the user sharing system using key cycle's initial is basic; and user and vibrates the updating system for sharing key request time differently, wherein effectively is a radiation group the user to and vibrates the updating system for sharing key request the time of.
Digital is 2 to show in the invention the sharing system renewed key for realizing current image, and shown the digital 2, realizing method for sharing system renewed key comprises the following steps: Steps: 201Multicast/playing server at each sharing system key switch cycle due part, the user broadcasting system for sharing key handover command to the group; playing/playing of the server and group the user at the completes used for sharing system, key at the time, the updating system for sharing key switch and a current shared key system. Multicast/playing server is set on the sharing system key handover order of user broadcast filled with a switching K_COUNT for sharing system key and next time, the group the user storing the K_COUNT, namely updating method thereof K_COUNT.
The 202~ step: 203The set the user in each for updating system for sharing key application cycle's due part, a judging with a serial number of for updating system for sharing key of memory and with a memory K_COUNT consistent, namely for determining updated sharing system of key and with renewed, a inconsistent, wherein the updating system for sharing key is not renewed; and user to play/playing transmission server updating system for sharing key; requestThe radio/playing server arranged on the updating system for sharing key request, and a encryption key encryption N_SHARE of the corresponding user, wherein the encryption updating system for sharing key and a serial number of the updating system for sharing key correspondingly, N_SHARE according to encrypt then transmits to the user; By the user wherein the encryption N_SHARE, and deciphers N_SHARE with the encryption key according thereof, and then saving current mode N_SHARE, wherein the memory updating system for sharing key and a serial number of the updating share a system therefor. A consistent, namely updating system for sharing key renewed; and following user causing the process of abbreviation updating system for sharing key request; the user standby lower for sharing updating system using a cycle of due.
To the process,/playing of broadcasting service basis sharing system key switch cycle group and user end of the respective operation according to the updating system for sharing key application cycle of motion.
Digital is 3 to show in the invention one embodiment current image, and shown the digital 3, wherein the embodiment comprises following steps: Steps: 301Multicast/playing server and system for sharing key switch cycle due part, the user broadcasting system for sharing key handover command to the group; playing/playing of the server and group the user at the completes used for sharing system, key at the time, updating system for sharing key switch for sharing current key system. Multicast/playing server is set on the sharing system key handover order of user broadcast filled with a switching K_COUNT for sharing system key and next time, the group the user storing the K_COUNT, namely updating method thereof K_COUNT.
The 302~ step: 303The playing/playing for sharing system key switch cycle of server, user A starting, wherein the authentication of wireless communication network, confirmed by user with A playing ordered/the broadcasting service group the user, playing/playing server and user A pulse generating and provided with a encryption key of A user, and multicast broadcast/server is an encryption key C_SHARE encryption and N_SHARE of user A corresponding, wherein the encryption current sharing system key and a serial number and updating for sharing system key and a serial number of the current sharing system key and updating system for sharing key and C_SHARE, and N_SHARE according to encrypt and sending a userA, and at least K_COUNT switch according to the user A transmission the sharing system key and next time, the user is A deciphers C_SHARE and N_SHARE with the encryption key according thereof, and then saving C_SHARE and N_SHARE, wherein the memory current sharing system key and a serial number and updating for sharing system key and a serial number of the current sharing system key and updating shared key system therefor, and a latch a switching K_COUNT for sharing system key in the next time, user with A fixed on the encryption C_SHARE and N_SHARE and a K_COUNT time used starting which updating system for sharing key application cycles initial, A user in of which updating system for sharing key application cycles timings.
Steps: 304Multicast/playing unit lower sharing system key switch cycle due part, and fundamental 301 same. User A switching system for sharing key, at the time, updating system for sharing key switch for current sharing system key, and updating with a switching K_COUNT for sharing system key and next time.
Steps: 305User The edge of the following updating system for sharing key application cycle, a user A judging with a serial number of for updating system for sharing key of memory and with a memory K_COUNT consistent, namely for determining updated sharing system of key and with renewed, a inconsistent, wherein the updating system for sharing key is not renewed, operating order 306, theA consistent, namely updating sharing system renewed key, a of the next standby for sharing updating system using a cycle, a to the serial number of for updating system for sharing key of memory and with a memory K_COUNT uniform and output.
The 306~ step: 307User to A/playing broadcast transmission server updating system for sharing key; requestThe radio/playing server arranged on the updating system for sharing key, request/playing and server for encrypting with key encryption N_SHARE of user A corresponding, wherein the encryption updating system for sharing key and a serial number of the updating system for sharing key correspondingly, N_SHARE according to encrypt then transmits to the user; AThe user A receiving the encryption N_SHARE, and deciphers N_SHARE with the encryption key according thereof, and then saving current mode N_SHARE, wherein the memory updating system for sharing key and a serial number of the updating share a system therefor.
A processing and 304~ step 307 basic same, and longer charges unnecessary detail the.
The brief, the is relatively without embodiment of this invention, is not used to define the invention the has a protection.
Every citation, both ways
| Document | Relation | Office | Cited during |
|---|---|---|---|
| WO2008043289A1 | Cited by | World Intellectual Property Organization (WIPO) | Search report |
| US8923811B2 | Cited by | United States of America | Applicant |
| CN100461974C | Cited by | China | Search report |
| WO2006136090A1 | Cited by | World Intellectual Property Organization (WIPO) | Search report |
| WO2012155702A1 | Cited by | World Intellectual Property Organization (WIPO) | International search |
| CN101971596A | Cited by | China | Search report |
2 priority claims, no other members on record
Priority claims2
| Document | Office | Kind | Date |
|---|---|---|---|
| 03123954 | China | A | |
| CN2003123954 | – | – | – |
Numbers
- Publication
- 1553600
- Publication, DOCDB
- 1553600
- Publication, EPODOC
- CN1553600
- Application
- 31239544
- Application, DOCDB
- 03123954
- Application, EPODOC
- CN2003123954
Titles2
- Chinese
- 一种共享密钥更新的方法
- English
- Method for updating shared key
Classification
- CPC, 3
- H04L9/0833
- H04L9/0891
- H04L2209/80
- IPC, 1
- H04L9 08