Abuse-resistant object distribution system and method

Claim 2

A data distribution unit including electronic signal processing circuits comprising: a source of data signals m j ; an access indicia generator means providing access indicia signals A i for selected distribution to potential users over an access channel; a data encryptor means providing encrypted data signals c j =E j (m j ) for broadcast distribution to potential users over a broadcast channel where E j is a predetermined encryption signal processing function; and a decryption key generator means coupled to said encryptor means and to said access indicia generator means and providing unique keys data signals t ij for selected distribution to an authorized user over a key channel such that m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data signals encrypted with the predetermined signal processing function E j .

Claim 3

A data distribution unit as in claim 1 further comprising: a storage medium means containing a record of previously used access indicia signal A i for checking for reuse of such previously used indicia signals.

Claim 4

A data distribution unit as in claim 1 wherein each access indicium signal A i includes a number of characters or bytes that exceeds two hundred.

Claim 5

A data distribution unit as in claim 3 wherein each access indicium signal A i includes a number of characters or bytes that exceeds ten thousand.

Claim 6

A data distribution unit as in claim 1, 2, 3, or 4 wherein each key signal t ij is represented by less than 200 binary bits.

Claim 7

A terminal for receiving broadcast encrypted data signals c j via a broadcast channel and encrypted by a predetermined encrypting signal processing function E j (m j )=c j and for selectively decrypting such data signals, said terminal comprising: means for receiving at least one access indicium signal A i received via an access channel; and a decryptor means adapted to receive a unique decryption key signal t ij based on a selected signal A i and a selected signal c j via a key channel and to provide a decryption signal m j of the selected encrypted data.

Claim 8

A terminal for receiving broadcast encrypted data signals c j via a broadcast channel and encrypted by a predetermined encrypting signal processing function E j (m j )=c j and for selectively decrypting such data signals, said terminal comprising: means for receiving at least one access indicium signal A i received via an access channel; and a decryptor means adapted to receive a unique decryption key signal t ij based on a selected signal A i and a selected signal c j via a key channel and to provide a decryption signal m j of the selected encrypted data.

Claim 9

A terminal as in claim 6 wherein each access indicium signal A i includes a number of characters or bytes that exceeds two hundred.

Claim 10

A terminal as in claim 7 wherein each access indicium signal A i includes a number of characters or bytes that exceeds ten thousand.

Claim 11

A terminal as in claim 6 wherein each key signal t ij is represented by less than 200 binary bits.

Claim 12

A terminal as in claim 6 wherein said key signal t ij is accessible to a user of said terminal.

Claim 13

A data distribution system comprising: a plurality of data signal receiving terminals; at least one data signal distribution unit coupled to said plurality of data signal receiving terminals by a data signal object broadcast channel providing encrypted data signal objects c j to each terminal; an access channel providing a unique access indicium signal A i to any terminal desiring access to said data signal objects; and a key signal distribution channel for providing a unique decryption key signal t ij to any requesting terminal from a distribution unit corresponding to supplied indicium signal A i and a selected encrypted data signal object c j and for decrypting signal c j .

Claim 14

A data distribution system comprising: a plurality of data signal receiving terminals; at least one data signal distribution unit coupled to said plurality of data signal receiving terminals by a data signal object broadcast channel providing encrypted data signal objects c j to each terminal; an access channel providing a unique access indicium signal A i to any terminal desiring access to said data signal objects; and a key signal distribution channel for providing a unique decryption key signal t ij to any requesting terminal from a distribution unit corresponding to supplied indicium signal A i and a selected encrypted data signal object c j and for decrypting signal c j .

Claim 15

A data distribution system as in claim 11 further comprising: data signal storage means maintaining a record of previously used A i for checking for reuse of such A i .

Claim 16

A data distribution system as in claim 11 wherein each access indicium signal A i includes a number of characters or bytes that exceeds two hundred.

Claim 17

A data distribution system as in claim 13 wherein each access indicium signal A i includes a number of characters or bytes that exceeds ten thousand.

Claim 18

A data distribution system as in claim 11 wherein each key signal t ij is represented by less than 200 binary bits.

Claim 19

A data distribution system comprising: a source of data signals m j ; an access indicia generator providing access indicia signals A i ; a data encryptor providing encrypted data signals c j =E j (m j ) where E j is a predetermined encryption signal processing function; and a decryption key generator coupled to said encryptor and to said access indicia generator and providing unique key signals t ij such that data signals m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data encrypted with the predetermined signal processing function E j ; a plurality of terminals coupled to receive said data signals c j ; and each said terminal including a decryptor means adapted to receive a decryption key signal t ij based on a supplied signal A i and a selected signal c j and to provide a decryption signal m' j of the selected encrypted data.

Claim 20

A data distribution system comprising: a source of data signals m j ; an access indicia generator providing access indicia signals A i ; a data encryptor providing encrypted data signals c j =E j (m j ) where E j is a predetermined encryption signal processing function; and a decryption key generator coupled to said encryptor and to said access indicia generator and providing unique key signals t ij such that data signals m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data encrypted with the predetermined signal processing function E j ; a plurality of terminals coupled to receive said data signals c j ; and each said terminal including a decryptor means adapted to receive a decryption key signal t ij based on a supplied signal A i and a selected signal c j and to provide a decryption signal m' j of the selected encrypted data.

Claim 21

Apparatus as in claim 1, 6, 11 or 16 wherein signal A i represents an element of a group of signals, and (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j), where ƒ is a signal processing function and signal B j represents an element of a group of signals, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(A.sub.i, c.sub.j), where ƒ' is a signal processing function and A i denotes the t ij th power of signal A i in the group of signals.

Claim 22

Apparatus as in claim 1, 6, 11 or 16 wherein signal A i represents an element of a group of signals, and (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j) where ƒ is a signal processing function and signal B j represents an element of a group of signals, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(G o A.sub.i, c.sub.j) where ƒ' is a signal processing function, G denotes the t ij th power of signal G in the group of signals, G represents an element of the group, and o denotes a group signal processing operation.

Claim 23

Apparatus as in claim 17 wherein the group of signals is a subgroup of order q of the multidimensional multiplicative group modulo n, where n and q are integers, and hence where signals A i and B j represent vectors α i and β j and the t ij th power of α i is (αa i1 t .spsb.ij mod n, . . . , a im t .spsb.ij mod n), where α i1 , . . . , α im are the components of α i , and m is the dimension.

Claim 24

Apparatus as in claim 17 including means for implementing the signal processing functions ƒ and ƒ' by bit-wise exclusive-or signal processing functions.

Claim 25

Apparatus as in claim 1, 6, 11 or 16 wherein: signal t ij is transformed into an encrypted key signal under a key-encryption key signal shorter than t ij and transmitted from a distribution unit to a terminal over a communication channel that is different than that used to communicate signal c j but the same as is used to communicate signal A i , said key-encryption key signal being communicated on the same communication channel as is signal t ij .

Claim 26

A data object distribution system, comprising (a) a broadcast channel for transmitting identical encrypted signals representing data objects from a distribution unit to a plurality of terminals; (b) an access number channel for transmitting a unique access number signal from said distribution unit to any one of said terminals, (c) a key distribution channel for transmitting signals representing indexes of an encrypted data object signal and of an access number signal from any one of said terminals to said distribution unit and for transmitting a key signal from the distribution unit to said one terminal which, in combination with the access number signal enables access to the data object, (d) a distribution unit means coupled to said broadcast channel, said access number channel, and said key distribution channel, and adapted for i. generating an access number signal A i , where i is the index of the access number signal, ii. transmitting signal A i on said access number channel, iii. transforming a data object signal m j into an encrypted data object signal c j , where j is the index of the data object signal, c.sub.j =E.sub.j (m.sub.j), and E j is a signal processing function, iv. transmitting signal c j on said broadcast channel, v. computing a key signal t ij such that m.sub.j =D(A.sub.i, t.sub.ij, c.sub.j), where D is a signal processing function, vi. receiving signals representing index numbers i and j from said key distribution channel, and vii. transmitting signal t ij on said key distribution channel, and (e) a plurality of terminal means, each terminal means being coupled to said broadcast channel, said access number channel, and said key distribution channel, and adapted for i. receiving signal c j from said broadcast channel, ii. receiving signal A i from said access number channel, iii. transmitting signals representing i and j on said key distribution channel, and iv. transforming signal c j into a data object signal m' j , where m'.sub.j =D(A.sub.i, t.sub.ij, c.sub.j).

Claim 27

A data object distribution system, comprising (a) a broadcast channel for transmitting identical encrypted signals representing data objects from a distribution unit to a plurality of terminals; (b) an access number channel for transmitting a unique access number signal from said distribution unit to any one of said terminals, (c) a key distribution channel for transmitting signals representing indexes of an encrypted data object signal and of an access number signal from any one of said terminals to said distribution unit and for transmitting a key signal from the distribution unit to said one terminal which, in combination with the access number signal enables access to the data object, (d) a distribution unit means coupled to said broadcast channel, said access number channel, and said key distribution channel, and adapted for i. generating an access number signal A i , where i is the index of the access number signal, ii. transmitting signal A i on said access number channel, iii. transforming a data object signal m j into an encrypted data object signal c j , where j is the index of the data object signal, c.sub.j =E.sub.j (m.sub.j), and E j is a signal processing function, iv. transmitting signal c j on said broadcast channel, v. computing a key signal t ij such that m.sub.j =D(A.sub.i, t.sub.ij, c.sub.j), where D is a signal processing function, vi. receiving signals representing index numbers i and j from said key distribution channel, and vii. transmitting signal t ij on said key distribution channel, and (e) a plurality of terminal means, each terminal means being coupled to said broadcast channel, said access number channel, and said key distribution channel, and adapted for i. receiving signal c j from said broadcast channel, ii. receiving signal A i from said access number channel, iii. transmitting signals representing i and j on said key distribution channel, and iv. transforming signal c j into a data object signal m' j , where m'.sub.j =D(A.sub.i, t.sub.ij, c.sub.j).

Claim 28

The system as in claim 22 wherein signal A i represents an element of a group of signals, (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j), where ƒ is a signal processing function and signal B j represents an elements of a groups of signals, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(A.sub.i, c.sub.j), where ƒ' is a signal processing function and A i denotes the t ij th the power of signal A i in the group of signals.

Claim 29

The system as in claim 22 wherein signal A i represents an element of a group of signals, and (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j) where ƒ is a signal processing function signal B j represents an element of a group of signal, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(G o A.sub.i, c.sub.j) where ƒ' is a signal processing function, G denotes the t ij th power of signal G in the group of signals, G represents an element of the group of signals, and o denotes a group signal processing operation.

Claim 30

The system as in claim 23 or 24 wherein the group of signals is a subgroup of order q of the multidimensional multiplicative group modulo n where n and q are integers, and hence where signals A i and B j represent vectors α i and β j , and the t ij th power of α i is (α i1 t .spsb.ij mod n, . . . , α im t .spsb.ij mod n), where α i1 , . . . , α im are the components of α i and m is the dimension.

Claim 31

The system as in claim 23 or 24 including means for implementing the signal processing functions ƒ and ƒ' by bit-wise exclusive-or signal processing functions.

Claim 32

The system as in claim 22, 23, or 24 wherein (a) the distribution unit means is further adapted for i. transforming signal t ij into an encrypted key signal under a key-encryption key signal shorter than signal t ij and transmitting said encrypted key signal on the access number channel, whereby the distribution unit may predistribute said encrypted key signal, and ii. transmitting said key-encryption key signal on the key distribution channel, and (b) the terminal means is further adapted for i. receiving said encrypted key signal from the access number channel, ii. receiving said key-encryption key signal from the key distribution channel, and iii. transforming said encrypted key signal into a key signal t' ij under said key-encryption key signal.

Claim 33

A data distribution method comprising: providing a source of data signals m j ; providing access indicia signals A i for selected distribution to potential users over an access channel; providing encrypted data signals c j =E j (m j ) for broadcast distribution to potential users over a broadcast channel where E j is a predetermined encryption signal processing function; and providing unique key data signals t ij for selected distribution to an authorized user over a key channel such that m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data encrypted with the predetermined signal processing function E j .

Claim 34

A data distribution method comprising: providing a source of data signals m j ; providing access indicia signals A i for selected distribution to potential users over an access channel; providing encrypted data signals c j =E j (m j ) for broadcast distribution to potential users over a broadcast channel where E j is a predetermined encryption signal processing function; and providing unique key data signals t ij for selected distribution to an authorized user over a key channel such that m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data encrypted with the predetermined signal processing function E j .

Claim 35

A data distribution method as in claim 28 further comprising: recording previously used access indicia signals A i in a storage medium for checking for reuse of such previously used indicia signals.

Claim 36

A data distribution method as in claim 28 wherein each access indicium signal A i includes a number of characters or bytes that exceeds two hundred.

Claim 37

A data distribution method as in claim 30 wherein each access indicium signal A i includes a number of characters or bytes that exceeds ten thousand.

Claim 38

A data distribution method as in claims 28, 29, 30 or 31 wherein each key signal t ij is represented by less than 200 binary bits.

Claim 41

A method as in claim 33 wherein each access indicium signal A i includes a number of characters or bytes that exceeds two hundred.

Claim 42

A method as in claim 33 wherein each access indicium signal A i includes a number of characters or bytes that exceeds ten thousand.

Claim 43

A method as in claim 33 wherein each key signal t ij is represented by less than 200 binary bits.

Claim 44

A method as in claim 34 wherein said key signal t ij is accessible to a user of said terminal.

Claim 45

A data distribution method comprising: providing a plurality of data receiving terminals; providing encrypted signals representing data objects c j to each terminal via a data object broadcast channel; providing a unique access indicium signal A i to any terminal desiring access to said data objects via an access channel; and providing a unique decryption key signal t ij via a key distribution channel to any requesting terminal corresponding to a supplied indicium signal A i and a selected encrypted data object signal c j and for decrypting signal c j .

Claim 46

A data distribution method comprising: providing a plurality of data receiving terminals; providing encrypted signals representing data objects c j to each terminal via a data object broadcast channel; providing a unique access indicium signal A i to any terminal desiring access to said data objects via an access channel; and providing a unique decryption key signal t ij via a key distribution channel to any requesting terminal corresponding to a supplied indicium signal A i and a selected encrypted data object signal c j and for decrypting signal c j .

Claim 47

A data distribution method as in claim 38 further comprising: maintaining a record of previously used signal A i for checking for reuse of such signals A i .

Claim 48

A data distribution method as in claim 38 wherein each access indicium signal A i includes a number of characters or bytes that exceeds two hundred.

Claim 49

A data distribution method as in claim 40 wherein each access indicium signal A i includes a number of characters or bytes that exceeds ten thousand.

Claim 50

A data distribution method as in claim 38 wherein each key signal t ij is represented by less than 200 binary bits.

Claim 51

A data distribution method comprising: providing a source of data signal m j ; providing access indicia signal A i ; providing encrypted data signal c j =E j (m j ) where E j is a predetermined encryption signal processing function; and providing unique key signals t ij such that m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data encrypted with the predetermined signal processing function E j ; providing a plurality of terminals coupled to receive said signal c j ; and providing a decryptor in each terminal adapted to receive a decryption key signal t ij based on a supplied signal A i and a selected signal c j and to provide a decryption signal m' j of the selected encrypted data.

Claim 52

A data distribution method comprising: providing a source of data signal m j ; providing access indicia signal A i ; providing encrypted data signal c j =E j (m j ) where E j is a predetermined encryption signal processing function; and providing unique key signals t ij such that m j =D(A i , t ij , c j ) where D is a predetermined decryption signal processing function for decrypting data encrypted with the predetermined signal processing function E j ; providing a plurality of terminals coupled to receive said signal c j ; and providing a decryptor in each terminal adapted to receive a decryption key signal t ij based on a supplied signal A i and a selected signal c j and to provide a decryption signal m' j of the selected encrypted data.

Claim 53

Method as in claim 28, 33, 38 or 43 where signal A i represents an element of a group of signals, and (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j), where ƒ is a signal processing function and B j represents an element of a group of signals, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(A.sub.i, c.sub.j), where ƒ40 is a signal processing function and A i denotes the t ij th power of signal A i in the group of signals.

Claim 54

Method as in claim 28, 33, 38 or 43 wherein A i represents an element of a group of signals, and (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j) where ƒ is a signal processing function B j represents an element of a group of signals, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(G o A.sub.i, c.sub.j) where ƒ' is a signal processing function, G denotes the t ij th power of G in the group of signals, G represents an element of the group of signals, and o denotes a group signal processing operation.

Claim 55

Method as in claim 44 wherein the group of signals is a subgroup of order q of the multidimensional multiplicative group modulo n, where n and q are integers, and hence where signals A i and B j represent vectors α i and β j and the t ij th power of α i is (α i1 t .spsb.ij mod n, . . . , α im t .spsb.ij mod n), where α i1 . . . , α im are the components of α i , and m is the dimension.

Claim 56

Method as in claim 44 wherein the signal processing functions ƒ and ƒ' include bit-wise exclusive-or processing of signals.

Claim 57

Method as in claim 28, 33, 38 or 43 wherein: signal t ij is transformed into an encrypted key signal under a key-encryption key signal shorter than signal t ij and transmitted from a distribution unit to a terminal over a communication channel that is different than that used to communicate signal c j but the same as is used to communicate signal A i , said key-encryption key being communicated on the same communication channel as is signal t ij .

Claim 58

A data object distribution method, comprising (a) transmitting identical encrypted signals representing data objects from a distribution unit via a broadcast channel to a plurality of terminals; (b) transmitting a unique access number signal from said distribution unit to any one of said terminals via an access number channel, (c) transmitting index signals of an encrypted data object and of an access number signal from any one of said terminals to said distribution unit via a key distribution channel and transmitting a key signal from the distribution unit to said one terminal which, in combination with the access number signal enables access to the data object signal, (d) coupling a distribution unit to said broadcast channel, said access number channel, and said key distribution channel, and adapting the distribution unit for i. generating an acess number signal A i , where signal i is the index of the access number signal, ii. transmitting signal A i on said access number channel, iii. transforming a data object signal m j into an encrypted data object signal c j , where signal j is the index of the data object signal, c.sub.j =E.sub.j (m.sub.j), and E j is a signal processing function, iv. transmitting signal c j on said broadcast channel, v. computing a key signal t ij such that m.sub.j =D(A.sub.i, t.sub.ij, c.sub.j), where D is a signal processing function, vi. receiving signals representing index numbers i and j from said key distribution channel, and vii. transmitting signal t ij on said key distribution channel, and (e) coupling a plurality of terminals to said broadcast channel, said access number channel, and said key distribution channel, and adapting each terminal for i. receiving signal c j from said broadcast channel, ii. receiving signal A i from said access number channel, iii. transmitting signals i and j on said key distribution channel, and iv. transforming signal c j into a data object signal m' j , where m'.sub.j =D(A.sub.i, t.sub.ij, c.sub.j).

Claim 59

A data object distribution method, comprising (a) transmitting identical encrypted signals representing data objects from a distribution unit via a broadcast channel to a plurality of terminals; (b) transmitting a unique access number signal from said distribution unit to any one of said terminals via an access number channel, (c) transmitting index signals of an encrypted data object and of an access number signal from any one of said terminals to said distribution unit via a key distribution channel and transmitting a key signal from the distribution unit to said one terminal which, in combination with the access number signal enables access to the data object signal, (d) coupling a distribution unit to said broadcast channel, said access number channel, and said key distribution channel, and adapting the distribution unit for i. generating an acess number signal A i , where signal i is the index of the access number signal, ii. transmitting signal A i on said access number channel, iii. transforming a data object signal m j into an encrypted data object signal c j , where signal j is the index of the data object signal, c.sub.j =E.sub.j (m.sub.j), and E j is a signal processing function, iv. transmitting signal c j on said broadcast channel, v. computing a key signal t ij such that m.sub.j =D(A.sub.i, t.sub.ij, c.sub.j), where D is a signal processing function, vi. receiving signals representing index numbers i and j from said key distribution channel, and vii. transmitting signal t ij on said key distribution channel, and (e) coupling a plurality of terminals to said broadcast channel, said access number channel, and said key distribution channel, and adapting each terminal for i. receiving signal c j from said broadcast channel, ii. receiving signal A i from said access number channel, iii. transmitting signals i and j on said key distribution channel, and iv. transforming signal c j into a data object signal m' j , where m'.sub.j =D(A.sub.i, t.sub.ij, c.sub.j).

Claim 60

The method as in claim 49 wherein signal A i represents an element of a group of signals, (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j, m.sub.j), where ƒ is a signal processing function and B j represents an element of a group of signals, and (b) the signal processing function D is D(A.sub.i,t.sub.ij, c.sub.j)=ƒ'(A.sub.i, c.sub.j), where ƒ' is a signal processing function and A i denotes the t ij th power of signal A i in the group of signals.

Claim 61

The method as in claim 49 wherein signal A i represents an element of a group of signals, and (a) the signal processing function E j is E.sub.j (m.sub.j)=ƒ(B.sub.j m.sub.j) where ƒ is a signal processing function, signal B j represents an element of a group of signals, and (b) the signal processing function D is D(A.sub.i, t.sub.ij, c.sub.j)=ƒ'(G o A.sub.i, c.sub.j) where ƒ' is a signal processing function, G denotes the t ij th power of G in the group of signals, G represents an element of the group of signals and o denotes a group signal processing operation.

Claim 62

The method as in claim 50 or 51 wherein the group of signals is a subgroup of order q of the multidimensional multiplicative group modulo n where n and q are integers, and hence where signals A i and B j represent vectors α i and β j , and the t ij th power of α i is (a i1 t .spsb.ij mod n, . . . , α im t .spsb.ij mod n), where α i1 , . . . , α im are the components of α i and m is the dimension.

Claim 63

The method as in claim 50 or 51 wherein the signal processing functions ƒ and ƒ' include bit-wise exclusive-or processing of signals.

Claim 64

The method as in claim 49, 50 or 51 wherein (a) the distribution unit i. transforms signal t ij into an encrypted key signal under a key-encryption key signal shorter than signal t ij and transmits said encrypted key signal on the access number channel, whereby the distribution unit may predistribute said encrypted key signal, and ii. transmits said key-encryption key signal on the key distribution channel, and (b) the terminal i. receives said encrypted key signal from the access number channel, ii. receives said key-encryption key signal from the key distribution channel, and iii. transforms said encrypted key signal into a key signal t' ij under said key-encryption key signal.