Method and apparatus for incremental delivery of access rights

Claim 3

A method in accordance with claim 1 wherein first and second different cryptographic keys under which access rights are authenticated are maintained by said processor at the same time, said method comprising the further step of: providing each of said storage banks with a first validity designation for said first key and a second validity designation for said second key; wherein access via a particular one of said keys is limited to that provided by access rights contained in storage banks having a validity designation in a valid state for the particular key.

Claim 4

A method in accordance with claim 2 comprising the further steps transmitting a replacement for one of said first and second keys in one of said messages together with one or more subgroups authenticated under said replacement; storing each of the subgroups transmitted with said replacement key in a corresponding one of said storage banks; setting the validity designation for the replacement key to a valid state for those storage banks holding a subgroup authenticated under the replacement key; setting the validity designation for the replacement key to an invalid state for those storage banks holding a subgroup that was not authenticated under the replacement key; and setting the validity designation for the key that was not replaced to an invalid state for those storage banks holding a subgroup that was authenticated under the replacement key and differs from the previous subgroup stored in the storage bank holding the subgroup.

Claim 5

A method in accordance with claim 3 wherein the message carrying said replacement key also carries a duplicate of the key that was not replaced.

Claim 6

A method in accordance with claim 3 comprising the further step of transmitting replacement keys on a periodic basis.

Claim 7

An access control processor for incrementally receiving authenticated access rights, comprising: means for receiving a plurality of messages containing subgroups of access control data defining said access rights; means for deriving a current cryptographic key using the authenticated data contained in a current one of said messages upon receipt of said current message; a plurality of storage banks for storing different ones of said subgroups, each of said storage banks having a validity designation associated therewith for said cryptographic key; means for comparing said current cryptographic key to a cryptographic key under which data contained in said storage banks was authenticated to determine if the keys match; means responsive to said comparing means when the keys match for setting the validity designation for the current cryptographic key to a valid state for each storage bank that is storing data authenticated by said current message, without changing the matching keys' validity designation for any other storage bank; and means responsive to said comparing means when the keys do not match for setting the validity designation for the current cryptographic key to a valid state for each storage bank that is storing data authenticated by said current message, and for setting the unmatching keys' validity designation for all other storage banks to an invalid state; wherein access under the current cryptographic key is limited to that provided by access rights contained in storage banks having a validity designation for the current cryptographic key in a valid state.

Claim 8

An access control processor for incrementally receiving authenticated access rights, comprising: means for receiving a plurality of messages containing subgroups of access control data defining said access rights; means for deriving a current cryptographic key using the authenticated data contained in a current one of said messages upon receipt of said current message; a plurality of storage banks for storing different ones of said subgroups, each of said storage banks having a validity designation associated therewith for said cryptographic key; means for comparing said current cryptographic key to a cryptographic key under which data contained in said storage banks was authenticated to determine if the keys match; means responsive to said comparing means when the keys match for setting the validity designation for the current cryptographic key to a valid state for each storage bank that is storing data authenticated by said current message, without changing the matching keys' validity designation for any other storage bank; and means responsive to said comparing means when the keys do not match for setting the validity designation for the current cryptographic key to a valid state for each storage bank that is storing data authenticated by said current message, and for setting the unmatching keys' validity designation for all other storage banks to an invalid state; wherein access under the current cryptographic key is limited to that provided by access rights contained in storage banks having a validity designation for the current cryptographic key in a valid state.

Claim 9

Apparatus in accordance with claim 6 wherein: said processor maintains first and second different cryptographic keys under which access rights are authenticated; a first validity designation is maintained for said first key and a second validity designation is maintained for said second key for each of said banks; and access via a particular one of said keys is limited to that provided by access rights contained in storage banks having a validity designation in a valid state for the particular key.

Claim 10

Apparatus in accordance with claim 7 wherein a replacement is provided for one of said first and second keys together with one or more subgroups authenticated under said replacement, said apparatus further comprising: means for storing each of the subgroups transmitted with said replacement key in a corresponding one of said storage banks; means for setting the validity designation for the replacement key to a valid state for those storage banks holding a subgroup authenticated under the replacement key; means for setting the validity designation for the replacement key to an invalid state for those storage banks holding a subgroup that was not authenticated under the replacement key; means for setting the validity designation for the key that was not replaced to a valid state for those storage banks holding a subgroup authenticated under the key that was not replaced; and means for setting the validity designation for the key that was not replaced to an invalid state for those storage banks holding a subgroup that was not authenticated under the key that was not replaced.