Patent ID: 7512240
Filing Date: 2009-03-31
Classification: H04L

Abstract:
1. A method for security keys management, the method comprising: managing security keys generated from a tree-structured ancestral hierarchy and issued by or on behalf of a service provider in order to provide selective access to provision of a service, wherein invalidation of a key necessitates reconfiguration of each other key within the hierarchy to the extent another key and an invalidated key share common ancestry; defining at least two groups of users of the service; allocating within the hierarchy a distinct subtree for each group of users; and issuing keys to users from subtrees within the hierarchy upon the basis of their grouping, wherein the at least two groups of users are defined upon the basis of a predetermined policy which provides that users are grouped according to their perceived value to a provider of the service, and wherein a first user group having the highest perceived value to the provider are allocated keys from a first subtree, and wherein keys from the first subtree share fewer ancestors with keys from other subtrees than said keys from other subtrees share with each other, and wherein keys from the first subtree share only one ancestor with said keys from other subtrees.