Patent ID: 7725720

Claim:
A method for creating and managing a local network, the local network including at least one restitution device for receiving an encrypted data stream and at least one diffusion and re-encrypting device for transmitting all or part of the encrypted data stream to the restitution device, the at least one restitution device and the at least one diffusion and re-encrypting device including at least one security module, the method comprising during an initialization stage: connecting a master security module to one of the at least one restitution device and the at least one diffusion and re-encrypting device connected to the local network, establishing a network key by the master security module, and securely transmitting the network key over the local network to the at least one security module included in the at least one restitution device and the at least one diffusion and re-encrypting device, wherein when the master security module is connected to the at least one restitution device, the network key is securely transmitted to the at least one diffusion and re-encrypting device, and when the master security module is connected to the at least one diffusion and re-encrypting device, the network key is securely transmitted to the at least one restitution device, and while receiving the encrypted data stream: decrypting the encrypted data stream by the at least one diffusion and re-encrypting device, re-encrypting the decrypted data stream by the at least one diffusion and re-encrypting device using a local key, the local key being a session key that is generated by the at least one diffusion and re-encrypting device and that is encrypted by the network key, transmitting the re-encrypted data stream to the at least one restitution device, and decrypting the received encrypted data stream by the at least one restitution device using the associated security module, the associated security module including means to decrypt the local key using the network key.