Patent ID: 7613303

Claim:
A system for controlling the delivery of broadcast encryption content for a network cluster from a content server outside the cluster, the system comprising: means for receiving in the content server from a network device a key management block for the cluster, a unique data token for the cluster, and a encrypted cluster id; and means for calculating a binding key for the cluster in dependence upon the key management block for the cluster, the unique data token for the cluster, and the encrypted cluster id, further comprising: means for calculating a management key from the key management block for the cluster; means for calculating a content server device key from the management key and the content server device id, further comprising means for hashing, with a one way cryptographic hash algorithm, the management key and the content server device id; means for decrypting the encrypted cluster id with the content server device key; and means for calculating the binding key with the management key, the unique data token for the cluster, and the cluster id, further comprising means for hashing, with a one way cryptographic hashing algorithm, the management key, the unique data token for the cluster, and the cluster id; and wherein the system further comprises: means for encrypting the content for the cluster with a title key; means for encrypting the title key with the binding key; means for packaging the encrypted title key with the encrypted content for the cluster; means for receiving in the network device a content server device id; and means for encrypting in the network device a cluster id in dependence upon a content server device id for the content server including: means for calculating a content server device key, wherein calculating a content server device key further comprises means for hashing, with a one way hash algorithm, the management key and the content server device id; and means for encrypting the cluster id with the content server device key.