Secure container with multiple elements encrypted with different keys derived from access rules, said rules included in container metadata

摘要

A system of secure containers that are used to distribute encrypted content. Each container includes at least two pieces of content data 303/304 which are encrypted with different keys. The containers also include metadata 301 which may incorporate access authorisation policies/security attributes 302 usage of the encrypted content data. The content data encryption keys may be derived from the access information in combination with other data [See Fig. 5]. The keys are managed at a key distribution centre which issues them to content users subject to the content access rights.