Abstract: In a method for protecting payload data transmitted via a one-to-many communication channel from a provider device to at least one receiver device a public key set (PK) supporting asymmetric bilinear pairings is generated. A number of receiver device keys (DKi) that are generated based on the public key set (PK) are distributed to respective devices including the at least one receiver device. A provider key (K) is generated based on the public key set (PK) and inter alia on an encryption random number (t) and stored in the provider device. An envelope (ENV) is generated based on the public key set (PK) and on the encryption random number (t) and is distributed, via the one-to-many communication channel, to the respective devices including the at least one receiver device. The at least one receiver device generates a receiver key, which corresponds to the provider key, based on the distributed envelope (ENV) and the distributed receiver device key (DKi).

Abstract: A method for authenticatable data transmission via a one-to-many communication channel from a provider device to a receiver device. A first key pair comprising a first private key and a first public key and supporting bilinear pairings as well as one or more second key pairs are generated and stored. Each second key pair comprises a respective second private key and a respective second public key and supporting bilinear pairings. One or more messages of a first type are obtained and a respective hash is generated for each of them. An authentication message is composed including the generated hashes. The composed authentication message is signed employing the first private key for producing a signed aggregated authentication message, which is distributed to the receiver device.

Abstract: In a method for protecting payload data transmitted via a one-to-many communication channel from a provider device to at least one receiver device a public key set (PK) supporting asymmetric bilinear pairings is generated. A number of receiver device keys (DKi) that are generated based on the public key set (PK) are distributed to respective devices including the at least one receiver device. A provider key (K) is generated based on the public key set (PK) and inter alia on an encryption random number (t) and stored in the provider device. An envelope (ENV) is generated based on the public key set (PK) and on the encryption random number (t) and is distributed, via the one-to-many communication channel, to the respective devices including the at least one receiver device. The at least one receiver device generates a receiver key, which corresponds to the provider key, based on the distributed envelope (ENV) and the distributed receiver device key (DKi).