CN1710955A - Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus - Google Patents

Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus Download PDF

Info

Publication number
CN1710955A
CN1710955A CN 200410059351 CN200410059351A CN1710955A CN 1710955 A CN1710955 A CN 1710955A CN 200410059351 CN200410059351 CN 200410059351 CN 200410059351 A CN200410059351 A CN 200410059351A CN 1710955 A CN1710955 A CN 1710955A
Authority
CN
China
Prior art keywords
key
equipment
encrypted
encryption
mentioned
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN 200410059351
Other languages
Chinese (zh)
Inventor
希培恒
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Rohm Co Ltd
Original Assignee
Rohm Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Rohm Co Ltd filed Critical Rohm Co Ltd
Priority to CN 200410059351 priority Critical patent/CN1710955A/en
Publication of CN1710955A publication Critical patent/CN1710955A/en
Pending legal-status Critical Current

Links

Images

Landscapes

  • Storage Device Security (AREA)

Abstract

HDCP encryption part of encryption unit encrypts content signal through device secret key, and sends the encrypted signal. Receiving the encrypted signal, HDCP encryption part of decryption unit decrypts the encrypted signal by using the device secret key. Encryption process software for device secret key encrypts the device secret key by using defined private key, and writes the encrypted result to memory of an encryption device. Reading the encrypted device secret key from memory, the protective circuit for device secret key decrypts the encrypted device secret key, and supplies the decrypted device secret key for HDCP encryption part. When illegal access to the protective circuit for device secret key occurs, reconstruction circuit of the system reconstructs decryption method for device secret key in the protective circuit for device secret key.

Description

Device keys guard method, encryption and decryption device, video send and receiving system
Technical field
The present invention relates to be used to authenticate the digital encryption processing unit Device keys guard method and can utilize encryption device and the decryption device and the video transmission device of this method.
Background technology
To LCD (Liquid Crystal Display, LCD) monitor or CRT (Cathode-RayTube, cathode ray tube) one of mode of monitor Digital Transmission vision signal is DVI (Digital VisualInterface, a digital visual interface) standard.If to LCD monitor or CRT monitor analogue transmission vision signal, distortion that waveform is then arranged etc. makes display frame that the problem of image quality aggravation take place easily; And in the DVI standard, come transmission video signal, so there is not transmission distortion, display frame in high quality by the digital coding mode.In addition, the DVI standard begins also to be applied to that set-top box with digital broadcasting or wired broadcasting is connected on the Digital Television or the digital broadcast machine of DVD (digital video disk, digital video disk) etc. is connected the situation that shows digital video on the LCD monitor.
In the DVI standard, can utilize high-quality video content, thus need to strengthen copyright protection, in order to avoid the video content that provides is by illegal reproduction, perhaps by bootlegging.Digital content protection mode as being fit to the DVI standard has proposed HDCP (High-bandwidth Digital Content ProtectionSystem, HDCP mode) standard.The HDCP standard is the standard that is used for transmit the video content of the copyright that needs protection safely based on the video signal transmission system of DVI standard, has stipulated the sharing of the authentication between dispensing device and receiving system, the key that is used to authenticate, and the specification of the encryption of the vision signal of transmission etc.
In the authentication of HDCP standard etc., be used for coming the individually Device keys of authentication communication the other side device by public key cryptography.Behind the authentication success between dispensing device and the receiving system, dispensing device carries out encrypting and transmitting with Device keys to vision signal, and receiving system is decrypted the vision signal that receives with Device keys.For example, the Digital Image Transmission device that uses based on the authentication mode of HDCP standard etc. is disclosed in list of references.
List of references: (Japan) spy opens 2002-314970 communique (Fig. 1-3 in full)
The Device keys that is used for individually authenticating apparatus for processing of video signals is written to EEPROM external memory storages such as (Electrically Erasable Programmable Read-Only Memory, Electrically Erasable Read Only Memories) or is written to the internal storage that can write, read from the outside and provides when this device dispatches from the factory.In this external memory storage or internal storage, intactly write Device keys; do not carry out any protection; so access external memory storage or internal storage come complete copying equipment key easily, perhaps observe the signal that flows through on the universal serial bus from the external memory storage to the agent set steal the data of Device keys.Owing to can not prevent such malice to obtain Device keys, so video content might illegally be utilized, copyright might be encroached on.
In addition, the Device keys of consumer products such as DVD player, set-top box, digital television receiver has been issued much according to the platform number that dispatches from the factory, so even wherein a part is duplicated fully and is utilized, can not identify immediately is illegal utilization, be difficult to duplicating fully of discovering device key afterwards, perhaps follow the tracks of the path that obtains of duplicating fully.In addition, even know that Device keys is illegally utilized, also be difficult to for the framework of the encryption and decryption of changing Device keys and reconfiguration system.
Summary of the invention
The present invention proposes in view of this situation, its purpose be to provide a kind of processing unit that can protect digital signals such as vision signal or audio signal safely Device keys method and can utilize encryption device and decryption device and the video signal transmission device and the video signal receiver of this method.
A scheme of the present invention relates to the Device keys guard method.This method is in the inside of the processing unit of the digital signal of input; be provided with the Device keys protective circuit that the Device keys that is used for individually authenticating this device is decrypted; the stage of dispatching from the factory at this device encrypts the said equipment key, and being written to can be from the memory that this device reads.This memory is rewritable EEPROM or flash memory, can be located at the outside of device, also can be located at the inside of device.In the inside of this device, also be provided with the system reconfiguration circuit, be used for the manner of decryption of the said equipment key of reconstruct the said equipment cryptographic key protection circuit, the situation of illegal access has been carried out in defence to the said equipment cryptographic key protection circuit.Digital signal can be vision signal or audio signal, also can be their combination.Processing unit can be any in digital signal dispensing device, the receiving system.
Another program of the present invention relates to the digital signal encryption device.This device comprises: memory, and the Device keys that is used for individually authenticating this device is encrypted and preserved; The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted; And add compact part, with the said equipment key of deciphering the digital signal of input is encrypted.Device keys protective circuit and add compact part and can be used as the inside that the LSI circuit is installed in this device, the deciphering of Device keys is carried out in the inside of LSI circuit, can not be from external observation.Above-mentioned memory also can be located on the LSI circuit substrate, but the data transfer path from memory to the Device keys protective circuit for example is made of external buss such as universal serial bus, can observe the signal that flows through on the bus.
Another program of the present invention relates to the digital signal decryption device.This device comprises: memory, and the Device keys that is used for individually authenticating this device is encrypted and preserved; The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted; And decryption part, be decrypted with of the encryption of the said equipment key of deciphering the digital signal of input.
Above-mentioned encryption device and above-mentioned decryption device can also comprise the system reconfiguration circuit that generates working key with predetermined private key and the PKI corresponding with the said equipment key, and the said equipment cryptographic key protection circuit is decrypted the said equipment key with the above-mentioned working key that above-mentioned system reconfiguration circuit generates.Here, can under Device keys protective circuit situation under attack,, come the manner of decryption of the said equipment key in reconstruct the said equipment cryptographic key protection circuit by changing above-mentioned private key.
Another program of the present invention relates to video transmission device.This device comprises: encryption processing module, the vision signal of input is encrypted; Send processing module with video, the above-mentioned encoding video signal of encrypting is handled and sent; Above-mentioned encryption processing module comprises: memory, and the authenticated device key that is used to carry out based on public key cryptography is encrypted and preserved; The system reconfiguration circuit generates working key with the predetermined private key and the PKI of the said equipment key; The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted with above-mentioned working key; And add compact part, with the said equipment key of deciphering above-mentioned vision signal is encrypted.
Another program of the present invention relates to video receiving apparatus.This device comprises: the vision signal that video reception processing module, received code are crossed is also carried out decoding processing; With the deciphering processing module, the encryption of the above-mentioned vision signal of carrying out encryption is decrypted; Above-mentioned decryption processing module comprises: memory, and the authenticated device key that is used to carry out based on public key cryptography is encrypted and preserved; The system reconfiguration circuit generates working key with the predetermined private key and the PKI of the said equipment key; The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted with above-mentioned working key; And decryption part, be decrypted with of the encryption of the said equipment key of deciphering above-mentioned vision signal.
Wherein, with the combination in any of upper member, the conversion that shows between method, device, system, recording medium, computer program, the semiconductor device etc. of the present invention also is effective as the solution of the present invention.
In addition, content of the present invention is not necessarily described all essential feature, so the present invention also can be these sub-portfolios of describing feature.
Description of drawings
Fig. 1 is the structure chart of the content signal transmission system of execution mode 1.
Fig. 2 is the key diagram of structure of the Device keys encryption software of Fig. 1.
Fig. 3 is the key diagram of structure of the encryption device of Fig. 1.
Fig. 4 is the key diagram of structure of the decryption device of Fig. 1.
Fig. 5 is the structure chart of the video transmission device of execution mode 2.
Fig. 6 is the structure chart of the video receiving apparatus of execution mode 2.
Embodiment
Describe the present invention according to preferred implementation below, this preferred implementation is not an intended scope of the present invention, and just illustration the present invention.Be not that all features and the combination of describing in this execution mode thereof all is absolutely necessary for purposes of the invention.
Execution mode 1
Fig. 1 is the structure chart of the content signal transmission system of execution mode 1.Encryption device 100 acceptance comprise the input of the content signal of vision signal and audio signal, and HDCP adds compact part 10 and according to the HDCP standard content signal of input encrypted, and is transferred on the DVI cable 40 through the DVI terminal.Decryption device 200 receives the content signal that is transferred to the encryption on the DVI cable 40 through the DVI terminal, and HDCP decryption part 20 is decrypted the content signal that output was deciphered according to the HDCP standard to the encryption of the content signal that receives.The content signal of output is by regeneration such as display, loud speakers.
In the HDCP standard, after between the place equipment (being also referred to as receiver) of source device (being also referred to as transmitter) that sends content signal and received content signal, authenticating mutually, content signal encrypted transmit by public-key cryptosystem.Here, encryption device 100 is equivalent to source device, and decryption device 200 is equivalent to place equipment (sink device), in order to authenticate and to encrypt, shares PKI separately between encryption device 100 and decryption device 200.Each private key that installs secret Tibetan is called as Device keys.The PKI corresponding with Device keys (hereinafter to be referred as the equipment PKI) is called as KSV (Key Selection Vector, key is selected vector).Encryption device 100 and a pair of Device keys of decryption device 200 usefulness and equipment PKI authenticate mutually, behind the authentication success, the content signal that encryption device 100 usefulness Device keys subtend decryption devices 200 send is encrypted, and decryption device 200 usefulness Device keyses are decrypted the content signal of the encryption that receives from encryption device 100.
Avoid illegal access or duplicate fully for the Device keys that encryption utilized of the authentication of protective device and content signal, the predetermined private key of Device keys encryption software 30 usefulness is encrypted Device keys, is written in the memory 16 of encryption device 100.
Device keys protective circuit 12 Device keys that reading encrypted is crossed from memory 16 of encryption device 100 is decrypted the Device keys of encrypting.The Device keys that Device keys protective circuit 12 will be deciphered supplies to HDCP and adds compact part 10, and HDCP adds the Device keys of compact part 10 these deciphering of usefulness the content signal of input is encrypted and exported.The data of the Device keys that the data channel from memory 16 to Device keys protective circuit 12 flows through are encrypted, so even illegally obtained and can not use.The Device keys of encrypting is offered HDCP by internal bus and is added compact part 10 by Device keys protective circuit 12 deciphering of encryption device 100 inside, so only otherwise circuit is implemented reverse-engineering, just can not obtain the data of the Device keys of deciphering.
System reconfiguration circuit 14 is subjected in Device keys protective circuit 12 under the situation of attack of illegal access such as exhaustive search, reverse-engineering, the Device keys manner of decryption in the reconstruct Device keys protective circuit 12.So-called illegal access for example is meant the behavior of the framework of the data of the Device keys of the deciphering of stealing 12 outputs of slave unit cryptographic key protection circuit, the associative mode of collecting Device keys of encrypting and the Device keys of deciphering, parsing deciphering.Device keys is being carried out under the situation of this attack; the cipher mode of Device keys encryption software 30 change Device keyses; system reconfiguration circuit 14 is the manner of decryption in the reconstruct Device keys protective circuit 12 in view of the above; thereby can change the deciphering framework of Device keys, prevent from illegally to utilize Device keys.
HDCP add compact part 10, Device keys protective circuit 12, and system reconfiguration circuit 14 be arranged on the substrate as the LSI circuit; memory 16 for example is arranged on this substrate as EEPROM, and the Device keys of when circuit substrate dispatches from the factory Device keys encryption software 30 being encrypted is written among the EEPROM.In addition, under the situation of having carried out illegal access, the user encrypts Device keys by new cipher mode with Device keys encryption software 30, the Device keys of the encryption on the updated stored device 16.System reconfiguration circuit 14 is accepted the order of the control parts such as CPU on the substrate in view of the above, the manner of decryption of change Device keys protective circuit 12.
The memory 26 of decryption device 200, Device keys protective circuit 22, and the structure of system reconfiguration circuit 24 and action respectively with the memory 16 of encryption device 100, Device keys protective circuit 12, and the structure of system reconfiguration circuit 14 and move identical.The Device keys that Device keys protective circuit 22 will be deciphered supplies to HDCP decryption part 20, and the Device keys of HDCP decryption part 20 these deciphering of usefulness is decrypted and exports the content signal of encrypting.
Fig. 2 is the key diagram of structure of the Device keys encryption software 30 of Fig. 1.A pair of Device keys 42 of input and equipment PKI 44 in Device keys encryption software 30.Predetermined private key K0, the initial value V0 of working key generating unit 34 usefulness, and equipment PKI 44 generate working key WK0, supply to encrypted private key portion 32.The 32 usefulness working key WK0 of encrypted private key portion encrypt Device keys 42, write the Device keys of encrypting 46 in memory 16,26.In addition, in memory 16,26, also write the PKI corresponding with Device keys 42.Here, if change private key K0 then generates different working key WK0, so the encryption mode of Device keys 42 is changed.
Fig. 3 is the key diagram of the structure of encryption device 100.The principle structure of encryption device 100 shown in Figure 1 illustrates in greater detail functional structure here.Structure as corresponding with the Device keys protective circuit 12 of Fig. 1 and system reconfiguration circuit 14 as shown in Figure 3, is provided with private key decipher 110 and working key generative circuit 120.
Working key generative circuit 120 is fetch equipment PKI 44 from memory 16, and reads predetermined private key K0 and initial value V0.It is identical that this private key K0 and initial value V0 and the Device keys encryption software 30 of Fig. 2 utilize.Working key generative circuit 120 usefulness private key K0, initial value V0, and equipment PKI 44 generate working key WK0, supply to private key decipher 110.Private key decipher 110 Device keys that reading encrypted is crossed from memory 16 46, WK0 is decrypted with working key.The Device keys that private key decipher 110 was deciphered is fed into HDCP encryption core 130.
HDCP encryption core 130 is based on the cryptographic processing circuit of HDCP standard, has authentication communication the other side device, the function of sharing key and the function of content signal being encrypted with cipher key shared.The Device keys that HDCP encryption core 130 usefulness private key deciphers 210 were deciphered is encrypted and is exported the content signal of input.
If the private key K0 of change input in working key generative circuit 120 then generates different working key WK0, so the decryption mode of the Device keys of encrypting 46 is changed.Under the situation of the illegal acts such as manner of decryption of having carried out parsing private key decipher 110, the private key K0 that uses in the Device keys encryption software 30 of change Fig. 2 upgrades encryption mode, and same in view of the above change is to the private key K0 of working key generative circuit 120 inputs.Thus, the manner of decryption of reconstruct private key decipher 110 can prevent from the Device keys of encrypting 46 is illegally deciphered.
Fig. 4 is the key diagram of the structure of decryption device 200.The Device keys 46 that reads a pair of encryption from memory 26 and equipment PKI 44, the private key decipher 210 that the Device keys of encrypting 46 is decrypted are identical with working key generative circuit 120 with the private key decipher 110 of Fig. 3 with working key generative circuit 220.HDCP deciphering core 230 is based on the decryption processing circuit of HDCP standard, has authentication communication the other side device, the function of sharing key and the function that content signal is decrypted with cipher key shared.The Device keys that HDCP deciphering core 230 usefulness private key deciphers 210 were deciphered is encrypted and is exported the content signal of encrypting.Decryption device 200 is also same with encryption device 100, by the private key K0 of change to working key generative circuit 220 input, and manner of decryption that can reconstruct private key decipher 210.
Execution mode 2
Execution mode 2 is that the encryption device 100 of execution mode 1 and decryption device 200 are applied to mode based on the video signal transmission system of DVI standard.The transmission system of DVI standard is made of the video transmission device 300 of Fig. 5 of channel connection and the video receiving apparatus 400 of Fig. 6.
Video transmission device 300, video receiving apparatus 400 can be used as DVI transmitter LSI respectively, DVI receiver LSI realizes, as an example, video transmission device 300 is used as the video efferent of personal computer, and video receiving apparatus 400 is used as the video input part of displays such as LCD.The video efferent links to each other through the DVI cable with the video input part, the Digital Transmission vision signal.As another example, also can be with the video efferent of video transmission device 300, with the video input part of video receiving apparatus 400 as the digital television receiver that connects on the set-top box as set-top box.As another example, also can be with the video efferent of video transmission device 300, with the video input part of video receiving apparatus 400 as the LCD display that links to each other with DVD player as DVD player.
Fig. 5 is the structure chart of the video transmission device 300 of execution mode 2.Video transmission device 300 comprises: Video Controller 350, accept the input and the output digital video signal of video information; HDCP encryption equipment 310 is encrypted vision signal according to the HDCP standard; And DVI transmitter 320, send the vision signal of encrypting according to the DVI standard.The HDCP encryption core 130 that the structure of HDCP encryption equipment 310 and action and Fig. 3 illustrated is same, vision signal is encrypted and supplied to DVI transmitter 320 with Device keys.
The TMDS encoder 322 of DVI transmitter 320 is encoded to three kinds of colour signals of R, G, B of encrypting and these 4 passages of synchronizing signal according to TMDS (Transition MinimizedDifferential Signaling, transition minimized differential signaling) mode and is transmitted by differential driving with 2 holding wires.324 pairs of signals of encoding of DVI interface carry out serialization and pass out on the channel through the DVI terminal.Like this, the vision signal that will encrypt of video transmission device 300 sends to video receiving apparatus 400 via the DVI cable.
EEPROM 330 is equivalent to the memory 16 of Fig. 3, and the Device keys 46 and the equipment PKI 44 of a pair of encryption that Fig. 3 was illustrated are written among the EEPROM 330 when video transmission device 300 dispatches from the factory.In addition, the private key K0 and the initial value V0 that are used to generate working key WK0 of Fig. 3 in EEPROM 330, have also been write.
Configurator 332 has the function suitable with the working key generative circuit 120 of Fig. 3, from EEPROM330, read private key K0, initial value V0, reach equipment PKI 44, be saved in the internal register 336, generate working key WK0 with these data, the working key WK0 that generates is stored in the internal register 336.
Private key decipher 334 is equivalent to the private key decipher 110 that Fig. 3 illustrated, the Device keys 46 that reading encrypted is crossed from EEPROM 330 reads the working key WK0 that configurator 332 generates internally in the register 336.Private key decipher 334 usefulness working key WK0 are decrypted the Device keys of encrypting 46, and the Device keys of deciphering is supplied to HDCP encryption equipment 310.From the path shown in the dotted line of private key decipher 334 to HDCP encryption equipments 310 is the internal bus of LSI, does not also worry being attacked even the data flow of unencrypted Device keys is crossed.
Fig. 6 is the structure chart of the video receiving apparatus 400 of execution mode 2.Video receiving apparatus 400 comprises: DVI receiver 420 receives the vision signal of encrypting according to the DVI standard; HDCP decipher 410 is decrypted the vision signal that receives according to the HDCP standard; And display controller 450, for the vision signal that will decipher supplies to display and carries out signal processing.
The DVI interface 424 of DVI receiver 420 receives the vision signal of encrypting from video transmission device 300.The data and the synchronization of data reproduction and synchronization process portion 423 regeneration vision signals supply to TMDS decoder 422.TMDS decoder 422 separates R, G, three kinds of colour signals of B and synchronizing signal according to the decoding video signal of TMDS mode to encoding, and supplies to HDCP decipher 410.HDCP that the structure of HDCP decipher 410 and action and Fig. 4 illustrated deciphering core 230 is same, with Device keys the encryption of vision signal is decrypted and supplies to display controller 450.
EEPROM 430, configurator 432, private key decipher 434, and internal register 436 carry out EEPROM 330, configurator 332, private key decipher 334, and the identical processing of internal register 336 in the video transmission device 300 with Fig. 5, supply with the Device keys of deciphering from private key decipher 434 safely to HDCP decipher 410.
As mentioned above, according to present embodiment, the Device keys of preserving in memory is read in the main equipment through external bus in use in advance by software cryptography.The Device keys of encrypting can not illegally use with the combination of other equipment, so even from memory complete copying equipment key, perhaps observe the external bus signal obtain the data of Device keys, key information can not leak yet.In addition, the Device keys that reads from memory is understood in main equipment inside, so only otherwise device interior is implemented reverse-engineering, just can not obtain the data of the Device keys of deciphering.Like this, strengthened the protection of Device keys, so the fail safe of system improves.
In addition; even under the situation that the framework of the Device keys protective circuit of device interior is attacked, structure that also can be by change Device keys protection software, Device keys protective circuit, and the employed private key of Device keys protective circuit come reconfiguration system easily.In addition, under situation under attack, also can forbid the Device keys protective circuit according to the initial setting of equipment.Like this, also can tackle neatly illegal access, the convenience of system improves.
More than, according to execution mode the present invention has been described.Execution mode is an illustration, it should be appreciated by those skilled in the art, the combination of these members or variety of processes can have various variation, and this variation also belongs in the scope of the present invention.
As this variation; in execution mode 2; illustrated based on the Device keys guard method in the video sending and receiving devices of DVI standard, but also can be applied to HDMI (High DefinitionMultimedia Interface, HDMI (High Definition Multimedia Interface)) standard.The HDMI standard is to be that basis object appliance in the compatibility that keeps down has added digital audio/video interface standard rich functions, of future generation with DVI, except vision signal, transmitting audio signal in high quality is perhaps for remote control etc. and transmission of control signals.Because the HDCP standard of suitable HDMI standard is provided, so can will also be applied to sending and receiving devices with the same Device keys guard method of execution mode 2 based on the HDMI standard.
Although described the present invention, should be appreciated that under the situation of the scope of the present invention that does not break away from the appended claims definition, those skilled in the art can further carry out many changes and replacement by exemplary execution mode.

Claims (10)

1, a kind of Device keys guard method; it is characterized in that; the inside of processing unit in the digital signal of input; be provided with the Device keys protective circuit that the Device keys that is used for individually authenticating this device is decrypted; the stage of dispatching from the factory at this device encrypts the said equipment key, and being written to can be from the memory that this device reads.
2, Device keys guard method as claimed in claim 1; it is characterized in that; inside at this device; also be provided with the system reconfiguration circuit; the manner of decryption that is used for the said equipment key of reconstruct the said equipment cryptographic key protection circuit, defence have been carried out the situation of illegal access to the said equipment cryptographic key protection circuit.
3, a kind of encryption device is encrypted digital signal, it is characterized in that, it comprises:
Memory is encrypted and is preserved the Device keys that is used for individually authenticating this device;
The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted; And
Add compact part, the digital signal of input is encrypted with the said equipment key of deciphering.
4, encryption device as claimed in claim 3; it is characterized in that; also comprise the system reconfiguration circuit that generates working key with predetermined private key and the PKI corresponding with the said equipment key, the said equipment cryptographic key protection circuit is decrypted the said equipment key with the above-mentioned working key that above-mentioned system reconfiguration circuit generates.
5, encryption device as claimed in claim 4 is characterized in that, by changing above-mentioned private key, comes the manner of decryption of the said equipment key in reconstruct the said equipment cryptographic key protection circuit.
6, a kind of decryption device is decrypted digital signal, it is characterized in that, it comprises:
Memory is encrypted and is preserved the Device keys that is used for individually authenticating this device;
The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted; And
Decryption part is decrypted with the encryption of the said equipment key of deciphering to the digital signal of input.
7, decryption device as claimed in claim 6; it is characterized in that; also comprise the system reconfiguration circuit that generates working key with predetermined private key and the PKI corresponding with the said equipment key, the said equipment cryptographic key protection circuit is decrypted the said equipment key with the above-mentioned working key that above-mentioned system reconfiguration circuit generates.
8, decryption device as claimed in claim 7 is characterized in that, by changing above-mentioned private key, comes the manner of decryption of the said equipment key in reconstruct the said equipment cryptographic key protection circuit.
9, a kind of video transmission device comprises:
Encryption processing module is encrypted the vision signal of input; With
Video sends processing module, and the above-mentioned encoding video signal of encrypting is handled and sent;
It is characterized in that above-mentioned encryption processing module comprises:
Memory is encrypted and is preserved the authenticated device key that is used to carry out based on public key cryptography;
The system reconfiguration circuit generates working key with the predetermined private key and the PKI of the said equipment key;
The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted with above-mentioned working key; And
Add compact part, above-mentioned vision signal is encrypted with the said equipment key of deciphering.
10, a kind of video receiving apparatus comprises:
The vision signal that video reception processing module, received code are crossed is also carried out decoding processing; With
The decryption processing module is decrypted the encryption of the above-mentioned vision signal of carrying out encryption;
It is characterized in that above-mentioned decryption processing module comprises:
Memory is encrypted and is preserved the authenticated device key that is used to carry out based on public key cryptography;
The system reconfiguration circuit generates working key with the predetermined private key and the PKI of the said equipment key;
The Device keys protective circuit, the said equipment key that reading encrypted is crossed from above-mentioned memory also is decrypted with above-mentioned working key; And
Decryption part is decrypted with the encryption of the said equipment key of deciphering to above-mentioned vision signal.
CN 200410059351 2004-06-18 2004-06-18 Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus Pending CN1710955A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN 200410059351 CN1710955A (en) 2004-06-18 2004-06-18 Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN 200410059351 CN1710955A (en) 2004-06-18 2004-06-18 Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus

Publications (1)

Publication Number Publication Date
CN1710955A true CN1710955A (en) 2005-12-21

Family

ID=35707118

Family Applications (1)

Application Number Title Priority Date Filing Date
CN 200410059351 Pending CN1710955A (en) 2004-06-18 2004-06-18 Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus

Country Status (1)

Country Link
CN (1) CN1710955A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2008122236A1 (en) * 2007-04-05 2008-10-16 Huawei Technologies Co., Ltd. Method, device and system for protecting biometric feature data
CN101931784A (en) * 2010-07-30 2010-12-29 康佳集团股份有限公司 Method for encrypting and decrypting recorded program through HDCP key
CN101079698B (en) * 2007-02-14 2011-05-11 四川易恒科技发展有限公司 A file encryption method based on Linux operating system with CPK authentication
CN102238360A (en) * 2011-07-15 2011-11-09 深圳市环球数码科技有限公司 Method and equipment for preventing pirated videos
CN101478538B (en) * 2008-12-31 2012-06-06 成都市华为赛门铁克科技有限公司 Storage method, apparatus or system for safety management device
CN103020549A (en) * 2012-11-26 2013-04-03 北京华大信安科技有限公司 Protection device and storage device of storer
CN107340733A (en) * 2016-04-30 2017-11-10 克洛纳测量技术有限公司 Electrical equipment with functional device
CN110611565A (en) * 2019-08-07 2019-12-24 浙江省北大信息技术高等研究院 Data processing system, method and electronic equipment

Cited By (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101079698B (en) * 2007-02-14 2011-05-11 四川易恒科技发展有限公司 A file encryption method based on Linux operating system with CPK authentication
WO2008122236A1 (en) * 2007-04-05 2008-10-16 Huawei Technologies Co., Ltd. Method, device and system for protecting biometric feature data
CN101478538B (en) * 2008-12-31 2012-06-06 成都市华为赛门铁克科技有限公司 Storage method, apparatus or system for safety management device
CN101931784A (en) * 2010-07-30 2010-12-29 康佳集团股份有限公司 Method for encrypting and decrypting recorded program through HDCP key
CN101931784B (en) * 2010-07-30 2015-07-29 康佳集团股份有限公司 By the method for HDCP double secret key encrypting and decrypting recorded program
CN102238360A (en) * 2011-07-15 2011-11-09 深圳市环球数码科技有限公司 Method and equipment for preventing pirated videos
CN102238360B (en) * 2011-07-15 2013-11-13 深圳市环球数码科技有限公司 Method and equipment for preventing pirated videos
CN103020549A (en) * 2012-11-26 2013-04-03 北京华大信安科技有限公司 Protection device and storage device of storer
CN107340733A (en) * 2016-04-30 2017-11-10 克洛纳测量技术有限公司 Electrical equipment with functional device
CN110611565A (en) * 2019-08-07 2019-12-24 浙江省北大信息技术高等研究院 Data processing system, method and electronic equipment

Similar Documents

Publication Publication Date Title
JP4375995B2 (en) Device key protection method, encryption device and decryption device that can use the method, video transmission device, and video reception device
TWI358932B (en) Packet based high definition high-bandwidth digita
EP1370084B1 (en) System for protecting security registers and method thereof
US7242766B1 (en) Method and system for encrypting and decrypting data using an external agent
KR100478507B1 (en) Digital video content transmission ciphering and deciphering method and apparatus
US20080148063A1 (en) Method and apparatus for content protection within an open architecture system
US20080267411A1 (en) Method and Apparatus for Enhancing Security of a Device
JP4999191B2 (en) Secure information storage system and method
KR20020040796A (en) Digital video content transmission ciphering and deciphering method and apparatus
CN1867055A (en) Messaging interface for protected digital outputs
CN101827248A (en) Be used to obtain the right processing of having ready conditions of control word
US8661266B2 (en) System and method for secure device key storage
US7600118B2 (en) Method and apparatus for augmenting authentication in a cryptographic system
US7499545B1 (en) Method and system for dual link communications encryption
CN102014266A (en) Digital watermarking-based high-definition video encrypted transmitting method and system
US20080159532A1 (en) Architecture for supporting high definition content protection decryption over high definition multimedia interface links
CN100596197C (en) System and method for protection of digital electric image and sound video copyright
US7089426B1 (en) Method and system for encryption
CN1710955A (en) Apparatus key protection method, enciphering and deciphering apparatus and video transmitting receiving apparatus
KR101598409B1 (en) Method for contents encryption method for contents decryption and electronic device using the same
US8200973B2 (en) Method and apparatus for encrypted authentication
Lomb et al. Decrypting HDCP-protected video streams using reconfigurable hardware
KR20050119416A (en) Device key protection method, and encoding apparatus, decoding apparatus, video transmission apparatus and video receiving apparatus using the method
JPH11289327A (en) Data transmitter, data receiver and medium
TWI336584B (en) Device key protection method, and encoding apparatus, decoding apparatus, video transmission apparatus and video receiving apparatus using the method

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C02 Deemed withdrawal of patent application after publication (patent law 2001)
WD01 Invention patent application deemed withdrawn after publication