KR100973203B1 - 내장된 소프트웨어 및 이를 인증하는 방법 - Google Patents
내장된 소프트웨어 및 이를 인증하는 방법 Download PDFInfo
- Publication number
- KR100973203B1 KR100973203B1 KR1020057005479A KR20057005479A KR100973203B1 KR 100973203 B1 KR100973203 B1 KR 100973203B1 KR 1020057005479 A KR1020057005479 A KR 1020057005479A KR 20057005479 A KR20057005479 A KR 20057005479A KR 100973203 B1 KR100973203 B1 KR 100973203B1
- Authority
- KR
- South Korea
- Prior art keywords
- software
- certificate
- downloaded
- embedded
- authenticating
- Prior art date
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/443—OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
- H04N21/4435—Memory management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/60—Network structure or processes for video distribution between server and client or between remote clients; Control signalling between clients, server and network components; Transmission of management data between server and client, e.g. sending from server to client commands for recording incoming content stream; Communication details between server and client
- H04N21/63—Control signaling related to video distribution between client, server and network components; Network processes for video distribution between server and clients or between remote clients, e.g. transmitting basic layer and enhancement layers over different transmission paths, setting up a peer-to-peer communication via Internet between remote STB's; Communication protocols; Addressing
- H04N21/633—Control signals issued by server directed to the network components or client
- H04N21/6332—Control signals issued by server directed to the network components or client directed to client
- H04N21/6334—Control signals issued by server directed to the network components or client directed to client for authorisation, e.g. by transmitting a key
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/22—Microcontrol or microprogram arrangements
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
- H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
- H04N21/4627—Rights management associated to the content
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/81—Monomedia components thereof
- H04N21/8166—Monomedia components thereof involving executable data, e.g. software
- H04N21/8173—End-user applications, e.g. Web browser, game
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Computer Security & Cryptography (AREA)
- Multimedia (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- General Engineering & Computer Science (AREA)
- Databases & Information Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Computer Networks & Wireless Communication (AREA)
- Storage Device Security (AREA)
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
- Information Transfer Between Computers (AREA)
Abstract
Description
Claims (6)
- 단말기내에 다운로딩된 소프트웨어 인증 방법으로서,제 1 증명서에 의해, 상기 단말기 내의 제 1 내장된 소프트웨어를 이용하여 상기 다운로딩된 소프트웨어를 인증하는 단계;상기 다운로딩된 소프트웨어의 실행 동안, 상기 다운로딩된 소프트웨어와 연관된 검증 소프트웨어 모듈을 이용하여 상기 제 1 내장된 소프트웨어를 인증하는 단계를 포함하되,상기 제 1 내장된 소프트웨어는 제 2 증명서를 이용하여 인증되고, 상기 제 1 내장된 소프트웨어는 인증 라이브러리 및 제 1 증명서를 사용하여 상기 다운로딩된 소프트웨어를 인증하고, 상기 제 1 내장된 소프트웨어 및 인증 라이브러리는 쓰기-방지된 메모리의 제 1 부분을 형성하고, 상기 다운로딩된 소프트웨어 및 제 1 증명서는 로딩가능한 메모리의 제 2 부분을 형성하며, 그리고상기 쓰기-방지된 메모리의 제 1 부분은 상기 제 2 증명서를 추가로 포함하고, 상기 로딩가능한 메모리의 제 2 부분은 상기 검증 소프트웨어를 포함하고, 일단 상기 다운로딩된 소프트웨어가 인증된다면, 상기 검증 소프트웨어는 상기 인증 라이브러리 및 상기 제 2 증명서를 이용하여 상기 제 1 내장된 소프트웨어를 인증하는, 소프트웨어 인증 방법.
- 제 1 항에 있어서,상기 다운로딩된 소프트웨어를 인증하는 단계와 상기 제 1 내장된 소프트웨어를 인증하는 단계는 상기 단말기의 초기화시 발생하는, 소프트웨어 인증 방법.
- 컴퓨터 시스템으로서,프로세서; 및쓰기-방지된 메모리인 제 1 부분과, 로딩가능한 메모리인 제 2 부분을 포함하는 메모리를 포함하되,상기 제 1 부분은 제 1 내장된 소프트웨어, 인증 라이브러리, 및 제 2 증명서를 포함하고,상기 제 2 부분은 다운로딩된 응용 소프트웨어, 제 1 증명서, 및 검증 소프트웨어를 포함하고,상기 프로세서에 의해 실행되는 경우, 상기 제 1 증명서에 의해, 상기 제 1 내장된 소프트웨어를 이용하여 상기 다운로딩된 응용 소프트웨어를 인증하고,상기 다운로딩된 응용 소프트웨어의 실행 동안 상기 검증 소프트웨어 모듈을 사용하여 상기 1 내장된 소프트웨어를 인증하고, 상기 제 1 내장된 소프트웨어는 제 2 증명서를 이용하여 인증되도록, 구성된 내장된 소프트웨어 명령어를 추가로 포함하되,상기 제 1 내장된 소프트웨어는 상기 인증 라이브러리 및 제 1 증명서를 이용하여 상기 다운로딩된 응용 소프트웨어를 인증하고,일단 상기 다운로딩된 응용 소프트웨어가 인증된다면, 상기 검증 소프트웨어는 상기 인증 라이브러리 및 제 2 증명서를 이용하여 상기 제 1 내장된 소프트웨어를 인증하는, 컴퓨터 시스템.
- 삭제
- 삭제
- 삭제
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
FR02/12325 | 2002-10-04 | ||
FR0212325A FR2845493A1 (fr) | 2002-10-04 | 2002-10-04 | Logiciel embarque et procede d'authentification de celui-ci |
Publications (2)
Publication Number | Publication Date |
---|---|
KR20050083699A KR20050083699A (ko) | 2005-08-26 |
KR100973203B1 true KR100973203B1 (ko) | 2010-07-30 |
Family
ID=32011393
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
KR1020057005479A KR100973203B1 (ko) | 2002-10-04 | 2003-10-02 | 내장된 소프트웨어 및 이를 인증하는 방법 |
Country Status (9)
Country | Link |
---|---|
US (1) | US7356815B2 (ko) |
EP (1) | EP1546866A2 (ko) |
JP (1) | JP2006501735A (ko) |
KR (1) | KR100973203B1 (ko) |
CN (1) | CN1703668A (ko) |
AU (1) | AU2003288370A1 (ko) |
FR (1) | FR2845493A1 (ko) |
MX (1) | MXPA05003618A (ko) |
WO (1) | WO2004032328A2 (ko) |
Families Citing this family (13)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US7103779B2 (en) | 2003-09-18 | 2006-09-05 | Apple Computer, Inc. | Method and apparatus for incremental code signing |
CN100562096C (zh) * | 2003-12-18 | 2009-11-18 | 松下电器产业株式会社 | 用于存储、认证以及执行应用程序的方法 |
KR20110031506A (ko) * | 2003-12-18 | 2011-03-28 | 파나소닉 주식회사 | 애플리케이션 프로그램을 인증 및 실행하는 방법 |
US7831838B2 (en) * | 2004-03-05 | 2010-11-09 | Microsoft Corporation | Portion-level in-memory module authentication |
US7644287B2 (en) * | 2004-07-29 | 2010-01-05 | Microsoft Corporation | Portion-level in-memory module authentication |
US8689338B2 (en) * | 2005-08-03 | 2014-04-01 | St-Ericsson Sa | Secure terminal, a routine and a method of protecting a secret key |
JP2009517972A (ja) * | 2005-11-29 | 2009-04-30 | トムソン ライセンシング | デジタルコンテンツを保護する方法及び装置 |
US8364965B2 (en) | 2006-03-15 | 2013-01-29 | Apple Inc. | Optimized integrity verification procedures |
EP2250607A1 (en) * | 2008-03-04 | 2010-11-17 | Apple Inc. | System and method of authorizing execution of software code based on accessible entitlements |
WO2009111405A1 (en) * | 2008-03-04 | 2009-09-11 | Apple Inc. | System and method of authorizing execution of software code based on a trusted cache |
CN102016866B (zh) * | 2008-03-04 | 2014-05-21 | 苹果公司 | 基于授予承载商的权利授权在设备上执行软件代码的系统和方法 |
US20090228868A1 (en) * | 2008-03-04 | 2009-09-10 | Max Drukman | Batch configuration of multiple target devices |
KR101239012B1 (ko) | 2008-03-04 | 2013-03-11 | 애플 인크. | 적어도 하나의 설치된 프로파일에 기초하여 소프트웨어 코드의 실행을 인가하는 시스템 및 방법 |
Citations (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0770957A2 (en) * | 1995-10-26 | 1997-05-02 | Sun Microsystems, Inc. | System and method for protecting use of dynamically linked executable modules |
WO2000064178A1 (en) * | 1999-04-21 | 2000-10-26 | General Instrument Corporation | Method and system for targeted or universal upgrades of programming in a population of advanced set-top boxes in a cable television system |
JP2002140298A (ja) * | 2000-10-31 | 2002-05-17 | Matsushita Electric Ind Co Ltd | 認証方法 |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
FI990461A0 (fi) * | 1999-03-03 | 1999-03-03 | Nokia Mobile Phones Ltd | Menetelmä ohjelmiston lataamiseksi palvelimelta päätelaitteeseen |
US6901518B1 (en) * | 1999-04-08 | 2005-05-31 | Sun Microsystems, Inc. | Method and system for establishing trust in downloaded proxy code |
US6965994B1 (en) * | 2001-01-30 | 2005-11-15 | Microsoft Corporation | Security mechanism for computer processing modules |
-
2002
- 2002-10-04 FR FR0212325A patent/FR2845493A1/fr active Pending
-
2003
- 2003-10-02 EP EP03780285A patent/EP1546866A2/fr not_active Withdrawn
- 2003-10-02 US US10/529,972 patent/US7356815B2/en not_active Expired - Lifetime
- 2003-10-02 JP JP2004540905A patent/JP2006501735A/ja active Pending
- 2003-10-02 AU AU2003288370A patent/AU2003288370A1/en not_active Abandoned
- 2003-10-02 CN CNA200380100961XA patent/CN1703668A/zh active Pending
- 2003-10-02 MX MXPA05003618A patent/MXPA05003618A/es not_active Application Discontinuation
- 2003-10-02 KR KR1020057005479A patent/KR100973203B1/ko active IP Right Grant
- 2003-10-02 WO PCT/FR2003/050073 patent/WO2004032328A2/fr active Application Filing
Patent Citations (4)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP0770957A2 (en) * | 1995-10-26 | 1997-05-02 | Sun Microsystems, Inc. | System and method for protecting use of dynamically linked executable modules |
JPH09231068A (ja) * | 1995-10-26 | 1997-09-05 | Sun Microsyst Inc | 動的にリンクされた実行可能モジュールの使用を保護するシステム及び方法 |
WO2000064178A1 (en) * | 1999-04-21 | 2000-10-26 | General Instrument Corporation | Method and system for targeted or universal upgrades of programming in a population of advanced set-top boxes in a cable television system |
JP2002140298A (ja) * | 2000-10-31 | 2002-05-17 | Matsushita Electric Ind Co Ltd | 認証方法 |
Also Published As
Publication number | Publication date |
---|---|
CN1703668A (zh) | 2005-11-30 |
MXPA05003618A (es) | 2005-06-17 |
EP1546866A2 (fr) | 2005-06-29 |
AU2003288370A1 (en) | 2004-04-23 |
US20060156000A1 (en) | 2006-07-13 |
JP2006501735A (ja) | 2006-01-12 |
WO2004032328A2 (fr) | 2004-04-15 |
WO2004032328A3 (fr) | 2004-07-15 |
FR2845493A1 (fr) | 2004-04-09 |
US7356815B2 (en) | 2008-04-08 |
AU2003288370A8 (en) | 2004-04-23 |
KR20050083699A (ko) | 2005-08-26 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7506381B2 (en) | Method for securing an electronic device, a security system and an electronic device | |
CN101145906B (zh) | 对单向网络中的接收终端进行合法性认证的方法及系统 | |
RU2356169C2 (ru) | Привязка программного обеспечения к аппаратным средствам с использованием криптографии | |
JP4067985B2 (ja) | アプリケーション認証システムと装置 | |
KR101795457B1 (ko) | 보안 기능이 강화된 디바이스의 초기화 방법 및 디바이스의 펌웨어 업데이트 방법 | |
US7689828B2 (en) | System and method for implementing digital signature using one time private keys | |
US8108680B2 (en) | Preventing unauthorized poaching of set top box assets | |
US20080189695A1 (en) | Updating of Data Instructions | |
KR100973203B1 (ko) | 내장된 소프트웨어 및 이를 인증하는 방법 | |
TW201349009A (zh) | 用於數位通信之安全區 | |
JP2004538584A (ja) | 電子装置における情報の処理方法、システム、電子装置及び処理ブロック | |
CN109831311B (zh) | 一种服务器验证方法、系统、用户终端及可读存储介质 | |
KR20090064698A (ko) | 신뢰 플랫폼 모듈을 이용한 drm 방법 및 시스템 | |
WO2010092138A2 (en) | Collaborative reconciliation of application trustworthiness | |
CN112565205A (zh) | 可信认证和度量方法、服务器、终端及可读存储介质 | |
CN106656499B (zh) | 一种数字版权保护系统中终端设备可信认证方法 | |
KR20070059891A (ko) | 어플리케이션 인증 보안 시스템 및 그 인증 보안 방법 | |
CN114785514A (zh) | 一种用于工业物联化终端应用许可授权的方法及系统 | |
CN112926046B (zh) | 保护设备标识信息的移动终端设备匿名标识信息认证方法 | |
CN117436043A (zh) | 待执行文件的来源验证方法、设备以及可读存储介质 | |
JP2004234641A (ja) | コンテンツファイル制作者の認証方式およびそのプログラム | |
KR20130100032A (ko) | 코드 서명 기법을 이용한 스마트폰 어플리케이션 배포 방법 | |
US20200036535A1 (en) | Storing Data On Target Data Processing Devices | |
CN110298145B (zh) | 一种基于公开密钥密码算法的固件程序装载保护方法 | |
KR20180052479A (ko) | 서명 체인을 이용한 유무선 공유기의 펌웨어 업데이트 시스템, 유무선 공유기 및 유무선 공유기의 펌웨어 업데이트 방법 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
N231 | Notification of change of applicant | ||
A201 | Request for examination | ||
E902 | Notification of reason for refusal | ||
E701 | Decision to grant or registration of patent right | ||
GRNT | Written decision to grant | ||
FPAY | Annual fee payment |
Payment date: 20130701 Year of fee payment: 4 |
|
FPAY | Annual fee payment |
Payment date: 20140630 Year of fee payment: 5 |
|
FPAY | Annual fee payment |
Payment date: 20150619 Year of fee payment: 6 |
|
FPAY | Annual fee payment |
Payment date: 20160628 Year of fee payment: 7 |
|
FPAY | Annual fee payment |
Payment date: 20170704 Year of fee payment: 8 |
|
FPAY | Annual fee payment |
Payment date: 20180628 Year of fee payment: 9 |
|
FPAY | Annual fee payment |
Payment date: 20190722 Year of fee payment: 10 |