CN101527837A

CN101527837A - Method for updating digital interface revocation list

Info

Publication number: CN101527837A
Application number: CN200910301485A
Authority: CN
Inventors: 康红娟; 刘贤洪; 杨金峰
Original assignee: Sichuan Changhong Electric Co Ltd
Current assignee: Sichuan Changhong Electric Co Ltd
Priority date: 2009-04-10
Filing date: 2009-04-10
Publication date: 2009-09-09
Anticipated expiration: 2029-04-10
Also published as: CN101527837B

Abstract

The invention relates to digital television techniques, in particular to a method for updating a digital interface revocation list, discloses the method for updating digital interface revocation list and solves the problems that updating and transmission time is long. The technical proposal has the key aspects which can be summarized in the following way: a sender first sends a version number to a receiver, and the receiver compares the received version number with a local version number; if the local version number is more advanced, then the revocation list is sent to the sender; otherwise, the local version number is updated. The invention has the beneficial effects of improving updating efficiency of the revocation list and being applicable to digital content protection.

Description

A kind of update method of digital interface revocation list

Technical field

The present invention relates to digital television techniques, relate in particular to a kind of update method of digital interface revocation list.

Background technology

Along with economic globalization deepen continuously and spread, information digitalization ground rapid expansion, intellectual property protection is converted into more tangible feasible measure by the consciousness of sloganization gradually.Digital content protection becomes the burning hot topic of near period.Be referred to as digital content with data such as the audio frequency and video of digital store and transmission, text, pictures, its " numeral " characteristics when meeting the digital communication requirement more the consumer brought unprecedented high-quality audiovisual experience.Yet its " numeral " characteristics are also provided convenience for the bootlegger, and the bootlegger can intactly copy and the spreading digital content.Digital content all has copyright usually, and the producer sells digital content to obtain interests by certain means.Along with the development of network technology and data compression technique, the illegal use and the copy right piracy of digital content become more and more easier, this must make the producer of digital content suffer enormous economic loss.

The method of at present general protection copyrighted digital content is to issue corresponding certificate to the equipment that participates in the digital content protective system communication; but certificate has certain effective period; therefore need revoke illegal or unsafe equipment in time; this effective enforcement of revoking mode needs corresponding revocation list, and revocation list needs constantly to upgrade.

Existing digital interface content protecting system; as HDCP, DTCP etc.; what realize all is transmitting safely between digital interface and the digital interface; all functional units are all in digital interface chip inside, and the model of its revocation list (revocation list Executive Module) comprises the more New Deal of revocation list signature verification, revocation list, public spoon, private spoon, revocation list, communication protocol.And that the general employing of the signature of revocation list is RSA, ECC etc., algorithm is very complicated, scale is very big, PKI, the shared memory space of private key are also very big, and revocation list is along with participating in increasing of digital content system equipment, and the certificate that authoritative institution issues is also more and more, and corresponding revocation list is also more and more longer, the chip space that takies is also increasing, also can influence the renewal speed of revocation list.

In the prior art, the update scheme of revocation list is: both sides want simultaneously mutual version number and revocation list, and both sides are with the other side's the version number and the comparing of own local storage that receive, if the other side's height upgrades local so then; If the other side is low, then ignore.Along with increasing of revocation list, occupation space can be increasing, so mutual, very time-consuming, is unfavorable for the optimization of system.

Summary of the invention

Technical problem to be solved by this invention is: propose a kind of update method of digital interface revocation list, solve the long problem of transmission time of upgrading.

The technical scheme that the present invention solves the problems of the technologies described above employing is: a kind of update method of digital interface revocation list may further comprise the steps:

C. transmit leg sends to the recipient with version number, message authentication code, the public spoon of its local revocation list;

D. recipient's public spoon that will receive sends this locality to and revokes Executive Module, verifies its legitimacy by revoking Executive Module, if legal then execution in step e sends failed message to transmit leg if conform to rule;

E. verify whether message authentication code is legal, if legal then execution in step f, otherwise, failed message sent to transmit leg;

F. the version number of the version number of more local revocation list and transmit leg, if the version number of local revocation list is higher, then send local revocation list, message authentication code, public spoon to transmit leg, then send solicited message to transmit leg if local revocation list version number is low;

G. if transmit leg receives recipient's solicited message, then send its local revocation list, message authentication code, public spoon to the recipient, and execution in step h; If transmit leg receives recipient's revocation list, message authentication code, public spoon, then, replace local revocation list through after being proved to be successful of message authentication code, public spoon;

H. after the recipient is proved to be successful through message authentication code, public spoon, replace local revocation list with the revocation list that receives.

Further, before execution in step c, also comprise step:

A. divide the revocation list model, be divided into the digital interface module and revoke Executive Module, the digital interface module comprises public spoon, private spoon and interface communication protocol, revokes Executive Module and comprises revocation list checking, revocation list more New Deal, revocation list and public spoon certificate chain;

B. will revoke Executive Module and be integrated in the television set master chip.

The invention has the beneficial effects as follows: the update efficiency that has improved revocation list.

Description of drawings

Fig. 1 is the flow chart of initiator among the embodiment;

Fig. 2 is the flow chart of recipient among the embodiment.

Embodiment

The invention will be further described below in conjunction with drawings and Examples.

The present invention is with respect to prior art, changed the update mode of revocation list, avoided transmitting simultaneously in the prior art interactive mode of version number and revocation list, but adopt earlier by judging the height of version number, be sent to the low side of version number by the high side of version number again, so only need the transmission of a revocation list, improved the realization speed of upgrading revocation list greatly.Further, can also divide the revocation list model of prior art, more New Deal, revocation list and public spoon certificate chain are separated from digital interface with taking the big revocation list checking of memory space, revocation list, and directly be integrated in the television set master chip, improve renewal processing speed to revocation list.

Embodiment:

At first divide the revocation list model, be divided into the digital interface module and revoke Executive Module, the digital interface module comprises public spoon, private spoon and interface communication protocol, revokes Executive Module and comprises revocation list checking, revocation list more New Deal, revocation list and public spoon certificate chain; To revoke Executive Module and be integrated in the television set master chip.

Suppose that A is the initiator of revocation list, B is response side.As shown in Figure 1, initiator A order in two-way revocation list renewal process is carried out following flow process:

(1) version number, message authentication code, the PKI with local revocation list sends to B;

According to the realization situation of system, appropriate stand-by period T is set, wait for receiving the response message that B sends over;

If receive the failed message that B sends in the time, then initiate two-way renewal process (also can disconnect and connecting) again according to actual conditions at T;

If receive the revocation list that B sends in the time at T, illustrate that then the revocation list version of B is higher, need to replace local revocation list; (2) after A received the revocation list that B sends over, at first the PKI with B sent the local Executive Module of revoking to, judges the legitimacy of the PKI of B:

If legal, then continue to carry out the checking of message authentication code; If illegal, then initiate two-way renewal process again or disconnect connection

(3) A verifies the message authentication code that B sends over:

If by checking, then replace local revocation list with the revocation list of B, after replacing it, send success message to B;

If illegal, then initiate two-way renewal process again or disconnect connection according to actual conditions

As shown in Figure 2, B order in two-way revocation list renewal process in the side of response is carried out following flow process:

(1) at first the PKI of A is sent to the local Executive Module of revoking, whether legal by the PKI of revoking Executive Module checking A:

If, then begin the message authentication code of verifying that A sends by checking;

If authentication failed then sends failure to A.

(2) B verifies the message authentication code that A sends over:

If by checking, then begin the version number of the local revocation list of comparison and the version number of A;

If authentication failed then sends failed message to A.

(3) version and the city edition this shop of comparison A if the version number of A is higher, then send a request message to A; If lower, then send local revocation list, message authentication code, PKI to A by the version number that compares A.

After B sends request message, be set the appropriate stand-by period, wait for that A sends revocation list:

If receive the revocation list that A sends at the appointed time, then replace local revocation list with the revocation list of A, after replacement is finished, send success message to A; If overtime, then send failed message to A.

Claims

1. the update method of a digital interface revocation list is characterized in that: may further comprise the steps:

C. transmit leg sends to the recipient with version number, message authentication code, the public spoon of local revocation list;

D. recipient's public spoon that will receive sends this locality to and revokes Executive Module, revokes Executive Module by this locality and verifies its legitimacy, if legal then execution in step e sends failed message to transmit leg if conform to rule;

2. the update method of a kind of digital interface revocation list as claimed in claim 1 is characterized in that: also comprised step before execution in step c: