CN106464485A8 - 用于保护在清单文件中输送的内容密钥的系统和方法 - Google Patents

用于保护在清单文件中输送的内容密钥的系统和方法 Download PDF

Info

Publication number
CN106464485A8
CN106464485A8 CN201580019261.0A CN201580019261A CN106464485A8 CN 106464485 A8 CN106464485 A8 CN 106464485A8 CN 201580019261 A CN201580019261 A CN 201580019261A CN 106464485 A8 CN106464485 A8 CN 106464485A8
Authority
CN
China
Prior art keywords
content
decryption
kek
protecting
user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201580019261.0A
Other languages
English (en)
Other versions
CN106464485A (zh
CN106464485B (zh
Inventor
R.奈尔
K.马
M.米海洛夫
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Ericsson AB
Original Assignee
Ericsson AB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Ericsson AB filed Critical Ericsson AB
Publication of CN106464485A publication Critical patent/CN106464485A/zh
Publication of CN106464485A8 publication Critical patent/CN106464485A8/zh
Application granted granted Critical
Publication of CN106464485B publication Critical patent/CN106464485B/zh
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0825—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0891—Revocation or update of secret information, e.g. encryption key update or rekeying
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0894—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
    • H04L9/0897—Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/14—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols using a plurality of keys or algorithms
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/24—Key scheduling, i.e. generating round keys or sub-keys for block encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/60—Digital content management, e.g. content distribution
    • H04L2209/603—Digital right managament [DRM]

Abstract

本文公开了用于保护流传送内容解密的方法和用户装置。方法包括在用户装置接收用于请求的内容的清单，清单提供使用第一公共密钥加密密钥(KEK)加密的内容加密密钥(CEK)，对应的第一私有KEK存储在用户装置上的安全存储中；在用户装置上的安全处理区域内部，使用第一私有KEK将CEK解密以创建解密的内容密钥；在安全处理区域内部，使用解密的内容密钥将请求的内容解密以形成解密的内容；以及提供解密的内容到移动用户装置上的解码器。
CN201580019261.0A 2014-02-11 2015-02-11 用于保护在清单文件中输送的内容密钥的系统和方法 Active CN106464485B (zh)

Applications Claiming Priority (5)

Application Number Priority Date Filing Date Title
US201461938425P 2014-02-11 2014-02-11
US61/938,425 2014-02-11
US14/618,598 2015-02-10
US14/618,598 US11228427B2 (en) 2014-02-11 2015-02-10 System and method for securing content keys delivered in manifest files
PCT/IB2015/051028 WO2015121806A2 (en) 2014-02-11 2015-02-11 System and method for securing content keys delivered in manifest files

Publications (3)

Publication Number Publication Date
CN106464485A CN106464485A (zh) 2017-02-22
CN106464485A8 true CN106464485A8 (zh) 2017-06-30
CN106464485B CN106464485B (zh) 2020-03-06

Family

ID=53775922

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201580019261.0A Active CN106464485B (zh) 2014-02-11 2015-02-11 用于保护在清单文件中输送的内容密钥的系统和方法

Country Status (8)

Country Link
US (1) US11228427B2 (zh)
EP (1) EP3105882B1 (zh)
CN (1) CN106464485B (zh)
BR (1) BR112016018486A8 (zh)
CA (1) CA2939396A1 (zh)
HU (1) HUE054769T2 (zh)
PL (1) PL3105882T3 (zh)
WO (1) WO2015121806A2 (zh)

Families Citing this family (56)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9594927B2 (en) * 2014-09-10 2017-03-14 Intel Corporation Providing a trusted execution environment using a processor
US10084838B2 (en) 2014-10-29 2018-09-25 DLVR, Inc. Generating and using manifest files including content delivery network authentication data
US9509742B2 (en) 2014-10-29 2016-11-29 DLVR, Inc. Configuring manifest files referencing infrastructure service providers for adaptive streaming video
US10142386B2 (en) 2014-10-29 2018-11-27 DLVR, Inc. Determining manifest file data used in adaptive streaming video delivery
WO2016112338A1 (en) * 2015-01-08 2016-07-14 Intertrust Technologies Corporation Cryptographic systems and methods
US10255200B2 (en) * 2015-02-25 2019-04-09 Western Digital Technologies, Inc. Data storage device and method of operation using multiple security protocols
US10237722B2 (en) * 2015-03-11 2019-03-19 Futurewei Technologies, Inc. System and method for multi-SIM profiles or embedded SIM
US10425427B2 (en) * 2015-06-19 2019-09-24 Futurewei Technologies, Inc. Template uniform resource locator signing
US10270591B2 (en) * 2015-06-30 2019-04-23 Activevideo Networks, Inc. Remotely managed trusted execution environment for digital-rights management in a distributed network with thin clients
US9578054B1 (en) 2015-08-31 2017-02-21 Newman H-R Computer Design, LLC Hacking-resistant computer design
US10893313B2 (en) 2015-09-11 2021-01-12 Active Video Networks, Inc. Secure bridging of third-party digital rights management to local security
US9660803B2 (en) * 2015-09-15 2017-05-23 Global Risk Advisors Device and method for resonant cryptography
US9917690B2 (en) * 2015-10-01 2018-03-13 Time Warner Cable Enterprises Llc Encryption management, content recording management, and playback management in a network environment
US10025600B2 (en) * 2015-10-02 2018-07-17 Google Llc NAND-based verified boot
CN106845160B (zh) * 2015-12-03 2018-04-20 国家新闻出版广电总局广播科学研究院 一种用于智能操作系统的数字版权管理（drm）方法和系统
EP3179690A1 (en) * 2015-12-11 2017-06-14 Gemalto Sa Mobile device having trusted execution environment
US10127399B1 (en) * 2015-12-29 2018-11-13 EMC IP Holding Company LLC Secrets as a service
CN105681882B (zh) * 2016-01-04 2019-04-19 华为技术有限公司 控制视频输出的方法及其装置、控制电路
EP3229398A1 (en) * 2016-04-08 2017-10-11 Gemalto Sa A method for updating a long-term key used to protect communications between a network and a remote device
EP3242488A1 (en) * 2016-05-04 2017-11-08 Thomson Licensing Method for decrypting adaptive bit rate streams and corresponding device
US10389517B2 (en) * 2016-06-27 2019-08-20 Nxp B.V. Using secure key storage to bind a white-box implementation to one platform
US10740466B1 (en) * 2016-09-29 2020-08-11 Amazon Technologies, Inc. Securing interfaces of a compute node
US11295017B2 (en) * 2017-01-31 2022-04-05 Ford Global Technologies, Llc Over-the-air updates security
EP3583538A4 (en) * 2017-02-20 2020-11-04 Newman H-R Computer Design, LLC HACKING RESISTANT COMPUTER DESIGN
US10404674B1 (en) 2017-02-28 2019-09-03 Amazon Technologies, Inc. Efficient memory management in multi-tenant virtualized environment
US10901627B1 (en) 2017-02-28 2021-01-26 Amazon Technologies, Inc. Tracking persistent memory usage
US10474359B1 (en) 2017-02-28 2019-11-12 Amazon Technologies, Inc. Write minimization for de-allocated memory
CN106980794B (zh) * 2017-04-01 2020-03-17 北京元心科技有限公司 基于TrustZone的文件加解密方法、装置及终端设备
CN106980793B (zh) * 2017-04-01 2020-05-15 北京元心科技有限公司 基于TrustZone的通用口令存储及读取方法、装置及终端设备
CN106997439B (zh) * 2017-04-01 2020-06-19 北京元心科技有限公司 基于TrustZone的数据加解密方法、装置及终端设备
CN106992851B (zh) * 2017-04-01 2020-04-10 北京元心科技有限公司 基于TrustZone的数据库文件口令加解密方法、装置及终端设备
US10609429B2 (en) * 2017-06-28 2020-03-31 Telefonaktiebolaget Lm Ericsson (Publ) System, devices and methods for providing stream privacy in an ABR OTT media network
US20190132629A1 (en) * 2017-10-26 2019-05-02 Jonathan Kendrick Application for detecting a currency and presenting associated content on an entertainment device
GB2568966A (en) * 2017-12-04 2019-06-05 Wellness Tech And Media Group Ltd An encryption process
CN107819579B (zh) * 2017-12-13 2021-08-24 西安Tcl软件开发有限公司 一种用户请求的处理方法、服务器及计算机可读存储介质
CN108260125B (zh) * 2018-01-19 2020-09-18 北京工业大学 一种基于d2d通信的内容分发应用的密钥分发方法
EP3750303B1 (en) * 2018-02-05 2024-04-03 Telefonaktiebolaget LM Ericsson (publ) A method, a user equipment and a computer program product for enabling a dynamic adaptive streaming over http, dash, player to fetch media segments from a network
US11018871B2 (en) * 2018-03-30 2021-05-25 Intel Corporation Key protection for computing platform
US11165758B2 (en) 2018-04-09 2021-11-02 International Business Machines Corporation Keystream generation using media data
US10911227B2 (en) * 2018-04-12 2021-02-02 Mastercard International Incorporated Method and system for managing centralized encryption and data format validation for secure real time multi-party data distribution
CN108768979B (zh) * 2018-05-17 2021-04-16 网宿科技股份有限公司 企业内网访问的方法、用于企业内网访问的装置及其系统
US11362824B2 (en) * 2018-05-25 2022-06-14 Intertrust Technologies Corporation Content management systems and methods using proxy reencryption
CN108881205B (zh) * 2018-06-08 2020-11-17 西安理工大学 一种hls流媒体的安全播放系统及播放方法
CN108880804B (zh) * 2018-07-18 2020-06-30 北京理工大学 基于级联计算成像的网络密钥分发方法、装置和系统
US11113422B2 (en) 2018-08-03 2021-09-07 Micron Technology, Inc. Data protection in computer processors
US10740084B2 (en) * 2018-08-16 2020-08-11 Intel Corporation Soc-assisted resilient boot
US11074198B2 (en) * 2018-09-18 2021-07-27 Micron Technology, Inc. Key management in computer processors
US11444780B2 (en) * 2019-05-21 2022-09-13 Micron Technology, Inc. Secure replaceable verification key architecture in a memory sub-system
US11386187B2 (en) * 2019-06-18 2022-07-12 Comcast Cable Communications, Llc Systems and methods for securely processing content
US11456855B2 (en) * 2019-10-17 2022-09-27 Arm Limited Obfuscating data at-transit
US11436343B2 (en) * 2019-12-31 2022-09-06 Arm Limited Device, system, and method of policy enforcement for rich execution environment
US10715315B1 (en) * 2020-03-19 2020-07-14 BigFork Technologies, LLC Secure management of content using a middleware layer between a client and a server
CN111757176B (zh) * 2020-06-11 2021-11-30 青岛海信传媒网络技术有限公司 流媒体文件安全播放方法及显示设备
CN112243154B (zh) * 2020-07-15 2022-08-05 福建新大陆通信科技股份有限公司 一种机顶盒安全启动方法、设备及介质
US11711555B1 (en) * 2021-03-31 2023-07-25 Amazon Technologies, Inc. Protecting media content integrity across untrusted networks
CN113612746B (zh) * 2021-07-26 2023-05-09 中国建设银行股份有限公司 基于Android系统的敏感信息存储方法及系统

Family Cites Families (25)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5850444A (en) 1996-09-09 1998-12-15 Telefonaktienbolaget L/M Ericsson (Publ) Method and apparatus for encrypting radio traffic in a telecommunications network
US6947556B1 (en) 2000-08-21 2005-09-20 International Business Machines Corporation Secure data storage and retrieval with key management and user authentication
JP4552294B2 (ja) * 2000-08-31 2010-09-29 ソニー株式会社 コンテンツ配信システム、コンテンツ配信方法、および情報処理装置、並びにプログラム提供媒体
KR100493284B1 (ko) 2001-05-11 2005-06-03 엘지전자 주식회사 디지털 미디어의 복제 제어 방법 및 시스템
US7688982B2 (en) 2003-03-14 2010-03-30 Koninklijke Philips Electronics N.V. Protected return path from digital rights management dongle
AU2003286146A1 (en) 2003-10-31 2005-06-08 Telefonaktiebolaget Lm Ericsson (Publ) Method and devices for the control of the usage of content
US20050187879A1 (en) * 2004-02-19 2005-08-25 Microsoft Corporation Persistent license for stored content
JP4561146B2 (ja) * 2004-03-29 2010-10-13 ソニー株式会社 コンテンツ流通システム、暗号化装置、暗号化方法、情報処理プログラム、及び記憶媒体
JP2008512924A (ja) * 2004-09-10 2008-04-24 コーニンクレッカ フィリップス エレクトロニクス エヌ ヴィ 限定受信を提供する方法
US7564345B2 (en) * 2004-11-12 2009-07-21 Verayo, Inc. Volatile device keys and applications thereof
US8050406B2 (en) * 2005-06-07 2011-11-01 Sony Corporation Key table and authorization table management
US20070092082A1 (en) 2005-10-21 2007-04-26 Rush Frederick A Digital rights management security mechanism for use in a wireless communication apparatus
US8601590B2 (en) * 2006-04-27 2013-12-03 Panasonic Corporation Content distribution system
GB2448151B (en) * 2007-04-03 2011-05-04 Advanced Risc Mach Ltd Memory domain based security control within data processing systems
US8578157B2 (en) 2009-05-29 2013-11-05 Adobe Systems Incorporated System and method for digital rights management with authorized device groups
WO2011140288A1 (en) * 2010-05-04 2011-11-10 Verimatrix, Inc. Device authentication for secure key retrieval for streaming media players
US9084031B2 (en) 2010-12-13 2015-07-14 Microsoft Technology Licensing, Llc Content license storage
US9071421B2 (en) * 2010-12-15 2015-06-30 Microsoft Technology Licensing, Llc Encrypted content streaming
JP6010023B2 (ja) * 2011-04-25 2016-10-19 パナソニック株式会社 記録媒体装置及びコントローラ
US20140013453A1 (en) * 2011-05-16 2014-01-09 Yuichi Futa Duplication judgment device and duplication management system
US8983076B2 (en) * 2011-12-22 2015-03-17 Adobe Systems Incorporated Methods and apparatus for key delivery in HTTP live streaming
US9418209B2 (en) * 2012-10-02 2016-08-16 Google Technology Holdings LLC Systems and methods for manipulating sensitive information in a secure mobile environment
WO2014059047A2 (en) * 2012-10-10 2014-04-17 Red.Com, Inc. Video distribution and playback
EP2929695A1 (en) * 2012-12-10 2015-10-14 Koninklijke KPN N.V. Digital rights management for segmented content
CN104283686A (zh) * 2014-05-27 2015-01-14 深圳市天朗时代科技有限公司 一种数字版权保护方法及其系统

Also Published As

Publication number Publication date
BR112016018486A2 (pt) 2018-07-10
CA2939396A1 (en) 2015-08-20
HUE054769T2 (hu) 2021-09-28
US20150229471A1 (en) 2015-08-13
PL3105882T3 (pl) 2021-10-25
WO2015121806A3 (en) 2015-12-03
CN106464485A (zh) 2017-02-22
US11228427B2 (en) 2022-01-18
EP3105882B1 (en) 2021-04-07
WO2015121806A2 (en) 2015-08-20
EP3105882A2 (en) 2016-12-21
CN106464485B (zh) 2020-03-06
BR112016018486A8 (pt) 2019-10-01

Similar Documents

Publication Publication Date Title
CN106464485A8 (zh) 用于保护在清单文件中输送的内容密钥的系统和方法
WO2017034642A3 (en) Optimizable full-path encryption in a virtualization environment
EP3453135A4 (en) SYSTEM AND METHOD FOR ENCRYPTION AND DECRYPTION BASED ON DISTRIBUTION OF QUANTUM KEYS
BR112017002747A2 (pt) método implementado por computador, e, sistema de computador.
SG11201708750TA (en) Network system, and methods of encrypting data, decrypting encrypted data in the same
EP3254214A4 (en) Data encryption/decryption using neuro and neuro-mechanical fingerprints
GB2509422A (en) Decryption and encryption of application data
WO2014116528A3 (en) Providing an encrypted account credential from a first device to a second device
EP4236203A3 (en) Data security using request-supplied keys
EP2565862A4 (en) Encryption processing system, key generation device, encryption device, decryption device, signature processing system, signature device and verification device
GB2496354B (en) A method and system of providing authentication of user access to a computer resource via a mobile device using multiple separate security factors
WO2014066610A3 (en) Methods and systems for the secure exchange of information
EP3118771A4 (en) Confidential data management method and device, and security authentication method and system
IN2014CN00388A (zh)
WO2018191772A3 (en) STORAGE SYSTEMS FOR ENCRYPTION
GB2542303A (en) Secure host communications
WO2013022647A3 (en) System and method for wireless data protection
EP3598714A4 (en) SECRET KEY ENCRYPTION PROCESS, DEVICE AND SYSTEM
WO2013130555A3 (en) Method of operating a computing device, computing device and computer program
PH12018550176A1 (en) Using hardware based secure isolated region to prevent piracy and cheating on electronic devices
GB2512249A (en) Secure peer discovery and authentication using a shared secret
WO2014027263A3 (en) Attribute-based encryption
GB201101471D0 (en) A method, module and host
WO2012122117A3 (en) Content playback apis using encrypted streams
WO2010011921A3 (en) Http authentication and authorization management

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
CI01 Correction of invention patent gazette
CI01 Correction of invention patent gazette

Correction item: Priority

Correct: 61/938,425 2014.02.11 US|14/618,598 2015.02.10 US

Number: 08

Volume: 33

CI02 Correction of invention patent application
CI02 Correction of invention patent application

Correction item: Priority

Correct: 61/938,425 2014.02.11 US|14/618,598 2015.02.10 US

Number: 08

Page: The title page

Volume: 33

GR01 Patent grant
GR01 Patent grant