RU2000126765A - CERTIFICATION OF DATA AUTHENTICITY IN THE DIGITAL DATA TRANSFER SYSTEM - Google Patents

Claims (24)

1. A method of authentication of data transmitted in a digital data transmission system, characterized in that said data is organized into a hierarchical structure of at least one root directory block, subdirectory block and file block before transmission, a certain authentication algorithm is applied to the data of a certain file , and the corresponding file authentication value is stored in a subdirectory that refers to the file, to this file authentication value, in turn, yayut some authentication algorithm, and the corresponding certifying the authenticity of the value stored in the subdirectory refers to the subdirectory of the root directory.  2. The method according to claim 1, wherein the authentication of the file data is performed by applying a hashing algorithm to some or all of the data in the file, and the resulting hash value is stored as the file authenticating value in the subdirectory referencing the file.  3. The method according to claim 2, wherein said hash algorithm is a cryptographically secure algorithm that generates an almost unique value of the hash function based on some given data set.  4. The method according to any one of the preceding paragraphs, in which the authentication of the file data for a plurality of files is performed by applying a hashing algorithm to the combined data of a plurality of files, generating a single hash function value.  5. The method according to any one of the preceding paragraphs, in which the authentication of the subdirectory is performed by applying some hashing algorithm to at least the value of the authenticating file, and the resulting hash value is stored as the authentication value of the subdirectory in the root linking to this subdirectory catalog.  6. The method according to any one of the preceding paragraphs, in which the authentication of several subdirectories is performed by applying some hashing algorithm to combine the authentication files of values from a certain set of subdirectories, with the generation of a single hash value.  7. The method according to any one of the preceding paragraphs, in which the secret key of some encryption algorithm is applied to at least some of the data stored in the root directory, and the resulting encrypted value is stored in the root directory.  8. The method of claim 7, wherein said encrypted data corresponds to a digital signature generated using the secret key of some encryption algorithm, which can be verified using the corresponding public key.  9. The method according to any one of the preceding paragraphs, in which the dependent block includes some encrypted value generated by some secret key, and the authentication value for this block is calculated based on the results of applying the authentication algorithm to the said encrypted value and stored in the block referencing to said dependent block.  10. The method of claim 9, wherein the signature value for said dependent block is generated using some encryption algorithm, and a hash algorithm is applied to this signature value to generate said authentication value.  11. The method of claim 9 or 10, wherein said dependent block is a subdirectory or file block.  12. The method according to claim 9 or 10, wherein said dependent block is a second root directory block.  13. The method according to any one of the preceding paragraphs, in which said blocks correspond to a plurality of data files encapsulated in tables or sections containing data, and these tables are then encapsulated in data packets to form a transport stream.  14. The method of claim 13, wherein said blocks preferably correspond to data objects formatted according to the DSMCC standard.  15. The method according to p. 13 or 14, in which the said blocks are encapsulated in tables and packages that meet the requirements of the MPEG standard.  16. A method of authenticating the first and second sets of related data blocks transmitted in a digital data transmission system, characterized in that one block from the first set of blocks contains a signature generated by a secret key applied to said first block, the authenticity of at least the value of this signature authenticated by an authentication algorithm, and the authenticating value is stored in a block of said second set of blocks referring to said first block.  17. The method of claim 16, wherein said encrypted value corresponds to a digital signature generated by a secret key applied to at least some of the data in the corresponding block.  18. The method of claim 16 or 17, wherein said data blocks correspond to a plurality of data files encapsulated in tables or sections containing data, and these tables are then encapsulated in data packets to form a transport stream.  19. A method of authentication of data transmitted in a digital data transmission system, characterized in that the data is organized as a sequence of data files and authenticates the files regardless of the operation or operations of formatting and encapsulating data and before this operation or operations used by the said digital transmission system data for preparing data for transmission in the packet transport stream.  20. The method of claim 19, wherein the data authentication is performed before encapsulating the data in a series of tables, which are then encapsulated in the data packets of the packet transport stream.  21. The method according to any one of the preceding paragraphs, wherein said digital data transmission system corresponds to a digital television system.  22. A method for checking received data transmitted in a digital data transmission system in accordance with any one of paragraphs. 1-15, in which the receiving decoder applies a certain authentication algorithm to the data of a file and compares the obtained value with the authentication value stored in the subdirectory referencing the file, and also applies at least the value stored in the referenced file authentication subdirectory, some authentication algorithm and compares the resulting value with the corresponding authentication subdirectory value, sod rzhaschimsya in the root directory, links to this subdirectory.  23. A method for checking received data transmitted in a digital data transmission system in accordance with any one of paragraphs. 16-18, in which the decoder verifies the signature value of the first block using the corresponding public key, and also checks said authentication value contained in said block of said second set of blocks, applying an authentication algorithm to at least said signature value.  24. A method for checking received data transmitted in a digital data transmission system in accordance with any one of paragraphs. 19-21, wherein the data verification operation is performed after the data file has been restored by the decoder from the encapsulated and formatted data transmitted by the digital data transmission system.