WO2006013477A1 - Dispositif et procede pour l'etablissement et le dechiffrage de contenu de reseau chiffre par le biais d'un programme de cle de chiffrement de cle - Google Patents

Dispositif et procede pour l'etablissement et le dechiffrage de contenu de reseau chiffre par le biais d'un programme de cle de chiffrement de cle Download PDF

Info

Publication number
WO2006013477A1
WO2006013477A1 PCT/IB2005/052205 IB2005052205W WO2006013477A1 WO 2006013477 A1 WO2006013477 A1 WO 2006013477A1 IB 2005052205 W IB2005052205 W IB 2005052205W WO 2006013477 A1 WO2006013477 A1 WO 2006013477A1
Authority
WO
WIPO (PCT)
Prior art keywords
key
encrypted
decrypting
decrypted
index
Prior art date
Application number
PCT/IB2005/052205
Other languages
English (en)
Inventor
Yang Peng
Sheng Jin
Dahua He
Original Assignee
Koninklijke Philips Electronics N.V.
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Koninklijke Philips Electronics N.V. filed Critical Koninklijke Philips Electronics N.V.
Priority to JP2007523180A priority Critical patent/JP2008508763A/ja
Priority to EP05758468A priority patent/EP1774696A1/fr
Priority to CNA2005800252586A priority patent/CN1989728A/zh
Publication of WO2006013477A1 publication Critical patent/WO2006013477A1/fr

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/083—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
    • H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
    • H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
    • H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
    • H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
    • H04N21/23—Processing of content or additional data; Elementary server operations; Server middleware
    • H04N21/234—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs
    • H04N21/2347—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption
    • H04N21/23476—Processing of video elementary streams, e.g. splicing of video streams or manipulating encoded video stream scene graphs involving video stream encryption by partially encrypting, e.g. encrypting the ending portion of a movie
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
    • H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
    • H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
    • H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
    • H04N21/44055—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption by partially decrypting, e.g. decrypting a video stream that has been partially encrypted
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
    • H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
    • H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
    • H04N21/835—Generation of protective data, e.g. certificates
    • H04N21/8352—Generation of protective data, e.g. certificates involving content or source identification data, e.g. Unique Material Identifier [UMID]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/167—Systems rendering the television signal unintelligible and subsequently intelligible
    • H04N7/1675—Providing digital key or authorisation information for generation or regeneration of the scrambling sequence
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
    • H04N7/00—Television systems
    • H04N7/16—Analogue secrecy systems; Analogue subscription systems
    • H04N7/173—Analogue secrecy systems; Analogue subscription systems with two-way working, e.g. subscriber sending a programme selection signal
    • H04N7/17309—Transmission or handling of upstream communications
    • H04N7/17318—Direct or substantially direct transmission and handling of requests
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/60—Digital content management, e.g. content distribution

Definitions

  • the invention relates to a device for decrypting an encrypted content received through a network.
  • the invention further relates to a system for providing an encrypted content through a network and decrypting the encrypted content, which system includes a server for providing the encrypted content, said device for decrypting the encrypted content and a storage medium (e.g., a record carrier, or a recording medium) for providing a decryption key, and its corresponding method and software program.
  • a server for providing the encrypted content
  • said device for decrypting the encrypted content and a storage medium (e.g., a record carrier, or a recording medium) for providing a decryption key, and its corresponding method and software program.
  • a storage medium e.g., a record carrier, or a recording medium
  • the Sapphire system provides fine-grained protection mechanism and is incorporated by CD2 standard.
  • contents i.e. A/V streams, files, etc.
  • the corresponding decryption key is stored as Asset Key (or Asset ID) in Sapphire Key Locker.
  • An European Patent Application 03102257. 7 describes a disc player, a record carrier and method for reading and protecting network data, which is related to data stored in the record carrier, by using the above-mentioned Sapphire system protection mechanism.
  • Figure 1 is a schematic block diagram illustrating a system including a disc player, disc and server of the patent application 03102257. 7.
  • the system of figure 1 comprises a disc player 11, a disc 12 and a network unit 13 (e.g., a server) for supplying network data related to carrier data 122 stored on the disc 12.
  • the network unit 13 is connected with the disc player 11 through the Internet.
  • a key locker 121 is stored on the disc 12, as shown in Figure 2 in details.
  • Figure 2 shows a table illustrating the contents of the key locker.
  • the key locker 121 is usually a table containing four column: an application ID used as an identification for an application run by the disc player and to restrict the access of a subset of the key locker; an asset ID used as an identification of (a group of) files that are encrypted in the same key and have the same usage rights; an asset key used as a key for decryption which is required to be kept secret from the public; and a rightstring, which has an undefined format and a variable length.
  • the rightstring includes a network identifier, like URL of the network unit 13, and the asset key used as a decryption key for decrypting the network data.
  • the disc player 11 includes two parts: a drive 111 for reading data from the record carrier 12, and an application unit 112.
  • the application unit 112 is comprised of a check element, an access element and a decrypt element.
  • the access element of the application unit 112 first send a request for a specific network data from the network unit 13.
  • the drive 111 retrieves a rightstring from the record carrier according to its application ID and sends the retrieved rightstrings to the application unit 112.
  • the check element of the application unit 112 checks whether the URL stored in the rightstring matches with that of the specific network unit 13 providing the network data. If so, the decrypt element of the application 112 decrypts the encrypted network data provided by the network unit 13 with the decryption key stored in the rightstring. If not, the drive 111 will retrieve a rightstring again and the whole process as described above will be performed once again.
  • the application unit uses the decryption key, which is identical with the asset key, to decrypt the network content.
  • the application unit is a piece of hardware for executing a (software) application, which is similar with the case of an operating system (OS) or software running on a computer.
  • OS operating system
  • the application running in the application unit can be easily attacked/hacked, just as what hackers do to software running on a computer. Therefore, it is relatively easy to access the decryption key, which is used by the application unit to decrypt the network content and should be kept secret from the public and protected against key publishing.
  • this object is achieved by providing a device for decrypting an encrypted content received through a network, comprising: an application unit for receiving the encrypted content and an encrypted first key through the network, in which the first key is associated with encryption of the content, and a dedicated second key is associated with encryption of the first key; and a key management unit for acquiring the dedicated second key from a storage medium, and decrypting the encrypted first key by using the dedicated second key to provide the first key for the application unit to decrypt the encrypted content.
  • a system for providing and decrypting an encrypted content comprising a server for providing the encrypted content, a device for decrypting the encrypted content and a storage medium, wherein, the server is further arranged to comprise: a receiver for
  • the device for decrypting the encrypted content is further arranged to comprise: an application unit for receiving the encrypted content and an encrypted first key through the network, in which the first key is associated with encryption of the content, and a dedicated second key is associated with encryption of the first key; and a key management unit for acquiring the dedicated second key from the storage medium, and decrypting the encrypted first key by using the dedicated second key to provide the first key for the application unit to decrypt the encrypted content.
  • a method of decrypting an encrypted content received through a network comprising steps of: receiving the encrypted content and an encrypted first key through the network, in which the first key is associated with encryption of the content, and a dedicated second key is associated with encryption of the first key; acquiring the dedicated second key from a storage medium; and decrypting the encrypted first key by using the dedicated second key to provide the first key for the application unit to decrypt the encrypted content.
  • a computer program for decrypting an encrypted content received through a network comprising: a first software means for receiving the encrypted content and an encrypted first key through the network, in which the first key is associated with encryption of the content, and a dedicated second key is associated with encryption of the first key; a second software means for acquiring the dedicated second key from a storage medium, and decrypting the encrypted first key by using the dedicated second key to provide the first key for the application unit to decrypt the encrypted content.
  • the key management unit e.g., a drive
  • the key management unit is basically a piece of component used by the device, which has its own conformance rules (e.g., rules complying with the Sapphire system) and has an interface between itself the and the application unit via a secure authentication channel (SAC) pre-defined by the Sapphire system. Therefore, the key management unit as a single component is very hard to be attacked, like what happens to the application unit.
  • conformance rules e.g., rules complying with the Sapphire system
  • SAC secure authentication channel
  • the second keys i.e., the asset keys
  • the application unit uses the first key which is randomly generated in response to the request for content download
  • the key management unit which is relatively safer and more stable than the application unit, is the only unit in the device which knows the asset keys.
  • the device and method of the present invention is more effective for preventing the content protection keys (e.g., asset keys) from being attacked.
  • Fig. 1 is a schematic block diagram illustrating the structure of a system of providing and decrypting network data according to prior art, which system includes a disc player, a server and a record carrier;
  • Fig. 2 shows a table of a key locker stored on the record carrier of Fig. 1;
  • Fig. 3 is a schematic block diagram illustrating the structure of a system of providing and decrypting network data according to a first embodiment of the present invention, which system includes a disc player, a server and a record carrier; and
  • Fig. 4 is a schematic block diagram illustrating the structure of a system of providing and decrypting network data according to a second embodiment of the present invention, which system includes a disc player, a server and a record carrier.
  • the system includes a server 31 for providing an encrypted content, a disc player 32 for decrypting the encrypted content and a disc 33 for storing a key locker 121 as shown in Fig. 2 as well as disc data 122, in which the disc player 32 connects with the server 31 through a network, and the server shares the information about the key locker stored on the disc.
  • the server further comprises a receiver (not shown in the figure) for receiving a request for downloading network content related to the disc data from the disc player, in which the request is preferably includes an application ID (e.g., application ID 2 in the key locker of Fig.
  • the disc applications stored on the disc (e.g. multiple Java applications packages); a generator 311 for randomly generating a pass phase in response to the request; an encryptor 312 for encrypting a network content as requested, which is stored in a content pool 313, by use of the pass phase, and then encrypting the pass phase by use of an asset key selected from the key locker shared with the disc, for instance, the asset key ASDF 1234 in the key locker as shown in Fig. 2 (hereinafter, the asset key is called dedicated asset key, in order to distinguish it from other asset keys stored in the 5 key locker.
  • the dedicated asset key can also be selected to encrypt other randomly generated pass phases); and a transmitter for sending the encrypted content, encrypted pass phase and the asset ID associated with the dedicated asset key, for example, the asset ID 80 in Figure 2.
  • the disc player 32 comprises an application unit 321 for receiving the encrypted content, encrypted pass phase, and the associated asset ID from the server 31 and decrypting the encrypted content with the pass phase; a drive 322 for retrieving the dedicated asset key from the key locker 121 stored in the disc 33 according to the associated asset ID and decrypting the encrypted pass phase with the dedicated asset key to provide the pass phase
  • the application unit 322 further includes an access element for receiving the encrypted content, encrypted pass phase and the asset ID from the server, sending the encrypted pass phase to the drive and receiving the decrypted pass phase from the drive; and an decrypt
  • 322 further includes an access element for retrieving the dedicated asset key from the key locker stored on the disc according to the asset ID and passing the decrypted pass phase to the application unit via Secure Authentication Channel (SAC), and a decrypted element for decrypting the encrypted pass phase received from the application unit with the retrieved 5 dedicated asset key.
  • SAC Secure Authentication Channel
  • the access element of the application unit sends a request for content download to the server.
  • the server randomly generates a pass phase in response to the request.
  • the request for content download is optional for the generation procedure of the random pass phase, and the server can generate the pass phase on the time basis.
  • the server encrypts the network content as required with the pass phase, and encrypts the pass phase with the dedicated asset key.
  • the data including the asset ID, the encrypted pass phase and encrypted content, is sent to
  • the application unit in which the asset ID and the encrypted pass phase are sent to the drive.
  • the drive receives the encrypted pass phase and asset ID from the application unit and then retrieves the asset key according to the asset ID from the key locker on the disc.
  • the drive decrypts the pass phase with the retrieved asset key and send the decrypted pass phase to the application unit via SAC.
  • the application unit decrypts the
  • the application unit does not exactly directly hold and handle the asset key. Instead, the application unit uses the randomly generated pass phase
  • the possibility for the asset keys to be retrieved from the application unit is substantially zero.
  • the column of righstring is left blank. Whether to use the rightstring field depends on applications.
  • FIG. 4 The structure of a system for providing and decrypting network data according to the second embodiments of the present invention is shown in figure 4.
  • the differences between the systems of figures 3 and 4 are that the generator 311 of the application unit 421 of figure 4 further generates a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a bit sequence) complying with a test sequence (i.e., a
  • the application unit 421 further comprises a retrieve element for retrieving the pass phase for the decrypt element to decrypt the network content.
  • the access element of the application unit 421 sends a request for content download to the server 31.
  • the generator 311 of the server randomly generator a pass phase and the test sequence in response to the request.
  • the request is optional for generation of the pass phase, and the generator can generator the data on time basis.
  • the encrypt element 312 of the server encrypts the content stored in the content pool 313 with the generated pass phase and then encrypts the pass phase and the test sequence with a dedicated asset key, which is selected from the key locker information shared with the disc 33.
  • the transmitter of the server (not shown in Figure 4) sends the encrypted content, encrypted pass phase and test sequence to the disc player 32.
  • the access element of the application unit 421 of the disc player transfers the encrypted pass phase and test sequence to the drive 322.
  • the access element of the drive 322 reads all of the asset keys in entries associated with its application ID from the key locker 121 stored on the disc 33, and the read asset keys include the dedicated asset key which is selected by the server to encrypt the pass phase and test sequence.
  • the decrypt element of the drive decrypts the pass phase and the test sequence with each of the read asset keys to provide to the application unit 421 pairs of decrypted pass phase and test sequence with respect to each asset key.
  • the retrieve element of the application unit 421 retrieves a pair of decrypted pass phase and test sequence, in which the decrypted test sequence complies with the pre-defined data structure. Then, the decrypt element of the application unit decrypts the encrypted content received from the server by use of the retrieved pass phase.
  • the encrypt element of the server 31 encrypts the test sequence with the dedicated asset key.
  • the encrypt element can also encrypt the test sequence with the pass phase.
  • the decrypt element of the drive 322 only decrypts the encrypted pass phase with each of the read asset keys and provides pluralities of decrypted pass phases to the access element of the application unit 421.
  • the decrypt element of the application unit decrypts the encrypted test sequence with each of the decrypted pass phases and provides pairs of decrypted test sequence and pass phase to the retrieve element to retrieve a pair of decrypted test sequence and pass phase, which test sequence complies with the pre-defined data structure.
  • the decrypt element of the application unit decrypts the encrypted content downloaded from the server with the retrieved pass phase.
  • the network content is encrypted by the pass phase
  • the pass phase is encrypted by the dedicated asset key.
  • the network content protection key e.g., the dedicated asset key
  • the pass phase consists of not only the encrypted content protection key, but also some data that indicates which portion of the content are encrypted.
  • the device for decrypting the network data is a disc player.
  • any skilled persons can expected that other devices, like a computer with a drive for reading data stored on a storage medium.
  • the function of the drive of the disc player can also be fulfilled with a key management unit in a compact flash card (e.g. smartcard or a USB memory stick), or with a chip affixed to a record carrier (the so-called

Landscapes

  • Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Storage Device Security (AREA)

Abstract

L'invention concerne un procédé et un dispositif pour le déchiffrage de contenu chiffré reçu via un réseau. Le dispositif comprend : une unité d'application pour la réception du contenu chiffré et d'une première clé chiffrée, via le réseau, la première clé étant associée au chiffrement du contenu, et pour la réception d'une seconde clé spécialisée associée au chiffrement de la première clé ; et une unité de gestion de clé pour la récupération de la seconde clé depuis un support d'information, et pour le déchiffrage de la première clé en utilisant la seconde clé, afin de livrer la première clé permettant à l'unité d'application de déchiffrer le contenu chiffré.
PCT/IB2005/052205 2004-07-29 2005-07-04 Dispositif et procede pour l'etablissement et le dechiffrage de contenu de reseau chiffre par le biais d'un programme de cle de chiffrement de cle WO2006013477A1 (fr)

Priority Applications (3)

Application Number Priority Date Filing Date Title
JP2007523180A JP2008508763A (ja) 2004-07-29 2005-07-04 鍵暗号化鍵方式を使って暗号化されたネットワークコンテンツを提供および復号するための装置および方法
EP05758468A EP1774696A1 (fr) 2004-07-29 2005-07-04 Dispositif et procede pour l'etablissement et le dechiffrage de contenu de reseau chiffre par le biais d'un programme de cle de chiffrement de cle
CNA2005800252586A CN1989728A (zh) 2004-07-29 2005-07-04 一种用于通过网络提供加密内容并且对该内容进行解密的系统，设备和方法

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200410055770.2 2004-07-29
CNA2004100557702A CN1728262A (zh) 2004-07-29 2004-07-29 一种用于通过网络提供加密内容并且对该内容进行解密的系统，设备和方法

Publications (1)

Publication Number Publication Date
WO2006013477A1 true WO2006013477A1 (fr) 2006-02-09

Family

ID=34972552

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/IB2005/052205 WO2006013477A1 (fr) 2004-07-29 2005-07-04 Dispositif et procede pour l'etablissement et le dechiffrage de contenu de reseau chiffre par le biais d'un programme de cle de chiffrement de cle

Country Status (6)

Country Link
EP (1) EP1774696A1 (fr)
JP (1) JP2008508763A (fr)
KR (1) KR20070039157A (fr)
CN (2) CN1728262A (fr)
TW (1) TW200704092A (fr)
WO (1) WO2006013477A1 (fr)

Cited By (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150347758A1 (en) * 2012-11-28 2015-12-03 Infineon Technologies Ag Methods and systems for securely transferring embedded code and/or data designed for a device to a customer
WO2016079371A1 (fr) * 2014-11-18 2016-05-26 Nokia Technologies Oy Accès sécurisé à des données à distance

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105471832A (zh) * 2014-10-22 2016-04-06 航天恒星科技有限公司 卫星通信中ip报文的处理方法及装置
CN105337954A (zh) * 2014-10-22 2016-02-17 航天恒星科技有限公司 卫星通信中ip报文的加密、解密方法及装置
US9516359B2 (en) * 2015-04-07 2016-12-06 Divx, Llc Session based watermarking of media content using encrypted content streams
CN109040107A (zh) * 2018-08-29 2018-12-18 百度在线网络技术（北京）有限公司 数据处理方法、服务器、无人驾驶设备及可读存储介质
DE102019212959B3 (de) * 2019-08-28 2021-03-04 Volkswagen Aktiengesellschaft Verfahren zur geschützten Kommunikation eines Fahrzeugs mit einem externen Server, Vorrichtung zur Durchführung der Schlüsselableitung bei dem Verfahren sowie Fahrzeug

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1253738A1 (fr) * 2000-12-26 2002-10-30 Sony Corporation Systeme et procede de traitement d'informations
EP1288942A1 (fr) * 2001-08-08 2003-03-05 Matsushita Electric Industrial Co., Ltd. Système de protection du droit d'auteur, dispositif d'enregistrement, et dispositif de reproduction
EP1501304A1 (fr) * 2003-07-23 2005-01-26 Axalto S.A. Procédure pour le surveillance de l'utilisation d'un contenu diffusé

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP1253738A1 (fr) * 2000-12-26 2002-10-30 Sony Corporation Systeme et procede de traitement d'informations
EP1288942A1 (fr) * 2001-08-08 2003-03-05 Matsushita Electric Industrial Co., Ltd. Système de protection du droit d'auteur, dispositif d'enregistrement, et dispositif de reproduction
EP1501304A1 (fr) * 2003-07-23 2005-01-26 Axalto S.A. Procédure pour le surveillance de l'utilisation d'un contenu diffusé

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
WALDVOGEL M ET AL: "THE VERSAKEY FRAMEWORK: VERSATILE GROUP KEY MANAGEMENT", IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, IEEE INC. NEW YORK, US, vol. 17, no. 9, September 1999 (1999-09-01), pages 1614 - 1631, XP002941560, ISSN: 0733-8716 *

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20150347758A1 (en) * 2012-11-28 2015-12-03 Infineon Technologies Ag Methods and systems for securely transferring embedded code and/or data designed for a device to a customer
WO2016079371A1 (fr) * 2014-11-18 2016-05-26 Nokia Technologies Oy Accès sécurisé à des données à distance
US10601588B2 (en) 2014-11-18 2020-03-24 Nokia Technologies Oy Secure access to remote data

Also Published As

Publication number Publication date
TW200704092A (en) 2007-01-16
JP2008508763A (ja) 2008-03-21
EP1774696A1 (fr) 2007-04-18
CN1989728A (zh) 2007-06-27
KR20070039157A (ko) 2007-04-11
CN1728262A (zh) 2006-02-01

Similar Documents

Publication Publication Date Title
EP2165284B1 (fr) Procédé et appareil pour sécuriser des données dans un périphérique de mémoire
US8205083B2 (en) System and method for providing program information, and recording medium used therefor
CA2715439C (fr) Utilisation de structure de stockage multimedia a multiples elements de contenu dans un systeme de distribution de contenu
EP1244247B1 (fr) Dispositif de déchiffrage d'une clé
US20070160209A1 (en) Content management method, content management program, and electronic device
US20060149683A1 (en) User terminal for receiving license
US20080285747A1 (en) Encryption-based security protection method for processor and apparatus thereof
US8694799B2 (en) System and method for protection of content stored in a storage device
AU2002213436A1 (en) Method and apparatus for automatic database encryption
EP1374063A2 (fr) Procede et dispositif de cryptage automatique en base de donnees
EP2065828B1 (fr) Structures de stockage de média pour le stockage de contenu, dispositifs pour utiliser de telles structures, systèmes pour distribuer de telles structures
JP4167476B2 (ja) データ保護・保管方法／サーバ
CN103635911A (zh) 用于保护内容的存储器件和主机设备及其方法
EP2073142A2 (fr) Procédés d'authentification d'un dispositif matériel et de fourniture d'un canal sécurisé pour la fourniture de données
EP1774696A1 (fr) Dispositif et procede pour l'etablissement et le dechiffrage de contenu de reseau chiffre par le biais d'un programme de cle de chiffrement de cle
AU2005248693A1 (en) Apparatus and method for operating plural applications between portable storage device and digital device
US20040117639A1 (en) Secure driver
US20030046564A1 (en) Storage medium and method for storing data decrypting algorithm
EP2466583A1 (fr) Appareil de traitement d'informations, procédé et programme de traitement d'informations
JP4969093B2 (ja) チケット保護方法およびクライアント
KR100695665B1 (ko) 엔티티 잠금 보안 레지스트리를 사용하여 자료에 액세스하는 장치 및 방법
JP6919484B2 (ja) 暗号通信方法、暗号通信システム、鍵発行装置、プログラム
KR20200082187A (ko) 보안 기능이 없는 usb 메모리를 위한 보안 usb 동글
JP7412445B2 (ja) コンテンツ複製装置、アクセス制御装置およびアクセス制御プログラム
US8689014B2 (en) Data encryption device and control method thereof

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A1

Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KM KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NG NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SM SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW

AL Designated countries for regional patents

Kind code of ref document: A1

Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LT LU LV MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
WWE Wipo information: entry into national phase

Ref document number: 2005758468

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 200580025258.6

Country of ref document: CN

Ref document number: 2007523180

Country of ref document: JP

WWE Wipo information: entry into national phase

Ref document number: 409/CHENP/2007

Country of ref document: IN

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 1020077004468

Country of ref document: KR

WWP Wipo information: published in national office

Ref document number: 1020077004468

Country of ref document: KR

WWP Wipo information: published in national office

Ref document number: 2005758468

Country of ref document: EP