Broadcast apparatus and method of authenticating broadcast data

• US 10,412,589 B2
• Filed: 01/22/2016
• Issued: 09/10/2019
• Est. Priority Date: 02/03/2015
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Waller, Arthur Simon, Outters, Jan, Adam, John
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): Bell, Kalish K
• Application Number:
  US15/004,054
• Publication Number:
  US 20160227406A1
• Time in Patent Office: 1,327 Days
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04N 21/2362 Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/23892 involving embedding information at multiplex stream level, e.g. embedding a watermark at packet level
• CPC Class Codes: H04N 21/4345 Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/44236 Monitoring of piracy processes or activities protecting computer platforms against harmful, malicious or unexpected behaviour or activities using intrusion detection and counter measures G06F21/566; computer virus detection and handling G06F21/56
• CPC Class Codes: H04N 21/4433 Implementing client middleware, e.g. Multimedia Home Platform [MHP]
• CPC Class Codes: H04N 21/4622 Retrieving content or additional data from different sources, e.g. from a broadcast channel and the Internet web site content organization and management for information retrieval from the Internet G06F16/958; transmission by internet of broadcast information H04H60/82; stock exchange data over packet-switching network H04L12/1804; push services including data channel over packet-switching network H04L12/1859
• CPC Class Codes: H04N 21/8173 End-user applications, e.g. Web browser, game
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services

Abstract

A broadcast receiver includes a communicator configured to receive broadcast data including metadata associated with an application and a controller configured to obtain a comparison result by comparing a reference hash with a metadata hash generated based on the metadata, authenticate the metadata based on the comparison result, and launch the application based on a result of the authentication.

Claims

1. A broadcast receiver comprising:

a communicator; and

at least one processor configured to;

control the communicator to receive, from a broadcast transmitter, broadcast data comprising metadata associated with an application, the received metadata comprising authorized server identification information for identifying at least one authorized server authorized to communicate information regarding the application,

generate a metadata hash by applying a hash algorithm to the received metadata,

control the communicator to transmit, to a server, an authentication request comprising the generated metadata hash and not including the metadata,

control the communicator to receive, from the server, a comparison result of comparing a reference hash, the reference hash being stored at the server, with the generated metadata hash,

authenticate the received metadata based on the comparison result, and

launch the application based on a result of the authentication,

wherein the reference hash is generated by the broadcast transmitter by applying the hash algorithm to the metadata associated with the application, the reference hash generated by the broadcast transmitter is transmitted to the server, and the reference hash transmitted to the server is stored at the server.

2. The broadcast receiver of claim 1, further comprising:

a display,

wherein the at least one processor is further configured to control the display to display information corresponding to the launched application.

3. The broadcast receiver of claim 1, wherein the at least one processor is further configured to compare the generated metadata hash with the reference hash.

4. The broadcast receiver of claim 3, further comprising:

a storage configured to store a plurality of reference hashes for a same application,

wherein the at least one processor is further configured to select a reference hash from among the stored plurality of reference hashes and compare the selected reference hash with the metadata hash.

5. The broadcast receiver of claim 3, further comprising:

a storage configured to store a plurality of reference hashes for a same application and authentication information indicating valid periods for the plurality of reference hashes, wherein

the at least one processor is further configured to select a reference hash from among the stored plurality of reference hashes having a valid period at a time when the metadata is received, based on the authentication information.

6. The broadcast receiver of claim 3,

wherein the at least one processor is further configured to:

control the communicator to transmit a request for the reference hash to the server and receive the reference hash from the server, the request for the reference hash comprising service identification information for identifying a service corresponding to the application, and

obtain the comparison result by comparing the received reference hash to the metadata hash.

7. The broadcast receiver of claim 6, wherein

the at least one processor is further configured to:

control the communicator to receive a plurality of reference hashes from the server in response to the request, and

authenticate the metadata by comparing the received plurality of reference hashes with the metadata hash to determine whether a reference hash of the received plurality of reference hashes matches the metadata hash.

8. The broadcast receiver of claim 1, wherein the authentication request comprises the metadata and service identification information for identifying a service corresponding to the application.

9. The broadcast receiver of claim 6, wherein the service identification information comprises at least one of an original network identifier (ON-ID), a transport stream identifier (TS-ID), a service identifier (S-ID), a country identifier (ID) for identifying a country at which the broadcast receiver is located, and a broadcast medium ID for identifying a broadcast medium through which the broadcast data received by the broadcast receiver passes.

10. The broadcast receiver of claim 1, further comprising:

a display,

wherein the at least one processor is further configured to, in response to the authentication of the metadata failing, control the display to display a warning message indicating that the metadata is not authenticated.

11. The broadcast receiver of claim 1, further comprising:

a user input device configured to receive a user input for forcibly executing the application when the authentication of the metadata fails,

wherein the at least one processor is further configured to forcibly execute the application, based on the user input.

12. A server for authenticating metadata associated with an application, the metadata comprising authorized server identification information for identifying at least one authorized server authorized for a broadcast receiver to communicate information regarding the application, the server comprising:

a storage configured to store a reference hash, wherein the reference hash is generated by a broadcast transmitter by applying a hash algorithm to the metadata and transmitted to the server;

a communicator configured to receive an authentication request from the broadcast receiver; and

at least one processor configured to obtain a metadata hash of the metadata based on the authentication request by applying the hash algorithm to the metadata, search for a reference hash corresponding to the authentication request in the storage, compare the obtained metadata hash with the reference hash, and control the communicator to transmit a result of the comparison to the broadcast receiver to enable the broadcast receiver to authenticate the metadata based on the result of the comparison.

13. The server of claim 12, wherein the authentication request comprises service identification information for identifying a service corresponding to the metadata, and

the at least one processor is further configured to search for the reference hash corresponding to the identified service in the storage.

14. The server of claim 12, wherein the authentication request comprises the metadata hash, and

the at least one processor is further configured to extract the metadata hash from the authentication request.

15. The server of claim 13, wherein the at least one processor is further configured to search for a plurality of reference hashes in the storage, compare the metadata hash with the plurality of reference hashes to determine whether the metadata hash matches a reference hash of the plurality of reference hashes, and control the communicator to transmit a result of the comparison to the broadcast receiver.

16. A broadcast transmitter comprising:

at least one processor configured to obtain metadata associated with an application, the metadata comprising authorized server identification information for identifying at least one authorized server authorized for a broadcast receiver to communicate information regarding the application, generate a reference hash of the metadata by applying a hash algorithm to the metadata, and insert the metadata into broadcast data; and

a communicator configured to transmit the broadcast data including the metadata to the broadcast receiver,

wherein the at least one processor is further configured to control the communicator to transmit the reference hash to an external device so that the reference hash is used to authenticate the metadata.

17. A metadata authentication method comprising:

receiving, from a broadcast transmitter, broadcast data including metadata associated with an application, the received metadata comprising authorized server identification information for identifying at least one authorized server authorized to communicate information regarding the application;

generating a metadata hash by applying a hash algorithm to the received metadata,

transmitting, to a server, an authentication request comprising the generated metadata hash and not including the metadata;

receiving a comparison result of comparing a reference hash, the reference hash being stored at the server, with the generated metadata hash, wherein the reference hash is generated by the broadcast transmitter by applying the hash algorithm to the metadata associated with the application, the reference hash generated by the broadcast transmitter is transmitted to the server, and the reference hash transmitted to the server is stored at the server; and

in response to the comparison result indicating that the reference hash matches the metadata hash, authenticating the metadata and automatically launching the application.