Information communication device, information communication system, and computer program product for transmission control

• US 20050027984A1
• Filed: 06/28/2004
• Published: 02/03/2005
• Est. Priority Date: 07/09/2003
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kato, Taku, Saito, Takeshi, Isozaki, Hiroshi, Matsushita, Tatsuyuki, Kamibayashi, Tooru
• Granted Patent: US 7,529,935 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4108 characterised by an identification number or address, e.g. local network address protecting specific internal or external computer components using identification number G06F21/73; network arrangements, protocols or services for addressing or naming H04L61/00
• CPC Class Codes: H04N 21/4135 external recorder interface circuits between an apparatus for recording television signals and a television receiver H04N5/775
• CPC Class Codes: H04N 21/43632 involving a wired protocol, e.g. IEEE 1394 high-speed IEEE 1394 serial bus H04L12/40052
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/64322 IP
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/17318 : Direct or substantially direct transmission and handling of requests

Abstract

An aspect of the present invention provides an information communication device for transmitting electronic data encrypted for the purpose of copyright protection, the device includes that an identification information managing unit configured to hold device identification information in connection with other information communication devices acquired through a network, an ID registration processing unit configured to register the device identification information of another connection device when the other communication device satisfies a predetermined distance condition or when common identification information that is held by both information communication devices is received from a portable device, and an authentication and key exchange processing unit configured to, for the purpose of copyright protection, complete authentication and key exchange process (AKE process) only when another information communication device whose device identification information is registered in the identification information managing unit.

Claims

1. An information communication device for transmitting electronic data encrypted for the purpose of copyright protection, the device comprising:

an identification information managing unit configured to hold device identification information in connection with other information communication devices acquired through a network;

an ID registration processing unit configured to register the device identification information of another communication device when the other communication device satisfies a predetermined distance condition or when common identification information that is held by both information communication devices is received form a portable device; and

an authentication and key exchange processing unit configured to, for the purpose of copyright protection, complete authentication and key exchange process (AKE process) only when another information communication device whose device identification information is registered in the identification information managing unit.

2. The information communication device as claimed in claim 1, further comprising a measuring unit configured to measure if another information communication device satisfies a predetermined distance condition,

wherein the ID registration processing unit is configured to register the device identification information of another information communication device when the measurement result of the measuring unit indicates that the other information communication device satisfies the predetermined distance condition.

3. The information communication device as claimed in claim 2,

wherein the measuring unit is configured to determine if the time duration from when a request for sending information is sent to another information communication device until when the information is received from the other information communication device is within a predetermined amount of time;

and

the ID registration processing unit is configured to register the device identification information of another information communication device when the measuring unit determines that said time duration is within the predetermined amount of time.

4. The information communication device as clad in claim 1,

wherein the ID registration processing unit is configured to issue a registration request to another information communication device and register the device identification information of the other information communication device to the identification information managing unit when the other information is recognized to be connected to a network having a prescribed limited range.

5. The information communication device as claimed in claim 4, further comprising an interface unit connected to a local network,

wherein the ID registration processing unit is configured to register the device identification information of the other information communication device to the identification information managing unit when the other information communication device is connected directly to the local network.

6. The information communication device as claimed in claim 4, wherein the ID registration processing unit is configured such that, when the number of device identification information entries registered in the identification information managing unit reaches a predetermined upper limit, further registration of device identification information is denied or a new device identification information entry is registered after deleting the device identification information that was registered the longest ago and/or the device identification information of the registered information communication device with which communication has not been conducted for the longest period of time.

7. The information communication device as claimed in claim 4, further comprising an authentication and key exchange request receiving unit configured to receive authentication and key exchange requests from other information communication devices, wherein the ID registration processing unit is configured to register the device identification information of another information communication device to the identification information managing unit after the authentication and key exchange request receiving unit has received a request for authentication and key exchange.

8. The information communication device as claimed in claim 4, wherein when the device identification information of another information communication device is registered to the identification information managing unit, the communication, for AKE process and/or RTT measuring process, with the other information communication device is accomplished using data link layer frames or physical layer frames.

9. The information communication device as claimed in claim 8, the authentication and key exchange executed by the authentication and key exchange processing unit is accomplished using IP (internet protocol) packets.

10. An information communication system for transmitting electronic data encrypted for the purpose of copyright protection, the system comprising:

a sending device; and

a receiving device configured to receive electronic data encrypted for the purpose of copyright protection and sent from the sending device,

wherein at least one of the sending device and the receiving device comprises;

an identification information managing unit configured to hold device identification information regarding another device acquired through a network;

an ID registration processing unit configured to register the device identification information of another device when the other device is recognized to be connected to a network having a prescribed limited range; and

an authentication and key exchange processing unit configured to complete AE process only when another information communication device whose device identification information is registered in the identification information managing unit.

11. A computer program product comprising a computer useable medium having computer program logic recorded thereon for enabling a processor to control transmission of electronic data encrypted for the purpose of copyright protection, the computer program product comprising:

a sending procedure that enables the processor to send a request packet to another device with which communication is to be conducted;

a receiving procedure that enables the processor to receive a response packet from another device;

a determining procedure that enables the processor to determine if another information communication device is connected to a network having a prescribed limited range based on the received device ID response packet;

a registration procedure that enables the processor to register the device identification information of another information communication device when it is determined that the other information communication device is connected to a network having a prescribed limited range; and

an authentication and key exchange procedure that enables the processor to, for the purpose of copyright protection, complete AKE process only when another information communication device whose device identification information is registered in the registration procedure.

12. An information communication device for transmitting electronic data encrypted for the purpose of copyright protection to another information communication device through a network, the device comprising:

a first interface unit that is connected to the network;

a second interface unit configured to receive unique identification information sent from an identification information sending device that is capable of communicating with the information communication device;

an identification information managing unit configured to hold said unique identification information after it is received;

an identification information registration processing unit configured to register said unique identification information to the identification information managing unit and determine if the unique identification information is registered in another device; and

a first authentication and key exchange processing unit configured to complete authentication of and key exchange with another information communication device for the purpose of copyright protection when it is determined that the unique identification information is registered in the other information communication device.

13. The information communication device as claimed in claim 12, wherein the second interface unit receives electronic data transmitted through the second interface unit include encrypted data.

14. The information communication device as claimed in claim 12, further comprising:

a registration start directive issuing unit configured to issue a directive for starting registration of the unique identification information,

the identification information registration processing unit being configured to execute registration processing when the directive has been issued from registration start directive issuing unit.

15. The information communication device as claimed in claim 12, further comprising a power supply control unit configured to deliver power supply voltage to the second interface unit when the identification information registration processing unit is executing registration processing.

16. The information communication device as claimed in claim 12, further comprising:

a second authentication and key exchange processing unit configured to execute authentication and key exchange with respect to the identification information sending device through the second interface unit,

the identification information registration processing unit configured to execute registration processing with respect to the identification information sending device when the second authentication and key exchange processing unit has successfully completed its authentication and key exchange with respect to the identification information sending device.

17. The information communication device as claimed in claim 16, further comprising:

a measuring unit configured to measure the round trip time between sending a specific packet to the identification information sending device and receiving a corresponding response packet from the identification information sending device,

the second authentication and key exchange processing unit being configured to complete authentication and exchange processing when the round trip time measured by the measuring device is less than a prescribed amount of time.

18. The information communication device as claimed in claim 17, wherein the identification information registration processing unit starts registration processing after the measuring unit has completed measuring the round trip time.

19. The information communication device as claimed in claim 12, further comprising a registration notifying unit configured to notify a user that the identification information registration processing unit has registered the unique identification information.

20. The information communication device as claimed in claim 12, wherein the identification information registration processing unit further comprises an encryption communication processing unit configured to encrypt the unique identification information received form the second interface unit to register the encrypted unique identification information;

and

wherein the identification information managing unit further comprises a decryption communication processing unit configured to decrypt the encrypted unique identification information sent from the encryption communication processing unit.

22. The information communication device as claimed in claim 12, wherein the identification information registration processing unit limits the number of different unique identification information entries that can be registered to a predetermined number.

21. The information communication device as claimed in clam 12, wherein the unique identification information is unique to each identification information sending device.

23. An information communication device for sending identification information to first and second information communication devices configured to transmit electronic data encrypted for copyright protection over a network, the information communication device comprising:

an identification information holding unit configured to hold unique identification information that is required in order for the first and second information communication devices to transmit the electronic data which are required for copyright protection to complete authentication and key exchange process (AKE process); and

a communication unit configured to send the unique identification information to the first and second communication devices.

24. The information communication device as claimed in claim 23, wherein the identification information holding unit limits the number of identification information entries that can be held to a prescribed number.

25. The information communication device as claimed in claim 23, wherein the communication unit is configured to perform wireless communication between the first and second communication devices using infrared rays.

26. The information communication device as claimed in claim 25, further comprising:

a one-way infrared communication unit configured to perform one-way infrared communication,

wherein the aforementioned communication unit is a two-way infrared communication unit.

27. The information communication device as claimed in claim 23, wherein the communication unit is configured to perform wireless communication between the first and second communication devices using electric power generated from received radio waves.

28. The information communication device as claimed in claim 25, wherein the communication device is configured to perform communication between the using a detachable memory device.

29. A data transmission system, comprising:

a sending device connected to a network;

a receiving device configured to receive electronic data sent from the sending device through the network, the electronic data having been encrypted for the purpose of copyright protection;

wherein at least one of the sending device and the receiving device comprises;

a communication unit configured to communicate with an identification information sending device through an interface that is separate from the network and receive unique identification information sent from the identification information sending device;

an identification information registering unit configured to register the received unique identification information;

an identification information registration determining unit configured to determine if the unique identification information is registered in another communication device; and

an authentication and key exchange processing unit configured to complete authentication of and key exchange with another communication device for the purpose of copyright protection only when it is determined that the unique identification information is registered in the other communication device.

30. A computer program product comprising a computer useable medium having a computer program logic recorded thereon for enabling a processor to control the transmission of electronic data between a sending device connected to a network and a receiving device configured to receive electronic data encrypted for the purpose of copyright protection and sent from the sending device through the network, the computer program product comprising:

a receiving procedure that enables the processor to communicate with an identification information sending device through an interface that is separate from the network and receive unique identification information sent from the identification information sending device;

a registration procedure that enables the processor to register the received unique identification information;

a determining procedure that enables the processor to determine if the unique identification information is registered in another communication device; and

an authentication and key exchange procedure that enables the processor to complete authentication of and key exchange with another communication device for the purpose of copyright protection only when it is determined that the unique identification information is registered in the other communication device.