Information-processing device

• US 20050118987A1
• Filed: 11/10/2004
• Published: 06/02/2005
• Est. Priority Date: 11/11/2003
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Saito, Takeshi, Isozaki, Hiroshi, Matsushita, Tatsuyuki, Kamibayashi, Tooru
• Granted Patent: US 7,565,698 B2
• Time in Patent Office: Days
• US Class Current: 455/412.100
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

An information-processing device includes a first interface configured to transmit content to a first communication unit through a network, a second interface configured to receive a first unique identification allocated to the first communication unit from a second communication unit and transmit a second unique identification allocated to the information-processing device to the second communication unit, an identification list configured to store at least one unique identification through the second interface and an identification judgment unit configured to determine whether the first unique identification received through the first interface is stored in the identification list, wherein when the identification judgment unit determines that the unique identification of the first communication unit is stored in the identification list, the first interface allows the content to be transmitted to the first communication unit.

Claims

1. An information-processing device comprising:

a first interface configured to transmit content to a first communication unit through a network;

a second interface configured to receive a first unique identification allocated to the first communication unit from a second communication unit and transmit a second unique identification allocated to the information-processing device to the second communication unit;

an identification list configured to store at least one unique identification through the second interface; and

an identification judgment unit configured to determine whether the first unique identification received through the first interface is stored in the identification list;

wherein when the identification judgment unit determines that the unique identification of the first communication unit is stored in the identification list, the first interface allows the content to be transmitted to the first communication unit.

2. The information-processing device according to claims 1, wherein

the first interface transmits the content in accordance with an Internet Protocol, and

the second interface receives and transmits the first unique identification only when a round trip time between the second interface and the second communication unit is less than a given threshold value.

3. The information-processing device according to claim 1, further comprising an encryption-decryption processor configured to encrypt the second unique identification using a key obtained through an AKE processing, and transmit the encrypted second unique identification to the first communication unit through the first interface when the identification judgment unit determines that the first unique identification of the first communication unit is not stored in the identification list.

4. The information-processing device according to claim 3, wherein after the AKE processing has been completed, the identification judgment unit determines whether the first unique identification is stored in the identification list.

5. The information-processing device according to claim 1, wherein

the identification list stores the first unique identification for communication between the first and the second communication units, and an interface identification for distinguishing the first communication unit from all of the other communication units;

and

the identification judgment unit determines whether the fourth unique identification of the first communication unit received through the first interface is stored in the identification list.

6. The information-processing device according to claim 5, wherein when the identification judgment unit determines that the fourth unique identification is stored in the identification list, the identification judgment unit executes the AKE processing.

7. The information-processing device according to claim 5, further comprising:

a key generator configured to generate a key for encrypting the content using the third unique identification.

8. An information-processing device communicating with a first and a second communication units, comprising:

an identification list configured to store a first unique identification allocated to the first communication unit;

an interface configured to transmit the first unique identification to the second communication unit in response to an identification request when a round trip time between the second interface and the second communication unit is less than a given threshold value; and

an identification list management unit configured to receive a second unique identification stored in the second communication unit and store the second unique identification in the identification list.

9. An information-processing device communicating with a first and a second communication units through a network, comprising:

an identification list configured to store at least one unique identification;

an interface configured to transmit a first unique identification, allocated to the information-processing device, to the first communication unit and receive a second unique identification allocated to the first communication unit;

an identification judgment unit configured to determine whether the second unique identification is stored in the identification list;

a first AKE processor configured to execute an AKE processing with the first communication unit when the second unique identification is stored in the identification list;

an encryption-decryption processor configured to receive an encrypted third unique identification, allocated to the second communication unit, from the first communication unit after the successful AKE processing; and

a second AKE processor configured to execute an AKE processing with the second communication unit using the third unique identification for content cryptography.

11. The information-processing device according to claim 9, wherein:

the first interface transmits an identification check request, the first unique identification and address information of the second communication unit for the first communication unit to determine whether at least one of the second unique identification and a fourth unique identification allocated to the second communication unit is shared between the first communication unit and the second communication unit, and

the first AKE processor executes the AKE processing with the first communication unit when at least one of the second unique identification and the fourth unique identification is shared between the first communication unit and the second communication unit.

12. The information-processing device according to claim 9, further comprising:

a unique identification table configured to store data indicating relationship between the first and the second communication units sharing a unique identification; and

an identification search unit configured to search the first communication unit intervening between the information-processing device and the second communication unit based on the unique identification table.

10. An information-processing device communicating with a first and a second communication units through a network, comprising:

an identification list configured to store at least one unique identification;

an interface configured to transmit a first unique identification, allocated to the information-processing device, to the first communication unit and receive a second unique identification allocated to the first communication unit;

an identification check unit configured to determine whether the second unique identification is stored in the identification list;

a first AKE processor configured to execute an AKE processing with the first communication unit when the second unique identification is stored in the identification list;

an encryption-decryption processor configured to receive an encrypted third unique identification, allocated to the first communication unit as a key, from the first communication unit after the successful AKE processing when the third unique identification is not stored in the identification list, the third unique identification is shared with the second communication unit; and

a second AKE processor configured to execute an AKE processing with the second communication unit using the third unique identification for communicating encrypted content with the second communication unit.

13. An information-processing device communicating with a first and a second communication units, comprising:

an identification list configured to store at least one unique identification;

an interface configured to receive a first unique identification allocated to the first communication unit and address information of the second communication unit from the first communication unit in response to an identification check request;

an identification check unit configured to determine whether the first unique identification is stored in the identification list, receive a second unique identification allocated to the second communication unit when the first unique identification is stored in the identification list, and determine whether the second unique identification is stored in the identification list; and

an encryption-decryption processor configured to transmit an encrypted third unique identification, allocated to the first communication unit as a key, to the second communication unit and transmit an encrypted fourth unique identification, allocated to the second communication unit as a key, to the first communication unit, when the second unique identification is stored in the identification list.

15. The information-processing device according to claim 13, wherein when the second unique identification is not stored in the identification list, the interface forwards the first unique identification, the address information and the identification check request to a third communication unit available to intervene between the information-processing device and the second communication unit.

14. An information-processing device communicating with a first and a second communication units, comprising:

an identification list configured to store at least one unique identification;

an interface configured to receive a first unique identification allocated to the first communication unit and address information of the second communication unit from the first communication unit in response to an identification check request;

an identification judgment unit configured to determine whether the first unique identification is stored in the identification list, receive a second unique identification allocated to the second communication unit when the first unique identification is stored in the identification list, and determine whether the second unique identification is stored in the identification list; and

an encryption-decryption processor configured to transmit an encrypted third unique identification, allocated to the information-processing device as a key, to the first and the second communication units when the second unique identification is stored in the identification list.

16. An information-processing device, comprising:

a first interface configured to transmit content to a first communication unit through a network;

an identification list configured to store both of at least one unique public identification and at least one first corresponding secret identification;

a first AKE processor configured to execute an AKE processing with the first communication unit;

a second interface configured to receive an encrypted second secret identification allocated to the first communication unit after the successful AKE processing when the second secret identification is not stored in the identification list; and

a second AKE processor configured to execute an AKE processing with the first communication unit using the second secret identification.

17. An information-processing device communicating with a first and a second communication units, comprising:

an identification list configured to store both of at least one unique public identification and at least one corresponding secret identification;

an interface configured to receive a first unique public identification allocated to the first communication unit and address information of the second communication unit from the first communication unit in response to an identification check request;

an identification judgment unit configured to determine whether the first unique public identification is stored in the identification list, receive a second unique public identification allocated to the second communication unit when the first public unique identification is stored in the identification list, and determine whether the second unique public identification is stored in the identification list; and

an encryption-decryption processor configured to transmit the secret identification to the second communication unit when the second unique public identification is stored in the identification list.