Secure authenticated distance measurement

• US 20050273608A1
• Filed: 06/27/2003
• Published: 12/08/2005
• Est. Priority Date: 07/26/2002
• Status: Active Grant

• Current Assignee: Media Content Protection LLC
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Kamperman, Franciscus Lucas Antonius Johannes
• Granted Patent: US 8,886,939 B2
• Time in Patent Office: Days
• US Class Current: 713/169
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements

Abstract

The invention relates to a method for a first communication device to performing authenticated distance measurement between said first communication device and a second communication device, wherein the first and the second communication device share a common secret and said common secret is used for performing the distance measurement between said first and said second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device.

Claims

1. A method for a first communication device to performing authenticated distance measurement between said first communication device and a second communication device, wherein the first and the second communication device share a common secret and said common secret is used for performing the distance measurement between said first and said second communication device.

2. A method according to claim 1, wherein the authenticated distance measurement is performed according to the following steps,

transmitting a first signal from the first communication device to the second communication device at a first time t1, said second communication device being adapted for receiving said first signal, generating a second signal by modifying the received first signal according to the common secret and transmitting the second signal to the first device,

receiving the second signal at a second time t2,

checking if the second signal has been modified according to the common secret,

determining the distance between the first and the second communication device according to a time difference between t1 and t2.

3. A method according to claim 2, wherein the first signal is a spread spectrum signal.

4. A method according to any of the claims 2, wherein the step of checking if the second signal has been modified according to the common secret is performed by the steps of,

generating a third signal by modifying the first signal according to the common secret,

comparing the third signal with the received second signal.

5. A method according to any of the claims 2, wherein the first signal and the common secret are bit words and where the second signal comprises information being generated by performing an XOR between the bit words.

6. A method according to any of the claims 1, wherein the common secret has been shared before performing the distance measurement, the sharing being performed by the steps of,

performing an authentication check from the first communication device on the second communication device, by checking whether said second communication device is compliant with a set of predefined compliance rules,

if the second communication device is compliant, sharing said common secret by transmitting said secret to the second communication device.

7. A method according to claim 6, wherein the authentication check further comprises checking if the identification of the second device is compliant with an expected identification.

8. A method of determining whether data stored on a first communication device are to be accessed by a second communication device, the method comprising the step of performing a distance measurement between the first and the second communication device and checking whether said measured distance is within a predefined distance interval, wherein the distance measurement is an authenticated distance measurement according to claim 1.

9. A method according to claim 8, wherein the data stored on the first device are sent to the second device if it is determined that the data stored on the first device are to be accessed by the second device.

10. A method of determining whether data stored on a first communication device is to be accessed by a second communication device, the method comprising the step of performing a distance measurement between a third communication device and the second communication device and checking whether said measured distance is within a predefined distance interval, wherein the distance measurement is an authenticated distance measurement according to claim 1.

11. A communication device for performing authenticated distance measurement to a second communication device, where the communication device shares a common secret with the second communication device and where the communication device comprises means for measuring the distance to the second device using said common secret.

12. A communication device according to claim 11, wherein the device comprises,

means for transmitting a first signal to a second communication device at a first time t1, said second communication device being adapted for receiving said first signal, generating a second signal by modifying the received first signal according to the common secret and transmitting the second signal,

means for receiving the second signal at a second time t2,

means for checking if the second signal has been modified according to the common secret,

means for determining the distance between the first and the second communication device according to a time difference between t1 and t2.

13. An apparatus for playing back multimedia content comprising a communication device according to claim 11.