Information processing, apparatus and method, recording medium, and program

• US 20060154631A1
• Filed: 01/20/2006
• Published: 07/13/2006
• Est. Priority Date: 07/28/2003
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Nakano, Takehiko, Shima, Hisato
• Granted Patent: US 7,962,747 B2
• Time in Patent Office: Days
• US Class Current: 455/181.100
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An information processing apparatus allowing proper communication with a communication partner in accordance with a communication time of the communication partner. A reception control unit receives a random challenge (RC) from a transmission terminal and supplies it to a generation unit. The reception control unit transmits an RC reception message indicating an RC reception to a transmission side. The generation unit executes a Hash process relative to RC and supplies resultant authentication data to a generation unit. A transmission control unit controls the generation unit at a timing before a response request command from the transmission side is received, to make the generation unit generate a response message containing authentication data corresponding to the response request command, and when the response request command is received, transmits the response message to a transmission destination terminal. The apparatus is applicable to a content providing system.

Claims

1. A data transmitting apparatus comprising:

a command transmission unit configured to transmit a response request command to a data receiving apparatus;

a control unit configured to receive a response message to the response request command from the data receiving apparatus,the response message including authentication data based on shared data shared with said data receiving apparatus;

an authentication unit configured to produce an authentication result for said data receiving apparatus based on said authentication data;

a measurement unit configured to measure a response time of the response message; and

a judgment unit configured to judge if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

2. The apparatus recited in claims 1, wherein the measurement unit is further configured to measure the response time between transmitting the response request command and receiving the response message.

3. The apparatus recited in claim 1, wherein said command transmission unit is further configured to transmit plural response request commands to the data receiving apparatus.

4. The apparatus recited in claim 3, wherein the command transmission unit is further configured to transmit each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

5. The apparatus recited in claim 1, wherein said command transmission unit is further configured to transmit the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

6. The apparatus recited in claim 1, wherein the control unit is further configured to receive the response message that includes authentication data based on the shared data that includes a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

7. The apparatus recited in claim 1, wherein said command transmission unit is further configured to transmit the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

8. The apparatus recited in claim 1 further comprising:

an expected value generation unit configured to generate an expected value based on the shared data, wherein said authentication unit is further configured to produce the authentication result based on the expected value.

9. A method for authorizing the use of data, said method comprising:

transmitting a response request command to a data receiving apparatus;

receiving a response message to the response request command from the data receiving apparatus, the response message including authentication data based on shared data shared with said data receiving apparatus;

producing an authentication result for said data receiving apparatus based on said authentication data;

measuring a response time of the response message; and

judging if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

10. The method recited in claim 9, wherein said measuring the response time further comprises measuring the response time between transmitting the response request command and receiving the response message.

11. The method recited in claim 9, wherein said transmitting further comprises transmitting plural response request commands to the data receiving apparatus.

12. The method for transmitting data recited in claim 11, said transmitting further comprises transmitting each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

13. The method recited in claim 9, wherein said transmitting further comprises transmitting the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

14. The method recited in claim 9, wherein the receiving further comprises receiving the response message including authentication data based on shared data, the shared data including a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

15. The method recited in claim 9, wherein said transmitting further comprises transmitting the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

16. The method recited in claim 9 further comprising:

generating an expected authentication value based on the shared data, wherein said producing the authentication result is also based on the expected authentication value.

17. A computer program product having computer program instructions which when executed by a computer cause the computer to control a transmitting apparatus to perform the following steps:

transmitting a response request command to a data receiving apparatus;

receiving a response message to the response request command from the data receiving apparatus, the response message including authentication data based on shared data shared with said data receiving apparatus;

producing an authentication result for said data receiving apparatus based said authentication data;

measuring a response time of the response message; and

judging if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

18. The computer program product recited in claim 17, wherein said measuring the response time further comprises measuring the response time between transmitting the response request command and receiving the response message.

19. The computer program product recited in claim 17, wherein said transmitting further comprises transmitting plural response request commands to the data receiving apparatus.

20. The computer program product recited in claim 19, wherein said transmitting further comprises transmitting a response request command including a number of retry times corresponding to a particular response request command in the plural transmitted response request commands.

21. The computer program product recited in claim 17, wherein said transmitting further comprises transmitting the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

22. The computer program product recited in claim 17, wherein the receiving further comprises receiving the response message including authentication data based on shared data, the shared data including a key based on previously transmitted information, the key being used to in executing a predetermined process to obtain the authentication result.

23. The computer program product recited in claim 17, wherein said transmitting further comprises transmitting the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

24. The computer program product data recited in claim 17 further comprising:

generating an expected authentication value based on the shared data, wherein said producing the authentication result is also based on the expected authentication value.

25. A data receiving apparatus configured to receive data and to communicate with a data transmitting apparatus that judges whether use of the data is authorized based on authentication data and a response time of a response message, the data receiving apparatus comprising:

a command receiving unit configured to receive a response request command from the data transmitting apparatus;

an authentication data generation unit configured to generate said authentication data based on shared data shared with the data transmitting apparatus;

a response message generation unit configured to generate the response message to said response request command, said response message including said authentication data; and

a transmission unit configured to transmit said response message to said data transmitting apparatus.

26. The apparatus recited in claim 25, wherein said command receiving unit is further configured to receive plural response request commands from the data transmitting apparatus.

27. The apparatus recited in claim 26, wherein each of the plural response request commands includes a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

28. The apparatus recited in claim 25, wherein the command receiving unit is further configured to receive the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

29. The apparatus recited in claim 25, wherein the authentication data generation unit is further configured to generate said authentication data based on the shared data that includes a key based on previously transmitted information, the key being used to execute a predetermined process to obtain the authentication data.

30. The apparatus recited in claim 25, wherein the command receiving unit is further configured to receive the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

31. The apparatus recited in claim 25, the transmission unit is further configured to transmit said response message when said response request command is received from the data transmitting apparatus.

32. A data reception method for a data receiving apparatus configured to receive data and communicate with a data transmitting apparatus that judges whether data use is authorized based on authentication data and a response time of a response message, the data reception method comprising:

receiving a response request command from the data transmitting apparatus;

generating said authentication data based on shared data shared with the data transmitting apparatus;

generating the response message to said response request command, said response message including said authentication data; and

transmitting said response message to said data transmitting apparatus.

33. The method recited in claim 32, wherein said receiving the response request command further comprises receiving plural response request commands from the data transmitting apparatus.

34. The method recited in claim 33, wherein the receiving further comprises receiving each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

35. The method recited in claim 32, wherein the receiving further comprises receiving the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

36. The method recited in claim 32, wherein said generating authentication data further comprises:

generating said authentication data based on the shared data including a key based on previously transmitted information; and

executing a predetermined process with the key to obtain the authentication data.

37. The method recited in claim 32, wherein the receiving further comprises receiving the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

38. The method recited in claim 32, wherein the transmitting further comprises transmitting said response message when said response request command is received from the data transmitting apparatus.

39. A computer program product having computer program instructions which when executed by a computer cause the computer to control a receiving apparatus to receive data and communicate with a data transmitting apparatus, which judges whether use of the data is authorized based on authentication data and a response time of a response message, said computer program instructions causing the computer to control the receiving apparatus to perform the following steps:

receiving a response request command from the data transmitting apparatus;

generating said authentication data based on shared data shared with the data transmitting apparatus;

generating the response message to said response request command, said response message including said authentication data; and

transmitting said response message to said data transmitting apparatus.

40. The computer program product recited in claim 39, wherein said receiving the response request command further comprises receiving plural response request commands from the data transmitting apparatus.

41. The computer program product recited in claim 40, wherein the receiving further comprises receiving each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

42. The computer program product recited in claim 39, wherein the receiving further comprises receiving the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

43. The computer program product recited in claim 39, wherein said generating authentication data further comprises:

generating said authentication data based on the shared data including a key based on previously transmitted information; and

executing a predetermined process with the key to obtain the authentication data.

44. The computer program product recited in claim 39, wherein the receiving further comprises receiving the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

45. The computer program product recited in claim 39, wherein the transmitting further comprises transmitting said response message when said response request command is received from the data transmitting apparatus.

46. A data transmitting apparatus comprising:

an authentication data generation unit configured to generate command authentication data;

a command transmission unit configured to transmit a response request command to a data receiving apparatus, said response request command containing said command authentication data;

a response reception unit configured to receive a response message to said response request command from said data receiving apparatus, said response message containing response authentication data based on shared data shred with said data receiving apparatus;

an authentication unit configured to produce an authentication result for said data receiving apparatus based on said response authentication data;

a measurement unit configured to measure a response time of the response message; and

a judgment unit configured to judge if a subsequent information use by said data receiving apparatus is granted based on the authentication result and the response time.

47. The apparatus recited in claim 46, wherein said measurement unit is further configured to measure the response time between transmitting the response request command and receiving the response message.

48. The apparatus recited in claim 46, wherein said command transmission unit is further configured to transmit plural response request commands to the data receiving apparatus.

49. The apparatus recited in claim 48, wherein the command transmission unit is further configured to transmit each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

50. The apparatus recited in claim 46, wherein the response request command includes a quasi random number having a predetermined number of bits as part of the shared data.

51. The apparatus recited in claim 46, wherein the response reception unit is further configured to receive the response message that includes authentication data based on the shared data that includes a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

52. The apparatus recited in claim 46, wherein the response request command includes a session number uniquely identifying each time the data receiving apparatus is authorized.

53. The apparatus recited in claim 46, the authentication data generation unit is further configured to generate response expected value data from shared data with the data receiving apparatus, wherein the authentication unit produces the authentication result based on the expected value.

54. A method for authorizing the use of data, said method comprising:

generating command authentication data;

transmitting a response request command to a data receiving apparatus, said response request command containing said command authentication data;

receiving a response message to said response request command from said data receiving apparatus, said response message containing response authentication data based on shared data shared with said data receiving apparatus;

producing an authentication result for said receiving apparatus based on said response authentication data;

measuring a response time of the response message; and

judging if a subsequent information use by said data receiving apparatus is granted based on the authentication result and said response time.

55. The method recited in claim 54, wherein said measuring further comprises measuring the response time between transmitting the response request command and receiving the response message.

56. The method recited in claim 54, wherein said transmitting a response request command further comprises transmitting plural response request commands to the data receiving apparatus.

57. The method recited in claim 56, wherein said transmitting further comprises transmitting each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

58. The method recited in claim 54, wherein said transmitting further comprises transmitting the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

59. The method recited in claim 54, wherein the receiving the response message further comprises receiving the response message including authentication based on the shared data that includes a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

60. The method recited in claim 54, wherein said transmitting further comprises transmitting the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

61. The method recited in claim 54 further comprising:

generating an expected authentication value based on the shared data, wherein said producing the authentication result is also based on the expected authentication value.

62. A computer program product having computer program instructions which when executed by a computer cause the computer to control transmitting apparatus to data perform the following steps:

generating command authentication data;

transmitting a response request command to said data receiving apparatus, said response request command containing said command authentication data;

receiving a response message to said response request command from said data receiving apparatus, said response message containing response authentication data based on shared data shared with the data receiving apparatus;

producing an authentication result for said receiving apparatus based on said response authentication data;

measuring a response time of the response message; and

judging if a subsequent information use by said data receiving apparatus is granted based on the authentication result and said response time.

63. The computer program product recited in claim 62, wherein said measuring further comprises measuring the response time between transmitting the response request command and receiving the response message.

64. The computer program product recited in claim 62, wherein said transmitting a response request command further comprises transmitting plural response request commands to the data receiving apparatus.

65. The computer program product recited in claim 64, wherein said transmitting further comprises transmitting each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

66. The computer program product recited in claim 62, wherein said transmitting further comprises transmitting the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

67. The computer program product recited in claim 62, wherein the receiving the response message further comprises receiving the response message including authentication based on the shared data that includes a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

68. The computer program product recited in claim 62, wherein said transmitting further comprises transmitting the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

69. The computer program product recited in claim 62, wherein the computer program instructions further comprises a step of generating an expected authentication value based on the shared data, wherein said producing the authentication result is also based on the expected authentication value.

70. A data receiving apparatus configured to receive a response request command and to communicate with a data transmitting apparatus which judges whether data use is authorized based on a response time of a response message, the data receiving apparatus comprising:

a generating unit configured to generate response authentication data from shared data shared with said transmitting apparatus, each of said response authentication data corresponding to authentication data in said response request command generated at said data transmitting apparatus from said shared data; and

a transmission unit configured to transmit a response message including said response authentication data to said data transmitting apparatus.

71. The apparatus recited in claim 70 further comprising:

a receiving unit configured to receive plural response request commands from the data transmitting apparatus.

72. The apparatus recited in claim 71, wherein the receiving unit is further configured to receive each response request command in the plural response request commands including a number of retry times corresponding to a particular response request command in the plural transmitted response request commands.

73. The apparatus recited in claim 70 further comprising:

a receiving unit configured to receive the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

74. The apparatus recited in claim 70, wherein the generating unit is further configured to generate response authentication data based on the shared data that includes a key based on previously transmitted information, the key being used to execute a predetermined process to obtain the authentication data.

75. The apparatus recited in claim 70 further comprising:

a receiving unit configured to receive the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

76. The apparatus recited in claim 70, wherein the transmission unit is further configured to transmit said response message when said response request command is received from the data transmitting apparatus.

77. A data reception method for a data receiving apparatus configured to receive a response request command and communicate with a data transmitting apparatus which judges whether data use is authorized based on a response time of a response message, the method comprising:

generating response authentication data from shared data shared with said transmitting apparatus, each of said response authentication data corresponding to authentication data in said response request command generated at said data transmitting apparatus from said shared data; and

transmitting a response message including said response authentication data to said data transmitting apparatus.

78. The method recited in claim 77 further comprising:

receiving plural response request commands from the data transmitting apparatus.

79. The method recited in claim 78, wherein said receiving further comprises receiving each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

80. The method recited in claim 77 further comprising:

receiving the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

81. The method recited in claim 77, wherein said generating further comprises generating authentication data based on the shared data including a key based on previously transmitted information, the key being used to execute a predetermined process to obtain the authentication data.

82. The method recited in claim 77 further comprising:

receiving the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

83. The method recited in claim 77 further comprising:

transmitting the response message when the response request command is received from the data transmitting apparatus.

84. A computer program product having computer program instructions which when executed by a computer cause the computer to control a receiving apparatus to receive a response request command from a data transmitting apparatus, which judges whether data use is authorized based on a response time of a response message, said computer program instructions causing the computer to control the receiving apparatus to perform the following steps:

generating response authentication data from shared data shared with said data transmitting apparatus, each of said response authentication data corresponding to authentication data in said response request command generated at said data transmitting apparatus from said shared data; and

transmitting a response message including said response authentication data to said data transmitting apparatus.

85. The computer program product recited in claim 84 further comprising:

receiving plural response request commands from the data transmitting apparatus.

86. The computer program product recited in claim 85, wherein said receiving further comprises receiving each of the plural response request commands including a number of retry times corresponding to a respective response request command in the plural transmitted response request commands.

87. The computer program product recited in claim 84 further comprising:

receiving the response request command including a quasi random number having a predetermined number of bits as part of the shared data.

88. The computer program product recited in claim 84, wherein said generating further comprises generating authentication data based on the shared data including a key based on previously transmitted information, the key being used to execute a predetermined process to obtain the authentication data.

89. The computer program product recited in claim 84, wherein the computer is further configured to control the receiving apparatus to receive the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

90. The computer program product recited in claim 84 further comprising:

receiving the response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.