Loading media data into a portable data

• US 20070038870A1
• Filed: 03/08/2004
• Published: 02/15/2007
• Est. Priority Date: 03/10/2003
• Status: Active Grant

• Current Assignee: Giesecke + Devrient Mobile Security GmBH (Giesecke & Devrient GmbH)
• Original Assignee: Daniel Ciesinger
• Inventors: Ciesinger, Daniel
• Granted Patent: US 7,702,921 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

In a method for loading media data (M) into a memory of a portable data carrier (10) connected to an external operator device (24), the data carrier (10) receives a loading job, an encrypted data transfer channel (50) is set up between the data carrier (10) and a trustworthy, non-local server (30) on which the media data (M) are held, and the media data (M) are transferred in encrypted form via the data transfer channel (50) and written to the memory of the data carrier (10). A data carrier (10) and a computer program product have corresponding features. In addition, an operator device (24) and a computer program product are provided that are configured to provide a user interface for initiating the method for loading the media data (M). The invention provides a technique for loading media data (M) into a portable data carrier (10), which technique prevents unauthorized copying of the media data (M).

Claims

1. A method for loading media data into a memory of a portable data carrier connected to an external operator device, comprising:

receiving by the data carrier of a loading job from the operator device,

setting-up of an encrypted data transfer channel between the data carrier and a trustworthy, non-local server on which the media data are held, and

encrypted transfer of the media data via the data transfer channel and writing of the media data to the memory of the data carrier.

2. A method according to claim 1, wherein the data carrier and the server communicate with each other via an Internet protocol.

3. A method according to claim 1, wherein a session key agreed between the data carrier and the server in a process that is spying-protected at least from the operator device is used for the encrypted transfer of the media data.

4. A method according to claim 3, wherein the session key is generated by a device from the group formed by the data carrier and the server, and the session key is then encrypted with a public key of the other device from said group and is sent in encrypted form to that other device.

5. A method according to claim 1, wherein the data transfer channel physically goes via the operator device.

6. A method according to claim 1, wherein a browser is run by the operator device in order to provide a user interface for initiating the loading operation.

7. A method according to claim 1, the media data stored in the data carrier are played back in a play-back device only after successful authentication of the play-back device with the data carrier.

13. The method according to claim 1, wherein the data carrier and the server communicate with each other via at least one of the protocols TCP/IP, UDP/IP, IPSec, TLS, SSL and HTTP.

8. A portable data carrier having a processor core and a memory, the processor core being configured for loading media data into the memory, wherein:

the data carrier receives a loading job from an external operator device,

an encrypted data transfer channel is set up between the data carrier and a trustworthy, non-local server on which the media data are held, and

the media data are transferred in an encrypted fashion via the data transfer channel and the media data are written to the memory of the data carrier.

9. A portable data carrier according to claim 8, wherein the portable data carrier is one of a memory card and a memory module.

14. The portable data carrier according to claim 8, wherein the data carrier is free of operating and display elements.

15. The portable data carrier according to claim 8, wherein the data carrier and the server communicate with each other via at least one of the protocols TCP/IP, UDP/IP, IPSec, TLS, SSL and HTTP.

16. The protable data carrier according to claim 8, wherein a session key agreed between the data carrier and the server in a process that is spying-protected at least from the operator device is used for the encrypted transfer of the media data.

17. The portable data carrier according to claim 8, wherein the data transfer channel physically goes via the operator device.

10-12. -12. (canceled)

18. A computer program product having program instructions for causing a processor core of a portable data carrier to carry out a method for loading media data into a memory of the data carrier, the method comprising:

receiving by the data carrier of a loading job from the operator device,

setting-up of an encrypted data transfer channel between the data carrier and a trustworthy, non-local server on which the media data are held, and

encrypted transfer of the media data via the data transfer channel and writing of the media data to the memory of the data carrier.

19. An operator device, that is configured to provide a user interface for initiating an operation for loading media data into a memory of a data carrier connected to the operator device, the operation comprising:

communicating a loading job from the operator device to the data carrier,

setting-up of an encrypted data transfer channel between the data carrier and a trustworthy, non-local server on which the media data are held, and

encrypted transfer of the media data via the data transfer channel and writing of the media data to the memory of the data carrier.

20. The operator device according to claim 19, wherein the operator device is a personal computer.

21. The operator device according to claim 19, wherein the data transfer channel physically goes via the operator device.

22. The operator device according to claim 19, wherein a browser is run by the operator device in order to provide the user interface for initiating the loading operation.

23. The operator device according to claim 19, wherein the media data stored in the data carrier are played back in a play-back device only after successful authentication of the play-back device with the data carrier.

24. A computer program product having program instructions for causing an operator device to provide a user interface for initiating an operation for loading media data into a memory of a data carrier connected to the operator device, the operation comprising:

communicating a loading job from the operator device to the data carrier,

setting-up of an encrypted data transfer channel between the data carrier and a trustworthy, non-local server on which the media data are held, and

encrypted transfer of the media data via the data transfer channel and writing of the media data to the memory of the data carrier.

25. The computer program product according to claim 24, wherein the operator device is a personal computer.

26. The computer program product according to claim 24, wherein the data transfer channel physically goes via the operator device.

27. The computer program product according to claim 24, wherein a browser is run by the operator device in order to provide the user interface for initiating the loading operation.