Method and apparatus for transmitting content to device which does not join domain

• US 20070169203A1
• Filed: 11/03/2006
• Published: 07/19/2007
• Est. Priority Date: 01/19/2006
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Bong-seon, Nam, Su-hyun, Yoon, Young-sun
• Application Number:
  US11/592,265
• Publication Number:
  US 20070169203A1
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/062 applying encryption of the keys cryptographic mechanisms or cryptographic arrangements for key distribution using key encryption key H04L9/0822
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0827 involving distinctive intermediate devices or communication paths network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/321 involving a third party or a trusted authority
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4788 communicating with other users, e.g. chatting arrangements for providing for computer conferences, e.g. chat rooms, to substation in data switching networks H04L12/1813; distributed application using peer-to-peer [P2P] networks H04L67/104
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

A method and an apparatus for transmitting content from a first device that joins a domain to a second device that does not join the domain are provided. If the second device which does not join the domain is adjacent to the first device which joins the domain, by encrypting a content key corresponding to the content to be transmitted to the second device which does not join the domain using a key of the second device which does not join the domain, and then transmitting the content and the encrypted content key to the second device which does not join the domain, the second device which does not join the domain can use the content having an access authority limitation, which can be used by only devices which join the domain.

Claims

1. A method of transmitting content from a first device which joins a domain to a second device which does not join the domain, the method comprising:

determining at the first device whether adjacency exists between the first device and the second device;

encrypting a content key corresponding to the content to be transmitted to the second device using a key of the second device, according to a result of the determining whether adjacency exists between the first device and the second device; and

transmitting the encrypted content key and the content from the first device to the second device.

2. The method of claim 1, wherein the determining whether adjacency exists between the first device and the second device comprises:

transmitting an adjacency checking message from the first device to the second device;

receiving at the first device a response message from the second device;

determining a round trip time (RTT) value based on a measured adjacency checking message transmission time and a measured response message receiving time;

comparing the RTT value with an adjacency threshold value; and

determining that the first device is adjacent to the second device based on a result of the comparing.

3. The method of claim 1, further comprising receiving at the first device a message requesting transmission of the content, from the second device.

4. The method of claim 1, further comprising checking at the first device an access authority limitation of the content to determine whether only a device which joins the domain is authorized to use the content,

wherein, in the transmitting the encrypted content key and the content to the second device, if it is determined that the content has the access authority limitation, and the content is not authorized to be used by a device which does not join the domain, the encrypted content key and the content are not transmitted to the second device.

5. The method of claim 1, wherein the key of the second device is a public key.

6. The method of claim 1, further comprising receiving at the first device a secret key of the second device through a secure path, from the second device,

wherein the key of the second device is the secret key of the second device.

7. The method of claim 1, wherein the domain comprises a home network.

8. The method of claim 1, further comprising decrypting the content key using a domain key of the domain before the encrypting of the content key using the key of the second device.

9. A computer-readable recording medium storing a computer program for executing a method of transmitting content from a first device which joins a domain to a second device which does not join the domain, the method comprising:

determining at the first device whether adjacency exists between the first device and the second device;

encrypting a content key corresponding to the content to be transmitted to the second device using a key of the second device, according to a result of the determining whether adjacency exists between the first device and the second device; and

transmitting the encrypted content key and the content from the first device to the second device.

10. The computer-readable recording medium of claim 9, wherein the determining whether adjacency exists between the first device and the second device comprises:

transmitting an adjacency checking message from the first device to the second device;

receiving at the first device a response message from the second device;

determining a round trip time (RTT) value based on a measured adjacency checking message transmission time and a measured response message receiving time;

comparing the RTT value with an adjacency threshold value; and

determining that the first device is adjacent to the second device based on a result of the comparing.

11. The computer-readable recording medium of claim 9, further comprising receiving at the first device a message requesting transmission of the content, from the second device.

12. The computer-readable recording medium of claim 9, further comprising checking at the first device an access authority limitation of the content to determine whether only a device which joins the domain is authorized to use the content,

wherein, in the transmitting the encrypted content key and the content to the second device, if it is determined that the content has the access authority limitation, and the content is not authorized to be used by a device which does not join the domain, the encrypted content key and the content are not transmitted to the second device.

13. The computer-readable recording medium of claim 9, wherein the key of the second device is a public key.

14. The computer-readable recording medium of claim 9, further comprising receiving at the first device a secret key of the second device through a secure path, from the second device,

wherein the key of the second device is the secret key of the second device.

15. A method of allowing a second device which does not join a domain to receive content from a first device which joins the domain, the method comprising:

determining whether adjacency exists between the first device and the second device; and

receiving the content and a content key corresponding to the content encrypted using a key of the second device, from the first device, according to a result of the determining whether adjacency exists between the first device and the second device.

16. The method of claim 15, wherein the determining whether adjacency exists between the first device and the second device comprises:

receiving an adjacency checking message from the first device;

transmitting a response message to the first device;

determining a round trip time (RTT) value based on a measured adjacency checking message receiving time and a measured response message transmission time;

comparing the RTT value with an adjacency threshold value; and

determining that the first device is adjacent to the second device based on a result of the comparing.

17. The method of claim 15, further comprising transmitting a message requesting transmission of the content, to the first device.

18. The method of claim 15, further comprising:

decrypting the received content key using the key of the second device; and

decrypting the received content using the decrypted content key.

19. The method of claim 15, further comprising, if the content key is encrypted using a public key, decrypting the received content key using a private key of the second device, and decrypting the received content using the decrypted content key.

20. The method of claim 15, further comprising:

transmitting a secret key of the second device through a secure path from the second device to the first device; and

if the content key is encrypted with the secret key, decrypting the received content key with the secret key, and decrypting the received content with the decrypted content key.

21. The method of claim 15, wherein the domain comprises a home network.

22. A computer-readable recording medium storing a computer program for executing a method of allowing a second device which does not join a domain to receive content from a first device which joins the domain, the method comprising:

determining at the second device whether adjacency exists between the first device and the second device; and

receiving the content and a content key corresponding to the content encrypted using a key of the second device, from the first device, according to a result of the determining whether adjacency exists between the first device and the second device.

23. The computer-readable recording medium of claim 22, wherein the determining whether adjacency exists between the first device and the second device comprises:

receiving an adjacency checking message from the first device;

transmitting a response message to the first device;

determining a round trip time (RTT) value based on a measured adjacency checking message receiving time and a measured response message transmission time;

comparing the RTT value with an adjacency threshold value; and

determining that the first device is adjacent to the second device based on a result of the comparing.

24. The computer-readable recording medium of claim 22, further comprising transmitting a message requesting transmission of the content, to the first device.

25. The computer-readable recording medium of claim 22, further comprising:

decrypting the received content key using the key of the second device; and

decrypting the received content using the decrypted content key.

26. The computer-readable recording medium of claim 22, further comprising, if the content key is encrypted using a public key, decrypting the received content key using a private key of the second device, and decrypting the received content using the decrypted content key.

27. The computer-readable recording medium of claim 22, further comprising:

transmitting a secret key of the second device through a secure path from the second device to the first device; and

if the content key is encrypted with the secret key, decrypting the received content key with the secret key, and decrypting the received content with the decrypted content key.

28. An apparatus for transmitting content to a device which does not join a domain, the apparatus comprising:

an adjacency checking unit which determines adjacency to the device;

an encryption unit which encrypts a content key corresponding to the content to be transmitted to the device, using a key of the device, according to an adjacency determination result of the adjacent checking unit; and

a transmitting unit which transmits the content key encrypted by the encryption unit and the content corresponding to the content key to the device.

29. The apparatus of claim 28, wherein the adjacency checking unit is configured to:

transmit an adjacency checking message to the device;

receive a response message from the device;

determine a round trip time (RTT) value based on a measured adjacency checking message transmission time and a measured response message receiving time;

compare the RTT value with an adjacency threshold value; and

determine that the apparatus is adjacent to the device based on a result of the comparing.

30. The apparatus of claim 28, further comprising a receiver which receives a message requesting transmission of the content from the device.

31. The apparatus of claim 28, further comprising a determination unit which determines whether the content has an access authority limitation, and the content is used by only a device which joins the domain,

wherein, if the determination unit determines that the content is content having the access authority limitation, and the content is not used by a device that does not join the domain, the transmitting unit does not transmits the content key encrypted by the encryption unit and the content corresponding to the content key to the device.

32. The apparatus of claim 28, wherein the domain comprises a home network.

33. An apparatus for receiving content from a device which joins a domain, the apparatus comprising:

an adjacency checking unit which determines adjacency to the device; and

a receiver which receives a content key encrypted using a key of the apparatus and the content corresponding to the content key, according to an adjacency determination result of the adjacency checking unit.

34. The apparatus of claim 33, wherein the adjacency checking unit is configured to:

receive an adjacency checking message from the device; and

transmit a response message to the device,

wherein the device determines a round trip time (RTT) value based on a measured adjacency checking message receiving time and a measured response message transmission time, compare the RTT value with an adjacency threshold value, and determine that the device is adjacent to the apparatus based on a result of the comparing.

35. The apparatus of claim 33, further comprising a requesting unit which transmits a message requesting transmission of the content to the device.

36. The apparatus of claim 33, further comprising:

a first decryption unit which decrypts the encrypted content key received from the receiver using the key of the apparatus; and

a second decryption unit which decrypts the content key received from the receiver using the content key decrypted by the first decryption unit.

37. The apparatus of claim 33, wherein the domain comprises a home network.

38. A method of transmitting content from a first device to a second device, the method comprising:

receiving a content request from the second device;

determining whether the second device does not join a domain of the first device;

determining whether transmittance of the content is allowed on the basis of a license of the content if the second device does not join the domain of the first device;

measuring a physical distance from the first device to the second device; and

transmitting the content to the second device according to a result of the measuring of the physical distance.

39. The method of claim 38, wherein the license includes information for an available range of the content.

40. The method of claim 38, wherein a content key for encrypting the content is encrypted by a domain key of the domain.