Apparatus for managing DRM installation and method thereof

• US 20070183598A1
• Filed: 01/03/2007
• Published: 08/09/2007
• Est. Priority Date: 01/26/2006
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Jin, Weon-il, Kim, Hwan-joon, Jung, Eun-sun
• Application Number:
  US11/648,672
• Publication Number:
  US 20070183598A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

Provided is a DRM installation management device and method, which requests secret DRM from a DRM Center in order to use DRM that is necessary to access content, receives the requested secret DRM and installs the DRM, and is able to implement authentication and decryption using the secret DRM. Even if DRM related to digital content stored on the device is not present, DRM for the relevant digital content can be automatically downloaded and installed. Moreover, using the public key certificates and private keys, security problems relating to secret DRM are overcome.

Claims

1. A Digital Rights Management (DRM) installation management apparatus, for use in a system comprising a Trusted Platform Center (TPC) server, a Unified DRM installer Trust Manager (UTM) server, and a DRM Center server;

comprising;

a unified DRM mediator for requesting a secret DRM necessary for installing and authenticating DRM from the DRM Center server if DRM is not present, verifying a signature file of the UTM server added to the secret DRM received from the DRM Center server following the request, and transmitting the DRM after verification; and

a Trusted Platform Module (TPM) for receiving the secret DRM from the Unified DRM Mediator, implementing verification of the TPM server added to the received secret DRM, decrypting the secret DRM according to the authentication, and using the decrypted secret DRM in installing the DRM.

2. A DRM installation management apparatus according to claim 1, wherein

the TPM prevents changes to a TPM public key certificate and a TPC private key in the secret DRM, and installs the DRM.

3. A DRM installation management apparatus according to claim 2, wherein

the TPM parses and stores the TPM public key certificate and the TPC private key.

4. A DRM installation management apparatus according to claim 1, wherein

the DRM Center server confirms if the request for secret DRM is legitimate using the TPC server, which provides a TPM public key certificate and a TPC private key, and the UTM server, which provides a UTM private key.

5. A DRM installation management apparatus according to claim 2, wherein

the TPM stores the TPM public key certificate and the TPC private key, and further comprises

a Unified DRM Storage, which stores a TPC public key certificate, the TPM public key certificate, a UTM public key certificate and a UTM private key.

6. A DRM installation management apparatus according to claim 1, wherein

the Unified DRM Mediator transmits the secret DRM request message comprising a TPM_ID, a UDi private key, and a TPM private key to the DRM Center server.

7. A DRM installation management apparatus, for use in a system comprising a Trusted Platform Center (TPC) server, a Unified DRM installer Trust Manager (UTM) server, and a DRM Center server, comprising:

a Unified DRM Mediator for requesting secret DRM necessary for installing and authenticating the DRM if DRM is not present, and receiving and transmitting the secret DRM from the DRM Center server; and

a Trusted Platform Module (TPM) for authenticating based on a UTM private key and a TPC private key in the secret DRM transmitted by the Unified DRM Mediator, and decrypting based on a TPM public key certificate.

8. A DRM installation management apparatus according to claim 7, wherein

the TPM prevents changes to the TPM public key certificate and the TPC private key, and installs the DRM.

9. A DRM installation management apparatus according to claim 7, wherein

the TPM stores the UTM private key, the TPM public key and the TPC private key.

10. A DRM installation management apparatus according to claim 7, which stores the TPM public key certificate, the UTM private key and the TPC private key, and further comprises

a Unified DRM Storage storing the TPM public key certificate, the TPM public key certificate, the UTM public key certificate, and the TPM private key.

11. A DRM installation management method for use in a system comprising a Trusted Platform Center (TPC) server, a Unified DRM installer Trust Manager (UTM) server and a DRM Center server, comprising:

(a) requesting secret DRM that is necessary for installing and authenticating DRM from the DRM Center server, if DRM that is necessary to access digital content is not present;

(b) verifying the signature file of the UTM server which is added to the secret DRM received from the DRM Center server in step (a), and transmitting the secret DRM after verification; and

(c) installing the DRM by verifying the signature file of the TPM server added to the transmitted secret DRM, and decrypting the secret DRM after verification of the signature file.

12. A DRM installation management method according to claim 11, wherein

the secret DRM request message transmitted to the DRM Center server in step (a) comprises a TPM_ID, a UDi private key, and a TPM private key.

13. A DRM installation management method according to claim 11, wherein

after step (a), the DRM Center server confirms whether or not the secret DRM request message is legitimate, using the TPC server, which provides a TPM public key and a TPC private key, and the UTM server, which provides a UTM secret key.

14. A DRM installation management method according to claim 11, wherein

step (c) is implemented after parsing and storing a TPM public key and a TPC private key.

15. A DRM installation management method for use in a system comprising a Trusted Platform Center (TPC) server, a Unified DRM installer Trust Manager (UTM) server, and a DRM Center server, comprising:

(a) requesting secret DRM that is necessary for installing and authenticating DRM from the DRM Center server, if DRM that is necessary to access digital content is not present;

(b) receiving secret DRM transmitted from the DRM Center server; and

(c) installing DRM by implementing authentication based on a UTM private key and a TPC private key in the transferred secret DRM, and implementing decryption based on a TPM public key certificate.

16. A DRM installation management method according to claim 15, wherein

the secret DRM request message transmitted to the DRM Center server in step (a) comprises a TPM_ID, a UDi private key, and a TPM private key.

17. A DRM installation management method according to claim 15, wherein

after step (a), the DRM Center server confirms whether or not the secret DRM request message is legitimate, using the TPC server, which provides the TPM public key and the TPC private key, and the UTM server, which provides the UTM secret key.

18. A DRM installation management method according to claim 15, wherein

step (c) is implemented after parsing and storing the UTM private key, the TPM public key and the TPC private key.

19. A computer-readable medium having embodied thereon a computer program for a method of managing DRM installation, for use in a system comprising a Trusted Platform Center (TPC) server, a Unified DRM installer Trust Manager (UTM) server and a DRM Center server, the method comprising:

(a) requesting secret DRM that is necessary for installing and authenticating DRM from the DRM Center server, if DRM that is necessary to access digital content is not present;

(b) verifying the signature file of the UTM server which is added to the secret DRM received from the DRM Center server in step (a), and transmitting the secret DRM after verification; and

(c) installing the DRM by verifying the signature file of the TPM server added to the transmitted secret DRM, and decrypting the secret DRM after verification of the signature file.

20. A computer-readable medium having embodied thereon a computer program for a method of managing DRM installation, for use in a system comprising a Trusted Platform Center (TPC) server, a Unified DRM installer Trust Manager (UTM) server and a DRM Center server, the method comprising:

(a) requesting secret DRM that is necessary for installing and authenticating DRM from the DRM Center server, if DRM that is necessary to access digital content is not present;

(b) receiving secret DRM transmitted from the DRM Center server; and

(c) installing DRM by implementing authentication based on a UTM private key and a TPC private key in the transferred secret DRM, and implementing decryption based on a TPM public key certificate.