Method and apparatus for generating rights object by means of delegation of authority

• US 20070198434A1
• Filed: 01/08/2007
• Published: 08/23/2007
• Est. Priority Date: 02/06/2006
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Jae-won, Jang, Young-suk, Chae, Seung-chul
• Application Number:
  US11/650,500
• Publication Number:
  US 20070198434A1
• Time in Patent Office: Days
• US Class Current: 705/67
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

Provided are a method and apparatus for generating a rights object by means of the delegation of authority. The method includes performing authentication with a rights issuer; receiving a first rights object from the rights issuer; receiving authorization signature information from the rights issuer; converting the first rights object into a second rights object by using the authorization signature information; and transmitting the second rights object to an unauthorized device.

Claims

1. A method of transmitting authorization signature information, the method comprising:

authenticating a device;

transmitting to the device a first rights object required to use a certain content; and

transmitting to the device the authorization signature information required to convert the first rights object to a second rights object.

2. The method of claim 1, wherein the device is a representative device of a domain including the device.

3. A method of generating a rights object by a delegation of authority, the method comprising:

performing authentication with a rights issuer;

receiving a first rights object from the rights issuer;

receiving authorization signature information from the rights issuer;

converting the first rights object into a second rights object by using the authorization signature information; and

transmitting the second rights object to an unauthorized device.

4. The method of claim 3, further comprising transmitting to the unauthorized device content capable of being used by the first rights object.

5. The method of claim 3, wherein the unauthorized device is included in the same domain as the device authenticated by the rights issuer.

6. The method of claim 3, wherein the authorization signature information comprises an encryption key required to decrypt the second rights object.

7. The method of claim 3, wherein the authorization signature information comprises an identifier of the unauthorized device.

8. The method of claim 3, wherein the second rights object is used in only the unauthorized device.

9. An apparatus for generating a rights object by a delegation of authority, the apparatus comprising:

a security managing unit which performs authentication with a rights issuer and manages a first rights object from the rights issuer;

an authorization signature information storage unit which receives authorization signature information from the rights issuer and stores the received authorization signature information;

a second-rights-object generating unit which converts the first rights object into a second rights object by using the authorization signature information; and

a transmitter/receiver unit which transmits the second rights object to an unauthorized device.

10. The apparatus of claim 9, wherein the transmitter/receiver unit receives the first rights object or the authorization signature information from the rights issuer.

11. The apparatus of claim 9, wherein the transmitter/receiver unit transmits to the unauthorized device content capable of being used by the first rights object.

12. The apparatus of claim 9, wherein the unauthorized device is included in the same domain as the device authenticated by the rights issuer.

13. The apparatus of claim 9, wherein the authorization signature information comprises an encryption key required to decrypt the second rights object.

14. The apparatus of claim 9, wherein the authorization signature information comprises an identifier of the unauthorized device.

15. The apparatus of claim 9, wherein the second rights object is used in only the unauthorized device.