METHOD AND APPARATUS FOR CREATING AND APPLYING SECURE FILE INDENTIFIER OF RIGHTS OBJECT BY USING RANDOM NUMBERS

• US 20070266441A1
• Filed: 05/14/2007
• Published: 11/15/2007
• Est. Priority Date: 05/12/2006
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Oh, Yun-sang, Jung, Kyung-im, Kim, Ji-soo, Sim, Sang-gyoo, KIM, Yeo-jin
• Granted Patent: US 8,196,208 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

Provided are a method and apparatus for creating and applying a secure file identifier of a rights object by using random numbers. The apparatus includes a secure-file-identifier generating unit which creates the secure file identifier by generating a random number and combining the random number with a hash value corresponding to a rights object identifier of the file identifier list; a transmitting unit which transmits the secure file identifier to the storage device; and a receiving unit which receives a secure file identifier list for identifying the rights object from a storage device.

Claims

1. An apparatus for creating and applying a secure file identifier of a rights object by using random numbers, the apparatus comprising:

a secure-file-identifier generating unit which creates the secure file identifier by generating a random number and combining the random number with a hash value corresponding to a rights object identifier of the file identifier list;

a transmitting unit which transmits the secure file identifier to a storage device; and

a receiving unit which receives a secure file identifier list for identifying rights objects from the storage device;

2. The apparatus of claim 1, wherein the secure file identifier has a specific length.

3. An apparatus for creating and applying a secure file identifier of a rights object by using random numbers, the apparatus comprising:

a secure-file-identifier-list generating unit which creates a secure file identifier list for identifying the rights object;

a receiving unit which receives a pair of secure file identifiers from a host device to replace a first secure file identifier with a second secure file identifier; and

a rights-object managing unit which replaces the first secure file identifier with the second secure file identifier, and changes a status of the rights object corresponding to the second secure file identifier.

4. The apparatus of claim 3, wherein the secure file identifier has a specific length and is obtained by combining a specific random number generated by the host device with a hash value corresponding to a rights object identifier of the rights object.

5. The apparatus of claim 3, wherein the rights object is in one of an enabled state and a disabled state.

6. The apparatus of claim 5, wherein the secure-file-identifier-list generating unit generates the secure file identifier list corresponding to rights objects in the enabled state.

7. The apparatus of claim 5, wherein the secure-file-identifier-list generating unit generates the secure file identifier list corresponding to rights objects in the disabled state.

8. The apparatus of claim 7, wherein the rights-object managing unit changes the status of the rights object by referring to an identifier of the host device from the secure file identifier list, if the rights object is in the disabled state.

9. The apparatus of claim 3, further comprising a transmitting unit which transmits the secure file identifier list generated by the secure-file-identifier-list generating unit to the host device.

10. A method of creating and applying a secure file identifier of a rights object by using random numbers, the method comprising:

creating a secure file identifier by generating a random number and combining the random number with a hash value corresponding to a rights object identifier of the file identifier list;

transmitting the secure file identifier to a storage device; and

receiving a secure file identifier list for identifying rights objects from the storage device.

11. The method of claim 10, wherein the secure file identifier has a specific length.

12. A method of creating and applying a secure file identifier of a rights object by using random numbers, the method comprising:

generating a secure file identifier list for identifying the stored rights objects;

receiving a second secure file identifier from a host device to replace a first secure file identifier corresponding to the selected rights object; and

managing rights objects by replacing the first secure file identifier with the second secure file identifier, and changing a status of the rights object corresponding to the second secure file identifier.

13. The method of claim 12, wherein the second secure file identifier has a specific length and is obtained by combining a specific random number generated by the host device with a hash value corresponding to a rights object identifier of the rights object.

14. The method of claim 12, wherein the rights object is in one of an enabled state and a disabled state.

15. The method of claim 14, wherein the generating the secure file identifier list is performed by generating the secure file identifier list corresponding to rights objects in the enabled state.

16. The method of claim 14, wherein the generating the secure file identifier list is performed by generating the secure file identifier list corresponding to rights objects in the disabled state.

17. The method of claim 16, wherein managing the rights objects is performed by changing the status of the rights object by referring to an identifier of the host device from the secure file identifier list, if the rights object is in the disabled state.

18. The method of claim 12, further comprising transmitting the secure file identifier list to the host device.

19. A computer readable recording medium storing a computer program for performing a method of creating and applying a secure file identifier of a rights object by using random numbers, the method comprising:

creating a secure file identifier by generating a random number and combining the random number with a hash value corresponding to a rights object identifier of the file identifier list; and

transmitting the secure file identifier to the storage device; and

receiving a secure file identifier list for identifying rights objects from the storage device.

20. A computer readable recording medium storing a computer program for performing a method of creating and applying a secure file identifier of a rights object by using random numbers, the method comprising:

generating a secure file identifier list for identifying the stored rights objects;

receiving a pair of secure file identifiers from a host device to replace a first secure file identifier with a second secure file identifier; and

managing rights objects by replacing the first secure file identifier with the second secure file identifier, and changing a status of the rights object corresponding to the second secure file identifier.