Substitutable domain management system and method for substituting the system

• US 20080052388A1
• Filed: 07/02/2007
• Published: 02/28/2008
• Est. Priority Date: 08/28/2006
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Korkishko, Tymur, Lee, Kyung-Hee
• Application Number:
  US11/822,095
• Publication Number:
  US 20080052388A1
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

A domain management method and substitutable system is provided. When a domain manager, which manages digital rights in a local area, permanently or temporarily becomes unavailable, the domain management method and system may protect the digital rights of the area by using another domain manager.

Claims

1. A domain manager for managing a user domain, the manager comprising:

an assignment request unit for requesting a domain authority (DA) to assign the domain manager to the user domain;

a user domain management state (UDMS) information receiving unit for receiving UDMS information about the user domain from the DA when the domain manager is assigned to the DA; and

a user domain management unit for managing the user domain based on the received UDMS information.

2. The domain manager of claim 1, wherein the UDMS information corresponds to information which is stored in the DA by another domain manager.

3. The domain manager of claim 1, wherein the other domain manager corresponds to a system managing the user domain before the domain manager is registered to the DA.

4. The domain manager of claim 1, further comprising:

a registration request unit for requesting the DA to register the domain manager to the DA;

wherein the assignment request unit requests the DA to assign the domain manager to the user domain when the domain manager is registered to the DA.

5. The domain manager of claim 4, wherein the registration request unit transmits a user credential to the DA to identify a user in the DA.

6. The domain manager of claim 5, wherein the user credential comprises the user'"'"'s user identifier and password.

7. The domain manager of claim 4, further comprising:

a DA authenticator for authenticating the DA by using a received DA credential from the DA,

wherein the assignment request unit requests the DA to assign the domain manager to the user domain when the DA is authenticated.

8. The domain manager of claim 7, wherein the DA authenticator receives the DA credential from the DA when the domain manager is registered to the DA.

9. The domain manager of claim 7, wherein the DA credential comprises at least one of a DA public key certificate, a DA identifier, a DA name, and a DA description.

10. The domain manager of claim 1, wherein the UDMS information receiving unit receives the UDMS information from the DA when the domain manager is assigned to the user domain.

11. The domain manager of claim 1, wherein the UDMS information comprises information related to at least one of a plurality of devices that are registered to a member of the user domain, a device identifier of each registered device, a device public key certificate of each registered device, a user domain identifier, a user domain credential, a user domain expiration time, and a domain policy.

12. The domain manager of claim 1, wherein the user domain management unit receives a user domain management request from a communication device via a limited distance communication channel interface, and manages the user domain in response to the user domain management request.

13. The domain manager of claim 12, wherein the user domain management request comprises a device nonce, a domain manager identifier, a user domain identifier, and a device identifier.

14. The domain manager of claim 12, wherein the user domain management request comprises at least one of a join request, and a leave request with respect to the user domain of the device.

15. The domain manager of claim 14, wherein the user domain management unit allows the device to join or leave the user domain in response to the join request or the leave request which is comprised in the user domain management request.

16. The domain manager of claim 12, wherein the user domain management unit authenticates the device, and when the device is authenticated, creates a domain manager status request based on the user domain management request, and transmits the created domain manager status request to the DA.

17. The domain manager of claim 16, wherein the domain manager status request comprises the user domain management request, and is transmitted with an electronic signature which is signed with a private key of the domain manager with respect to the domain manager status request.

18. The domain manager of claim 16, wherein the user domain management unit receives a domain manager status response with respect to the domain manager status request from the DA, and updates the UDMS information based on the domain manager status response.

19. The domain manager of claim 18, wherein the user domain management unit transmits the updated UDMS information to the DA.

20. The domain manager of claim 18, wherein the user domain management unit creates a user domain management response based on the domain manager status response, and transmits the created user domain management response to the device.

21. The domain manager of claim 20, wherein the user domain management response comprises the domain manager status response, and is transmitted with an electronic signature which is signed with a private key of the domain manager with respect to the user domain management response.

22. A domain management method, the method comprising:

requesting a domain authority (DA) to assign a domain manager to a user domain;

receiving user domain management state (UDMS) information about the user domain from the DA when the domain manager is assigned to the DA; and

managing the user domain based on the received UDMS information.

23. The method of claim 22, wherein the UDMS information corresponds to information which is stored in the DA by another domain manager.

24. The method of claim 22, wherein another domain manager corresponds to a system managing the user domain before the domain manager is registered to the DA.

25. The method of claim 22, wherein the requesting comprises:

requesting the DA to register the domain manager to the DA;

wherein the requesting of a DA to assign a domain manager to a user domain comprises requesting the DA to assign the domain manager to the user domain when the domain manager is registered to the DA.

26. The method of claim 24, wherein the requesting comprises:

receiving a DA credential from the DA; and

authenticating the DA by using the DA credential,

wherein the requesting comprises requesting the DA to assign the domain manager to the user domain when the DA is authenticated.

27. The method of claim 22, wherein the receiving comprises:

determining whether the domain manager is assigned to the user domain;

wherein the UDMS information is received when the domain manager is assigned to the user domain.

28. The method of claim 22, wherein the managing comprises:

receiving a user domain management request from a device which is positioned within a limited distance from the domain manager; and

managing the user domain in response to the user domain management request.

29. The method of claim 28, wherein the user domain management request comprises a device nonce, a domain manager identifier, a user domain identifier, and a device identifier.

30. The method of claim 28, wherein the user domain management request comprises at least one of a join request and a leave request with respect to the user domain of the device.

31. The method of claim 30, wherein the managing comprises:

allowing the device to join or leave the user domain in response to the join request or the leave request which is comprised in the user domain management request.

32. The method of claim 28, wherein the managing comprises:

authenticating the device;

creating a domain manager status request based on the user domain management request and transmitting the created domain manager status request to the DA;

receiving a domain manager status response from the DA;

updating the UDMS information based on the domain manager status response; and

creating a user domain management response based on the domain manager status response, and transmitting the created user domain management response to the device.

33. The method of claim 32, wherein the updating comprises:

transmitting the updated UDMS information to the DA.

37. A computer-readable recording medium storing a program for implementing the method of claim 22.

34. A domain management method, comprising:

assigning a first domain manager to a user domain of a user;

storing user domain management state (UDMS) information about the user domain in a domain authority (DA);

assigning a second domain manager to the user domain;

receiving the UDMS information from the DA by the second domain manager; and

managing the user domain by the second domain manager, based on the UDMS information.

35. The method of claim 34, wherein the storing comprises:

receiving a DA credential from the DA; and

authenticating the DA by using the DA credential;

wherein the UDMS information is stored in the DA when the DA is authenticated.

36. The method of claim 34, wherein the managing comprises:

allowing a communicable device via a limited distance communication channel interface to join or leave the user domain as a member of the user domain;

updating the UDMS information according to the join or leave request; and

transmitting the updated UDMS information to the DA.