Methods for accessing content based on a session ticket

• US 20080114995A1
• Filed: 11/14/2006
• Published: 05/15/2008
• Est. Priority Date: 11/14/2006
• Status: Active Grant

• Current Assignee: SanDisk Technologies LLC (Western Digital Corporation)
• Original Assignee: Sandisk Technologies Incorporated (Western Digital Corporation)
• Inventors: Jogand-Coulomb, Fabrice, Tanik, Haluk Kent, Rasizade, Oktay
• Granted Patent: US 8,079,071 B2
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

A method for accessing content stored on a memory device is provided. In this method, a request to access the content is transmitted and a session ticket is received. The session ticket includes a parameter used to decrypt the content and the session ticket is generated based on a variable that is configured to change at a session. The content may be accessed based on the session ticket.

Claims

1. A method for accessing content stored on a memory device, comprising:

transmitting a request to access the content;

receiving a session ticket, the session ticket including a parameter used to decrypt the content, the session ticket being generated based on a variable that is configured to change at a session; and

accessing the content based on the session ticket.

2. The method of claim 1, wherein the accessing the content comprises:

transmitting the session ticket to the memory device; and

receiving the content from the memory device.

3. The method of claim 1, wherein the parameter is a reference to a cryptographic key, the content being encrypted with the cryptographic key.

4. The method of claim 1, wherein the parameter is a cryptographic nonce, the cryptographic nonce being used to generate a cryptographic key.

5. The method of claim 1, wherein the variable is a number.

6. The method of claim 5, wherein the number is configured to change randomly.

7. The method of claim 1, wherein the session spans for a period of time.

8. The method of claim 1, wherein the session expires when a computing device coupled to the memory device is restarted.

9. The method of claim 1, wherein the session expires when the memory device is decoupled from a computing device.

10. A computer program product embodied in a computer readable medium and comprising computer instructions for:

providing a parameter used to decrypt a content;

encrypting the parameter based on a first number to define a session ticket, the first number being configured to change at a session; and

accessing the content based on the session ticket.

11. The computer program product of claim 10, further comprising computer instructions for decrypting the session ticket based on a second number to extract the parameter.

12. The computer program product of claim 11, wherein the first number is identical to the second number if the second number is generated at the session.

13. The computer program product of claim 11, wherein the first number is different from the second number if the second number is generated at a different session.

14. The computer program product of claim 10, wherein the first number is configured to randomly change.

15. A method for accessing content stored in a memory device, comprising:

providing a reference to a cryptographic key, the content being encrypted using the cryptographic key;

encrypting the reference to the cryptographic key based on a number to define a session ticket, the number being configured to change randomly at a session; and

accessing the content based on the session ticket.

16. The method of claim 15, wherein the session spans for a period of time.

17. The method of claim 15, wherein the session expires when a computing device coupled to the memory device is restarted.

18. The method of claim 15, wherein the session expires when the memory device is decoupled from a computing device.