Method for Communicating Entitlement Data From a Server, Related Server, Client Systems and Computer Program Product

• US 20090034743A1
• Filed: 12/29/2005
• Published: 02/05/2009
• Est. Priority Date: 12/29/2005
• Status: Active Grant

• Current Assignee: Telecom Italia S.p.A.
• Original Assignee: Telecom Italia S.p.A.
• Inventors: Balestri, Massimo, De Petris, Gianluca, Silano, Barbara
• Granted Patent: US 8,442,236 B2
• Time in Patent Office: Days
• US Class Current: 380/285
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10

Abstract

A server communicates a set of entitlement data representative of the entitlement of a client to access corresponding contents data by using a set of keys and a non-invertible cryptographic function. The cryptographic function is applied to a set of candidate bit strings using the set of keys to find a selected bit string that produces the set of entitlement data as a result of the application of the non-invertible cryptographic function by using the keys in the set. The server and the client share the cryptographic function as well as the set of keys (or the selected bit string). The server transmits to the client the selected bit string (or the set of keys). In either case, the client is thus in a position to apply the cryptographic function to the selected string of bits by using the set of keys, thereby reconstructing the set of entitlement data.

Claims

1-18. -18. (canceled)

19. A method of communicating from a server a set of entitlement data representative of entitlement of at least one client to access corresponding content data, comprising the steps of:

providing with said server a set of keys, a non-invertible function, and a bit string that produces said set of entitlement data as a result of said non-invertible function being applied to said selected string of bits by using said set of keys;

causing said server and said at least one client to share said non-invertible function and one of said set of keys and said selected bit string; and

transmitting from said server the other of said set of keys and said selected bit string.

20. The method of claim 19, wherein the non-invertible function is a non-invertible cryptographic function.

21. The method of claim 19, comprising selecting said bit string out of a set of candidate bit strings.

22. The method of claim 19, comprising the steps of:

causing said server and said at least one client to share said non-invertible function and said set of keys; and

transmitting from said server said bit string.

23. The method of claim 19, wherein said non-invertible function has a uniform distribution of outputs as a function of inputs.

24. The method of claim 19, wherein said non-invertible function is a message authentication code function.

25. The method of claim 24, wherein said non-invertible function is a HMAC-x function where x is selected from the group:

HAVAL,

MD2, MD4, MD5,

N-Hash,

RIPEMD, RIPEMD-128, RIPEMD-160, RIPEMD-256, RIPEMD-3U,

SHA, SHA-0, SHA-1 and SHA-2, SHA-256, SHA-384, SHA-512,

Snefru, Snefru-2

Tiger,

Whirlpool, Whirlpool-0

GOST-Hash,

HAS-160, HAS-V,

Panama, and

MGF1.

26. The method of claim 25, wherein said non-invertible function is selected from the group:

HMAC-SHA-1 and

HMAC-MD5.

27. The method of claim 19, wherein providing a set of keys comprises the step of:

trying different keys until a set of keys producing said set of entitlement data as a result of said non-invertible function being applied to said string of bits by using said set of keys is found.

28. The method of claim 21, comprising the steps of:

orderly selecting said keys in said set of keys; and

subsequently using each key orderly selected in said set of keys for applying said non-invertible cryptographic function to newly generated candidate bit strings in said set of candidate bit strings.

29. The method of claim 19, comprising the steps of:

partitioning said set of entitlement data into at least a first and a second subset of entitlement data; and

applying said non-invertible function and keys of said set of keys to said at least a first and a second subset of entitlement data to produce at least a first and a second bit string that respectively produce said at least a first and a second subset of entitlement data as a result of a non-invertible cryptographic function being applied to said at least a first and a second bit string by using said set of keys, whereby said set of entitlement data is expressed by the concatenation of said at least a first and a second bit string.

30. The method of claim 29, wherein said at least a first and a second subset of entitlement data comprise the same amount of entitlement data.

31. The method of claim 19, further comprising the steps of:

receiving at said client the other of said set of keys and said bit string; and

applying said cryptographic function to said string of bits by using said set of keys, thereby reconstructing at said client said set entitlement data.

32. The method of claim 31, comprising the steps of:

said server associating with said entitlement data parametric values expressing conditions for access by said at least one client to corresponding contents data; and

said client associating said parametric values to said entitlement data in said set as reconstructed at said client as a function of the order in which the corresponding bits are in said string of bits.

33. A server system capable of communicating according to the method of claim 19, and comprising a set of entitlement data representative of entitlement of at least one client to access corresponding content data, said server system being configured for sharing with said at least one client a noninvertible function and one of a set of keys and a bit string and for transmitting to said at least one client an other of said set of keys and said bit string.

34. The server system of claim 33, wherein said server system is implemented as a special purpose hardware processor configured for applying said non-invertible function to a string of bits by using said set of keys.

35. A client system cooperable with the server system of claim 33, comprising:

a client system configured for;

receiving from said server system the other of said set of keys and said bit string; and

applying said non-invertible function to a string of bits by using said set of keys, thereby reconstructing said set entitlement data.

36. A computer program product, loadable in the memory of at least one computer and comprising software code portions capable of performing the steps of the method of claim 19.