METHOD, SYSTEM, AND DATA SERVER FOR CHECKING REVOCATION OF CONTENT DEVICE AND TRANSMITTING DATA

• US 20100023760A1
• Filed: 11/15/2007
• Published: 01/28/2010
• Est. Priority Date: 06/22/2007
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: YOU, Yong-kuk, YAO, Jun, LEE, Choong-hoon
• Granted Patent: US 8,347,404 B2
• Time in Patent Office: Days
• US Class Current: 713/158
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user

Abstract

A method of checking revocation of a device and software, and transmitting data to a secure device and secure software whose keys have not been leaked is provided. The method includes receiving authentication information of a device requesting transmission of data, and authentication information of software accessing the data in the device; checking revocation of the device and the software, based on the received authentication information; and transmitting the data to the software of the device, when the device and the software are not revoked as a result of the checking. By doing so, during transmission of data, such as content or a license, it is possible to check security of a device and software being executed in the device, so that the data can be more safely transmitted.

Claims

1. A method of checking revocation of a content device and transmitting data, the method comprising:

receiving authentication information of a device requesting transmission of data, and authentication information of software accessing the data in the device;

checking revocation of the device and the software, based on the received authentication information; and

transmitting the data to the software in the device, when the device and the software are not revoked.

2. The method of claim 1, further comprising authenticating at least one of the device and the software, and

wherein when the authentication succeeds, the transmitting of the data transmits the data to the software of the device.

3. The method of claim 2, wherein the authentication information of the device and the software is comprised in certificates, and

wherein the checking of the revocation further comprises scanning Certificate Revocation Lists (CRLs) of the certificates of the device and the software.

4. The method of claim 3, wherein the certificates comprise an Identification (ID) and a public key of each of the device and the software, and digital signatures of a Certification Authority (CA).

5. The method of claim 4, wherein the certificate of the software further comprises version information of the software, and

the checking of the revocation further comprises scanning a software revocation list comprising the version information of the software, and checking the revocation of the software having the version indicated by the version information.

6. The method of claim 5, wherein the authenticating of at least one of the device and the software is performed by a Challenge-Response (C-R) method, and comprises:

generating a random number value and transmitting the random number value;

receiving return values, wherein the return values are the random number value respectively encrypted with private keys of the device and the software;

decrypting the received return values with public keys of the device and the software comprised in the certificates; and

comparing the decrypted return values with the random number value, and authenticating the device and the software.

7. The method of claim 6, wherein the authenticating of at least one of the device and the software further comprises exchanging a session key for using a secure session for transmitting the data.

8. The method of claim 7, wherein the device provides a system call function encrypting the random number value with the private key of the device, according to a request of the software.

9. The method of claim 2, wherein the authentication information of the device is comprised in a certificate,

wherein the certificate comprises an Identification (ID) and a public key of the device, and a digital signature of a Certification Authority (CA);

and

the authentication information of the software comprises an ID and version information of the software, and a digital signature of the CA related to the authentication information of the software.

10. The method of claim 9, wherein the checking of the revocation further comprises scanning a Certification Revocation List (CRL) related to the certificate of the device and a software revocation list comprising version information of the software, and checking the revocation of the device and the revocation of the software having the version indicated by the version in format ion.

11. The method of claim 10, wherein the authenticating of at least one of the device and the software is performed by a Challenge-Response (C-R) method, and comprises:

generating a random number value and transmitting the random number value;

receiving a return value, wherein the return value is the random number value encrypted with a private key of the device;

decrypting the received return value with a public key of the device comprised in the certificate; and

comparing the decrypted return value with the random number value, and authenticating the device.

12. The method of claim 11, wherein when the software is installed or executed in the device, the method further comprises authenticating the software by using a digital signature of a CA related to execution codes of the software.

13. A transmission system, having a first device and a second device, which checks revocation of the first device and which transmits data to the first device, the transmission system comprising:

the first device which transmits a request signal of data transmission, authentication information of the first device, and authentication information of a software accessing the data in the first device; and

the second device which receives the transmitted authentication information, and as a result of checking the revocation of the first device and the software, when the first device and the software are not revoked, transmits the data to the software in the first device.

14. The transmission system of claim 13, wherein the second device authenticates at least one of the first device and the software, and when the authentication succeeds, transmits the data to the software of the first device.

15. The transmission system of claim 14, wherein:

the second device generates a random number value by a Challenge-Response (C-R) method and transmits the random number value,

the first device receives the random number value, respectively encrypts the random number value with private keys of the first device and the software, thereby generating return values, and transmits return values, and

the second device receives the return values, decrypts the return values with public keys of the first device and the software comprised in the authentication information of the first device and the software, compares the decrypted return values with the random number value, and authenticates the first device and the software.

16. The transmission system of claim 14, wherein the authentication information of the first device is comprised in a certificate,

wherein the certificate comprises an Identification (ID) and a public key of the first device, and a digital signature of a Certification Authority (CA);

and

the authentication information of the software comprises an ID and version information of the software, and a digital signature of the CA related to the authentication information of the software.

17. The transmission system of claim 16, wherein the second device scans a Certification Revocation List (CRL) related to the certificate of the first device, and a software revocation list comprising version information of the software, and checks the revocation of the first device, and the revocation of the software having the version indicated by the version in format ion.

18. A data server for checking revocation of a content device and transmitting data, the data server comprising:

an authentication information reception unit which receives authentication information of a device requesting transmission of data, and authentication information of software accessing the data in the device;

a revocation verification unit which checks revocation of the device and the software, based on the received authentication information; and

a data transmission unit which transmits the data to the software in the device, when the device and the software are not revoked as a result of the check.

19. The data server of claim 18, further comprising an authentication unit authenticating at least one of the device and the software,

wherein when the authentication succeeds, the data transmission unit transmits the data to the software of the device.

20. The data server of claim 19, wherein the authentication information of the device and the software is comprised in certificates, and

wherein the revocation verification unit scans Content Revision Lists (CRLs) of the certificates of the device and the software.

21. The data server of claim 20, wherein the authentication unit is performed by a Challenge-Response (C-R) method, and comprises:

a random number generation unit which generates a random number value and transmitting the random number value;

a reception unit which receives return values, wherein the return values are the random number value respectively encrypted with private keys of the device and the software; and

a determination unit which decrypts the received return values with public keys of the device and the software respectively comprised in the authentication information of the device and the software, and comparing the return values with the random number value.

22. The data server of claim 19, wherein the authentication information of the device is comprised in a certificate,

wherein the certificate comprises an Identification (ID) and a public key of the device, and a digital signature of a Certification Authority (CA);

and

the authentication information of the software comprises an ID and version information of the software, and a digital signature of the CA related to the authentication information of the software.

23. The data server of claim 22, wherein the revocation verification unit scans a CRL related to the certificate of the device and a software revocation list comprising version information of the software, and checks the revocation of the device and the revocation of the software having the version indicated by the version information.

24. A computer readable recording medium having recorded thereon a program for executing a method of checking revocation of a content device and transmitting data, the method comprising:

receiving authentication information of a device requesting transmission of data, and authentication information of software accessing the data in the device;

checking revocation of the device and the software, based on the received authentication information; and

transmitting the data to the software in the device, when the device and the software are not revoked.