SECURE SIGNING METHOD, SECURE AUTHENTICATION METHOD AND IPTV SYSTEM

• US 20100211793A1
• Filed: 09/11/2008
• Published: 08/19/2010
• Est. Priority Date: 09/11/2007
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Cho, Sung Hyun, Park, Il Gon, Chung, Min Gyu, Jeong, Man Soo, Kiran, Kumar K., Pak, Koo Yong
• Granted Patent: US 8,924,731 B2
• Time in Patent Office: Days
• US Class Current: 713/176
• CPC Class Codes: H04N 21/23892 involving embedding information at multiplex stream level, e.g. embedding a watermark at packet level
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/6175 involving transmission via Internet broadcast-related systems characterised by the transmission system being the Internet H04H60/82
• CPC Class Codes: H04N 21/8358 involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing

Abstract

A secure signing method, a secure authentication method, and an IPTV system are disclosed. The secure signing method includes preparing digital signature header fields and setting an attribute, calculating a hash digest of content using a hashing algorithm, storing the calculated hash value in a message digest field of the digital signature header, encrypting the message digest using a secret key and inserting the encrypted message digest in a signature field of the digital signature header, and associating the digital signature header with the content by prefixing the digital signature header to the content. The secure authentication method includes checking whether a format and value of a digital signature header of content are appropriate, calculating a hash digest of the content using a hashing algorithm, comparing the calculated hash value with a message digest field of the digital signature header, decrypting the hash value of the signature field of the digital signature header using a public key extracted from a certificate field, and comparing the decrypted hash value with the message digest.

Claims

1. A secure signing method, comprising the steps of:

preparing digital signature header fields and setting an attribute;

calculating a hash digest of content using a hashing algorithm;

storing the calculated hash value in a message digest field of the digital signature header; and

encrypting the message digest using a secret private key and putting the encrypted message digest in a signature field of the digital signature header, wherein the digital signature header is located ahead of the content.

2. The secure signing method of claim 1, wherein the hashing algorithm is identified within a digest algorithm field of the digital signature header.

3. The secure signing method of claim 1, further comprising the step of putting a certificate of a signer in a certificate field of the digital signature header field, wherein the signer'"'"'s certificate includes the signer'"'"'s identification information, a public key that can be used to decrypt the encrypted message digest, and a digital signature a high level of a trusted certificate authority.

4. The secure signing method of claim 2, further comprising the step of putting a certificate of the certificate authority, which authenticates the signer'"'"'s certificate, in the certificate field of the digital signature header field.

5. A secure authentication method, comprising the steps of:

checking whether a format and value of a digital signature header of content are appropriate;

calculating a hash digest of the content using a hashing algorithm;

comparing the calculated hash value with a message digest field of the digital signature header;

decrypting the hash value of the signature field of the digital signature header using a public key extracted from a certificate field; and

comparing the decrypted hash value with the message digest.

6. The secure authentication method of claim 5, wherein the hashing algorithm is identified within a digest algorithm field of the digital signature header.

7. An IPTV system comprising:

a server side system calculating a hash digest of content, storing the calculated hash value in a message digest field of a digital signature header, encrypting the message digest using a secret key, inserting the encrypted message digest in a signature field of the digital signature header, prefixing the digital signature header to the content, and transferring the content to which the digital signature header is prefixed; and

an IPTV receiving device performing an authentication process of receiving the digital signature header, checking whether a format and value of the digital signature header are appropriate, calculating a hash digest of the content, comparing the calculated hash value with the message digest field of the digital signature header, and decrypting the hash value of the signature field of the digital signature header using a public key extracted from a certificate field.

8. The IPTV system of claim 7, wherein:

the server side system inserts a signer'"'"'s certificate in the certificate field, and

the IPTV receiving device extracts the public key from the signer'"'"'s certificate inserted in the certificate field.

9. The IPTV system of claim 7, wherein the authentication process is performed by a native security solution of the IPTV receiving device.

10. The IPTV system of claim 7, wherein the IPTV receiving device is associated with a security solution level in which a security characteristic of the IPTV receiving device is graded according to preset criterion.