NETWORK INTEGRITY MAINTENANCE

• US 20110238983A1
• Filed: 06/06/2011
• Published: 09/29/2011
• Est. Priority Date: 10/21/2003
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Pestoni, Florian, McCurley, Kevin Snow, Lotspiech, Jeffrey Bruce
• Application Number:
  US13/153,603
• Publication Number:
  US 20110238983A1
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A device removal system securely removes an item of content or a device from a content-protected home network. An authorization table maintains a list of devices in the content-protected home network in addition to removed devices. The authorization table also maintains a list of deleted content. Through management of various cryptographic keys and techniques, devices and content will not play on a content-protected home network after they have been removed. A secret network ID reduces the possibility of unauthorized playing of content on the content-protected home network. A web server may join the content-protected home network as a device, providing backup for the secret network ID. Otherwise, the device manufacturer will provide the secret network ID in case of a device failure. Storing a verification value in each device ensures integrity of critical cryptographic values. This verification value is compared to network values to ensure network values have not been corrupted.

Claims

1. A method for maintaining an integrity of a network containing a plurality of devices, the method comprising:

calculating an integrity check value for network files and network values;

comparing the calculated integrity check value to a saved integrity check value, to determine if any one of the network files and the network values has changed;

calculating an encryption key on the network files and network values; and

decrypting a protected content in the network using the encryption key.

2. The method of claim 1, wherein the network files comprise a file that contains a list of removed files.

3. The method of claim 2, wherein the network files further comprise a file that contains a list of deleted content.

4. The method of claim 3, wherein the files that contain the lists of removed files and deleted content are stored in at least two different datastores.

5. The method of claim 4, wherein the files that contain the lists of removed files and deleted content are contained in an authorization table.

6. The method of claim 5, wherein the network files contain a key management block.

7. The method of claim 5, wherein the network values contain a device binding ID.

8. The method of claim 1, wherein the integrity check value contains the encryption key.

9. The method of claim 1, further comprising restricting playback of a protected content in the network.

10. The method of claim 9, wherein restricting the playback of the protected content in the network comprises determining if the protected content has an associated geographic restriction.

11. The method of claim 10, wherein restricting the playback of the protected content in the network further comprises determining if a device to play the protected content has an associated geographic limitation.

12. The method of claim 11, wherein restricting the playback of the protected content in the network further comprises preventing the playback of the protected content if the geographic restriction of the protected content is not met.

13. The method of claim 11, wherein restricting the playback of the protected content in the network further comprises preventing the playback of the protected content if the geographic limitation of the device to play the protected content is not met.

14. The method of claim 11, further comprising determining a geographic location of the device to play the protected content.

15. The method of claim 14, wherein determining the geographic location of the device to play the protected content comprises determining the geographic location based on a connection of the device to a cable service.

16. The method of claim 14, wherein determining the geographic location of the device to play the protected content comprises determining the geographic location based on an internal GPS receiver.

17. The method of claim 14, wherein determining the geographic location of the device to play the protected content comprises querying a user about the device geographic location.

18. The method of claim 14, further comprising placing a limitation on the number of times the geographic location of the device may be changed.

19. A system for maintaining an integrity of a network containing a plurality of devices, the system comprising:

an integrity check value that is calculated for network files and network values;

the calculated integrity check value being compared to a saved integrity check value, to determine if any one of the network files and the network values has changed;

an encryption key that is calculated on the network files and network values; and

a protected content being decrypted in the network using the encryption key.

20. The system of claim 19, wherein the network files comprise a file that contains a list of removed files.