MECHANISM FOR INTERNAL PROCESSING OF CONTENT THROUGH PARTIAL AUTHENTICATION ON SECONDARY CHANNEL

• US 20120023331A1
• Filed: 07/23/2010
• Published: 01/26/2012
• Est. Priority Date: 07/23/2010
• Status: Active Grant

• Current Assignee: Lattice Semiconductor Corporation
• Original Assignee: Lattice Semiconductor Corporation
• Inventors: Altmann, William Conrad
• Granted Patent: US 8,930,692 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04N 21/4126 The peripheral being portable, e.g. PDAs or mobile phones
• CPC Class Codes: H04N 21/43635 HDMI
• CPC Class Codes: H04N 21/43637 involving a wireless protocol, e.g. Bluetooth, RF or wireless LAN [IEEE 802.11] arrangements for wireless networking or broadcasting of information in indoor or near-field type systems H04B10/114
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card

Abstract

Embodiments of the invention are generally directed to performing processing of content through partial authentication of secondary channel. An embodiment of a method includes performing a first authentication between a source transmitting device and a sink receiving device for communication of data streams, and performing a second authentication between the source transmitting device and a bridge device such that the second authentication is independent of the first authentication and the sink receiving device remains uninfluenced by the second authentication. The bridge device includes an intermediate carrier device coupled to the source transmitting device and the sink receiving device. The method further includes transmitting a data stream having encrypted content from the source transmitting device to the bridge device.

Claims

1. A method comprising:

performing a first authentication between a source transmitting device and a sink receiving device for communication of data streams;

performing a second authentication between the source transmitting device and a bridge device such that the second authentication is independent of the first authentication and the sink receiving device remains uninfluenced by the second authentication, the bridge device including an intermediate carrier device coupled to the source transmitting device and the sink receiving device; and

transmitting a data stream having encrypted content from the source transmitting device to the bridge device.

2. The method of claim 1, wherein the first authentication comprises calculating and saving secret values at the source transmitting device, wherein the secret values are calculated based on public values associated with the sink receiving device.

3. The method of claim 1, wherein the second authentication comprises transmitting the secret values to the bridge device.

4. The method of claim 3, wherein the second authentication further comprises receiving a confirmation at the source transmitting device from the bridge device that the secret values have been received at the bridge device, and triggering the transmission of the data stream to the bridge device upon receiving the confirmation.

5. The method of claim 4, further comprising receiving and decrypting the secret values at the bridge device.

6. The method of claim 1, further comprising receiving the data stream at the bridge device, wherein encrypted content of the data stream is decrypted, and the decrypted content is accessed, analyzed or modified at the bridge device prior to being re-encrypted and transmitted to the sink receiving device.

7. The method of claim 1, wherein the first authentication is performed on a first link including a source device-sink device link, and wherein the second authentication is performed on a second link including a source device-bridge device link.

8. The method of claim 1, wherein the content comprises High-Definition Multimedia Interface (HDMI)-based content or Mobile High-Definition Link (MHL)-based content.

9. The method of claim 1, wherein the encryption of the content is based on a High-bandwidth Digital Content Protection (HDCP) protocol.

10. A system comprising:

a data processing device having a storage medium and a processor coupled with the storage medium, the data processing device further having a source transmitting device coupled to a sink receiving device and a bridge device; and

the source transmitting device having an authentication mechanism, the source transmitting device to;

perform a first authentication between the source transmitting device and the sink receiving device for communication of data streams;

perform a second authentication between the source transmitting device and the bridge device such that the second authentication is independent of the first authentication and the sink receiving device remains uninfluenced by the second authentication, the bridge device including an intermediate carrier device coupled to the source transmitting device and the sink receiving device; and

transmit a data stream having encrypted content from the source transmitting device to the bridge device.

11. The system of claim 10, wherein the first authentication comprises calculating and saving secret values at the source transmitting device, wherein the secret values are calculated based on public values associated with the sink receiving device.

12. The system of claim 10, wherein the second authentication comprises transmitting the secret values to the bridge device.

13. The system of claim 12, wherein the second authentication further comprises receiving a confirmation at the source transmitting device from the bridge device that the secret values have been received at the bridge device, and triggering the transmission of the data stream to the bridge device upon receiving the confirmation.

14. The system of claim 13, wherein the bridge device to receive and decrypt the secret values.

15. An apparatus comprising:

a source transmitting device having an authentication mechanism, the source transmitting device to;

perform a first authentication between the source transmitting device and a sink receiving device for communication of data streams;

perform a second authentication between the source transmitting device and a bridge device such that the second authentication is independent of the first authentication and the sink receiving device remains uninfluenced by the second authentication, the bridge device including an intermediate carrier device coupled to the source transmitting device and the sink receiving device; and

transmit a data stream having encrypted content from the source transmitting device to the bridge device.

16. The apparatus of claim 15, wherein the first authentication comprises calculating and saving secret values at the source transmitting device, wherein the secret values are calculated based on public values associated with the sink receiving device.

17. The apparatus of claim 15, wherein the second authentication comprises transmitting the secret values to the bridge device.

18. The apparatus of claim 17, wherein the second authentication further comprises receiving a confirmation at the source transmitting device from the bridge device that the secret values have been received at the bridge device, and triggering the transmission of the data stream to the bridge device upon receiving the confirmation.

19. The apparatus claim 18, wherein the bridge device to receive and decrypt the secret values.