Hardware authentication mechanism for transmission of data between devices on an IEEE 1394-1995 serial bus network

• US 5,948,136 A
• Filed: 07/30/1997
• Issued: 09/07/1999
• Est. Priority Date: 07/30/1997
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.), Sony Electronics Inc. (Sony Group Corp.)
• Inventors: Smyers, Scott D.
• Primary Examiner(s): Maung, Zarni
• Application Number:
  US08/903,546
• Time in Patent Office: 769 Days
• Field of Search: 395/287, 395/288, 395/186, 395/187.01, 395/188.01, 395/200.59, 395/200.55, 395/200.57, 395/200.47, 395/200.49, 380/23, 380/24, 380/25, 380/49, 340/825.34, 364/286.4, 364/286.6
• US Class Current: 710/107
• CPC Class Codes: H04L 12/40058 Isochronous transmission
• CPC Class Codes: H04L 12/40071 Packet processing; Packet format adaptation of digital video signals for transport over a specific network H04N21/2381, H04N21/4363, H04N21/4381; packet switches H04L49/00; intermediate storage or scheduling H04L49/90
• CPC Class Codes: H04L 12/40104 Security; Encryption; Content protection cryptographic protocols H04L9/00; protocols for network security H04L63/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A hardware authentication mechanism ensures that a device receiving a packet of copy-protected data has been authorized by the transmitting device to receive the packet of data. The transmitting device authenticates a receiving device and verifies that the receiving device is authorized to receive the copy-protected data. Once authenticated, the transmitting device then sends a write authentication transaction, including a physical identifier value representing the transmitting device, to the receiving device. This authentication transaction is preferably addressed to a predefined address in the receiving device. This address is preferably communicated from the receiving device to the source device during the earlier authentication process. Alternatively, the address is assigned by convention. In an alternative embodiment, the authentication transaction also contains additional information, such as one or more encryption keys which are needed by the receiving device to decipher and use the copy-protected data. Upon receiving the authentication transaction, the receiving device then latches the physical identifier value into a dedicated register. When a data packet is then received at the receiving device, the interface hardware of the receiving device compares the physical identifier value in the received data packet to the value stored in the dedicated register. If the physical identifier value in the received data packet and the value stored in the dedicated register are the same, the interface hardware receives the data packet. If the physical identifier value in the received data packet and the value stored in the dedicated register are not the same, the interface hardware does not receive the data packet.

Claims

1. A method of authenticating a receiving device for receiving a stream of data comprising the steps of:

a. receiving a first identifying value from an originating device, indicating that the receiving device is authorized to receive data packets from the originating device;

b. latching the first identifying value into a storage circuit;

c. receiving packets of data each including a second identifying value representing the originating device; and

d. accepting packets in a receiving device only when the second identifying value matches the first identifying value in the storage circuit.

2. The method as claimed in claim 1 further comprising the step of comparing the first identifying value to the second identifying value.

3. The method as claimed in claim 2 wherein packets of data having the second identifying value which does not match the first identifying value are rejected.

4. The method as claimed in claim 3 wherein the storage circuit is a dedicated register.

5. The method as claimed in claim 4 wherein the orginating device and the receiving device are coupled together within an IEEE 1394-1995 serial bus network.

6. The method as claimed in claim 5 wherein the first and second identifying values are included within sourceID fields in different packet headers.

7. The method as claimed in claim 5 wherein the first identifying value is transmitted within an asynchronous write transaction.

8. The method as claimed in claim 7 wherein the packets of data make up an isochronous stream of data.

9. An apparatus for authenticating a receiving device comprising:

a. a storage circuit for storing a first identifying value received from a transmitting device indicating that the receiver is authorized to receive data packets from the transmitting device; and

b. a comparing circuit coupled to the storage circuit for comparing a second identifying value from received data packets to the first identifying value, wherein only received data packets having the second identifying value matching the first identifying value are provided to the receiving device.

10. The apparatus as claimed in claim 9 wherein the first identifying value is received within a write transaction and latched into the storage circuit.

11. The apparatus as claimed in claim 10 wherein the storage circuit is a dedicated register.

12. The apparatus as claimed in claim 9 wherein the apparatus is coupled as a node within an IEEE 1394-1995 serial bus network.

13. The apparatus as claimed in claim 12 wherein the second identifying value is included within a sourceID field in a header of the received data packets.

14. An apparatus for receiving communications comprising:

a. a receiving circuit for receiving communications from other devices;

b. a storage circuit coupled to the receiving circuit for storing a first identifying value received from a transmitting device, indicating that the receiving circuit is authorized to receive data packets from the transmitting device; and

c. a comparing circuit coupled to the receiving circuit and to the storage circuit for comparing a second identifying value from received data packets to the first identifying value, wherein only received data packets having a second identifying value matching the first identifying value are provided to the apparatus and received data packets having a second identifying value not matching the first identifying value are rejected.

15. The apparatus as claimed in claim 14 wherein the first identifying value is received within a write transaction and latched into the storage circuit.

16. The apparatus as claimed in claim 15 wherein the apparatus is coupled as a node within an IEEE 1394-1995 serial bus network.

17. The apparatus as claimed in claim 16 wherein the second identifying value is included within a sourceID field in a header of the received data packets.

18. The apparatus as claimed in claim 17 wherein the storage circuit is a dedicated register.