Method and system for consumer electronic device certificate management

• US 6,671,803 B1
• Filed: 05/27/1999
• Issued: 12/30/2003
• Est. Priority Date: 10/06/1998
• Status: Expired due to Fees

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Pasieka, Michael S.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US09/320,808
• Time in Patent Office: 1,678 Days
• Field of Search: 380/200-203, 713/156, 713/193, 713/176, 705/56, 705/57
• US Class Current: 713/156
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G07F 7/08 by coded identity card or credit card or other personal identification means without personal verification means G07F7/02
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A system for providing security, such as copy protection, between a source device and a sink device, in accordance with the present invention, includes a first device including a list of certificates, each certificate of the list including a signature for identifying manufacturers of second devices. A second device is included for connecting to the first device, the second device including a list of certificates each certificate including a signature for identifying manufacturers of the first devices. At least one of the first device and the second device includes an adaptor for adapting a respective certificate list to provide entry of a new signature for identifying a new manufacturer of one of the first devices and the second devices.

Claims

1. A system for providing security between a source device and a sink device comprising:

a first device including a list of certificates, each certificate of the list including a signature configured for identifying manufacturers of second devices;

a second device configured for connecting to the first device, the second device including a list of certificates each certificate including a signature for identifying manufacturers of the first devices;

wherein the signatures each include a public key designated for each manufacturer; and

at least one of the first device and the second device including means for adapting its respective certificate list to provide entry of a new signature configured for identifying a new manufacturer of one of the first device and the second device, wherein predetermined codes or keys are used by a new manufacturer to pre-verify a new device or chance an existing public key of a manufacturer.

2. The system as recited in claim 1, wherein the first device includes one of a pass-through device and a playback device.

3. The system as recited in claim 1, wherein the second device includes one of a record device and a presentation device.

4. The system as recited in claim 1, wherein the means for adapting includes means for transmitting and storing a new certificate between devices.

5. The system as recited in claim 1, wherein the first device and the second device are connected by a bus.

6. A system for providing copy protection between a source device and a sink device comprising:

a source device including a list of certificates, each certificate of the list configured for providing a signature for a manufacturer of sink devices, the signature configured for verifying sink devices;

a sink device configured for connecting to the source device, the sink device including a list of certificates corresponding to source device manufacturers, the sink device having a certificate omitted from the list of certificates of the source device;

wherein the signatures each include a public key designated for each manufacturer and

means for adapting the source device to receive a new certificate from the sink device wherein the new certificate is transmitted to the source device to be added to the list of certificates thereby identifying the sink device to the source device, wherein predetermined codes or keys are used by a new manufacturer to pre-verify a new device or change an existing public key of a manufacturer.

7. The system as recited in claim 6, wherein the sink device includes a certificate list corresponding to manufactures of source devices and the source device has a certificate omitted from the list of certificates of the sink device, the sink device further comprising means for adapting the sink device to receive a new certificate wherein the new certificate is transmitted to the sink device to be added to the list of certificates thereby identifying the source device to the sink device.

8. The system as recited in claim 6, wherein the source device includes one of a pass-through device and a playback device.

9. The system as recited in claim 6, wherein the sink device includes one of a record device and a presentation device.

10. The system as recited in claim 6, wherein the first device and the second device are connected by a bus.

11. A system for providing copy protection between a source device and a sink device comprising:

a sink device including a list of certificates, each certificate of the list configured for providing a signature for a manufacturer of source devices, the signature configured for verifying source devices;

a source device configured for connecting to the sink device, the source device including a list of certificates corresponding to sink device manufacturers, the source device having a certificate omitted from the list of certificates of the sink device;

wherein the signatures each include a public key designated for each manufacturer; and

means for adapting the sink device to receive a new certificate from the source device wherein the new certificate is transmitted to the sink device to be added to the list of certificates thereby identifying the source device to the sink device, wherein predetermined codes or keys are used by a new manufacturer to pre-verify a new device or change an existing public key of a manufacturer.

12. The system as recited in claim 11, wherein the source device includes a certificate list corresponding to manufactures of sink devices and the sink device has a certificate omitted from the list of certificates of the source device, the source device further comprising means for adapting the source device to receive a new certificate wherein the new certificate is transmitted to the source device to be added to the list of certificates thereby identifying the sink device to the source device.

13. The system as recited in claim 11, wherein the source device includes one of a pass-through device and a playback device.

14. The system as recited in claim 11, wherein the sink device includes one of a record device and a presentation device.

15. The system as recited in claim 11, wherein the signatures each include a public key designated for each manufacturer.

16. The system as recited in claim 11, wherein the sink device and the source device are connected by a bus.

17. A method for copy protecting content transferred between a source device and a sink device comprising the steps of:

transmitting identifying information between the source device and the sink device, wherein the identifying information and the new identifying information includes public keys corresponding to manufacturers of the source devices and the sink devices;

verifying the source device and the sink device by determining if the source device and the sink device include the identifying information transmitted from the other of the source device and the sink device;

if the step of verifying fails, checking new identifying information against certification information in which the certification information is provided for one of a new source device and a new sink device including new identifying information; and

transmitting and storing the new identifying information between the source device and the sink device using predetermined codes or keys are used by a new manufacturer to pre-verify a new device or change an existing public key of a manufacturer to provide a new certificate for enabling data exchanges between the source device and the sink device.

18. The method as recited in claim 17, wherein the step of transmitting and storing the new identifying information includes verifying the new identifying information with a predetermined certification source.

19. The method as recited in claim 18, wherein the predetermined certification source includes a private key.