Method and apparatus for authenticating an hierarchy of video receiving devices

• US 6,956,949 B1
• Filed: 09/29/2000
• Issued: 10/18/2005
• Est. Priority Date: 08/29/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Faber, Robert W., Graunke, Gary L., Traw, Brendan S., Lee, David A.
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US09/675,645
• Time in Patent Office: 1,845 Days
• Field of Search: 713168-171, 713/193, 713/189, 380200-203, 380225-226, 380/221, 380259-261, 380/229, 380/255, 380/37, 380/44
• US Class Current: 380/200
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04N 21/4122 additional display device, e.g. video projector digital output for controlling a plurality of local displays G06F3/1423
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A video source device and a video repeater device cooperatively authenticates said video repeater apparatus to said video source device. In one embodiment, the authentication is performed using an identical authentication process a video sink device would authenticate itself to the video source device. The video repeater device augment the identical process identifying itself as a repeater device. The video repeater device also in cooperation with at least one video sink device authenticates the at least one video sink device. The video repeater device in turn, in cooperation with the video source device, authenticates the at least one video sink device to the video source device. In one embodiment, the video repeater device also in cooperation with another video repeater device, authenticates yet another at least one video sink device to the video repeater device. In like manner, the video repeater device, in cooperation with the video source device, authenticates the yet another at least one video sink device to the video source device. In one embodiment, the video repeater device includes topological information of the video sink devices among the authentication information provided to the video source device. Accordingly, video sink devices may be hierarchically organized to the video source device.

Claims

1. A method comprising:

a video source device and a first video repeater device cooperatively authenticating the first video repeater device to the video source device;

the first video repeater device and first at least one video sink device cooperatively authenticating the first video sink device to the first video repeater device; and

the video source device and the first video repeater device cooperatively authenticating the first video sink device to the video source device;

wherein said cooperative authentication of the first video sink device to the video source device comprises;

said first video repeater device providing, to said video source device, a device key selection vector for the first video sink device.

2. The method of claim 1, wherein said cooperative authentication of the first video repeater device to the video source device comprises said video source device and said first video repeater device employing a substantially identical authentication protocol said video source device and a video sink device would employ to authenticate said video sink device to said video source device, and augmenting said substantially identical authentication protocol with identification of said first video repeater device as a repeater device to said video source device.

3. The method of claim 1, wherein said cooperative authentication of the first video repeater device to the video source device further comprises:

said video source device and said first video repeater device exchanging device key selection vectors with each other;

said first video repeater device providing said video source device with a verification key generated using a symmetric ciphering process with an authentication key generated using the received device key selection vector of said video source device; and

said video source device verifying said verification key provided by said first video repeater device.

4. The method of claim 3, wherein said cooperative authentication of the first video repeater device to the video source device further comprises said first video repeater device generating said authentication key using said received device key selection vector of said video source device and its own device key.

5. The method of claim 1, wherein:

said cooperative authentication of the first video repeater device to the video source device comprises said video source device and said first video repeater device exchanging device key selection vectors with each other; and

said method further comprises said video source device and said first video repeater device each independently generating a shared secret using a symmetric ciphering process using an authentication key generated using at least one of said device key selection vectors.

6. The method of claim 1, wherein said cooperative authentication between said first video repeater device and said video source device of the video sink device to the video source device comprises:

said first video repeater device providing a verification signature generated using the provided device key selection vector and a shared secret value between said video source device and said first video repeater device; and

said video source device verifying said verification signature.

7. The method of claim 6, wherein said method further comprises said video source device and said first video repeater device each generating said shared secret value using a symmetric ciphering process with an authentication key generated based on device key selection vectors in said video source device and said first video repeater device.

8. The method of claim 1, wherein

said method further comprises said video source device and a video sink device cooperatively authenticating said video sink device to said video source device;

both of said cooperative authentication of said first video repeater device and said video sink device to said video source device employing a substantially identical authentication protocol, with said cooperative authentication of said first video repeater device to said video source device augmenting said substantially identical authentication protocol with said first video repeater device identifying itself as a repeater device to said video source device.

9. The method of claim 1, wherein said method further comprises

said first video repeater device and a second video repeater device cooperatively authenticating second at least one video sink device to said first video repeater device;

and

said video source device and said first video repeater device cooperatively authenticating said second at least one video sink device to said video source device.

10. The method of claim 9, wherein said video source device and said first video repeater device cooperatively authenticating said first and second at least one video sink device to said video source device at substantially the same time.

11. The method of claim 9, wherein said method further comprises said first video repeater conveying topological information of said first and second at least one video sink device to said video source device.

12. In a first video repeater device, a method comprising:

in cooperation with a video source device, authenticating itself to the video source device;

in cooperation with at least one video sink device, authenticating first at least one video sink device to said first video repeater device; and

in cooperation with the video source device, authenticating the first video sink device to the video source device;

wherein said authentication of the first video sink device to the video source device comprises;

said first video repeater device providing, to said video source device, a device key selection vector for the first video sink device.

13. The method of claim 12, wherein said cooperative authentication of the first video repeater device to the video source device comprises said first video repeater device employing a substantially identical authentication protocol a video sink device would employ to authenticate said video sink device to said video source device, and augmenting said substantially identical authentication protocol with identification of said first video repeater device as a repeater device to said video source device.

14. The method of claim 12, wherein said cooperative authentication of the first video repeater device to the video source device comprises:

exchanging device key selection vectors with said video source device;

identifying said first video repeater device as a repeater device to said video source device; and

providing said video source device with a verification key generated using a symmetric ciphering process with an authentication key generated using the received device key selection vector of said video source device.

15. The method of claim 14, wherein said cooperative authentication of the first video repeater device to the video source device further comprises generating said authentication key using said received device key selection vector of said video source device and its own device key.

16. The method of claim 12, wherein:

said cooperative authentication of the first video repeater device to the video source device comprises exchanging device key selection vectors with said video source device; and

said method further comprises independently generating a shared secret with said video source device using a symmetric ciphering process using an authentication key generated using at least one of said device key selection vectors.

17. The method of claim 12, wherein said cooperative authentication of the first video sink device to the video source device comprises providing a verification signature generated using the provided device key selection vector and a shared secret value with said video source device.

18. The method of claim 17, wherein said method further comprises independently generating said shared secret value using a symmetric ciphering process with an authentication key generated based on device key selection vectors of said video source device and said first video repeater device.

19. The method of claim 12, wherein said method further comprises

a second video repeater device in cooperation with said first video repeater device authenticating second at least one video sink device to said first video repeater device;

and

in cooperation with said video source device, authenticating said second video sink device to said video source device.

20. The method of claim 19, wherein said first and second video sink devices are authenticated to said video source device at substantially the same time.

21. The method of claim 19, wherein said method further comprises conveying topological information of said first and second video sink devices to said video source device.

22. A video repeater apparatus comprising:

first communication interface to couple first at least one video sink device to said video repeater apparatus to exchange first authentication information with the at least one video sink device;

second communication interface to couple the video repeater apparatus to a video source device to first exchange second, then third authentication information to said video source device for first authenticating said video repeater apparatus, then said first at least one video sink device to said video source device; and

an authentication unit coupled to said first and second communication interfaces to authenticate said first at least one video sink device, and to generate the portions of said second and third authentication information of said video repeater apparatus and said first at least one video sink device to be provided to said video source device.

23. The apparatus of claim 22, wherein

said first, second and third authentication information exchanged comprise corresponding pair-wise combinations of device key selection vectors of said video repeater apparatus, said at least one video sink device, and said video source device, with said second and third authentication information further comprising corresponding verification keys, and said second authentication information further comprising information identifying said video repeater apparatus as a video repeater device;

and

said authentication unit comprises a ciphering unit to symmetrically generate said verification keys with corresponding authentication keys generated using the corresponding pair-wise combinations of the device key selection vectors.

24. The apparatus of claim 23, wherein said ciphering unit further independently generates corresponding shared secrets between said video repeater apparatus and said at least one video sink device, and between said video repeater apparatus and said video source device using corresponding ones of said authentication keys.

25. The apparatus of claim 24, wherein said ciphering unit further generates said verification keys using corresponding ones of said shared secrets.

26. The apparatus of claim 22, wherein

said first communication interface is to further exchange fourth authentication information of second at least one video sink device with another video repeater apparatus;

said third authentication information is also for authenticating said second at least one video sink device to said video source device.

27. The apparatus of claim 26, wherein said third authentication information further comprises topological information of said first and second at least one video sink device.