Method and apparatus of storage anti-piracy key encryption (SAKE) device to control data access for networks

• US 7,552,340 B2
• Filed: 10/30/2007
• Issued: 06/23/2009
• Est. Priority Date: 07/31/2002
• Status: Expired due to Fees

• Current Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Original Assignee: Trek 2000 International Limited (Trek Technology Singapore PTE Limited)
• Inventors: Tan, Henry, Poo, Teng Pin, Lim, Lay Chuan, Ooi, Chin Shyan Raymond
• Primary Examiner(s): Moise; Emmanuel L
• Assistant Examiner(s): Abyaneh; Ali S
• Application Number:
  US11/928,164
• Publication Number:
  US 20080098471A1
• Time in Patent Office: 602 Days
• Field of Search: 713/186, 713/171
• US Class Current: 713/186
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

A tri-level authentication process comprises performing a biometrics-based authentication of a user of a portable device, performing an authentication handshake between the portable device and a content server, wherein the portable device includes a USB plug that plugs directly into a USB port of a host computer and the host computer is communicatively coupled to the content server, and performing a user authentication using a first key sent from the portable device to the content server, wherein access to restricted content on the content server by the user is enabled if the biometrics-based authentication, the authentication handshake, and the user authentication using a first key are all successful. The process may also include encrypting restricted content received from the content server using a private key before storing the restricted content in a non-volatile memory of the portable device.

Claims

1. A portable anti-piracy device comprising:

a biometric sensor coupled to a biometric verification unit, the biometric verification unit configured to compare biometric information detected by the biometric sensor with a stored biometric template and to indicate a successful biometric authentication if the biometric information matches the stored biometric template;

a processor coupled to the biometric verification unit;

a memory coupled to the processor, the memory configured to store a biometric template, a private key, and a public key;

a Universal Serial Bus (USB) plug coupled to a USB controller that is coupled to the processor and plugs directly into a USB port of a host system;

an encryption unit coupled to the processor;

a flash memory coupled to the encryption unit,

the processor configured to perform an authentication handshake with a content server over a network via the host system if the biometric verification unit indicates a successful biometric authentication, and to send the public key to the content server if the authentication handshake is successful,

the encryption unit configured to encrypt restricted content received from the content server using the private key and to store the encrypted restricted content in the flash memory, and

a hashing algorithm configured to hash the public key before the processor sends the public key to the content server.

2. The portable anti-piracy device of claim 1, further comprising a tamper proof unit configured to erase data stored in the flash memory if the tamper proof unit detects tampering of the portable anti-piracy device.

3. The portable anti-piracy device of claim 1, further comprising a tamper proof unit configured to erase data stored in the memory if the tamper proof unit detects tampering of the portable anti-piracy device.

4. The portable anti-piracy device of claim 1, wherein the authentication handshake includes receiving a device authentication request from the content server and sending a device authentication reply to the content server.

5. The portable anti-piracy device of claim 4, wherein the device authentication reply includes one or more authentication sequences.

6. The portable anti-piracy device of claim 1, wherein the flash memory has a capacity of one gigabyte.

7. The portable anti-piracy device of claim 1, wherein the public key is representative of a user'"'"'s identity.