Information processing device and method, recording medium and program

• US 7,908,479 B2
• Filed: 06/24/2004
• Issued: 03/15/2011
• Est. Priority Date: 07/28/2003
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Nakano, Takehiko, Shima, Hisato
• Primary Examiner(s): Smithers; Matthew B
• Assistant Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US10/528,562
• Publication Number:
  US 20060209689A1
• Time in Patent Office: 2,455 Days
• Field of Search: 713/161, 713/168, 713/169, 713/170, 713/182, 713/155, 713/171, 713/172, 713/178, 380/247, 380/279, 380/270, 380/59, 380/255, 380/201, 709/271, 709/218, 709/219, 709/255
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An information processing apparatus allowing proper communication with a communication partner in accordance with a communication time of the communication partner. A reception control unit receives a random challenge (RC) from a transmission terminal and supplies it to a generation unit. The reception control unit transmits an RC reception message indicating an RC reception to a transmission side. The generation unit executes a Hash process relative to RC and supplies resultant authentication data to a generation unit. A transmission control unit controls the generation unit at a timing before a response request command from the transmission side is received, to make the generation unit generate a response message containing authentication data corresponding to the response request command, and when the response request command is received, transmits the response message to a transmission destination terminal. The apparatus is applicable to a content providing system.

Claims

1. A data transmitting apparatus comprising:

a processor configured to generate first authentication data based on shared data shared with a data receiving apparatus;

a communication interface configured to transmit a first response request command to said data receiving apparatus, said first response request command including said first authentication data, and receive a first response message to the first response request command from the data receiving apparatus, the response message including second authentication data generated by the data receiving apparatus based on the shared data and a first sequence number included in the first response request command indicating a position of the first response request command in a sequence of response request commands to be transmitted by the communication interface;

the communication interface configured to transmit a second response request command to the data receiving apparatus after receiving the first response message from said data receiving apparatus, the second response request command including third authentication data generated based on the shared data, and receive a second response message to the second response request command from the data receiving apparatus, said second response message containing fourth authentication data generated at the data receiving apparatus based on the shared data and a second sequence number included in the second response request command indicating a position of the second response request command in the sequence of response request command to be transmitted by the command transmission unit; and

an authentication unit configured to produce an authentication result for said data receiving apparatus based on the fourth authentication data included in the second response message;

a measurement unit configured to measure a response time between transmitting the second response request command and receiving the second response message; and

a judgment unit configured to judge if a subsequent data transmission to said data receiving apparatus is granted based on the authentication result and the response time.

2. The data transmitting apparatus recited in claim 1, wherein:

said authentication unit is further configured to produce authentication results based on said second authentication data in said first response message;

said measurement unit is configured to measure a response time between transmitting the first response request command and receiving said first response message; and

said judgment unit is configured to judge if a subsequent data transmission to said data receiving apparatus is granted based on the authentication result and the response time.

3. A data transmission method comprising:

generating, at a data transmitting apparatus, first authentication data based on shared data shared with a data receiving apparatus;

transmitting a first response request command to said data receiving apparatus, said first response request command including said first authentication data;

receiving a first response message to the first response request command from the data receiving apparatus at said data transmitting apparatus, the response message including second authentication data generated in the data receiving apparatus based on the shared data and a first sequence number included in the first response request command indicating a position of the first response request command in a sequence of response request commands to be transmitted to the data transmitting apparatus;

transmitting a second response request command from the data transmitting apparatus to the data receiving apparatus after receiving the first response message from said data receiving apparatus, the second response request command including third authentication data generated based on the shared data;

receiving, at the data transmitting apparatus. a second response message to the second response request command from the data receiving apparatus, said second response message containing fourth authentication data generated at the data receiving apparatus based on the shared data and a second sequence number included in the second response request command indicating a position of the second response request command in the sequence of response request command to be transmitted by the data transmitting apparatus;

producing an authentication result for said data receiving apparatus based on said fourth authentication data included in the second response message;

measuring a response time between transmitting the second response request command and receiving the second response message; and

judging if a subsequent data transmission to said data receiving apparatus is granted based on the authentication result and the response time.

4. A non-transitory computer program storage medium storing computer program instructions which when executed by a data transmitting apparatus cause the data transmitting apparatus to perform the following method:

generating first authentication data based on shared data shared with a data receiving apparatus;

transmitting a first response request command to a data receiving apparatus, said first response request command including said first authentication data;

receiving a first response message to the first response request command from the data receiving apparatus, the response message including second authentication data generated at the data receiving apparatus based on the shared data and a first sequence number included in the first response request command indicating a position of the first response request command in a sequence of response request commands to be transmitted to the data transmitting apparatus;

transmitting a second response request command to the data receiving apparatus after receiving the first response message from said data receiving apparatus, the second response request command including third authentication data generated based on the shared data;

receiving a second response message to the second response request command from the data receiving apparatus, said second response message containing fourth authentication data generated at the data receiving apparatus based on the shared data and a second sequence number included in the second response request command indicating a position of the second response request command in the sequence of response request command to be transmitted by the data transmitting apparatus;

producing an authentication result for said data receiving apparatus based on said fourth authentication data included in the second response message;

measuring a response time between transmitting the second response request command and receiving the second response message; and

judging if a subsequent data transmission to said data receiving apparatus is granted based on the authentication result and the response time.

5. A data receiving apparatus configured to receive data from a data transmitting apparatus which judges whether data transmission is granted based on authentication data and a response time between sending a response request command and receiving a response message, the data receiving apparatus comprising:

a communication interface configured to receive a first response request command from the data transmitting apparatus, the first response request command including first authentication data generated at the data transmitting apparatus based on shared data shared with the data receiving apparatus;

a processor configured to generate a first response message to the first response request command, the first response message including second authentication data generated by the processor based on said shared data and a first sequence number included in the first response request command indicating a position of the first response request command in a sequence of response request commands to be transmitted to the data receiving apparatus from the data transmitting apparatus;

the communication interface configured to transmit said first response message to said data transmitting apparatus in response to said first response request command received from said data transmitting apparatus;

the communication interface configured to receive a second response request command from the data transmitting apparatus, the second response request command including third authentication data generated at the data transmitting apparatus based on the shared data;

the processor configured to generate a second response message to the second response request command, the second response message including fourth authentication data generated by the processor based on said shared data and a second sequence number included in the second response request command indicating a position of the second response request command in the sequence of response request commands to be transmitted to the data receiving apparatus from the data transmitting apparatus; and

the communication interface configured to transmit said second response message to said data transmitting apparatus in response to said second response request command received from said data transmitting apparatus.

6. The data receiving apparatus recited in claim 5, wherein:

said shared data is a quasi random number; and

said processor is further configured to subject said quasi random number to a Keyed-Hash process to produce a Hash value that is used in said first and second authentication data.

7. The data receiving apparatus recited in claim 5, wherein:

said processor is further configured to execute a Keyed-Hash process relative to said quasi random number and information specific to the information processing apparatus to produce a Hash value that is used as said first and second authentication data.

8. A data reception method for a data receiving apparatus configured to receive data from a data transmitting apparatus which judges whether data transmission is granted based on authentication data and a response time between sending a response request command and receiving a response message, the data reception method comprising:

receiving a first response request command from the data transmitting apparatus, the first response request command including first authentication data generated at the data transmitting apparatus based on shared data shared with the data receiving apparatus;

generating a first response message to the first response request command, the first response message including second authentication data generated by the processor based on said shared data and a first sequence number included in the first response request command indicating a position of the first response request command in a sequence of response request commands to be transmitted to the data receiving apparatus from the data transmitting apparatus;

transmitting said first response message to said data transmitting apparatus in response to said first response request command received from said data transmitting apparatus;

receiving a second response request command from the data transmitting apparatus, the second response request command including third authentication data generated at the data transmitting apparatus based on the shared data;

generating a second response message to the second response request command, the second response message including fourth authentication data generated by the processor based on said shared data and a second sequence number included in the second response request command indicating a position of the second response request command in the sequence of response request commands to be transmitted to the data receiving apparatus from the data transmitting apparatus; and

transmitting said second response message to said data transmitting apparatus in response to said second response request command received from said data transmitting apparatus.

9. A non-transitory computer program storage medium storing computer program instructions which, when executed by a data receiving apparatus configured to receive data from a data transmitting apparatus which judges whether data transmission is granted based on authentication data and a response time between sending a response request command and receiving a response message, causes the data receiving apparatus to perform the following method:

receiving a first response request command from the data transmitting apparatus, the first response request command including first authentication data generated at the data transmitting apparatus based on shared data shared with the data receiving apparatus;

generating a first response message to the first response request command, the first response message including second authentication data generated by the processor based on said shared data and a first sequence number included in the first response request command indicating a position of the first response request command in a sequence of response request commands to be transmitted to the data receiving apparatus from the data transmitting apparatus;

transmitting said first response message to said data transmitting apparatus in response to said first response request command received from said data transmitting apparatus;

receiving a second response request command from the data transmitting apparatus, the second response request command including third authentication data generated at the data transmitting apparatus based on the shared data;

generating a second response message to the second response request command, the second response message including fourth authentication data generated by the processor based on said shared data and a second sequence number included in the second response request command indicating a position of the second response request command in the sequence of response request commands to be transmitted to the data receiving apparatus from the data transmitting apparatus; and

transmitting said second response message to said data transmitting apparatus in response to said second response request command received from said data transmitting apparatus.