Information processing, apparatus and method, recording medium, and program

• US 7,962,747 B2
• Filed: 01/20/2006
• Issued: 06/14/2011
• Est. Priority Date: 07/28/2003
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Nakano, Takehiko, Shima, Hisato
• Primary Examiner(s): Smithers; Matthew B
• Assistant Examiner(s): SHOLEMAN, ABU S
• Application Number:
  US11/335,466
• Publication Number:
  US 20060154631A1
• Time in Patent Office: 1,971 Days
• Field of Search: 713/161, 713168-172, 713/178, 380/277, 380/201, 380/255, 380/270, 380/59
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/0841 involving Diffie-Hellman or related key agreement protocols
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

An information processing apparatus allowing proper communication with a communication partner in accordance with a communication time of the communication partner. A reception control unit receives a random challenge (RC) from a transmission terminal and supplies it to a generation unit. The reception control unit transmits an RC reception message indicating an RC reception to a transmission side. The generation unit executes a Hash process relative to RC and supplies resultant authentication data to a generation unit. A transmission control unit controls the generation unit at a timing before a response request command from the transmission side is received, to make the generation unit generate a response message containing authentication data corresponding to the response request command, and when the response request command is received, transmits the response message to a transmission destination terminal. The apparatus is applicable to a content providing system.

Claims

1. A data transmitting apparatus comprising:

a processor configured to generate first authentication data;

a communication interface configured to transmit a first response request to a data receiving apparatus, said first response request including said first authentication data;

the communication interface configured to receive a first response message to said first response request command from said data receiving apparatus, said first response message containing second authentication data based on said first authentication data;

the communication interface configured to transmit a second response request command to the data receiving apparatus after receiving the first response message from said data receiving apparatus, and receive a second response message to the second response request command from the data receiving apparatus, said second response message containing third authentication data generated at the data receiving apparatus based on said first authentication data; and

the processor configured to produce an authentication result for said data receiving apparatus based on said third authentication data included in said second response message received from said data receiving apparatus, measure a response time of the second response message received from said data receiving apparatus in response to said second response request command, judge if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

2. The apparatus recited in claim 1, wherein the processor is further configured to measure the response time between transmitting the second response request command and receiving the second response message.

3. The apparatus recited in claim 1, wherein said communication interface is further configured to transmit plural second response request commands to the data receiving apparatus.

4. The apparatus recited in claim 3, wherein the communication interface is further configured to transmit each of the plural second response request commands including a number of retry times corresponding to a respective second response request command in the plural transmitted second response request commands.

5. The apparatus recited in claim 1, wherein said communication interface is further configured to transmit the first response request command including a quasi random number having a predetermined number of bits as part of the first authentication data.

6. The apparatus recited in claim 1, wherein the processor is further configured to receive the second response message that includes the third authentication data based on the first authentication data that includes a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

7. The apparatus recited in claim 1, wherein said communication interface is further configured to transmit the first response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

8. The apparatus recited in claim 1, wherein the processor is configured to generate an expected value based on the first authentication data, and produce the authentication result based on the expected value.

9. A method performed at a data transmitting apparatus for authorizing the use of data, said method comprising:

generating first authentication data at the data transmitting apparatus;

transmitting a first response request to a data receiving apparatus, said first response request including said first authentication data;

receiving a first response message to said first response request command from said data receiving apparatus, said first response message containing second authentication data based on said first authentication data;

transmitting a second response request command to the data receiving apparatus after receiving the first response message from said data receiving apparatus;

receiving a second response message to the second response request command from the data receiving apparatus, the second response message including third authentication data based on said first authentication data;

producing an authentication result for said data receiving apparatus based on said third authentication data included in said second response message received from data receiving apparatus;

measuring a response time of the second response message received from said data receiving apparatus in response to said second response request command; and

judging if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

10. The method recited in claim 9, wherein said measuring the response time further comprises measuring the response time between transmitting the second response request command and receiving the second response message.

11. The method recited in claim 9, wherein said transmitting further comprises transmitting plural second response request commands to the data receiving apparatus.

12. The method for transmitting data recited in claim 11, said transmitting further comprises transmitting each of the plural second response request commands including a number of retry times corresponding to a respective second response request command in the plural transmitted second response request commands.

13. The method recited in claim 9, wherein said transmitting further comprises transmitting the first response request command including a quasi random number having a predetermined number of bits as part of the first authentication data.

14. The method recited in claim 9, wherein the receiving further comprises receiving the second response message including the third authentication data based on the first authentication data, the first authentication data including a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

15. The method recited in claim 9, wherein said transmitting further comprises transmitting the first response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

16. The method recited in claim 9 further comprising:

generating an expected authentication value based on the first authentication data, wherein said producing the authentication result is also based on the expected authentication value.

17. A non-transitory computer-readable medium including computer program instructions which when executed by a computer cause the computer to control a transmitting apparatus to perform the following steps:

generating first authentication data at the data transmitting apparatus;

transmitting a first response request to a data receiving apparatus, said first response request including said first authentication data;

receiving a first response message to said first response request command from said data receiving apparatus, said first response message containing second authentication data based on said first authentication data;

transmitting a second response request command to the data receiving apparatus after receiving the first response message from said data receiving apparatus;

receiving a second response message to the second response request command from the data receiving apparatus, the second response message including third authentication data based on said first authentication data;

producing an authentication result for said data receiving apparatus based on said third authentication data included in said second response message received from data receiving apparatus;

measuring a response time of the second response message received from said data receiving apparatus in response to said second response request command; and

judging if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

18. The non-transitory computer-readable medium recited in claim 17, wherein said measuring the response time further comprises measuring the response time between transmitting the second response request command and receiving the second response message.

19. The non-transitory computer-readable medium recited in claim 17, wherein said transmitting further comprises transmitting plural second response request commands to the data receiving apparatus.

20. The non-transitory computer-readable medium recited in claim 19, wherein said transmitting further comprises transmitting the second response request command including a number of retry times corresponding to a particular second response request command in the plural transmitted second response request commands.

21. The non-transitory computer-readable medium recited in claim 17, wherein said transmitting further comprises transmitting the first response request command including a quasi random number having a predetermined number of bits as part of the first authentication data.

22. The non-transitory computer-readable medium recited in claim 17, wherein the receiving further comprises receiving the second response message including the third authentication data based on the first authentication data, the first authentication data including a key based on previously transmitted information, the key being used to in executing a predetermined process to obtain the authentication result.

23. The non-transitory computer-readable medium recited in claim 17, wherein said transmitting further comprises transmitting the first response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

24. The non-transitory computer-readable medium data recited in claim 17 further comprising:

generating an expected authentication value based on the first authentication data, wherein said producing the authentication result is also based on the expected authentication value.

33. The non-transitory computer-readable medium recited in claim 17, wherein the non-transitory computer-readable medium is a random access memory (RAM).

34. The non-transitory computer-readable medium recited in claim 17, wherein the non-transitory computer-readable medium is a hard disk.

35. The non-transitory computer-readable medium recited in claim 17, wherein the non-transitory computer-readable medium is an optical disk.

36. The non-transitory computer-readable medium recited in claim 17, wherein the non-transitory computer-readable medium is a semiconductor memory.

25. A data transmitting apparatus comprising:

means for generating first authentication data;

means for transmitting a first response request to a data receiving apparatus, said first response request including said first authentication data;

means for receiving a first response message to said first response request command from said data receiving apparatus, said first response message containing second authentication data based on said first authentication data;

means for transmitting a second response request command to the data receiving apparatus after receiving the first response message from the data receiving apparatus;

means for receiving a second response message to the second response request command from the data receiving apparatus, the second response message including third authentication data based on the first authentication data;

means for producing an authentication result for said data receiving apparatus based on said third authentication data included in said second response message received from said data receiving apparatus;

means for measuring a response time of the second response message received from said data receiving apparatus in response to said second response request command; and

means for judging if said data receiving apparatus is authorized to use the data based on the authentication result and the response time.

26. The apparatus recited in claim 25, wherein the means for measuring measures the response time between transmitting the second response request command and receiving the second response message.

27. The apparatus recited in claim 25, wherein said means for transmitting transmits plural second response request commands to the data receiving apparatus.

28. The apparatus recited in claim 27, wherein the means for transmitting transmits each of the plural second response request commands including a number of retry times corresponding to a respective second response request command in the plural transmitted second response request commands.

29. The apparatus recited in claim 25, wherein said means for transmitting transmits the first response request command including a quasi random number having a predetermined number of bits as part of the first authentication data.

30. The apparatus recited in claim 25, wherein the means for receiving receives the second response message that includes the third authentication data based on the first authentication data that includes a key based on previously transmitted information, the key being used in executing a predetermined process to obtain the authentication result.

31. The apparatus recited in claim 25, wherein said means for transmitting transmits the first response request command including a session number uniquely identifying each time the data receiving apparatus is authorized.

32. The apparatus recited in claim 25 further comprising:

means for generating an expected value based on the shared data, wherein said means for producing produces the authentication result based on the expected value.