Temporal proximity to verify physical proximity

• US 8,107,627 B2
• Filed: 09/10/2008
• Issued: 01/31/2012
• Est. Priority Date: 06/28/2001
• Status: Expired due to Fees

• Current Assignee: Media Content Protection LLC
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Epstein, Michael
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Nobahar, Abdulhakim
• Application Number:
  US12/207,864
• Publication Number:
  US 20090003605A1
• Time in Patent Office: 1,238 Days
• Field of Search: 726/26, 726/29, 726/35, 726/27, 713/168, 713/181, 713/150, 713/153, 709/203, 709223-225, 709/238, 709/241, 709/245, 380/258, 380/255, 370/238, 370/252, 370/397, 370/313, 455/414.1, 455/414.2, 702/176
• US Class Current: 380/258
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A security system assesses the response time to requests for information to determine whether the responding system is in physical proximity to the requesting system. Generally, physical proximity corresponds to temporal proximity. If the response time indicates a substantial or abnormal lag between request and response, the system assumes that the lag is caused by the request and response having to travel a substantial or abnormal physical distance, or caused by the request being processed to generate a response, rather than being answered by an existing response in the physical possession of a user. If a substantial or abnormal lag is detected, the system is configured to limit subsequent access to protected material by the current user, and/or to notify security personnel of the abnormal response lag.

Claims

1. A security system for protecting source information from being illicitly copied from a remote location, the security system comprising:

a processor and an access device configured to execute a challenge-response protocol between them, during which protocol a secret key is exchanged;

a timer configured to measure a time-lag between a challenge and a response, where said challenge is sent from said processor to said access device during said challenge-response protocol and said response is received from said access device at said processor; and

a verifier configured to cause the protocol to be aborted if the measured time-lag is greater than an expected time-lag between said challenge and response during said challenge-response protocol and,

wherein said verifier is configured to continually request randomly selected portions of said source information to be protected, in more than one of a plurality of predetermined order sequences until the verifier is able to determine statistically whether the access device accessing said source information in response to said verifier request is local or remote.

2. The security system as claimed in claim 1, wherein a difference between the measured time-lag and the expected time-lag is correlated to a physical proximity between said processor making said requests and said access device supplying said responses.

3. The security system as claimed in claim 1, wherein an assessment of the measured time-lags determines whether one or more of the responses were communicated via a network connection.

4. A security system for protecting source information from being illicitly copied from a remote location, the security system comprising:

a processor and an access device configured to execute a challenge-response protocol between them, during which protocol a secret key is exchanged;

a timer configured to measure a time-lag between a challenge sent by the processor and a corresponding response received from the access device during said protocol; and

a verifier configured to cause the protocol to be aborted if the measured time-lag exceeds an expected time-lag in N out of M trials; and

wherein said verifier is configured to continually request randomly selected portions of source information in at least M predetermined order sequences until the verifier is able to determine statistically whether the access device is local or remote, wherein said M is greater than one.

5. The security system as claimed in claim 4, wherein the selected portions of source information are randomly selected in at least one of a plurality of predetermined order sequences to determine whether the access device is local or remote.

6. The security system as claimed in claim 4, wherein a difference between the measured time-lag and the expected time-lag is correlated to a physical proximity between said processor of one or more requests and said access device of one or more responses.

7. The security system as claimed in claim 4, wherein an assessment of the measured time-lags determines whether one or more of the responses were communicated via a network connection.

8. A security system comprising:

a processor and an access device configured to execute a challenge-response protocol between them, during which protocol a secret key is exchanged;

a timer configured to measure a time-lag between a challenge sent by the processor and a corresponding response received from the access device during said protocol; and

a verifier configured to cause the protocol to be aborted if the measured time-lag is greater than an expected time-lag between a challenge of said processor and a corresponding response from the access device; and

wherein said verifier is configured for controlling the order of occurrence of continual routine data requests by the processor in at least two of a plurality of predefined order sequences until the verifier is able to determine statistically whether the access device attempting to access a protected source information is local or remote.

9. The security system as claimed in claim 8, wherein a difference between the measured time-lag and the expected time-lag is correlated to a physical proximity between said processor of one or more requests and said access device of one or more responses.

10. The security system as claimed in claim 8, wherein an assessment of the measured time-lags determines whether one or more of the responses were communicated via a network connection.