Domain upgrade method in digital rights management

• US 8,205,082 B2
• Filed: 11/07/2008
• Issued: 06/19/2012
• Est. Priority Date: 11/08/2007
• Status: Expired due to Fees

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Chu, Youn-Sung
• Primary Examiner(s): Nguyen, Thu Ha
• Application Number:
  US12/267,313
• Publication Number:
  US 20090125718A1
• Time in Patent Office: 1,320 Days
• Field of Search: 713/168, 713/155, 713/157, 713/158, 380/212, 380/277, 380/278, 380/282, 709/245
• US Class Current: 713/168
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

Disclosed is domain upgrade method in Digital Rights Management (DRM) capable of reducing network resources by simplifying signal procedures at the time of transferring changed domain keys. A device joining after domain upgrade is provided with only a domain key of a domain generation after the domain upgrade, but is not provided with a domain key of the previous domain generation. Accordingly, even if the joining device is mal-operated or is hacked, contents before upgrade are prevented from being illegally used or leaking out.

Claims

1. A domain upgrade method for a terminal, comprising:

receiving, by a terminal which has a first rights object (RO) and a first domain key, a join domain response message including a domain ID field and a second domain key,

wherein the domain ID field includes a ‘

domain baseID’

for indicating an ID of a first domain among a plurality of domains managed by an entity, and

wherein the join domain response message further includes a domain generation indicating a generation of the first domain;

comparing the domain baseID of the domain ID field included in the join domain response message with a domain baseID of a domain ID stored in the terminal;

if the domain baseID of the domain ID field included in the join domain response message is not consistent with the domain baseID stored in the terminal, performing a first procedure for joining the first domain; and

if the domain baseID of the domain ID field included in the join domain response message is consistent with the domain baseID stored in the terminal, performing a second procedure for upgrading the first domain,

wherein the second procedure includes;

comparing the domain generation included in the join domain response message with a domain generation stored in the terminal; and

storing the second domain key, which is contained in the join domain response message, based on a result from the comparison,

wherein the first domain key is associated with the domain generation stored in the terminal and is maintained to allow the first rights object to be still used after upgrading the first domain, and

wherein the received second domain key is associated with the domain generation included in the join domain response message and allows a second rights object to be used.

2. The method of claim 1, wherein the join domain response message is based on a one-way protocol and is a ‘

dmp Join Domain Response’

message.

3. The method of claim 1, wherein the domain ID field corresponds to a ‘

domain ID field’

in the join domain response message.

4. The method of claim 1, wherein the server is a Right Issuer, or a Domain Authority/Domain Enforcement Agent (DA/DEA).

5. The method of claim 1, the storing step is performed if the domain generation included in the join domain response message is greater than the domain generation stored in the terminal.

6. A domain upgrade method for a terminal, comprising:

sending, to a terminal which wants to join into a first domain, a first join domain response message including a domain ID field and a first domain key,

wherein the domain ID field comprises a ‘

domain baseID’

element indicating an ID of the first domain among a plurality of domains and the first join domain response message further includes a ‘

domain generation’

element indicating a first generation of the first domain;

upgrading the first domain by generating a second domain key and a second generation of the first domain; and

sending, to the terminal, a second join domain response message including the second domain key,

wherein the second join domain response message further includes a domain ID field,

wherein the domain ID field comprises a ‘

domain baseID’

element indicating the same ID of the first domain, thereby to be compared with the domain baseID of the domain ID included in the first join domain response message and stored in the terminal,

wherein the second join domain response message further includes a ‘

domain generation’

element indicating the second generation, thereby to be compared with the ‘

domain generation’

element included in the first join domain response message and stored in the terminal,

wherein the first domain key is associated with the first generation and allows a first rights object (RO) to be used by the terminal, and

wherein the second domain key is associated with the second generation and allows a second rights object (RO) to be used by the terminal.

7. The method of claim 6, wherein the message is a ‘

dmpJoinDomainResponse’

message.

8. The method of claim 6, wherein the domain ID field corresponds to a ‘

domID’

field in the message.

9. The method of claim 6, wherein the upgrading step is performed if another terminal included in the domain is revoked by the server or the first domain key is compromised by the another terminal.

10. The method of claim 6, wherein the second generation is generated by increasing the first domain generation by 1.

11. The method of claim 6, wherein the second domain key included in the join domain response message had been upgraded from the first domain key by the server if another terminal included in the domain is revoked by the server or the first domain key is compromised by the another terminal, wherein the join domain response message is transmitted from the server to terminals which are still trusted by the server.

12. The method of claim 6, wherein the join domain response message is transmitted from the server to terminals which are still trusted by the server.

13. A domain upgrade method for a terminal, comprising:

receiving, by a terminal, a first join domain response message including a domain ID field and a first domain key, wherein the domain ID field includes a ‘

domain baseID’

for indicating an ID of a first domain among a plurality of domains managed by an entity;

if there does not exist a domain baseID matching with the domain baseID of the domain ID field included in the first join domain response message, performing a first procedure for joining the first domain thereby to obtain a first rights object (RO);

consuming contents using the first RO;

receiving, by the terminal, a second join domain response message including a domain ID field and a second domain key, wherein the domain ID field in the second join domain response message includes a ‘

domain baseID’

for indicating the ID of the first domain;

comparing the domain baseID of the domain ID field included in the second join domain response message with the domain baseID of the domain ID stored in the terminal;

if the domain baseID of the domain ID field included in the second join domain response message is consistent with the domain baseID stored in the terminal, performing a second procedure for upgrading the first domain,

wherein the second procedure includes;

comparing a domain generation included in the second join domain response message with a domain generation stored in the terminal; and

storing the second domain key, which is contained in the second join domain response message, based on a result from the comparison,

wherein the first domain key is associated with the domain generation stored in the terminal and is maintained to allow the first rights object to be still used after upgrading the first domain, and

wherein the received second domain key is associated with the domain generation included in the second join domain response message and allows a second rights object to be used.