Method and apparatus for managing digital rights of secure removable media

• US 8,683,610 B2
• Filed: 08/03/2012
• Issued: 03/25/2014
• Est. Priority Date: 11/11/2005
• Status: Expired due to Fees

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Lee, Seung-Jae, Kim, Te-Hyun
• Primary Examiner(s): Zecher, Cordelia
• Assistant Examiner(s): LAKHIA, VIRAL S
• Application Number:
  US13/566,700
• Publication Number:
  US 20120304315A1
• Time in Patent Office: 599 Days
• Field of Search: 726 2- 5, 726 22- 23, 726/30, 713/168, 713/193, 713/189, 705/51, 705/59
• US Class Current: 726/30
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/062 applying encryption of the keys
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A terminal for managing digital rights of a memory card inserted into the terminal and has a processor and a memory, the digital rights allowing the terminal to access digital contents. The terminal includes a processor configured to manage a digital rights and to exchange information with the memory card, the information including a terminal ID and a memory card ID; perform a mutual authentication procedure with the memory card; receive, from a contents provider, a trigger message which indicates to the terminal that a digital rights for the memory card is prepared in the contents provider; if a parameter included in the trigger message does not indicate the memory card, perform a procedure for obtaining a digital rights for the terminal; and if a parameter included in the trigger message indicates the memory card, perform a procedure for requesting a digital rights for the memory card.

Claims

1. A terminal for managing digital rights of a memory card which is inserted into the terminal and has a processor and a memory, the digital rights allowing the terminal to access digital contents, the terminal comprising:

a processor configured to manage a digital rights and to;

exchange information with the memory card, wherein the information includes a terminal ID and a memory card ID;

perform a mutual authentication procedure with the memory card;

receive a trigger message which indicates to the terminal that a digital rights for the memory card is prepared in a specific server or device, wherein the trigger message includes parameters indicating the memory card and indicating the specific server or device;

if a parameter included in the trigger message does not indicate the memory card, perform a procedure for obtaining a digital rights for the terminal; and

if a parameter included in the trigger message indicates the memory card, perform a procedure for requesting a digital rights for the memory card on behalf of the memory card to the specific server or device,

wherein the procedure for requesting the digital rights for the memory card includes;

generating, on behalf of the memory card, a digital rights request message for requesting a digital rights for the memory card from the specific server or device, the digital rights request message including not the terminal ID, but the memory card ID;

transmitting, to the memory card, a signature request for requesting a signature of the memory card including the generated digital rights request message;

receiving, from the memory card, a signature response including a signature of the memory card;

transmitting, to the specific server or device, the generated digital rights request message and the signature of the memory card;

receiving, from the specific server or device, a digital rights response message which indicates the memory card ID and a protected digital rights, wherein the protected digital rights is cryptographically bound to the memory card such that the terminal without a key of the memory card is prohibited from decrypting the protected digital rights cryptographically bound to the memory card; and

transmitting, to the memory card, the information about the protected digital rights to be installed in the memory card.

2. The terminal of claim 1,

wherein the protected digital rights includes a rights encryption key (KREK) and a message authentication code (MAC) algorithm key (KMAC), and

wherein at least one of the memory card ID, the KREK and the KMAC of the protected digital rights in the digital rights response message is encrypted by a public key of the memory card.

3. The terminal of claim 1, wherein the trigger message is a Rights Object Acquisition Protocol (ROAP) trigger message.

4. The terminal of claim 1, wherein the processor is configured to determine whether or not the parameter in the trigger message indicates the memory card.

5. The terminal of claim 1,

wherein the digital rights response message includes the signature of the memory card, and

wherein the processor is further configured to verify the signature.

6. The terminal of claim 1, wherein the processor is configured to format the information about the protected digital rights such that the information about the protected digital rights is able to be installed in the memory card.

7. The terminal of claim 1, wherein if the memory card is detached from the terminal, the processor is further configured to abort the procedure for requesting the digital rights for the memory card.

8. The terminal of claim 1, wherein the processor is further configured to:

transmit a memory card certificate chain request message for requesting a memory card certificate chain to the memory card; and

receive the memory card certificate chain from the memory card.

9. A system for managing digital rights, the system comprising:

a terminal including a processor configured to manage the digital rights, the digital rights allowing the terminal to access digital contents; and

a memory card including a processor and a memory which is inserted into the terminal,

wherein the processors of the terminal and the memory card are configured to exchange information together, the information including a terminal ID for identifying the terminal and a memory card ID for identifying the memory card, and perform a mutual authentication procedure together,

wherein the processor of the terminal is configured to;

receive a trigger message which indicates to the terminal that a digital rights for the memory card is prepared in a specific server or device, wherein the trigger message includes parameters indicating the memory card and indicating the specific server or device;

if a parameter included in the trigger message does not indicate the memory card, perform a procedure for obtaining a digital rights for the terminal; and

if a parameter included in the trigger message indicates the memory card, perform a procedure for requesting a digital rights for the memory card on behalf of the memory card to the specific server or device, and

wherein the procedure for requesting the digital rights for the memory card includes;

generating, on behalf of the memory card, a digital rights request message for requesting a digital rights for the memory card from the specific server or device, the digital rights request message including not the terminal ID, but the memory card ID;

transmitting, to the memory card, a signature request for requesting a signature of the memory card including the generated digital rights request message;

receiving, from the memory card, a signature response including a signature of the memory card;

transmitting, to the specific server or device, the generated digital rights request message and the signature of the memory card;

receiving, from the specific server or device, a digital rights response message which indicates the memory card ID and a protected digital rights, wherein the protected digital rights is cryptographically bound to the memory card such that the terminal without a key of the memory card is prohibited from decrypting the protected digital rights cryptographically bound to the memory card; and

transmitting, to the memory card, the information about the protected digital rights to be installed in the memory card.

10. The system of claim 9, wherein the memory card is further configured to store at least one of digital contents, meta data of the digital contents, meta data of the digital rights, RI context of a rights issuer which issue the digital rights, and domain context of a domain for receiving the digital rights.

11. The system of claim 9, wherein the memory card includes one of a secure digital card, a multimedia card, a smart media card, a micro SIM card, and a memory card that can store multimedia data.

12. A system for managing digital rights, the system comprising:

a terminal including a processor and configured to obtain a digital rights for a memory card, the digital rights allowing the terminal to access digital contents;

a memory card, which is inserted into the terminal, configured to allow the terminal, on behalf of the memory card, to obtain the digital rights for the memory card; and

a server configured to issue the digital contents and the digital rights for the memory card,

wherein the server is further configured to;

generate the digital rights for the memory in response to a digital contents purchase request message for requesting purchase of a digital contents and information for indicating which a digital rights for the digital contents belongs to which are received from the terminal; and

transmit a trigger message which indicates to the terminal that the digital rights for the memory card is prepared in the server, wherein the trigger message includes parameters indicating the memory card and indicating the server,

wherein the processor of the terminal is further configured to;

receive the trigger message from the server;

if a parameter included in the trigger message does not indicate the memory card, perform a procedure for obtaining a digital rights for the terminal; and

if a parameter included in the trigger message indicates the memory card, perform a procedure for requesting the digital rights for the memory card on behalf of the memory card to the server, and

wherein the processor of the terminal is further configured to;

generate, on behalf of the memory card, a digital rights request message for requesting a digital rights for the memory card from the server, the digital rights request message including not the terminal ID, but the memory card ID;

transmit, to the memory card, a signature request for requesting a signature of the memory card including the generated digital rights request message;

receive, from the memory card, a signature response including a signature of the memory card;

transmit, to the server, the generated digital rights request message and the signature of the memory card;

receive, from the server, a digital rights response message which indicates the memory card ID and a protected digital rights, wherein the protected digital rights is cryptographically bound to the memory card such that the terminal without a key of the memory card is prohibited from decrypting the protected digital rights cryptographically bound to the memory card; and

transmit, to the memory card, the information about the protected digital rights to be installed in the memory card.

13. The system of claim 12, wherein the terminal further comprises:

a communication module configured to communicate with the server; and

a processor configured to perform at least one procedure related to obtaining a digital rights for the memory card.

14. The system of claim 12, wherein the memory card further comprises:

a processor configured to perform at least one procedure related to allowing the terminal, on behalf of the memory card, to obtain a digital rights for the memory card; and

a memory configured to store information on the digital rights.

15. The system of claim 14, wherein the information further comprises:

at least one of digital contents, meta data of the digital contents, meta data of the digital rights, RI context of a rights issuer which issue the digital rights, and domain context of a domain for receiving the digital rights.

16. The system of claim 12, wherein the memory card includes at least one of a secure digital card, a multimedia card, a smart media card, a micro SIM card, and a memory card that can store multimedia data.

17. The system of claim 12, wherein the server comprises a contents issuer configured to issue digital contents and/or a rights issuer configured to issue digital rights of the digital contents.