Information processing apparatus and method

• US 9,172,531 B2
• Filed: 11/08/2013
• Issued: 10/27/2015
• Est. Priority Date: 07/06/2000
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Nakano, Takehiko
• Primary Examiner(s): Nalven, Andrew
• Assistant Examiner(s): DO, KHANG D
• Application Number:
  US14/075,495
• Publication Number:
  US 20140068268A1
• Time in Patent Office: 718 Days
• Field of Search: 380/29, 726 2- 21
• US Class Current: 1/1
• CPC Class Codes: H04H 20/76 Wired systems
• CPC Class Codes: H04H 60/23 using cryptography, e.g. encryption, authentication, key distribution
• CPC Class Codes: H04H 60/80 characterised by transmission among terminal devices
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3252 using DSA or related signature schemes, e.g. elliptic based signatures, ElGamal or Schnorr schemes
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

To limit use of content, when a source receives a request for transmitting content from a sink, the source performs an authentication process. When the authentication is successful, the source transmits to the sink key information necessary for decrypting the encryption applied to the content. The sink can receive the content by receiving the key information and by decrypting the encryption applied to the content by using the key information.

Claims

1. A communication device that receives encrypted content, the communication device comprising:

circuitry configured to transmit a certificate pertaining to the communication device for reception by another communication device, receive a random value transmitted by the another communication device, to generate a response including information based on the received random value and on a secret key stored in the communication device, to transmit the response to the another communication device, and to receive key information from the another communication device,

the certificate having identification (ID) information pertaining to the communication device,

when (i) the (ID) information of the communication device is determined not to be already registered in a registration list of the another communication device and (ii) a count of communication devices that receive the key information is determined to be equal to or greater than a predefined maximum value, a first authentication which is performed is considered to have failed wherein the random value is not received by the communication device, and when the performed first authentication is considered to have not failed the random value is received by the communication device and the response is generated and transmitted for reception by the another communication device, and

after the first authentication is performed and determined to have not failed, a second authentication is performed which is considered to have failed if the information in the response is mismatched with information held in the another communication device during a judging operation performed by the another communication device with use of a key which is different from the secret key stored in the communication device wherein the key information from the another communication device is not received.

2. The communication device according to claim 1, wherein the circuitry is further configured to receive the key information if the information in the response matches the information held in the another communication device.

3. The communication device according to claim 2, wherein the key information permits the communication device to decrypt encrypted content received from the another communication device.

4. The communication device according to claim 1, wherein the circuitry is further configured to receive encrypted content that is transmitted by the another communication device if the information in the response matches the information held in the another communication device.

5. The communication device according to claim 4, wherein the encrypted content is generated from content received by a tuner in the another communication device.

6. The communication device according to claim 4, wherein the encrypted content is generated from content recorded on a recording medium and played back by a content player in the another communication device.

7. The communication device according to claim 4, further comprising:

a display device configured to output decrypted content generated from the encrypted content.

8. The communication device according to claim 4, further comprising:

a speaker device configured to output decrypted content generated from the encrypted content.

9. The communication device according to claim 1, further comprising a communication interface (I/F), wherein the circuitry receives the random value from the another communication device via the communication interface, and transmits the response generated by the communication device via the communication interface.

10. A communication device that receives encrypted content, the communication device comprising:

a communication interface to transmit a certificate pertaining to the communication device for reception by another communication device, to receive a random value transmitted by the another communication device and to receive key information from the another communication device; and

a controller to generate a response including information based on the received random value and on a secret key stored in the communication device;

said communication interface configured to transmit the response to the another communication device,

the certificate having identification (ID) information pertaining to the communication device,

when (i) the (ID) information of the communication device is determined not to be already registered in a registration list of the another communication device and (ii) a count of communication devices that receive the key information is determined to be equal to or greater than a predefined maximum value, a first authentication which is performed is considered to have failed wherein the random value is not received by the communication device, and when the performed first authentication is considered to have not failed the random value is received by the communication device and the response is generated and transmitted for reception by the another communication device, and

after the first authentication is performed and determined to have not failed, a second authentication is performed which is considered to have failed if the information in the response is mismatched with the information held in the another communication device during a judging operation performed by the another communication device with use of a key which is different from the secret key stored in the communication device wherein the key information from the another communication device is not received.

11. A method of receiving encrypted content for use with a communication device, the method comprising:

transmitting a certificate pertaining to the communication device for reception by another communication device;

receiving a random value transmitted by the another communication device;

generating a response including information based on the received random value and on a secret key stored in the communication device;

transmitting the response to the another communication device; and

receiving key information from the another communication device,

the certificate having identification (ID) information pertaining to the communication device,

when (i) the (ID) information of the communication device is determined not to be already registered in a registration list of the another communication device and (ii) a count of communication devices that receive the key information is determined to be equal to or greater than a predefined maximum value, a first authentication which is performed is considered to have failed wherein the random value is not received by the communication device, and when the performed first authentication is considered to have not failed the random value is received by the communication device and the response is generated and transmitted for reception by the another communication device, and

after the first authentication is performed and determined to have not failed, a second authentication is performed which is considered to have failed if the information in the response is mismatched with the information held in the another communication device during a judging operation performed by the another communication device with use of a key which is different from the secret key stored in the communication device wherein the key information from the another communication device is not received.

12. A non-transitory computer-readable medium having recorded a method of receiving encrypted content for use with a communication device, the method comprising:

transmitting a certificate pertaining to the communication device for reception by another communication device,

receiving a random value transmitted by the another communication device;

generating a response including information based on the received random value and on a secret key stored in the communication device;

transmitting the response to the another communication device; and

receiving key information from the another communication device,

the certificate having identification (ID) information pertaining to the communication device,

when (i) the (ID) information of the communication device is determined not to be already registered in a registration list of the another communication device and (ii) a count of communication devices that receive the key information is determined to be equal to or greater than a predefined maximum value, a first authentication which is performed is considered to have failed wherein the random value is not received by the communication device, and when the performed first authentication is considered to have not failed the random value is received by the communication device and the response is generated and transmitted for reception by the another communication device, and

after the first authentication is performed and determined to have not failed, a second authentication is performed which is considered to have failed if the information in the response is mismatched with the information held in the another communication device during a judging operation performed by the another communication device with use of a key which is different from the secret key stored in the communication device wherein the key information from the another communication device is not received.