Scheme for transferring copyright protected contents data using radio link layer authentication/encryption

• US 7,324,644 B2
• Filed: 08/23/2001
• Issued: 01/29/2008
• Est. Priority Date: 08/23/2000
• Status: Active Grant

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Saito, Takeshi
• Primary Examiner(s): Zand; Kambiz
• Assistant Examiner(s): Tran; Tongoc
• Application Number:
  US09/934,674
• Publication Number:
  US 20020025042A1
• Time in Patent Office: 2,350 Days
• Field of Search: 705/51, 705/57, 380/37, 380/28, 380/46, 380/270, 380/200, 380/280, 713/193, 713/155, 713/161, 713/170, 713/171, 713/168, 726/4, 726/21, 726/31, 726/26, 725 27- 30
• US Class Current: 380/200
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/04 Key management, e.g. using generic bootstrapping architecture [GBA]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Between a transmitting device and a receiving device, a first authentication and key exchange procedure depending on a radio link layer network is carried out, and then a whole or a part of a second authentication and key exchange procedure depending on the copyright protected contents data is carried out by using the cipher communication using a first encryption key that is shared between the transmitting device and the receiving device by the first authentication and key exchange procedure, so that the contents data transfer by the cipher communication using a second encryption key can be carried out only between legitimate pair of the transmitting device and the receiving device that can successfully complete the first authentication.

Claims

1. A transmitting device for transmitting copyright protected contents data to a receiving device through radio communications the transmitting device comprising:

a first authentication unit configured to carry out a first authentication with the receiving device, for judging whether the receiving device is a device that is allowed to communicate with the transmitting device or not, on a radio link layer of the radio communications;

a first key exchange unit configured to generate a first encryption key and share the first encryption key with the receiving device when the first authentication with the receiving device by the first authentication unit is successful;

a second authentication unit configured to carry out a second authentication with the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key with the receiving device when the second authentication with the receiving device by the second authentication unit is successful; and

a communication unit configured to transmit the contents data to the receiving device through an encrypted communication path which is encrypted by using the second encryption key and provided on the radio link layer,

wherein at least one of the second authentication unit and the second key exchange unit rejects its process of at least one of authentication and key exchange with the receiving device when at least one of the first authentication by the first authentication unit and the first key exchange by the first key exchange unit with the receiving device is unsuccessful.

2. The transmitting device of claim 1, wherein when the second authentication or sharing of the second encryption key is failure for a reason that the encrypted radio communication on the radio link layer is missing, one of the second authentication unit and the second key exchange unit notifies the failure and the reason to the receiving device.

3. The transmitting device of claim 1, further comprising a storage unit configured to store the contents data.

4. The transmitting device of claim 1, wherein the first authentication by the first authentication unit is success when a PIN code entered at the transmitting device and a PIN code notified from the receiving device are in a prescribed relationship.

5. The transmitting device of claim 4, wherein each PIN code contains at least one of a varying code information, a prescribed code information, a body information acquired from a body of a user, and an attribute information regarding attributes of the user.

6. A transmitting device for transmitting copyright protected contents data to a receiving device through radio communications, the transmitting device comprising:

a first authentication unit configured to carry out a first authentication with the receiving device, for judging whether the receiving device is a device that is allowed to communicate with the transmitting device or not, on a radio link layer of the radio communications;

a first key exchange unit configured to generate a first encryption key and share the first encryption key with the receiving device when the first authentication with the receiving device by the first authentication unit is successful;

a second authentication unit configured to carry out a second authentication with the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key with the receiving device when the second authentication with the receiving device by the second authentication unit is successful; and

a communication unit configured to set up an encrypted communication path which is encrypted by using the second encryption key on the encrypted radio communication which is encrypted by using the first encryption key, and transmit the contents data to the receiving device through the encrypted communication path,

wherein at least one of the second authentication unit and the second key exchange unit rejects its process of at least one of authentication and key exchange with the receiving device when at least one of the first authentication by the first authentication unit and the first key exchange by the first key exchange unit with the receiving device is unsuccessful.

7. The transmitting device of claim 6, wherein when the second authentication or sharing of the second encryption key is failure for a reason that the encrypted radio communication on the radio link layer is missing, one of the second authentication unit and the second key exchange unit notifies the failure and the reason to the receiving device.

8. The transmitting device of claim 6, further comprising a storage unit configured to store the contents data.

9. The transmitting device of claim 6, wherein the first authentication by the first authentication unit is success when a PIN code entered at the transmitting device and a PIN code notified from the receiving device are in a prescribed relationship.

10. The transmitting device of claim 9, wherein each PIN code contains at least one of a varying code information, a prescribed code information, a body information acquired from a body of a user, and an attribute information regarding attributes of the user.

11. A receiving device for receiving copyright protected contents data transmitted from a transmitting device through radio communications, the receiving device comprising:

a first authentication unit configured to carry out a first authentication with the transmitting device, for enabling the receiving device to operate as a device that is allowed to communicate with the transmitting device, on a radio link layer of the radio communications;

a first key exchange unit configured to generate a first encryption key and share the first encryption key with the transmitting device when the first authentication with the transmitting device by the first authentication unit is successful;

a second authentication unit configure to carry out a second authentication with the transmitting device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key with the transmitting device when the second authentication with the transmitting device by the second authentication unit is successful; and

a communication unit configured to receive the contents data transmitted from the transmitting device through an encrypted communication path which is encrypted by using the second encryption key and provided on the radio link layer,

wherein at least one of the second authentication unit and the second key exchange unit rejects its process of at least one of authentication and key exchange with the transmitting device when at least one of the first authentication by the first authentication unit and the first key exchange by the first key exchange unit with the transmitting device is unsuccessful.

12. The receiving device of claim 11, further comprising a reproduction unit configured to reproduce the contents data.

13. The receiving device of claim 11, wherein the first authentication by the first authentication unit is success when a PIN code entered at the receiving device and a PIN code notified from the transmitting device are in a prescribed relationship.

14. The receiving device of claim 13, wherein each PIN code contains at least one of a varying code information, a prescribed code information, a body information acquired from a body of a user, and an attribute information regarding attributes of the user.

15. A receiving device for receiving copyright protected contents data transmitted from a transmitting device through radio communications, the receiving device comprising:

a first authentication unit configured to carry out a first authentication with the transmitting device, for enabling the receiving device to operate as a device that is allowed to communicate with the transmitting device, on a radio link layer of the radio communications;

a first key exchange unit configured to generate a first encryption key and share the first encryption key with the transmitting device when the first authentication with the transmitting device by the first authentication unit is successful;

a second authentication unit configured to carry out a second authentication with the transmitting device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key with the transmitting device when the second authentication with the transmitting device by the second authentication unit is successful; and

a communication unit configured to set up an encrypted communication path which is encrypted by using the second encryption key on the encrypted radio communication which is encrypted by using the first encryption key, and receive the contents data transmitted from the transmitting device through the encrypted communication path,

wherein at least one of the second authentication unit and the second key exchange unit rejects its process of at least one of authentication and key exchange with the transmitting device when at least one of the first authentication by the first authentication unit and the first key exchange by the first key exchange unit with the transmitting device is unsuccessful.

16. The receiving device of claim 15, further comprising a reproduction unit configured to reproduce the contents data.

17. The receiving device of claim 15, wherein the first authentication by the first authentication unit is success when a PIN code entered at the receiving device and a PIN code notified from the transmitting device are in a prescribed relationship.

18. The receiving device of claim 17, wherein each PIN code contains at least one of a varying code information, a prescribed code information, a body information acquired from a body of a user, and an attribute information regarding attributes of the user.

19. A radio communication system, comprising a transmitting device for transmitting copyright protected contents data through radio communications, and a receiving device for receiving the contents data transmitted from the transmitting device, each one of the transmitting device and the receiving device having:

a first authentication unit configured to carry out a first authentication between the transmitting device and the receiving device, for judging whether the transmitting device and the receiving device are devices that are allowed to communicate with the transmitting device or not, on a radio link layer of the radio communications;

a first key exchange unit configured to generate a first encryption key and share the first encryption key between the transmitting device and the receiving device when the first authentication between the transmitting device and the receiving device by the first authentication unit is successful;

a second authentication unit configured to carry out a second authentication between the transmitting device and the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key between the transmitting device and the receiving device when the second authentication between the transmitting device and the receiving device by the second authentication unit is successful; and

a communication unit configured to transfer the contents data from the transmitting device to the receiving device through an encrypted communication path which is encrypted by using the second encryption key and provided on the radio link layer;

wherein at least one of the second authentication unit and the second key exchange unit rejects its process of at least one of authentication and key exchange with one of the transmitting device and the receiving device when at least one of the first authentication by the first authentication unit and the first key exchange by the first key exchange unit with one of the transmitting device and the receiving device is unsuccessful.

20. A radio communication system, comprising a transmitting device for transmitting copyright protected contents data through radio communications, and a receiving device for receiving the contents data transmitted from the transmitting device, each one of the transmitting device and the receiving device having:

a first authentication unit configured to carry out a first authentication between the transmitting device and the receiving device, for judging whether the transmitting device and the receiving device are devices that are allowed to communicate with the transmitting device or not, on a radio link layer of the radio communications;

a first key exchange unit configured to generate a first encryption key and share the first encryption key between the transmitting device and the receiving device when the first authentication between the transmitting device and the receiving device by the first authentication unit is successful;

a second authentication unit configured to carry out a second authentication between the transmitting device and the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key between the transmitting device and the receiving device when the second authentication between the transmitting device and the receiving device by the second authentication unit is successful; and

a communication unit configured to set up an encrypted communication path which is encrypted by using the second encryption key on the encrypted radio communication which is encrypted by using the first encryption key, and transfer the contents data from the transmitting device to the receiving device through the encrypted communication path,

wherein at least one of the second authentication unit and the second key exchange unit rejects its process of at least one of authentication and key exchange with one of the transmitting device and the receiving device when at least one of the first authentication by the first authentication unit and the first key exchange by the first key exchange unit with one of the transmitting device and the receiving device is unsuccessful.

21. A contents data transfer method in a radio communication system comprising a transmitting device for transmitting copyright protected contents data through radio communications and a receiving device for receiving the contents data transmitted from the transmitting device, the contents data transfer method comprising:

carrying out a first authentication between the transmitting device and the receiving device, for judging whether the transmitting device and the receiving device are devices that are allowed to communicate with the transmitting device or not, on a radio link layer of the radio communications;

generating a first encryption key and sharing the first encryption key between the transmitting device and the receiving device when the first authentication between the transmitting device and the receiving device is successful;

carrying out a second authentication between the transmitting device and the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

generating a second encryption key and sharing the second encryption key between the transmitting device and the receiving device when the second authentication between the transmitting device and the receiving device is successful;

rejecting a process of at least one of authentication and key exchange with one of the transmitting device and the receiving device when at least one of the first authentication and the first key exchange with one of the transmitting device and the receiving device is unsuccessful, and

transferring the contents data from the transmitting device to the receiving device through an encrypted communication path which is encrypted by using the second encryption key and provided on the radio link layer.

22. A contents data transfer method in a radio communication system comprising a transmitting device for transmitting copyright protected contents data through radio communications and a receiving device for receiving the contents data transmitted from the transmitting device, the contents data transfer method comprising:

carrying out a first authentication between the transmitting device and the receiving device, for judging whether the transmitting device and the receiving device are devices that are allowed to communicate with the transmitting device or not, on a radio link layer of the radio communications;

generating a first encryption key and sharing the first encryption key between the transmitting device and the receiving device when the first authentication between the transmitting device and the receiving device is successful;

carrying out a second authentication between the transmitting device and the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

generating a second encryption key and sharing the second encryption key between the transmitting device and the receiving device when the second authentication between the transmitting device and the receiving device is successful;

rejecting a process of at least one of authentication and key exchange with one of the transmitting device and the receiving device when at least one of the first authentication and the first key exchange unit one of the transmitting device and with the receiving device is unsuccessful; and

setting up an encrypted communication path which is encrypted by using the second encryption key on the encrypted radio communication which is encrypted by using the first encryption key, and transferring the contents data from the transmitting device to the receiving device through the encrypted communication path.

23. A transmitting device for transmitting copyright protected contents data to a receiving device through radio communications, the transmitting device comprising:

a first key exchange unit configured to generate a first encryption key and share the first encryption key with the receiving device;

an authentication unit configured to carry out an authentication with the receiving device, for protecting copyright of the contents data to be transmitted, through an encrypted radio communication using the first encryption key;

a second key exchange unit configured to generate a second encryption key and share the second encryption key with the receiving device when the authentication with the receiving device by the authentication unit is successful,

wherein

an encrypted communication path which is encrypted by using the second encryption key is set up on the encrypted radio communication which is encrypted by using the first encryption key, and

the contents data are transmitted to the receiving device through the encrypted communication path, and

wherein the second key exchange unit rejects its process of key exchange with the receiving device when at least one of the authentication by the authentication unit and the first key exchange by the first key exchange unit with the receiving device is unsuccessful.

24. A receiving device for receiving copyright protected contents data transmitted from a transmitting device through radio communications, the receiving device comprising:

a first key exchange unit configured to generate a first encryption key and share the first encryption key with the transmitting device;

an authentication unit configured to carry out an authentication with the transmitting device, for protecting copyright of the contents data to be received, through an encrypted radio communication using the first encryption key; and

a second key exchange unit configured to generate a second encryption key and share the second encryption key with the transmission device when the authentication with the transmitting device by the authentication unit is successful,

wherein

an encrypted communication path which is encrypted by using the second encryption key is set up on the encrypted radio communication which is encrypted by using the first encryption key,

the contents data transmitted from the transmitting device are received through the encrypted communication path, and

wherein the second key exchange unit rejects its process of key exchange with the transmitting device when at least one of the authentication by the authentication unit and the first key exchange by the first key exchange unit with the transmitting device is unsuccessful.