Information terminal

• US 8,064,603 B2
• Filed: 08/02/2006
• Issued: 11/22/2011
• Est. Priority Date: 11/29/2005
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Terauchi, Toru, Sato, Jun, Watanabe, Keiko
• Primary Examiner(s): Augustin; Evens J
• Application Number:
  US11/497,734
• Publication Number:
  US 20070124245A1
• Time in Patent Office: 1,938 Days
• Field of Search: 380/277, 726/27
• US Class Current: 380/277
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

When content owned by a source device are played back in a rendering device, a content key is transferred from the source device to the rendering device via a secure session every time playback is carried out. Then, encoded content are decoded and played back to be outputted by using the transferred content key so as to discard the content key after the end of playback.

Claims

1. An information terminal which is configured to operate as one of a source terminal and rendering terminal,

wherein the information terminal, operating as the source terminal, comprises:

a storing unit configured to store an encoded content;

a first receiving unit configured to receive a rights object including rights information assigned to the encoded content and key information used to decode the encoded content, wherein the rights object is encoded using a public key and is transferred from a rights server via a communication network;

a first decoding unit configured to decode the encoded rights object using a secret key paired with the public key;

an extracting unit configured to extract the key information from the decoded rights object;

a first session establishing unit configured to perform mutual authentication with another information terminal operating as the rendering terminal, and establish a secure session with the other information terminal operating as the rendering terminal if legitimacy thereof is authorized as a result of the mutual authentication;

a first generating unit configured to generate a first common key; and

an encoding unit configured to encode the extracted key information corresponding to the encoded content by using the first common key generated by the first generating unit, and transmit the encoded key information to the other information terminal operating as the rendering terminal via the secure session, and

wherein the information terminal, operating as the rendering terminal, comprises;

an acquiring unit configured to acquire the encoded content;

a second session establishing unit configured to perform mutual authentication with another information terminal operating as the source terminal, and establish the secure session with the other information terminal operating as the source terminal if legitimacy thereof is authorized as a result of the mutual authentication;

a second generating unit configured to generate a second common key that is identical to the first common key generated by the first generating unit;

a second receiving unit configured to receive the encoded key information transmitted from the other information terminal operating as the source terminal via the secure session;

a second decoding unit configured to decode the received encoded key information by using the second common key generated by the second generating unit;

a playing back unit configured to decode and playback the acquired encoded content by using the key information decoded by the second decoding unit; and

a discarding unit configured to discard the decoded key information after end of playback of the decoded content.

2. The information terminal according to claim 1, wherein the information terminal, operating as the source terminal, further comprises a decrementing unit configured to decrement information for limiting a playback count every time the encoded key information is transmitted to the other information terminal operating as the rendering terminal, when said rights object includes the information for limiting the playback count.

3. The information terminal according to claim 1, wherein the information terminal, operating as the source terminal, further comprises a transmitting unit configured to transmit invalid key information to the other information terminal operating as the rendering terminal after the playback of the encoded content has terminated at the other information terminal operating as the rendering terminal, and

wherein when the information terminal operates as the rendering terminal, the discarding unit receives the invalid key information transmitted from the other information terminal operating as the source terminal, and rewrites the decoded key information used to decode the encoded content with the received invalid key information.

8. The information terminal according to claim 1, wherein the information terminal, operating as the source terminal, further comprises a decrementing unit configured to decrement information for limiting a playback count every time a playback end notification of the encoded content is sent from the other information terminal operating as the rendering terminal, when said rights object includes the information for limiting the playback count.

17. The information terminal according to claim 1, wherein during the mutual authentication, the information terminals operating as the source terminal and the rendering terminal respectively generate the first and second common keys that are identical to each other.

4. An information terminal which is configured to operate as one of a source terminal and rendering terminal,

wherein the information terminal, operating as the source terminal, comprises:

a storing unit configured to store an encoded game content;

a first receiving unit configured to receive a rights object including rights information assigned to the encoded game content and key information used to decode the encoded game content, wherein the rights object is encoded using a public key and transferred from a rights server via a communication network;

a first decoding unit configured to decode the encoded rights object using a secret key paired with the public key;

an extracting unit configured to extract the key information from the decoded rights object;

a first session establishing unit configured to perform mutual authentication with another information terminal operating as the rendering terminal, and establish a secure session with the other information terminal operating as the rendering terminal if legitimacy thereof is authorized as a result of the mutual authentication;

a first generating unit configured to generate a first common key; and

an encoding unit configured to encode the extracted key information corresponding to the encoded game content by using the first common key generated by the first generating unit, and transmit the encoded key information to the other information terminal operating as the rendering terminal via the secure session, and

wherein the information terminal, operating as the rendering terminal, comprises;

an acquiring unit configured to acquire the encoded game content;

a second session establishing unit configured to perform mutual authentication with another information terminal operating as the source terminal, and establish the secure session with the other information terminal operating as the source terminal if legitimacy thereof is authorized as a result of the mutual authentication;

a second generating unit configured to generate a second common key that is identical to the first common key generated by the first generating unit;

a second receiving unit configured to receive the encoded key information transmitted from the other information terminal operating as the source terminal via the secure session;

a second decoding unit configured to decode the received encoded key information by using the second common key generated by the second generating unit;

an executing unit configured to decode and execute the acquired encoded game content by using the key information decoded by the second decoding unit; and

a discarding unit configured to discard the decoded key information after end of execution of the decoded game content.

5. The information terminal according to claim 4, wherein the information terminal, operating as the source terminal, further comprises a decrementing unit configured to decrement information for limiting an execution count every time the encoded key information is transmitted to the other information terminal operating as the rendering terminal, when said rights object includes the information for limiting the execution count.

6. The information terminal according to claim 4, wherein the information terminal, operating as the source terminal, further comprises a transmitting unit configured to transmit invalid key information to the other information terminal operating as the rendering terminal after the execution of the encoded game content has terminated in the other information terminal operating as the rendering terminal, and

wherein when the information terminal operates as the rendering terminal, the discarding unit receives the invalid key information transmitted from the other information terminal operating as the source terminal, and rewrites the decoded key information used to decode the encoded game content with the received invalid key information.

7. The information terminal according to claim 4, wherein the information terminal, operating as the source terminal, further comprises a decrementing unit configured to decrement information for limiting an execution count every time an execution end notification of the encoded game content is sent from the other information terminal operating as the rendering terminal, when said rights object includes the information for limiting the execution count.

18. The information terminal according to claim 4, wherein during the mutual authentication, the information terminals operating as the source terminal and the rendering terminal respectively generate the first and second common keys that are identical to each other.

9. A content reproduction method comprising:

storing, in an information terminal operating as a source terminal, an encoded content, and a rights object that includes rights information assigned to the encoded content and key information used to decode the encoded content, wherein the rights object is encoded using a public key and is transferred from a rights server via a communication network;

decoding, in the information terminal operating as the source terminal, the encoded rights object using a secret key paired with the public key;

extracting, in the information terminal operating as the source terminal, the key information from the decoded rights object;

acquiring the encoded content, in an information terminal operating as a rendering terminal;

performing a mutual authentication between the information terminal operating as the source terminal and the information terminal operating as the rendering terminal, and if legitimacy of the information terminal operating as the source terminal and the information terminal operating as the rendering terminal is authorized as a result of the mutual authentication, establishing a secure session between the information terminal operating as the source terminal and the information terminal operating as the rendering terminal;

generating a first common key in the information terminal operating as the source terminal and a second common key the information terminal operating as the rendering terminal, wherein the first and second common keys are identical;

encoding the extracted key information corresponding to the encoded content by the generated first common key, and transmitting the encoded key information to the information terminal operating as the rendering terminal via the secure session;

receiving the encoded key information transmitted from the information terminal operating as the source terminal via the secure session;

decoding the received encoded key information by using the generated second common key;

decoding and playing back the encoded content acquired in the information terminal operating as the rendering terminal by using the decoded key information; and

discarding the decoded key information after end of playback of the decoded content.

10. The content reproduction method according to claim 9, further comprising decrementing information for limiting a playback count every time the encoded key information is transmitted to the information terminal operating as the rendering terminal, when said rights object includes the information for limiting the playback count.

11. The content reproduction method according to claim 9, further comprising:

transmitting invalid key information to the information terminal operating as the rendering terminal after the playback of the encoded content has terminated at the information terminal operating as the rendering terminal, and

receiving the invalid key information transmitted from the information terminal operating as the source terminal, and rewriting the decoded key information used to decode the encoded content with the received invalid key information.

12. The content reproduction method according to claim 9, further comprising decrementing information for limiting a playback count every time a playback end notification of the encoded content is sent from the information terminal operating as the rendering terminal, when said rights object includes the information for limiting the playback count.

13. A content reproduction method comprising:

storing, in an information terminal operating as a source terminal, an encoded game content, and a rights object that includes rights information assigned to the encoded game content and key information used to decode the encoded game content, wherein the rights object is encoded using a public key and is transferred from a rights server via a communication network;

decoding, in the information terminal operating as the source terminal, the encoded rights object using a secret key paired with the public key;

extracting, in the information terminal operating as the source terminal, the key information from the decoded rights object;

acquiring the encoded game content, in an information terminal operating as a rendering terminal;

performing a mutual authentication between the information terminal operating as the source terminal and the information terminal operating as the rendering terminal, and if legitimacy of the information terminal operating as the source terminal and the information terminal operating as the rendering terminal is authorized as a result of the mutual authentication, establishing a secure session between the information terminal operating as the source terminal and the information terminal operating as the rendering terminal;

generating a first common key in the information terminal operating as the source terminal and a second common key the information terminal operating as the rendering terminal, wherein the first and second common keys are identical;

encoding the extracted key information corresponding to the encoded game content by the generated first common key, and transmitting the encoded key information to the information terminal operating as the rendering terminal via the secure session;

receiving the encoded key information transmitted from the information terminal operating as the source terminal via the secure session;

decoding the received encoded key information by using the generated second common key;

decoding and executing the encoded game content acquired in the information terminal operating as the rendering terminal by using the decoded key information; and

discarding the decoded key information after end of execution of the decoded game content.

14. The content reproduction method according to claim 13, further comprising decrementing information for limiting an execution count every time the encoded key information is transmitted to the information terminal operating as the rendering terminal, when said rights object includes the information for limiting the execution count.

15. The content reproduction method according to claim 13, further comprising:

transmitting invalid key information to the information terminal operating as the rendering terminal after the execution of the encoded game content has terminated in the information terminal operating as the rendering terminal, and

receiving the invalid key information transmitted from the information terminal operating as the source terminal, and rewriting the decoded key information used to decode the encoded game content with the received invalid key information.

16. The content reproduction method according to claim 13, further comprising decrementing information for limiting an execution count every time an execution end notification of the encoded game content is sent from the information terminal operating as the rendering terminal, when said rights object includes the information for limiting the execution count.

19. An information terminal which is configured to operate as one of a source terminal and rendering terminal,

wherein the information terminal, operating as the source terminal, comprises:

a storing unit configured to store an encoded content;

a first receiving unit configured to receive a rights object including rights information assigned to the encoded content and key information used to decode the encoded content, wherein the rights object is encoded using a first public key and is transferred from a rights server via a communication network;

a first decoding unit configured to decode the encoded rights object by using a first secret key paired with the first public key;

an extracting unit configured to extract the key information from the decoded rights object;

a first acquiring unit configured to acquire a second public key of another information terminal operating as the rendering terminal; and

an encoding unit configured to encode the extracted key information by using the second public key acquired by the first acquiring unit, and transmit the encoded key information to the other information terminal operating as the rendering terminal, and

wherein the information terminal, operating as the rendering terminal, comprises;

a second acquiring unit configured to acquire the encoded content;

a second receiving unit configured to receive the encoded key information transmitted from another information terminal operating as the source terminal;

a second decoding unit configured to decode the received encoded key information by using a secret key paired with the second public key;

a playing back unit configured to decode and playback the acquired encoded content by using the key information decoded by the second decoding unit; and

a discarding unit configured to discard the decoded key information after end of playback of the decoded content.

20. The information terminal according to claim 19, wherein the information terminal, operating as the source terminal, further comprises a decrementing unit configured to decrement information for limiting a playback count every time the encoded key information is transmitted to the other information terminal operating as the rendering terminal, when said rights object includes the information for limiting the playback count.

21. The information terminal according to claim 19, wherein the information terminal, operating as the source terminal, further comprises a decrementing unit configured to decrement information for limiting a playback count every time a playback end notification of the encoded content is sent from the other information terminal operating as the rendering terminal, when said rights object includes the information for limiting the playback count.