Method for transmitting content in home network using user-binding

• US 8,234,493 B2
• Filed: 11/17/2005
• Issued: 07/31/2012
• Est. Priority Date: 11/17/2004
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Myung-sun, Han, Sung-hyu, You, Yong-kuk, Yoon, Young-sun, Kim, Bong-seon, Lee, Jae-heung
• Primary Examiner(s): Orgad, Edan
• Assistant Examiner(s): TURCHEN, JAMES R
• Application Number:
  US11/280,453
• Publication Number:
  US 20060129818A1
• Time in Patent Office: 2,448 Days
• Field of Search: 726 26- 29, 713/171
• US Class Current: 713/171
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2838 Distribution of signals within a home automation network, e.g. involving splitting/multiplexing signals to/from different paths adaptations of television systems for transmission by electric cable for domestic distribution H04N7/106; hybrid transport H04L12/6418; home network arrangements specially adapted for distribution of digital video signals H04N7/24
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

A method for transmitting content to a user device from a home server in a home network is provided. The method includes: receiving an allocated user public key and a user private key of a user to whom the home server belongs; generating an arbitrary session public key and a session private key, generating an encrypted session private key by encrypting the session private key using a device public key that is a public key of the user device, and transmitting the encrypted session private key to the user device; and transmitting the content encrypted using a predetermined content key and a content key encrypted using the session private key to the user device. According to the method, by binding the content to each user, instead of to each device, the content can be safely and conveniently shared.

Claims

1. A method of transmitting content to a user device from a home server in a home network, the method comprising:

transmitting the content, which is encrypted by using a predetermined content key, and transmitting the predetermined content key, which is encrypted by using a pair of a predetermined session public key and a session private key, to the user device,

wherein the content that is transmitted is bound to a user by allowing transmission of the content from the user device to a first user device only if it is determined that the first user device belongs to the user by using a user public key and a user private key of the user to whom the home server belongs,

wherein the user public key and the user private key are used to determine whether users of a plurality of user devices in the home network are identical,

wherein the session public key and the session private key, used by the plurality of user devices in the home network, are updated if the user device leaves the home network.

2. The method of claim 1, wherein the transmitting comprises:

receiving the user public key and the user private key, which are allocated, of the user to whom the home server belongs;

generating the session public key and the session private key, generating an encrypted session private key by encrypting the session private key using a device public key, which is a public key of the user device, and transmitting the encrypted session private key to the user device; and

transmitting, to the user device, the content, which is encrypted by using the predetermined content key, and the predetermined content key, which is encrypted by using the session private key.

3. The method of claim 2, wherein the user device obtains the session private key by decoding the encrypted session private key using a device private key and the user device obtains the predetermined content key by decoding the encrypted content key using the session private key.

4. The method of claim 1, wherein the public session key and the private session key are generated by the home server.

5. The method of claim 1, wherein the home server receives the user public key and the user private key.

6. A method of transmitting content from a second user device to a first user device in a home network, the method comprising:

determining whether a user of the first user device is identical to a user of the second user device based on pairs of user public keys and user private keys of the first user device and the second user device, and transmitting the content from the second user device to the first user device only if the user of the first user device and the user of the second user device are determined to be identical, wherein the content is bound to a user by a user public key and a user private key of the user to whom each of the user devices belongs.

7. The method of claim 6, wherein the determining comprises:

receiving, from the second user device, a user public key of a second user to whom the second user device belongs;

generating a device certificate value by using a predetermined device value and the public key of the second user, and transmitting the device certificate value that is generated to a home server of the first user device;

determining whether the first user and the second user are identical based on a server certificate value that is generated by the home server by using the device certificate value and the user private key of the first user to whom the first user device belongs and the predetermined device value; and

receiving the content that is encrypted by using a predetermined content key, and a content key that is encrypted by using a predetermined session public key, wherein the content and the content key are transmitted by the second user device if the first user and the second user are determined to be identical, wherein the session private key that corresponds to the session public key is transmitted to the user device by using a pair of the public key and private key of the user device if registration of the user device with the home network changes.

8. The method of claim 7, wherein the device certificate value (C_A) is generated using the following equation:

C_—

A=mKpub_—

u1′

where m is a device value, and Kpub_u1'"'"' is a user public key that is transmitted by the second user device.

9. The method of claim 8, wherein the server certificate value (C_A′

) is generated using the following equation;

C_—

A′

=C_AKpri_—

u1

where Kpri_u1 is the user private key of the first user.

10. The method of claim 9, wherein the determining whether or not the first user and the second user are identical comprises determining whether the server certificate value (C_A′

) is the same as the device value (m).

11. The method of claim 6, wherein the device certificate value (C_A) is generated using the following equation:

C_—

A=m*rKpub_—

u1′

where m is a device value, Kpub_u1′

is the user public key transmitted by the second device, and r is an arbitrary random number.

12. The method of claim 11, wherein the server certificate value (C_A′

) is generated using the following equation;

C_—

A′

=C_—

AKpri_—

u1

where Kpri_u1 is the user public key of the first user.

13. The method of claim 12, wherein the determining whether the first user and the second user are identical comprises determining whether a value that is obtained by dividing the server certificate value (CA′

) by an arbitrary random number (r) is the same as the device value (m).

14. The method of claim 7, further comprising:

determining the content from the second user device cannot be received and stopping transmission of content if the users are determined not to be identical.

15. The method of claim 7, further comprising:

determining whether a session private key of the first user device is identical to a session private key of the second user device by using an electronic signature if the users are determined to be identical.

16. The method of claim 15, wherein the determining whether the session private key of the first user device is identical to the session private key of the second user device comprises:

generating, at the first user device, a first electronic signature value by encrypting an arbitrary first random number using the session private key of the first user device;

transmitting, from the first user device, the first electronic signature value and the first random number to the second user device; and

decoding, at the second user device, the first electronic signature value by using the session public key of the second user device, and determining whether a result value that is generated by decoding the first electronic signature value is identical to the first random number.

17. The method of claim 16, wherein the determining whether the session private key of the first user device is identical to the session private key of the second user device further comprises:

generating, at the second user device, a second electronic signature value by encrypting an arbitrary second random number using the session private key of the second user device;

transmitting, from the second user device, the second electronic signature value and the second random number to the first user device; and

decoding, at the first user device, the second electronic signature value by using the session public key of the first user device, and determining whether a result value that is generated by decoding the second electronic signature is identical to the second random number.

18. The method of claim 17, wherein the first random number and the second random number are related to each other.

19. The method of claim 6, wherein a home server of the home network determines whether the user of the first user device is identical to a user of the second user device.

20. A non-transitory computer readable storage medium having embodied thereon a computer program for executing a method of transmitting content to a user device from a home server in a home network, the method comprising:

transmitting the content, which is encrypted by using a predetermined content key, and transmitting the predetermined content key, which is encrypted by using a pair of a predetermined session public key and a session private key, to the user device,

wherein the content that is transmitted, is bound to a user by allowing transmission of the content from the user device to a first user device only if it is determined that the first user device belongs to the user by using a user public key and a user private key of the user to whom the home server belongs,

wherein the user public key and the user private key are used to determine whether users of a plurality of user devices in the home network are identical,

wherein the session public key and the session private key, used by a plurality of user devices in the home network, are updated if the user device leaves the home network.

21. The computer readable storage medium of claim 20, wherein the public session key and the private session key are generated by the home server.

22. The computer readable storage medium of claim 20, wherein the home server receives the user public key and the user private key.

23. A non-transitory computer readable storage medium having embodied thereon a computer program for executing a method of transmitting content from a second user device to a first user device in a home network, the method comprising:

determining whether a user of the first user device is identical to a user of the second device based on pairs of user public keys and user private keys of the first user device and the second user device, and transmitting the content from the second user device to the first user device only if the users of the first device and the second device are determined to be identical, wherein the content is bound to a user by a user public key and a user private key of the user to whom each of the user devices belongs, wherein the determining comprises;

receiving, from the second user device, a user public key of a second user to whom the second user device belongs;

generating a device certificate value by using a predetermined device value and the public key of the second user, and transmitting the device certificate value that is generated to the home server of the first user device;

determining whether the first user and the second user are identical based on the server certificate value that is generated by the home server by using the device certificate value and the user private key of the first user to whom the first user device belongs and the predetermined device value; and

receiving the content that is encrypted by using a predetermined content key, and a content key that is encrypted by using a predetermined session public key, wherein the content and the content key are transmitted by the second user device if the first user and the second user are determined to be identical,

wherein the session private key that corresponds to the session public key is transmitted to the user device by using a pair of the public key and private key of the user device if registration of the user device with the home network changes.