Inter-entity coupling method, apparatus and system for content protection

• US 8,327,136 B2
• Filed: 04/21/2006
• Issued: 12/04/2012
• Est. Priority Date: 09/15/2005
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Byung-Rae, Hwang, Sung-Oh, Kim, Wuk
• Primary Examiner(s): Pwu, Jeffrey
• Assistant Examiner(s): BROWN, ANTHONY D
• Application Number:
  US11/409,150
• Publication Number:
  US 20070061568A1
• Time in Patent Office: 2,419 Days
• Field of Search: 726/2, 726/4, 726/6, 726 26- 30, 713/163
• US Class Current: 713/163
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0478 applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833

Abstract

Disclosed is an inter-entity coupling method for protecting content in a broadcast environment including a broadcast network and a terminal, the broadcast network having a Broadcast Service Application (BSA), a Broadcast Service Distribution (BSD), and a Broadcast Service Management (BSM), the inter-entity coupling method including performing, by the terminal, a registration process for obtaining a group key for the terminal; after the registration process is completed, performing, by the terminal, a service joining process for requesting service joining, and receiving, by the terminal, a Rights Object (RO) about the content from a message, which is received in response to the request, based on the obtained group key; obtaining a traffic key by using the RO, if a traffic key message is received after the service joining process is completed; receiving encrypted content in the terminal; and decrypting the encrypted content by using the traffic key.

Claims

1. An inter-acting method between a terminal and entities constituting a broadcast network for protecting content in a broadcast environment including the broadcast network and the terminal, the broadcast network having a Broadcast Service Application (BSA), a Broadcast Service Distribution (BSD), and a Broadcast Service Management (BSM), the inter-acting method comprising:

transmitting a registration request message for obtaining a group key in a registration process for the terminal from the terminal to the BSM, wherein the group key is encrypted by a public key of the terminal;

receiving, by the terminal, a registration response message comprising the group key generated by the BSM through a broadcast channel of the BSD;

requesting a service joining process by the terminal;

receiving, by the terminal, in response to the service joining request, a message including a Rights Object (RO) corresponding to the content;

obtaining a service key by decrypting the RO using the group key, the service key being an encryption key assigned when the terminal joins the service;

if a traffic key message is received in the terminal, obtaining a traffic key from the traffic key message by using the service key, the traffic key being an encryption key used for encrypting the content; and

receiving and decrypting an encrypted content using the traffic key,

wherein the service joining process comprises;

when a service joining request message is received from the terminal, generating, by the BSM, the RO using the service key;

transferring, by the BSM, a service joining response message including an RO encrypted with the group key to the BSD;

broadcasting, by the BSD, the service joining response message to the terminal; and

decrypting, by the terminal, the encrypted RO included in the service joining response message using the obtained group key to obtain the RO.

2. The inter-acting method as claimed in claim 1, wherein the registration process comprises:

verifying, by the terminal, the registration response message to obtain the group key.

3. The inter-acting method as claimed in claim 2, wherein the terminal corresponds to a terminal using the broadcast channel, and transmits the registration request message to the BSM through a specific agency.

4. The inter-acting method as claimed in claim 2, wherein, when the terminal corresponds to a terminal using a bidirectional channel, the BSM directly transfers the registration response message.

5. The inter-acting method as claimed in claim 2, wherein obtaining the group key comprises:

when the registration response message is received from the BSD, checking an electronic signature field and a time field included in the registration response message for verification; and

when the verification is successful, decrypting the encrypted group key included in the registration response message using the public key of the terminal to obtain the group key.

6. The inter-acting method as claimed in claim 1, wherein the service joining process comprises:

when a service joining request message is received from the terminal through a bidirectional channel, generating, by the BSM, the RO using the service key;

transferring, by the BSM, a service joining response message including an RO encrypted with the group key to the terminal; and

decrypting, by the terminal, the encrypted RO included in the broadcasted service joining response message using the obtained group key to obtain the RO.

7. The inter-acting method as claimed in claim 1 wherein the service joining request message includes an IDentification (ID) of a service which the terminal is to join.

8. The inter-acting method as claimed in claim 1, wherein the traffic key is obtained, by the terminal, by decrypting an encrypted traffic key using the service key included in the obtained RO, after the BSM transfers the traffic key message to the BSD, and the BSD transmits the traffic key message to the terminal, the traffic key message including the encrypted traffic key formed by encrypting the traffic key with the service key.

9. The inter-acting method as claimed in claim 1, further comprising:

receiving, in the BSA, content from a content provider after obtaining the traffic key;

encrypting the received content using the traffic key; and

transmitting the encrypted content to the terminal.

10. The inter-acting method as claimed in claim 9, further comprising:

receiving, by the BSM, a registration request message from the terminal through a specific agency;

generating a message, including the group key encrypted with the public key of the terminal, in response to reception of the registration request message, and transferring the generated message including the encrypted group key to the BSD; and

broadcasting, by the BSD, the generated message including the encrypted group key to the terminal.

11. The inter-acting method as claimed in claim 9, further comprising:

receiving, by the BSM, a registration request message from the terminal; and

generating, by the BSM, a message including the group key encrypted with the public key of the terminal, in response to reception of the registration request message, and transferring the generated registration response message to the terminal through a bidirectional channel.

12. The inter-acting method as claimed in claim 11, further comprising:

when the terminal corresponds to a terminal using the broadcast channel, transmitting a service joining request message to the BSM through a specific agency;

generating, by the BSM, the RO using the service key, and transferring a service joining response message including an RO encrypted with the group key to the BSD; and

broadcasting, by the BSD, the service joining response message to the terminal.

13. The inter-acting method as claimed in claim 12, wherein the service joining process comprises:

transmitting, by the terminal, a service joining request message to the BSM; and

generating, by the BSM, the RO using the service key, and transferring a service joining response message including an RO encrypted with the group key to the terminal through the bidirectional channel.

14. The inter-acting method as claimed in claim 13, further comprising:

decrypting, by the terminal, the encrypted RO by using the group key, thereby obtaining the RO;

receiving, by the terminal, the traffic key message generated by the BSA through the BSD; and

decrypting an encrypted traffic key using the service key included in the obtained RO after receiving the traffic key message to obtain the traffic key.

15. The inter-acting method as claimed in claim 14, wherein the traffic key message includes an encrypted traffic key generated by encrypting the traffic key with a service key corresponding to an encryption key generated according to the service joining.

16. An inter-acting method between a terminal and entities constituting a broadcast network for protecting content by a Broadcast Service Management (BSM) in a broadcast environment including said broadcast network and said terminal, the broadcast network having a Broadcast Service Application (BSA), a Broadcast Service Distribution (BSD), and the BSM, the inter-acting method comprising:

receiving, by the BSM, a registration request message from the terminal;

determining, by the BSM, a group to which the terminal belongs according to the registration request message and transmitting a registration response message including a group key corresponding to the group to the terminal through a broadcast channel of the BSD;

receiving, by the BSM, a service joining request from the terminal;

transmitting, by the BSM, a Right Object (RO) about the content which can be received based on the group key to the terminal, in response to the service joining request;

generating and transmitting a traffic key message to the BSD and thereby transmitting the traffic key message to the terminal by the BSM; and

transmitting, by the BSM, a traffic key to the BSA, the traffic key being an encryption key used for encrypting content in the BSA and thereby transmitting the encrypted content to the terminal,

wherein the group key is encrypted by a public key of the terminal;

wherein the RO includes a service key which is an encryption key assigned when the terminal joins the service, and

wherein the service joining process comprises;

when a service joining request message is received from the terminal, generating, by the BSM, the RO using the service key;

transferring, by the BSM, a service joining response message including an RO encrypted with the group key to the BSD;

broadcasting, by the BSD, the service joining response message to the terminal; and

decrypting, by the terminal, the encrypted RO included in the service joining response message using the obtained group key to obtain the RO.

17. The inter-acting method as claimed in claim 16, wherein providing the group key comprises:

transmitting a registration response to the terminal in response to the registration request through the BSD, the registration response including the group key corresponding to the group to which the terminal belongs.

18. The inter-acting method as claimed claim 17, wherein transmitting the RO comprises:

when a service joining request is received from the terminal, generating, by the BSM, the RO using a service key; and

transferring, by the BSM, a service joining response including the RO encrypted with the group key to the BSD and thereby broadcasting the service joining response to the terminal, wherein the RO is decrypted in the terminal using the group key.

19. The inter-acting method as claimed in claim 18, wherein the traffic key message includes an encrypted traffic key formed by encrypting the traffic key with a service key.

20. The inter-acting method as claimed in claim 19, wherein the content is received in the BSA from a content provider.

21. An inter-acting terminal for protecting content in a broadcast environment, the inter-acting terminal comprising:

a registration module for receiving a group key in a registration process;

a digital rights management module for performing a registration process;

a communication module for transmitting a registration request message for acquiring the group key for the terminal, the group key being encrypted by a public key of the terminal, and receiving a registration response message comprising the group key generated by a Broadcast Service Management (BSM) via a broadcast channel of a Broadcast Service Distribution (BSD),

receiving a message including a Rights Object (RO) corresponding to the content in response to a service joining request;

a rights management module for obtaining a service key by decrypting the RO using the group key; and

a key stream management module for obtaining a traffic key from a traffic key message by using the service key, and decrypting an encrypted content using the traffic key,

wherein the service key is an encryption key assigned when the terminal joins the service;

wherein the traffic key is an encryption key used for encrypting the content; and

wherein the service joining process comprises;

when a service joining request message is received from the terminal, generating, by the BSM, the RO using the service key;

transferring, by the BSM, a service joining response message including an RO encrypted with the group key to the BSD;

broadcasting, by the BSD, the service joining response message to the terminal; and

decrypting, by the terminal, the encrypted RO included in the service joining response message using the obtained group key to obtain the RO.

22. The inter-acting terminal as claimed in claim 21, wherein the communication module receives the traffic key message and the encrypted content.

23. The inter-acting terminal as claimed in claim 21, further comprising an authentication module for verifying the received registration response to obtain the group key.

24. The inter-acting terminal as claimed in claim 23, wherein the authentication module checks the electronic signature field and a time field included in the registration response for verification, and

the key stream management module decrypts the group key included in the registration response message using the public key of the terminal to obtain the group key when the verification is successful.

25. The inter-acting terminal as claimed in claim 23, further comprising a content decryption module for decrypting encrypted content with the traffic key, wherein the content is encrypted by a Broadcast Service Application (BSA) using the traffic key when the content is transmitted from a content provider to the BSA.