Secure authenticated distance measurement

• US 9,590,977 B2
• Filed: 08/05/2016
• Issued: 03/07/2017
• Est. Priority Date: 07/26/2002
• Status: Expired due to Term

• Current Assignee: Koninklijke Philips N.V.
• Original Assignee: Koninklijke Philips N.V.
• Inventors: Kamperman, Franciscus L. A. J.
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US15/229,207
• Publication Number:
  US 20160359845A1
• Time in Patent Office: 214 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 43/0852 Delays
• CPC Class Codes: H04L 43/16 Threshold monitoring
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 24/00 Supervisory, monitoring or testing arrangements

Abstract

The invention relates to a method for a first communication device to perform authenticated distance measurement between the first communication device and a second communication device, wherein the first and the second communication device share a common secret and the common secret is used for performing the distance measurement between the first and the second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device.

Claims

1. A receiving device comprising:

means for providing a certificate identifying said receiving device;

means for receiving a first signal from a first device after the first device determines, based on information obtained from the certificate, that the receiving device is compliant with a set of compliance rules;

means for generating a second signal after receiving the first signal, wherein said second signal is derived using a secret known by the first device;

means for transmitting said second signal;

means for generating a secure authenticated channel using the secret; and

means for receiving over the secure authenticated channel a protected content after the first device determines that the second signal is derived using the secret and a time between a transmission of the first signal and receipt of the second signal by the first device is less than a predetermined time.

2. The receiving device of claim 1, wherein said providing said certificate is responsive to a request.

3. The receiving device of claim 1, further comprising means for receiving said secret.

4. The receiving device of claim 1, further comprising means for transmitting said secret.

5. The receiving device of claim 4, wherein said secret is transmitted using a transfer protocol, said transfer protocol selected the group consisting of a key transport protocol, a key management protocol and a key exchange agreement.

6. The receiving device of claim 5, wherein said transfer protocol is determined by said receiving device.

7. The receiving device of claim 5, further comprising means for receiving said transfer protocol.

8. The receiving device of claim 1, further comprising means for displaying said received protected content.

9. The receiving device of claim 1, wherein the secret comprises a random number.

10. The second device of claim 1, wherein the predetermined time is based on a communication system associated with the first device.

11. A second device for receiving protected content, the second device comprising:

a memory, the memory storing a public key and a private key, wherein the public key and private key are a pair;

a microprocessor circuit connected to the memory via a communication bus, the microprocessor circuit arranged to;

provide a certificate to a first device identifying said second device, said certificate comprising the public key;

receive a first signal from a first device after the first device determines, based on information obtained from the certificate that the receiving device is compliant;

obtain a secret encrypted by the public key, wherein the secret is known by the first device;

use the private key to determine the secret;

derive a second signal, wherein the second signal is the first signal modified using the secret;

send the second signal to the first device after receiving the first signal;

receive protected content after the first device has determined that at least the second signal is derived from the secret and a time difference between first device'"'"'s provision of the first signal and first device'"'"'s reception of the second signal difference is less than a predetermined time.

12. The second device of claim 11, wherein the secret comprises a random number.

13. The second device of claim 11, wherein the microprocessor circuit is further arranged to provide the secret to the first device.

14. The second device of claim 11, wherein the microprocessor circuit is further arranged to receive the secret from the first device.

15. The second device of claim 11, wherein the certificate comprise an identity of the second device.

16. The second device of claim 11, wherein the predetermined time is based on a communication system associated with the first device.

17. The second device of claim 11, wherein the microprocessor circuit is further arranged to:

use the secret to generate a secure authenticated channel between the first device and the second device; and

use the secure authenticated channel to receive the protected content.

18. The second device of claim 11, wherein the modification is a XOR operation using the first signal.

19. The second device of claim 11, wherein said secret is transmitted using a transfer protocol, said transfer protocol selected the group consisting of a key transport protocol, a key management protocol and a key exchange agreement.

20. The second device of claim 11, wherein the microprocessor circuit is further arranged to receive the secret by using a key transfer protocol.

21. The second device of claim 11,

wherein the time difference is computed as the subtraction of a first time from a second time,

wherein the first device notes a first time when the first signal is sent and notes a second time when the second signal is revived.

22. A method for a second device controlling of receiving a protected content, the method comprising:

sending a certificate to a first device, the certificate providing information regarding the second device;

receiving a first signal from the first device after the first device determines based on the certificate whether the second device is compliant with a set of compliance rules, wherein the second signal is derived using a secret known by the first device;

sending a second signal to the first device after receiving the first signal;

generating a secure authenticated channel using the secret;

receiving over the secure authenticated channel the protected content after the first device determines that the second signal is derived using the secret and a time between a transmission of the first signal and receipt of the second signal by the first device is less than a predetermined time.

23. The method of claim 22, wherein said providing the certificate is responsive to a request.

24. The method of claim 22, further comprising a receiver of the secret.

25. The method of claim 22, further comprising a transmitter of the secret.

26. The method of claim 25, wherein the secret is transmitted using a transfer protocol, said transfer protocol selected the group consisting of a key transport protocol, a key management protocol and a key exchange agreement.

27. The method of claim 26, wherein the transfer protocol is determined by the receiving device.

28. The method of claim 26, further comprising a receiver for the transfer protocol.

29. The method of claim 22, further comprising a display for displaying the protected content.

30. The method of claim 22, wherein the secret comprises a random number.

31. The method of claim 22, wherein the predetermined time is based on a communication system associated with the first device.