摘要:
La présente invention concerne un procédé de mise en relation sécurisée d'un premier dispositif (S) avec un deuxième dispositif (P), le procédé comprenant des étapes de: • génération (114), par le premier dispositif (S), d'au moins une première donnée ( K ) dépendant d'une clé privée ( SKpcd ) propre au premier dispositif (S) et dépendant d'une clé publique ( PKpicc ) propre au deuxième dispositif (P), • génération (116), par le deuxième dispositif (P), d'au moins une deuxième donnée ( K' ) dépendant d'une clé privée ( SKpicc ) propre au deuxième dispositif (P) associée à la clé publique ( PKpicc ) propre au deuxième dispositif (P), et dépendant d'une troisième donnée ( PK' ), la troisième donnée ( PK' ) dépendant d'une donnée publique ( PKpcd, maskedPK ) propre au premier dispositif (S), • mise en oeuvre d'un test (118, 120, 122) vérifiant si les première et deuxième données ( K,K' ) remplissent une condition prédéterminée, et mise en relation sécurisée du premier dispositif (S) avec le deuxième dispositif (P) seulement si la condition prédéterminée est remplie, le procédé comprenant en outre l'étape suivante mise en oeuvre avant la génération (116) de la deuxième donnée ( K' ): • génération (110) de la troisième donnée ( PK' ), la troisième donnée ( PK' ) prenant une valeur adaptée pour que la condition prédéterminée soit remplie seulement si des données d'épreuve ( PIN' ) sont identiques à des données secrètes de référence ( PIN ) associées au deuxième dispositif (P).
摘要:
A system includes a content playback apparatus 10, a removable media reading apparatus 20 that is provided with a nonvolatile memory 22m in which first viewing restriction information is stored, and that is detachably attached to the content playback apparatus 10, and a removable media 30 in which second viewing restriction information is stored, and the removable media 30 being detachably attached to the removable media reading apparatus 20, and the content playback apparatus 10 checks the first viewing restriction information against the second viewing restriction information, and if the first viewing restriction information satisfies a condition of the second viewing restriction information, removes a playback restriction on a content stored in the removable media 30 in a state of being restricted for playback. It is possible to restrict viewers of the content to specific target persons, and also it is possible to reduce the risk of tampering of the viewing restriction information, and increase security in content management.
摘要:
A digital rights management (DRM) system, device and method having an authorized domain (12) for managing digital media, wherein the authorized domain or entity such as a rights issuer utilizes user based content key encryption. In one aspect, the system includes plurality of interconnected devices (16) that comprise: a storage system for storing a user key (19) from a user belonging to the authorized domain; a system for downloading content (13) encrypted with a content key (32); a system for downloading a content key encrypted with the user key; a decryption system (28) for decrypting the encrypted content key with the user key; and a system (28) for decrypting the encrypted content with the decrypted content key.
摘要:
Lesegerät für eine Chipkarte mit Erfassungsmitteln (122) zur Erfassung biometrischer Daten (126) von einem Benutzer, Ableitungsmitteln (128, 130) zur Ableitung einer Kennung (104) aus den biometrischen Daten, Freischaltungsmitteln (120, 128, 136) zur Freischaltung einer Chipkartenfunktion (116) mit der Kennung, Kommunikationsmitteln (120, 144) zur Ermöglichung einer Kommunikation zwischen einem Computer (146) und der Chipkarte zur Nutzung der Chipkartenfunktion durch den Computer.
摘要:
Implementations of the present disclosure relate to systems and methods for service authorization. A server terminal device may receive user authentication information that is stored on the auxiliary device for user authentication associated with an authentication device. Based on the user authentication information, the server terminal device may then determine whether the authentication device meets the authentication condition. The implementations further relate to methods and systems for requesting service authorization.
摘要:
A method is provided for storing a biometric template extracted from a smart card for use on a user computing device. The biometric template is extracted from the smart card using a smart card reader. The biometric template is encrypted using a content protection key. The content protection key is encrypted using at least one of a device password or a smart card password. The password may be hashed. The encrypted biometric template, the encrypted content protection key and the hashed password may then be stored in a cache. A method for using the stored biometric template to access the user computer device is also provided.
摘要:
A mobile terminal is capable of communicating with a plurality of types of reader/writer devices each including a control program having a function of identifying or authenticating an RFID tag. A mobile terminal 10 includes an application 15, a GPS processing unit 11 that acquires current position information of the mobile terminal 10, an RFID tag processing unit 12 that receives a signal related to a carrier wave or a command emitted from a reader/writer device 41 and outputs a trigger, and a terminal controller 14 that causes the application 15 to operate in response to the trigger. The application 15 acquires, from the mobile terminal 10, personal information including identification information of a user 40 of the mobile terminal 10 or identification information of the mobile terminal 10 and information of the date and time when the application 15 operates or the date and time when the reader/writer device 41 and the RFID tag processing unit 12 perform communication, and transmits the acquired information to an application server 20 together with the current position information or information of a checkpoint identified on the basis of the current position information.