-
公开(公告)号：US20060020784A1
公开(公告)日：2006-01-26
申请号：US10528492
申请日：2003-09-17
申请人： Willem Jonker , Robert Koster , Petrus Lenoir , David Schmalz
发明人： Willem Jonker , Robert Koster , Petrus Lenoir , David Schmalz
IPC分类号： H04L9/00
CPC分类号： G06F21/10 , G06F2221/0706 , H04L9/3268 , H04L12/2805 , H04L63/065 , H04L63/0823 , H04L2209/603 , H04L2463/101 , H04N21/43615
摘要： The present invention relates to a method, a system and a central device for secure content distribution among devices in a network. The invention is based on the idea that an authorized domain is set up with a central device administering the network. When a device enters the network, the central device registers the entering device and issues at least one certificate to the entering device. The registration to ensure that the entering device is an authorized device, meaning that an authorized device manufacturer has provided the device. Due to network security, non-authorized devices are not accepted in the network. Content is distributed among the devices in the network based on authentication by means of the at least one certificate issued to each device. The distribution of content from a first device to a second device is enabled by the first device authenticating the second device, by means of the at least one certificate of the second device and vice versa.
摘要翻译： 本发明涉及一种用于在网络中的设备之间进行安全内容分发的方法，系统和中央设备。 本发明基于以下思想：授权域被建立与管理网络的中央设备。 当设备进入网络时，中央设备注册输入设备，并向进入设备发出至少一个证书。 注册以确保输入设备是授权设备，这意味着授权设备制造商提供了设备。 由于网络安全，网络中不接受非授权设备。 基于通过发送给每个设备的至少一个证书的认证，在网络中的设备之间分发内容。 内容从第一设备到第二设备的分发由第一设备通过第二设备的至少一个证书认证第二设备来实现，反之亦然。
-
公开(公告)号：US20050210261A1
公开(公告)日：2005-09-22
申请号：US10514901
申请日：2003-05-21
申请人： Franciscus Lucas Kamperman , Willem Jonker , Petrus Lenoir , Sebastiaan Antonius Van Den Heuvel
发明人： Franciscus Lucas Kamperman , Willem Jonker , Petrus Lenoir , Sebastiaan Antonius Van Den Heuvel
CPC分类号： H04N21/43615 , G06F21/10 , H04L12/2805 , H04L12/2838 , H04N7/163 , H04N21/4367 , H04N21/4627
摘要： A method of controlling access to a content item in a domain comprising a set of mutually authenticated devices, the method comprising deriving one or more domain-specific rights from a right associated with the content item, the one or more domain-specific rights being bound to the domain and allowing the devices in the domain aces to the content item. Also system comprising a set of mutually authenticated devices, said set making up a domain, the system comprising a central rights manager arranged for executing said method.
摘要翻译： 一种控制对包括一组相互认证的设备的一组内容项目的访问的方法，所述方法包括从与所述内容项目相关联的权利中导出一个或多个域特定权限，所述一个或多个域特定权限被绑定 并允许域中的设备访问内容项。 还包括一组相互认证的设备的系统，所述组合构成域，所述系统包括被布置为执行所述方法的中央权限管理器。
-
公开(公告)号：US20050168323A1
公开(公告)日：2005-08-04
申请号：US10512120
申请日：2003-04-22
申请人： Petrus Lenoir , Sebastiaan Antonius Fransiscus Van Den Heuvel , Gerardus Lokhoff , Hans De Jong
发明人： Petrus Lenoir , Sebastiaan Antonius Fransiscus Van Den Heuvel , Gerardus Lokhoff , Hans De Jong
CPC分类号： H04N21/44213 , H04N5/765 , H04N5/775 , H04N7/106 , H04N7/163 , H04N21/4181 , H04N21/43615 , H04N21/4367 , H04N21/44227
摘要： A system (100) comprising a plurality of interconnected devices (101-105) and being arranged to provide the devices (101-105) conditional access to protected content items, characterized in that the system (100) is arranged to restrict the number of simultaneous sessions involving said protected content items to a predetermined total limit. Preferably the system (100) restricts the number of content items that can be accessed simultaneously to the predetermined limit. Security modules (300) such as smart cards can be used for this purpose. Each security module (300) may be arranged to restrict the number of content items to which it provides access simultaneously to an individual limit which can change over time. The system restricts the sum of the individual limits to the predetermined total limit. If the limit is reached, further sessions may he refused or allowed at reduced quality level.
摘要翻译： 一种系统（100），包括多个互连设备（101-105），并且被布置成提供所述设备（101-105）对受保护内容项的条件访问，其特征在于，所述系统（100）被布置为限制 涉及所述受保护内容项目的同时会话达到预定的总限制。 优选地，系统（100）将可以同时访问的内容项目的数量限制到预定极限。 安全模块（300）如智能卡可用于此目的。 每个安全模块（300）可以被布置为将其提供访问的内容项目的数量同时限制为可随时间改变的单个限制。 系统将各个限制的总和限制在预定的总限制。 如果达到限制，他可能会拒绝或允许进一步的会议降低质量水平。
-
公开(公告)号：US20050022015A1
公开(公告)日：2005-01-27
申请号：US10496480
申请日：2002-11-14
CPC分类号： H04L63/08 , G06F21/10 , G06F21/445 , G06F2221/0759 , G06F2221/2129 , H04L12/2805 , H04L12/2834 , H04L63/0272 , H04L63/0428 , H04L67/40 , H04L69/08
摘要： A conditional access system comprising a plurality of devices interconnected in a network, the devices being grouped in a first group and a second group, the devices of the first group operating in accordance with a first security framework and the devices of the second group operating in accordance with a second security framework, each device operating using a particular middleware layer, said middleware layer being arranged to authenticate another middleware layer of another device, said middleware layer being authenticated by the security framework in accordance with which the device operates.
摘要翻译： 一种条件访问系统，包括在网络中互连的多个设备，所述设备被分组在第一组和第二组中，所述第一组的设备根据第一安全框架操作，并且所述第二组的设备在 根据第二安全框架，每个设备使用特定的中间件层进行操作，所述中间件层被安排为认证另一设备的另一中间件层，所述中间件层由设备操作的安全框架认证。
-
公开(公告)号：US20070100755A1
公开(公告)日：2007-05-03
申请号：US10561998
申请日：2004-06-28
IPC分类号： G06Q99/00
CPC分类号： G06F21/105 , G06F21/10
摘要： When displaying display items representing a set of content items including items protected by a number of different digital rights management systems on the display of a content access system, the set of display items representing the content items includes icons associated at least with the display items for each protected content item. The icons indicate whether a respective content item is protected by a digital rights management system and, if so, which digital rights management system is employed to protect the respective content item, whether an executable digital rights management module for accessing the respective protected content item is accessible to the user, and whether the user is entitled to access the respective protected content item. The icons also serve as user controls either for accessing information regarding acquisition of, or initiating actual acquisition of, the digital rights management module, access rights, or both.
摘要翻译： 当在内容访问系统的显示器上显示表示包括由多个不同的数字版权管理系统保护的项目的内容项的集合的显示项目时，表示内容项的显示项集合包括至少与显示项相关联的图标， 每个受保护的内容项。 图标表示相应的内容项目是否受到数字版权管理系统的保护，如果是，则使用哪个数字版权管理系统来保护相应的内容项目，用于访问相应的受保护内容项目的可执行数字版权管理模块是否为 用户可访问，以及用户是否有权访问相应的受保护内容项。 图标还用作用户控制，用于访问关于数字版权管理模块的获取或实际获取的访问权限或访问权限的信息。
-
公开(公告)号：US20060285686A1
公开(公告)日：2006-12-21
申请号：US10539386
申请日：2003-12-01
IPC分类号： H04N7/167
CPC分类号： H04L63/0435 , H04L9/088 , H04L9/0891 , H04L9/16 , H04L63/10 , H04N5/913 , H04N7/163 , H04N7/1675 , H04N21/4181 , H04N21/440281 , H04N21/44055 , H04N2005/91364
摘要： For conditional access purposes a stream is used in which at least two different decryption algorithms are needed for decryption of packets that encode different interspersed parts of the same signal for (quasi-)continuous rendering (such as an audio or video signal). Information is included in the stream to indicate dynamically which decryption algorithm should be used for which packets. In this way, it is possible for example to use a more robust algorithm with a less frequently changing key and a less robust algorithm with a more frequently changing key, interspersed with one another for the same signal. Also, different algorithms may be used for transcrypted and not transcrypted-packets of the same signal for example when an alternative is needed for the original encryption algorithm that was used for the non-transcrypted packets.
摘要翻译： 对于条件访问目的，使用流，其中需要至少两个不同的解密算法来解密编码用于（准）连续渲染（例如音频或视频信号）的相同信号的不同散置部分的分组。 信息被包括在流中以便动态地指示哪个分组应该使用哪个解密算法。 以这种方式，例如，可以使用具有频率变化较小的键的更健壮的算法和具有更频繁变化的键的较不健壮的算法，对于相同的信号彼此散布。 此外，不同的算法可以用于相同信号的加密而不是转发的分组，例如当用于非加密分组的原始加密算法需要替代方案时。
-
7.发明申请公开(公告)号：US20050257260A1
公开(公告)日：2005-11-17
申请号：US10517926
申请日：2003-05-27
申请人： Petrus Lenoir , Johan Talstra , Sebastiaan Antonius Fransiscus Van Den Heuvel , Antonius Staring
发明人： Petrus Lenoir , Johan Talstra , Sebastiaan Antonius Fransiscus Van Den Heuvel , Antonius Staring
CPC分类号： G11B20/00086 , G11B20/0021 , H04L9/3263 , H04L12/2805 , H04L12/2838 , H04L2209/60
摘要： In whilelist-based authentication, a first device (102) in a system (100) authenticates itself to a second device (103) using a group certificate identifying a range of non-revoked device identifiers, said range encompassing the device identifier of the first device (102). Preferably the device identifiers correspond to leaf nodes in a hierarchically ordered tree, and the group certificate identifies a node (202-207) in the tree representing a subtree in which the leaf nodes correspond to said range. The group certificate can also identify a further node (308, 310, 312) in the subtree which represents a sub-subtree in which the leaf nodes correspond to revoked device identifiers. Alternatively, the device identifiers are selected from a sequentially ordered range, and the group certificate identifies a subrange of the sequentially ordered range, said subrange encompassing the whitelisted device identifiers.
摘要翻译： 在基于同一列表的认证中，系统（100）中的第一设备（102）使用识别非撤销设备标识符的范围的组证书向第二设备（103）认证自身，所述范围包括第一 设备（102）。 优选地，设备标识符对应于分层排序树中的叶节点，并且组证书标识树中的节点（202-207），其中叶节点对应于所述范围的子树。 组证书还可以标识子树中的另一个节点（308,310,312），其表示子节点，其中叶节点对应于撤销的设备标识符。 或者，从顺序排序的范围中选择设备标识符，并且组证书标识顺序排列的范围的子范围，所述子范围包含列入白名单的设备标识符。
-
公开(公告)号：US20060195885A1
公开(公告)日：2006-08-31
申请号：US10547325
申请日：2003-03-04
CPC分类号： H04N21/435 , H04N7/162 , H04N21/235 , H04N21/4345 , H04N21/4524 , H04N21/4623
摘要： A transmitter (110) which transmits a signal (120) for reception by a receiving device (130). The transmitter is arranged to insert into the signal an indication of a geographical region where the signal physically can be received. Preferably the geographical region is indicated in the signal using geometrical shapes. The receiving device receives one or more signals, each of the signals carrying an indication of a respective geographical region where the respective signal physically can be received, and is arranged to determine its locale from said indications. The receiver can compute the intersection of the sets of geometrical shapes carried in the various signals it received as the geographical region it is in. Based on its determined locale the receiver can restrict access to content, if such content is restricted to certain regions.
摘要翻译： 发射机（110），其发送用于接收设备（130）接收的信号（120）。 发射器被布置成将信号物理地接收到的地理区域的指示插入到信号中。 优选地，在使用几何形状的信号中指示地理区域。 接收设备接收一个或多个信号，每个信号携带相应地理区域的指示，其中物理上可以接收相应的信号，并且被布置成根据所述指示确定其区域。 接收机可以计算其接收的各种信号中携带的几何形状的集合作为其所在的地理区域。根据其确定的区域设置，接收者可以限制对内容的访问，如果这些内容被限制在某些区域。
-
公开(公告)号：US20050220304A1
公开(公告)日：2005-10-06
申请号：US10517924
申请日：2003-05-27
申请人： Petrus Lenoir , Johan Talstra , Sebastiaan Antonius Fransiscus Van Den Heuvel , Antonius Staring
发明人： Petrus Lenoir , Johan Talstra , Sebastiaan Antonius Fransiscus Van Den Heuvel , Antonius Staring
CPC分类号： G11B20/00086 , G06F21/445 , G11B20/0021 , H04L9/3263 , H04L12/2805 , H04L12/2838 , H04L2209/60
摘要： A certifying authority provides a method for whitelist-based controlling of authentication of a first device (102) in a system (100) to a second device (103). The method comprises issuing to the first device (102) a group certificate identifying a range of non-revoked device identifiers, said range encompassing the device identifier of the first device (102). Preferably the device identifiers correspond to leaf nodes in a hierarchically ordered tree, and the group certificate identifies a node (202-207) in the tree representing a subtree in which the leaf nodes correspond to said range. The group certificate can also identify a further node (308, 310, 312) in the subtree which represents a sub-subtree in which the leaf nodes correspond to revoked device identifiers. Alternatively, the device identifiers are selected from a sequentially ordered range, and the group certificate identifies a subrange of the sequentially ordered range, said subrange encompassing the whitelisted device identifiers.
摘要翻译： 认证机构提供一种用于基于白名单的控制系统（100）中的第一设备（102）到第二设备（103）的认证的方法。 该方法包括向第一设备（102）发出识别非撤销设备标识符的范围的组证书，所述范围包含第一设备（102）的设备标识符。 优选地，设备标识符对应于分层排序树中的叶节点，并且组证书标识树中的节点（202-207），其中叶节点对应于所述范围的子树。 组证书还可以标识子树中的另一个节点（308,310,312），其表示子节点，其中叶节点对应于撤销的设备标识符。 或者，从顺序排序的范围中选择设备标识符，并且组证书标识顺序排列的范围的子范围，所述子范围包含列入白名单的设备标识符。
-
-
-
-
-
-
-
-
搜索结果
9 条记录 (耗时 0.026 秒)
