Abstract:
A storage device for protecting content, includes a Secure Area (SA) area in which a decryption key needed to decrypt encrypted content is stored, and access to which is available to a host device that has passed authentication using a secure authentication protocol. The storage device stores a security information file for mapping control information for controlling usage of the encrypted content and the decryption key to the encrypted content.
Abstract:
Disclosed herein is a method and system for registering and verifying a smart card certificate for users moving between public key infrastructure domains, which allows a user moving between domains to have a smart card certified in a terminal located in an external domain other than a home domain. According to the present invention, when a user wants his/her own smart card to be certified in a terminal of an external domain, a certification authority of the external domain can certify the smart card using a certificate stored in the smart card and signed electronically by a certification authority of a home domain. Additionally, a new certificate issued by the certification authority of the external domain is stored in the certified smart card, so that a certificate of the moving user can be verified regardless of domains and a new certificate of a moved domain can be easily obtained.
Abstract:
Disclosed is an inter-entity coupling method for protecting content in a broadcast environment including a broadcast network and a terminal, the broadcast network having a Broadcast Service Application (BSA), a Broadcast Service Distribution (BSD), and a Broadcast Service Management (BSM), the inter-entity coupling method including performing, by the terminal, a registration process for obtaining a group key for the terminal; after the registration process is completed, performing, by the terminal, a service joining process for requesting service joining, and receiving, by the terminal, a Rights Object (RO) about the content from a message, which is received in response to the request, based on the obtained group key; obtaining a traffic key by using the RO, if a traffic key message is received after the service joining process is completed; receiving encrypted content in the terminal; and decrypting the encrypted content by using the traffic key.
Abstract:
Provided is a method for delivering all or part of a rights object (RO) of a user associated with the content to other users. The method includes creating a rights object to be transmitted to a second user within a limit of the rights object held by the first user, and forwarding the created rights object to the second user. The method allows each user to share its own RO with other users within the limit of the RO without server authentication.
Abstract:
Disclosed is a DRM Proxy Server Agent (DRM PSA), which converts a format of a DRM system into a format recognizable in a user terminal when the user terminal and a service provider do not use the same type of DRM system. The user terminal downloads the DRM PSA from the service provider and installs the DRM PSA in the user terminal. Through the download and installation of the DRM PSA, the user terminal can use various DRM systems provided by the service provider regardless of the type of DRM system installed in the user terminal.
Abstract:
A roaming service method in a mobile broadcasting system and a system thereof are provided. A terminal receives a service guide from a corresponding visited service provider (Visited SP) when the terminal moves to a roaming area. The terminal transmits a roaming request message for requesting a purchase item allowable for individual services to a home service provider (Home SP) based on the received service guide. Upon receipt of the roaming request message, the Home SP negotiates roaming availability and allowable scope for each individual service with the Visited SP where the terminal is located, based on the roaming request message. The Home SP transmits the roaming availability and allowable scope for the individual service, negotiated with the Visited SP, to the terminal.
Abstract:
A terminal and method for receiving a broadcast service by the terminal in a broadcast system are provided. The method includes performing a registration procedure for subscription and reception of the broadcast service through a Browser And Content Mobile Broadcast (BSCAST) Subscription Management (BSM) responsible for managing subscription information; receiving a Long Term Key Message (LTKM), including key information for encryption of the broadcast service, generated from the BSM; receiving a completed Short Term Key Message (STKM), the completed STKM being generated by performing Message Authentication Code (MAC) processing on a partially created STKM; receiving, from a Broadcast Service Distribution/Adaptation (BSD/A) which is responsible for transmitting the broadcast service, an encrypted broadcast service which is encrypted by a Traffic Encryption Key (TEK) for deciphering the broadcast service; and deciphering the encrypted broadcast service by the TEK obtained using the LTKM and the completed STKM.
Abstract:
Disclosed is a method for generating a Short Term Key Message (STKM) for protection of a broadcast service being broadcasted to a terminal in a mobile broadcast system. The method includes transmitting, by a Broadcast Service Subscription Management (BSM) for managing subscription information, at least one key information for authentication of the broadcast service to a Broadcast Service Distribution/Adaptation (BSD/A) for transmitting the broadcast service, generating, by the BSD/A, a Traffic Encryption Key (TEK) for deciphering of the broadcast service in the terminal and inserting the TEK into a partially created STKM, and performing, by the BSD/A, Message Authentication Code (MAC) processing on the TEK-inserted STKM using the at least one key information, thereby generating a completed STKM.
Abstract:
A method and system is provided for sharing a service guide or a service guide fragment in a mobile broadcast system supporting a mobile broadcast service. A Broadcast Service Provisioning Client Function (BSP-C) sends a request for the service guide or service guide fragment to a Broadcast Service Provisioning Management Function (BSP-M). The BSP-M transmits the service guide or service guide fragment to the BSP-C if the BSP-M has the service guide or service guide fragment.
Abstract:
A roaming service method in a mobile broadcasting system and a system thereof are provided. A terminal receives a service guide from a corresponding visited service provider (Visited SP) when the terminal moves to a roaming area. The terminal transmits a roaming request message for requesting a purchase item allowable for individual services to a home service provider (Home SP) based on the received service guide. Upon receipt of the roaming request message, the Home SP negotiates roaming availability and allowable scope for each individual service with the Visited SP where the terminal is located, based on the roaming request message. The Home SP transmits the roaming availability and allowable scope for the individual service, negotiated with the Visited SP, to the terminal.