Method and Apparatus for Providing an Asymmetric Encrypted Cookie for Product Data Storage
    3.
    发明申请
    Method and Apparatus for Providing an Asymmetric Encrypted Cookie for Product Data Storage 有权
    为产品数据存储提供不对称加密Cookie的方法和装置

    公开(公告)号:US20090028343A1

    公开(公告)日:2009-01-29

    申请号:US11782721

    申请日:2007-07-25

    申请人: Eric Sprunk

    发明人: Eric Sprunk

    IPC分类号: H04L9/28 H04L9/00

    CPC分类号: H04L9/0894

    摘要: A process may be utilized by a device to implement public key asymmetric encryption. The process encrypts a data set with a symmetric encryption key to form an encrypted data set. Further, the process encrypts the symmetric encryption key with a public key component of an asymmetric encryption key to form an asymmetric encrypted cookie. Finally, the process stores the encrypted data set and the asymmetric encrypted cookie in a non-secure area of a storage medium.

    摘要翻译: 设备可以使用进程来实现公共密钥非对称加密。 该过程使用对称加密密钥对数据集进行加密以形成加密数据集。 此外,该过程使用非对称加密密钥的公共密钥组件对对称加密密钥进行加密以形成非对称加密的cookie。 最后,该过程将加密的数据集和非对称加密的cookie存储在存储介质的非安全区域中。

    Method and apparatus for enforcing timed agreements
    5.
    发明申请
    Method and apparatus for enforcing timed agreements 审中-公开
    执行定时协议的方法和设备

    公开(公告)号:US20050076183A1

    公开(公告)日:2005-04-07

    申请号:US10796340

    申请日:2004-03-09

    IPC分类号: G06F12/14

    CPC分类号: H04N21/8355 H04N21/4627

    摘要: A system is provided for enforcing program content agreements between a program distributor and a client. The program content can be restricted so as to prevent any playback of program content once unauthorized interference is detected. Furthermore, a specific time value can be used as part of a time message to indicate an expiration of a time stamp. Thus, an attack using fabricated time messages or buffered time messages can be averted.

    摘要翻译: 提供了一种用于在程序分发者和客户端之间执行程序内容协议的系统。 可以限制节目内容,以便一旦检测到未经授权的干扰就防止播放节目内容。 此外,特定时间值可以用作时间消息的一部分,以指示时间戳的到期。 因此,可以避免使用制造的时间消息或缓冲时间消息的攻击。

    Apparatus for avoiding complementarity in an encryption algorithm
    6.
    发明授权
    Apparatus for avoiding complementarity in an encryption algorithm 失效
    用于避免加密算法中的互补的装置

    公开(公告)号:US5473693A

    公开(公告)日:1995-12-05

    申请号:US167781

    申请日:1993-12-21

    申请人: Eric Sprunk

    发明人: Eric Sprunk

    CPC分类号: H04L9/0625

    摘要: An implementation of a security algorithm such as DES is provided that overcomes the complementarity weaknesses provided by conventional implementations. In a DES implementation, a cryptographic processor applies the DES algorithm to a data block. The DES processor includes a first input port for receiving the data block, a second input port for receiving a cryptographic key, and an output port for outputting the data block after encryption. A nonlinear function that does not have complementarity is applied to at least one of the ports. The nonlinear function can comprise a lookup table, which could be advantageously derived from a DES S-Box.

    摘要翻译: 提供了诸如DES的安全算法的实现,其克服了常规实现提供的互补弱点。 在DES实现中,加密处理器将DES算法应用于数据块。 DES处理器包括用于接收数据块的第一输入端口,用于接收加密密钥的第二输入端口和用于在加密之后输出数据块的输出端口。 不具有互补性的非线性函数被应用于至少一个端口。 非线性函数可以包括可以有利地从DES S-Box导出的查找表。

    Key management protocol and authentication system for secure internet protocol rights management architecture
    8.
    发明授权
    Key management protocol and authentication system for secure internet protocol rights management architecture 有权
    用于安全互联网协议权限管理架构的密钥管理协议和认证系统

    公开(公告)号:US07243366B2

    公开(公告)日:2007-07-10

    申请号:US10092347

    申请日:2002-03-04

    摘要: A digital rights management architecture for securely delivering content to authorized consumers. The architecture includes a content provider and a consumer system for requesting content from the content provider. The content provider generates a session rights object having purchase options selected by the consumer. A KDC thereafter provides authorization data to the consumer system. Also, a caching server is provided for comparing the purchase options with the authorization data. The caching server forwards the requested content to the consumer system if the purchase options match the authorization data. Note that the caching server employs real time streaming for securely forwarding the encrypted content, and the requested content is encrypted for forwarding to the consumer system. Further, the caching server and the consumer system exchange encrypted control messages (and authenticated) for supporting transfer of the requested content. In this manner, all interfaces between components are protected by encryption and/authenticated.

    摘要翻译: 数字版权管理架构,用于将权限安全地传递给授权消费者。 该架构包括内容提供商和用于从内容提供商请求内容的消费者系统。 内容提供商生成具有由消费者选择的购买选项的会话权限对象。 KDC此后向消费者系统提供授权数据。 此外,还提供了一个缓存服务器,用于将购买选项与授权数据进行比较。 如果购买选项与授权数据匹配,则缓存服务器将所请求的内容转发到消费者系统。 请注意,缓存服务器采用实时流式传输安全地转发加密的内容,并且所请求的内容被加密以转发到消费者系统。 此外,缓存服务器和消费者系统交换加密的控制消息(并被认证)以支持所请求的内容的传送。 以这种方式,组件之间的所有接口都受到加密和/或认证的保护。

    Method and apparatus for providing a secure system time
    9.
    发明申请
    Method and apparatus for providing a secure system time 有权
    提供安全系统时间的方法和装置

    公开(公告)号:US20060146885A1

    公开(公告)日:2006-07-06

    申请号:US11026413

    申请日:2004-12-30

    IPC分类号: H04J3/06

    摘要: The present invention discloses a system and method for providing a secured system time reference to a subscriber device, e.g., a set top box or a receiver. In one embodiment, the system time reference is provided in a secure system time message that is broadcasted to a plurality of subscriber devices. Each subscriber device has a security device or software application that is capable of determining whether the received system time reference is legitimate. If the system time reference is determined to be legitimate, a local time reference is synchronized with said received system time reference.

    摘要翻译: 本发明公开了一种用于向订户设备(例如机顶盒或接收机)提供安全系统时间参考的系统和方法。 在一个实施例中,在广播到多个订户设备的安全系统时间消息中提供系统时间参考。 每个用户设备具有能够确定所接收的系统时间参考是否合法的安全设备或软件应用。 如果确定系统时间参考是合法的,则将本地时间基准与所接收的系统时间参考同步。

    Method and apparatus for authenticating data
    10.
    发明申请
    Method and apparatus for authenticating data 审中-公开
    用于认证数据的方法和装置

    公开(公告)号:US20050071640A1

    公开(公告)日:2005-03-31

    申请号:US10796712

    申请日:2004-03-09

    IPC分类号: H04L9/08 H04L9/32 H04L9/00

    摘要: A method for authenticating a string of data stored remotely from the processor. A bifurcated hash routine can be utilized to provide a check root along with a putative new root for a revised string of data. The check root can be compared with the previously determined initial root. If the check root matches the initial root, the new root is accepted in view of the fact that it was computed concurrently with the check root.

    摘要翻译: 一种用于认证从处理器远程存储的数据串的方法。 可以使用分叉哈希例程来为经修改的数据串提供检查根和推定的新根。 检查根可以与先前确定的初始根进行比较。 如果检查根与初始根匹配,则根据与检查根同时计算的事实,新的根被接受。