摘要:
Current legislation requires the possibility of encryption when storing television programmes received by broadcast. However, legacy playback apparatuses will not be able to play back such encrypted data in a regular way, but possibly in a wrong way. This may result in problems like damage of speakers. Therefore, the application intends to hide any of such possibly damaging streams by intentionally providing such streams with a wrong identification during the encryption process. The application provides among others a method and circuit for encryption and a method and circuit for decryption. The application is especially suitable for DVD recorders, but may also be employed for other video and/or audio recorders. The invention may even be used for encrypting non-audiovisual data.
摘要:
In a system, a server provides a digital signal processing function ƒ to an executing device in an obfuscated form. The function ƒ includes a function cascade of signal processing functions ƒi, 1≦i≦N (e.g., FC1(x)≡ƒN∘ . . . ∘ƒ1(x)). The server includes a processor for selecting a set of 2N invertible permutations pi, 1≦i≦2N; calculating a set of N functions gi, where gi is functionally equivalent to p2i−1∘ƒi∘p2i−1, for 1≦i≦N; and calculating a set of N−1 functions hi, where hi is functionally equivalent to p2i−1−1∘p2i−2, for 2≦i≦N. The server equips the executing device with an execution device function cascade that includes yN∘hN∘yN−1∘hN−1∘ . . . ∘y1, where y1, . . . , yN are function parameters (e.g., ED1(y1, . . . , yN)≡yN∘hN∘yN−1∘hN−1∘ . . . ∘y1), and provides the functions g1, . . . gN to the executing device. The executing device obtains the functions g1, . . . , gN and a processor for loading the execution device function cascade and applying the loaded execution device function cascade to the functions g1, . . . , gN (e.g., ED1(g1, . . . , gN)).
摘要:
A record carrier, recording device, read-out device and method is provided which provides a flexible security level to protect user data during transmission over a communication bus, also when the data is recorded on a record carrier such as a recordable optical disc. In accordance with the method, management information comprising encryption indication information indicating that user data stored in an associated sector of a record carrier, such as a recordable optical disk, is to be encrypted by a read-out device before being transmitted over a communication bus.
摘要:
In a system (600), a server (610) provides a digital signal processing function ƒ to an executing device (620) in an obfuscated form. The function ƒ includes a function cascade of signal processing functions ƒ1, 1≦i≦N to formula (I). The server includes a processor (612) for selecting a set of 2N invertible permutations pi, 1≦i≦2N; calculating a set of N functions g, where g, is functionally equivalent to formula (II) for 1≦i≦; and calculating a set of N−1 functions h, where h, is functionally equivalent to formula (III) for 2≦i≦N. The server includes means (614) for equipping the executing device with an execution device function cascade that includes formula (IV), where y1, . . . , yN are function parameters to formula (V), and means (616) for providing the functions g1, . . . gN to the executing device. The executing device includes means (626) for obtaining the functions g1, . . . , gN and a processor (622) for loading the execution device function cascade and applying the loaded execution device function cascade to the functions g1, . . . , gN(e.g., ED,(g1, . . . , gN)).
摘要翻译:在系统(600)中,服务器(610)以模糊形式向执行装置(620)提供数字信号处理功能f。 函数f包括信号处理函数f 1 1,...,i = N到公式(I)的函数级联。 服务器包括用于选择一组2N可逆置换的处理器(612),其中1 = i = 2N; 计算一组N个函数g,其中g在功能上等于1 <= i <=的公式(II); 并计算一组N-1函数h,其中h在功能上等于2 <= i <= N的公式(III)。 服务器包括用于为执行装置配备包括公式(IV)的执行装置功能级联的装置(614),其中y 1,...。 。 。 (V)的函数参数,以及用于提供函数g 1,N 2的装置(616)。 。 。 g N N SUB>到执行装置。 执行装置包括用于获得功能g 1,N 2的装置(626)。 。 。 和用于加载执行装置功能级联的处理器(622),并将加载的执行装置功能级联应用于功能g 1。 。 。 (例如,ED,(g 1,...,g N N))。
摘要:
A record carrier, recording device, read-out device and method is provided which provides a flexible security level to protect user data during transmission over a communication bus, also when the data is recorded on a record carrier such as a recordable optical disc. In accordance with the method, management information comprising encryption indication information indicating that user data stored in an associated sector of a record carrier, such as a recordable optical disk, is to be encrypted by a read-out device before being transmitted over a communication bus.
摘要:
This invention provides a method, proximity check server (203), system (200), and computer program product (207, 208) for determining the level of allowed communication between devices (201, 202) in e.g. a home network. By addition of one or more tamper-resistant devices, so-called proximity check server(s) (203,204), round-trip time measurements to estimate the distance between the devices are performed in order to determine the amount of communication allowed between these devices. In a specific embodiment, a single tamper-resistant proximity server computes the distance between communication devices that are implemented as trusted applications on open platforms.
摘要:
The present invention relates to a method and device for controlling distribution and use of a digital work stored together with an attached usage right information on a record carrier. The attached usage right information is encrypted or verified by using a hidden information which is changed at every change of said usage right information. The hidden information may be an encryption key used for encrypting the usage right information, or a checksum of a data block containing the usage right information. Thus, a “copy and restore attack” is not successful, since it will lead to a mismatch between the hidden information and the restored usage right information.
摘要:
A method of and source device (410) for authorizing access to content (425) by a sink device (400) in accordance with usage rights, the content being stored on a storage medium (420) controlled by the source device. The revocation status of the sink device is verified using the most recently issued revocation information that is available if the usage rights need to be modified as part of the authorization of access to the content, and using revocation information associated with the content stored on the storage medium, preferably the revocation information stored on the storage medium, otherwise. The revocation information on the storage medium, or only the part relating to the sink device, is optionally updated to the most recently issued revocation information if the usage rights need to be modified. Preferably this is done only if the result of the verification is that the sink device has been revoked.
摘要:
A method and system for determining the level of allowed communication between devices. By addition of one or more tamper-resistant proximity check server(s), round-trip time measurements to estimate the distance between the communication devices are performed in order to determine the amount of communication allowed between these devices. In one embodiment, a single tamper-resistant proximity server computes the distance between communication devices that are implemented as trusted applications on open platforms.
摘要:
In a system, a server provides a digital signal processing function ƒ to an executing device in an obfuscated form. The function ƒ includes a function cascade of signal processing functions ƒi, 1≦i≦N (e.g., FC1(x)≡ƒN∘ . . . ∘ƒ1(x)). The server includes a processor for selecting a set of 2N invertible permutations pi, 1≦i≦2N; calculating a set of N functions gi, where gi is functionally equivalent to p2i−1∘ƒi∘p2i−1, for 1≦i≦N; and calculating a set of N−1 functions hi, where hi is functionally equivalent to p2i−1−1∘p2i−2, for 2≦i≦N. The server equips the executing device with an execution device function cascade that includes yN∘hN∘yN−1∘hN−1∘ . . . ∘y1, where y1, . . . , yN are function parameters (e.g., ED1(y1, . . . , yN)≡yN∘hN∘yN−1∘hN−1∘ . . . ∘y1), and provides the functions g1, . . . gN to the executing device. The executing device obtains the functions g1, . . . , gN and a processor for loading the execution device function cascade and applying the loaded execution device function cascade to the functions g1, . . . , gN (e.g., ED1(g1, . . . , gN)).