摘要:
A method of creating a domain based on public key cryptography includes providing, by a content-providing server, a list of devices requesting content, and selecting, by a user, a device from the list; transmitting, by the server, discrimination information on revoked devices to the device; extracting, by the device having received the discrimination information, a secret value from the discrimination information, preparing a certificate using the extracted secret value, and transmitting device information and the certificate of the device to the server; verifying, by the server, the certificate and creating a domain ID and a domain key using the device information; encrypting, by the server, the domain ID and the domain key using a unique public key of the device and transmitting the encrypted domain ID and domain key to the device; and restoring, by the device, the domain key using a unique secret key of the device.
摘要:
A method of creating a domain based on public key cryptography includes providing, by a content-providing server, a list of devices requesting content, and selecting, by a user, a device from the list; transmitting, by the server, discrimination information on revoked devices to the device; extracting, by the device having received the discrimination information, a secret value from the discrimination information, preparing a certificate using the extracted secret value, and transmitting device information and the certificate of the device to the server; verifying, by the server, the certificate and creating a domain ID and a domain key using the device information; encrypting, by the server, the domain ID and the domain key using a unique public key of the device and transmitting the encrypted domain ID and domain key to the device; and restoring, by the device, the domain key using a unique secret key of the device.
摘要:
Methods of authenticating a device using a certificate, and digital content processing devices for performing device authentication using the methods are disclosed. The method of authenticating a digital content processing device includes generating first secret information on a first digital content processing device with a public key for encryption/decryption of digital content, generating a first certificate using the generated first secret information and the public key and a device identifier of the first digital content processing device, transmitting the generated first certificate to a second digital content processing device, generating second secret information on the second digital content processing device, generating a second certificate using the generated second secret information and the public key and the device identifier of the first digital content processing device, and comparing the generated first certificate with the generated second certificate to confirm whether both the certificates are the same.
摘要:
A method of receiving a session key in a home network and a method of reproducing content using the same. The method of receiving a session key from a home server in a home network, includes: (a) whenever one of members of the home network changes, receiving and storing the session key and a session version indicating a session key generation sequence; (b) receiving a license necessary for reproducing predetermined content; and (c) determining a session key necessary for reproducing the predetermined content based on an encoding session version (ESV), which is a session version extracted from the license, and the stored session version. A home server transmits a session key and a session version to a user device whenever a subscriber to a home network changes, and the user device determines a session key using the session version, thereby performing a variety of domain administration by freely transmitting content between user devices.
摘要:
An apparatus for receiving broadcast content is provided. The apparatus includes a receiving unit generating the broadcast content from a broadcast stream received from a content provider via a broadcast channel; a content encrypting unit encrypting the broadcast content using a content key; and a link generating unit generating a secure link to a user device by exchanging link messages with the user device, and transmitting the content key to the user device via one of the link messages even when the apparatus is not connected to a content provider. A first link message of the link messages includes one of a public key of the user device and a public key of the apparatus, and a second link message of the link messages includes one of a private key of the apparatus, a secret key of the apparatus, and a secret key of the user device.
摘要:
A method for transmitting content to a user device from a home server in a home network is provided. The method includes: receiving an allocated user public key and a user private key of a user to whom the home server belongs; generating an arbitrary session public key and a session private key, generating an encrypted session private key by encrypting the session private key using a device public key that is a public key of the user device, and transmitting the encrypted session private key to the user device; and transmitting the content encrypted using a predetermined content key and a content key encrypted using the session private key to the user device. According to the method, by binding the content to each user, instead of to each device, the content can be safely and conveniently shared.
摘要:
A method of receiving a session key in a home network and a method of reproducing content using the same. The method of receiving a session key from a home server in a home network, includes: (a) whenever one of members of the home network changes, receiving and storing the session key and a session version indicating a session key generation sequence; (b) receiving a license necessary for reproducing predetermined content; and (c) determining a session key necessary for reproducing the predetermined content based on an encoding session version (ESV), which is a session version extracted from the license, and the stored session version. A home server transmits a session key and a session version to a user device whenever a subscriber to a home network changes, and the user device determines a session key using the session version, thereby performing a variety of domain administration by freely transmitting content between user devices.
摘要:
A method for transmitting content to a user device from a home server in a home network is provided. The method includes: receiving an allocated user public key and a user private key of a user to whom the home server belongs; generating an arbitrary session public key and a session private key, generating an encrypted session private key by encrypting the session private key using a device public key that is a public key of the user device, and transmitting the encrypted session private key to the user device; and transmitting the content encrypted using a predetermined content key and a content key encrypted using the session private key to the user device. According to the method, by binding the content to each user, instead of to each device, the content can be safely and conveniently shared.
摘要:
A method and apparatus for generating and updating a license for content and for providing content are provided. The method of generating a license includes generating license signature information for authenticating the license; generating use rule information for controlling the use of the content; generating authentication code information for authenticating a coupon for changing at least a portion of the use rule information; and generating key information required for decrypting the content.
摘要:
A method of encrypting data is provided. The method includes dividing data in packet units into N data blocks; generating an initial counter value using a random number used for generating an encryption key for encrypting the data blocks; generating N counter values by increasing the initial value by a predetermined value N times and encrypting the N counter values using the encryption key; and performing an exclusive OR operation on the N encrypted counter values and the N data blocks.