Cryptographic audit
AssigneeMicrosoft Corporation
InventorsBarbara Lynch Fox, David G. Conroy, Brian A. LaMacchia
Life of this patent
Estimating the term…
Loading patent…
AssigneeMicrosoft Corporation
InventorsBarbara Lynch Fox, David G. Conroy, Brian A. LaMacchia
Estimating the term…
Method, system, and computer program products for identifying potentially fraudulent receivers of digital content. A receiver authenticates to an auditing service with data that should be unique to the receiver. The auditing service detects when multiple receivers attempt to authenticate with the same data, suggesting that a receiver has been cloned or duplicated. The audit service also detects when a receiver authenticates improperly, suggesting an unsuccessful and unauthorized attempt to duplicate an authorized receiver. Individual receivers may be networked together. To help protect a receiver's authentication data from tampering, at least a portion of the data may be digitally signed with a private key. The audit service may then verify the digital signature with a corresponding public key. Varying the order in which data is signed or where the data is stored from one receiver or group of receivers to another may provide an additional level of security.
In a system comprising one or more receivers that are capable of receiving digital content broadcast from one or more content sources, wherein at least some digital content is intended only for authorized receivers, a method of authenticating a receiver so that potentially fraudulent receivers may be identified, the method comprising acts of:
In a system comprising one or more receivers that are capable of receiving digital content broadcast from one or more content sources, wherein at least some digital content is intended only for authorized receivers, a method of authenticating a receiver so that potentially fraudulent receivers may be identified, the method comprising steps for:
For a system comprising one or more receivers that are capable of receiving digital content broadcast from one or more content sources, wherein at least some digital content is intended only for authorized receivers, a computer program product that implements a method of authenticating a receiver so that potentially fraudulent receivers may be identified, the computer program product comprising a computer readable medium for carrying machine-executable instructions that implement the method, wherein the method comprises acts of:
A computer program product as recited in claim 25, wherein the order in which data is signed to create the digital signature varies from one group of one or more gateway receivers to another.
For a system comprising one or more receivers that are capable of receiving digital content broadcast from one or more content sources, wherein at least some digital content is intended only for authorized receivers, a computer program product that implements a method of authenticating a receiver so that potentially fraudulent receivers may be identified, the computer program product comprising a computer readable medium for carrying machine-executable instructions that implement the method, wherein the method comprises steps for:
In a system comprising one or more receivers that are capable of receiving digital content broadcast from one or more content sources, wherein at least some digital content is intended only for authorized receivers, a method of auditing the one or more receivers to identify potentially fraudulent receivers, the method comprising acts of:
For a system comprising one or more receivers that are capable of receiving digital content broadcast from one or more content sources, wherein at least some digital content is intended only for authorized receivers, a computer program product that implements a method of auditing the one or more receivers to identify potentially fraudulent receivers, the computer program product comprising a computer readable medium for carrying machine-executable instructions that implement the method, wherein the method comprises acts of:
Dependencies are inferred from the claim text.