Method and apparatus for transmitting data using authentication
AssigneeSamsung Electronics Co., Ltd.
InventorsYong-kuk You, Seong-soo Kim, Chang-yeul Kwon
Life of this patent
Estimating the term…
Abstract
A method and apparatus of transmitting data using authentication between a first device and a second device are provided. The method includes transmitting an encrypted certificate of the first device using a shared key shared by the first device and the second device, receiving authentication key generation information for generating an authentication key, which is received when it is determined that the certificate of the first device is valid and not revoked, generating a first random number and generating an authentication key based on the first random number and the authentication key generation information, and encrypting and transmitting data using the authentication key.
Claims24
A method of transmitting data using authentication between a first device and a second device, the method comprising:
- encrypting a certificate of the first device using a shared key shared by the first device and the second device, and transmitting the encrypted certificate of the first device to the second device;
- receiving at the first device, authentication key generation information for the first device for generating an authentication key, if it is determined that the certificate of the first device is valid and not revoked;
- determining whether the authentication key generation information for the first device has been altered, wherein the determining of whether the authentication key generation information for the first device has been altered comprises:
- receiving an electronic signature of the authentication key generation information, wherein the electronic signature comprises data in which the authentication key generation information for the first device and a hash value of the authentication key generation information for the first device are encrypted using a secret key of the second device;
- decrypting the encrypted authentication key generation information for the first device using a public key of the second device included in the certificate of the second device, and
- comparing a hash value of the authentication key generation information for the first device obtained by the decrypting the encrypted authentication key generation information for the first device, and the hash value of the authentication key generation information for the first device included in the electronic signature;
- generating at the first device, a first random number of the first device;
- generating at the first device, the authentication key based on the first random number and the authentication key generation information for the first device;
- encrypting content data using the authentication key, at the first device;
- and
- transmitting the encrypted content data from the first device to the second device.
A method of transmitting data using authentication between a first device and a second device, the method comprising:
- transmitting a certificate of the first device to the second device;
- receiving at the first device, encrypted authentication key generation information for the first device for generating an authentication key if it is determined that the certificate of the first device is valid and not revoked;
- determining whether the authentication key generation information for the first device has been altered, wherein the determining of whether the authentication key generation information for the first device has been altered comprises:
- receiving an electronic signature of the authentication key generation information, wherein the electronic signature comprises data in which the authentication key generation information for the first device and a hash value of the authentication key generation information for the first device are encrypted using a secret key of the second device;
- decrypting the encrypted authentication key generation information for the first device using a public key of the second device included in the certificate of the second device, and
- comparing a hash value of the authentication key generation information for the first device obtained by the decrypting the encrypted authentication key generation information for the first device, and the hash value of the authentication key generation information for the first device included in the electronic signature;
- decrypting the encrypted authentication key generation information;
- generating a random number, and generating an authentication key based on the random number and the authentication key generation information for the first device obtained by the decrypting the encrypted authentication key generation information for the first device;
- encrypting content data using the authentication key;
- and
- transmitting said encrypted content data from the first device to the second device.
An apparatus for transmitting data using authentication with a second device;
- the apparatus comprising:
- an encryption unit which encrypts a certificate of the apparatus using a shared key shared by the apparatus and the second device;
- a transmitter which transmits the encrypted certificate of the apparatus to the second device;
- a receiver which receives authentication key generation information for the first device for generating an authentication key, if it is determined that the certificate of the apparatus is valid or revoked;
- a determining unit utilizing a processor for determining whether the authentication key generation information for the first device has been altered, wherein the determining of whether the authentication key generation information for the first device has been altered comprises:
- receiving an electronic signature of the authentication key generation information, wherein the electronic signature comprises data in which the authentication key generation information for the first device and a hash value of the authentication key generation information for the first device are encrypted using a secret key of the second device;
- decrypting the encrypted authentication key generation information for the first device using a public key of the second device included in the certificate of the second device, and
- comparing a hash value of the authentication key generation information for the first device obtained by the decrypting the encrypted authentication key generation information for the first device, and the hash value of the authentication key generation information for the first device included in the electronic signature;
- a random number generator which generates a first random number of the first device for generating an authentication key;
- and
- an authentication key generator which generates the authentication key based on the first random number and the authentication key generation information for the first device,
- wherein the transmitter transmits to the second device content data encrypted using the authentication key.
An apparatus for transmitting data using authentication with a second device, the apparatus comprising:
- a transmitter which transmits a certificate of the apparatus to the second device;
- a receiver which receives data in which authentication key generation information for the first device for generating an authentication key is encrypted using a shared key shared by the apparatus and the second device, if it is determined that the certificate of the apparatus is valid or revoked;
- a determining unit utilizing a processor determining whether the authentication key generation information for the first device has been altered, wherein the determining of whether the authentication key generation information for the first device has been altered comprises:
- receiving an electronic signature of the authentication key generation information, wherein the electronic signature comprises data in which the authentication key generation information for the first device and a hash value of the authentication key generation information for the first device are encrypted using a secret key of the second device;
- decrypting the encrypted authentication key generation information for the first device using a public key of the second device included in the certificate of the second device, and
- comparing a hash value of the authentication key generation information for the first device obtained by the decrypting the encrypted authentication key generation information for the first device, and the hash value of the authentication key generation information for the first device included in the electronic signature;
- a decryption unit which decrypts the encrypted authentication key generation information for the first device;
- a random number generator which generates a random number for generating the authentication key;
- and
- an authentication key generator which generates the authentication key based on the random number and the authentication key generation information for the first device decrypted by decryption unit,
- wherein the transmitter transmits to the second device content data encrypted using the authentication key.
A non-transitory computer readable recording medium having recorded thereon a program for executing a method of transmitting data using authentication between a first device and a second device, the method comprising:
- encrypting a certificate of the first device using a shared key shared by the first device and the second device, and transmitting the encrypted certificate of the first device to the second device;
- extracting at the second device, the certificate of the first device by decrypting the encrypted certificate of the first device;
- receiving at the first device, authentication key generation information for the first device for generating an authentication key, if it is determined that the certificate of the first device is valid and not revoked;
- determining whether the authentication key generation information for the first device has been altered, wherein the determining of whether the authentication key generation information for the first device has been altered comprises:
- receiving an electronic signature of the authentication key generation information, wherein the electronic signature comprises data in which the authentication key generation information for the first device and a hash value of the authentication key generation information for the first device are encrypted using a secret key of the second device;
- decrypting the encrypted authentication key generation information for the first device using a public key of the second device included in the certificate of the second device, and
- comparing a hash value of the authentication key generation information for the first device obtained by the decrypting the encrypted authentication key generation information for the first device, and the hash value of the authentication key generation information for the first device included in the electronic signature;
- generating at the first device, a first random number of the first device;
- generating at the first device, the authentication key based on the first random number and the authentication key generation information for the first device;
- encrypting content data using the authentication key, at the first device;
- and
- transmitting the encrypted content data from the first device to the second device.
Dependencies are inferred from the claim text.