Authorized content verification method, content transmission/reception system, transmitter, and receiver

A content transmission and reception system comprising:

• a receiver which transmits a content request and a transmitter connected to the receiver over a network which attaches, to encrypted content, update information required to create a content key used for content encryption and decryption, the transmitter transmits the update information with the encrypted content, in response to a content request from the receiver authorized by the transmitter to decrypt the encrypted content, the update information being changed by the transmitter at a predetermined timing after transmitting the update information to the authorized receiver,
• wherein the authorized receiver includes:
• a verification request instrument which transmits to the transmitter, an authorization verification request including a number which varies with each transmission of the authorization verification request, and an identification message created using i) an exchange key shared in advance between the transmitter and the authorized receiver, and ii) the update information transmitted from the transmitter, and
• a verification result check instrument which determines that the encrypted content being received is authorized content if a message of acceptance is received from the transmitter, the receiver utilizing the authorized encrypted content, and
• the transmitter includes:
• a verification request acceptance instrument which receives the authorization verification request transmitted from the authorized receiver,
• an update information verification instrument which checks whether i) the update information included in the received authorization verification request satisfies a predetermined condition with respect to the update information currently being used by the transmitter, and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver, the update information being changed by the transmitter in accordance with elapsing of time, and
• a verification response instrument which creates the message of acceptance using the update information and the number included in the authorization verification request, and transmits the message of acceptance to the authorized receiver if it is determined that i) the update information received in the request and the update information currently being used by the transmitter satisfy the predetermined condition, and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver, the message of acceptance indicating that the encrypted content is authorized by the transmitter.

A transmitter used in a content transmission and reception system, comprising:

• a transmission unit on a network which attaches update information to encrypted content, the update information required to create a content key used for content encryption and decryption, the transmitter transmits the update information with the encrypted content, in response to a content request from a receiver authorized by the transmitter to decrypt the encrypted content, the update information being changed by the transmitter at a predetermined timing after transmitting the update information to the authorized receiver;
• a verification request acceptance instrument which receives from the authorized receiver, an authorization verification request including a number which varies with each transmission of the authorization verification request, and an identification message created using i) an exchange key shared in advance between the transmitter and the authorized receiver, and ii) the update information transmitted from the transmitter;
• an update information verification instrument which checks whether i) the update information included in the authorization verification request received from the authorized receiver satisfies a predetermined condition with respect to the update information currently being used by the transmitter, and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver, the update information being changed by the transmitter in accordance with elapsing of time;
• and
• a verification response instrument which creates a message of acceptance for determining whether the encrypted content being received by the authorized receiver is authorized content, using the update information and the number included in the authorization verification request, and transmitting the message of acceptance to the receiver if it is determined that i) the update information received in the request and the update information currently being used by the transmitter satisfy the predetermined condition, and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver, the authorized receiver utilizing the authorized encrypted content.

A receiver used in a content transmission and reception system in which a transmitter on a network attaches update information to encrypted content, the update information required to create a content key used for content encryption and decryption, the transmitter transmits the update information with the encrypted content, in response to a content request from the receiver, the update information being changed by the transmitter at a predetermined timing after transmitting the update information to the receiver, the receiver being authorized by the transmitter to decrypt the encrypted content, the authorized receiver comprising:

• a reception unit which receives the update information with the encrypted content;
• a verification request instrument which transmits an authorization verification request including the update information received from the transmitter, a number which varies with each transmission of the authorization verification request, and an identification message created using i) an exchange key shared in advance between the transmitter and the authorized receiver, and ii) the update information transmitted from the transmitter;
• and
• a verification result check instrument which determines that the encrypted content being received is authorized content if a message of acceptance is received from the transmitter, which is created using the update information and exchange key and transmitted by the transmitter after determining that i) the update information included in the received authorization verification request and the update information currently being used by the transmitter satisfy a predetermined condition, and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver, the update information being changed by the transmitter in accordance with elapsing of time, the receiver utilizing the authorized encrypted content, and if the predetermined condition is satisfied and the part of the hash value matches the identification message, the authorized receiver decrypts and reproduces the encrypted content.

A tangible non-transitory computer readable recording medium having a program recorded thereon for causing a computer to execute the following steps between a transmitter and a receiver authorized by the transmitter:

• a transmit step of, transmitting by the transmitter update information with encrypted content, in response to a content request from the receiver;
• a verification request step of, transmitting by the authorized receiver, an authorization verification request including the update information received from the transmitter, a number which varies with each transmission of the authorization verification request, and an identification message created using i) an exchange key shared in advance between the transmitter and the authorized receiver, and ii) the update information transmitted from the transmitter;
• an update information check step of, checking by the transmitter, whether i) the update information included in the authorization verification request received from the authorized receiver satisfies a predetermined condition with respect to the update information currently being used by the transmitter and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver, the update information being changed by the transmitter in accordance with elapsing of time;
• a message-of-acceptance transmission step of, creating by the transmitter, a message of acceptance using the update information and the number included in the authorization verification request, and transmitting the message of acceptance to the authorized receiver, if it is determined that the update information received in the request and the update information currently being used by the transmitter satisfy the predetermined condition, and ii) a part of a hash value which is calculated based on the update information included in the authorization verification request received from the authorized receiver, the number included in the authorization verification request received from the authorized receiver, and the exchange key matches the identification message included in the authorization verification request received from the authorized receiver;
• and
• an authorized content determination step of, determining by the authorized receiver, that the encrypted content being received is authorized content if the authorized receiver receives the message of acceptance from the transmitter, the receiver decrypting and reproducing the authorized encrypted content.