Method and system for secure communication
AssigneeLG Electronics Inc.
InventorsKumar K. Kiran, Sung Hyun Cho, Min Gyu Chung, Koo Yong Pak, Il Gon Park, Soo Jung Kim
Life of this patent
Estimating the term…
Abstract
A method and system for secure communication is provided. The method for secure communication with devices includes: obtaining a parameter for protecting a content; authenticating each other by exchanging a certificate with the device; and exchanging a key with the device using a key authenticated through the certificate to establish a secure authenticated channel with the device. Accordingly, it is possible to establish the secure authenticated channel and perform secure communication by computing a secure authenticated channel key.
Claims7
A secure communication method between devices, the method comprising:
- obtaining, by a first device from a second device, a parameter for protecting a content;
- performing, based on the obtained parameter, a mutual authentication with the second device which includes:
- transmitting a first authentication message including a certificate of the first device to the second device;
- receiving a second authentication message including a certificate of the second device and an on-line certificate status protocol server response indicating verification of the certificate of the second device, and
- verifying the certificate of the second device using the on-line certificate status protocol server response;
- authenticating the second device using the certificate of the second device;
- exchanging a key with the second device, the key authenticated through the certificate of the second device to establish a secure authenticated channel with the second device;
- and
- changing a content license protection mode corresponding to the content from a first content license protection mode to a second content license protection mode when the content is copied or moved from the second device;
- wherein the content license protection mode includes any one of:
- a secure authenticated channel protection mode which protects the license using a secure authenticated channel key during transfer of the license, an authorized domain secret protection mode which protects the license using an authorized domain secret protection, a secure authenticated channel/authorized domain protection mode which protects the license through the secure authenticated channel and authorized domain secret protection, and a device key protection mode which protects the license using a device key during storage of the license.
A secure communication system comprising:
- a first device;
- and
- a second device, which are interoperable with each other,
- wherein the first device is configured to:
- obtain from the second device a parameter for protecting a content,
- perform, based on the obtained parameter, a mutual authentication with the second device by:
- transmitting a first authentication message including a certificate of the first device to the second device,
- receiving a second authentication message including a certificate of the second device and an on-line certificate status protocol server response indicating verification of the certificate of the second device, and
- verify the certificate of the second device using the on-line certificate status protocol server response,
- authenticate the second device using the certificate of the second device,
- exchange a key with the second device, the key authenticated by the certificate of the second device to establish a secure authenticated channel between the first device and the second device, and
- change a content license protection mode corresponding to the content from a first content license protection mode to a second content license protection mode when the content is copied or moved between the first device and the second device,
- wherein the content license protection mode includes any one of:
- a secure authenticated channel protection mode which protects the license using a secure authenticated channel key during transfer of the license, an authorized domain secret protection mode which protects the license using an authorized domain secret protection, a secure authenticated channel/authorized domain protection mode which protects the license through the secure authenticated channel and authorized domain secret protection, and a device key protection mode which protects the license using a device key during storage of the license.
Dependencies are inferred from the claim text.