# US 8,788,818 B2 · Information processing apparatus and method, recording medium and program > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,788,818 B2 - Document ID: US8788818B2 - Status: Granted - Kind: B2 - Application number: 13/410,969 - Filed: 2012-03-02 - Published: 2012-06-28 - Granted: 2014-07-22 - Earliest claimed: 2003-07-28 - Assignees: Sony Corporation - Applicants: Takehiko Nakano; Hisato Shima - Inventors: Takehiko Nakano; Hisato Shima - Web page: https://patentgrep.com/patent/US8788818B2 ## CPC - H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)} - H04L 9/0841: {involving Diffie-Hellman or related key agreement protocols} - H04L 9/0861: {Generation of secret information including derivation or calculation of cryptographic keys or passwords} - H04L 9/3242: {involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC} - H04L 9/3271: {using challenge-response} - H04L 63/0272: {Virtual private networks} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)} - H04L 63/0869: {for achieving mutual authentication (cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273)} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04L 2209/603: Digital right managament [DRM] - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An electronic device that generates first authentication data; outputs a first response request generated based on the first authentication data; receives a first response message based on the first response request command, the first response message including second authentication data based on the first authentication data; outputs a second response request command after receiving the first response message; counts a time elapsed from transmitting the second response request; receives a second response message based on the second response request command, the second response message including third authentication data generated at the second electronic device based on the first authentication data; compares the third authentication data included in the second response message with expected authentication data generated by the electronic device based on the first authentication data; and judges if the second electronic device is authorized to use content data based on the comparison result and the counted time. ## Claims ### Claim 1 An electronic device comprising: a processor; a non-transitory computer-readable medium configured to store computer program instructions which when executed by the processor cause the processor to: output a first response request, which is transmitted to a second electronic device using Transmission Control Protocol (TCP), the first response request generated based on a first random number; receive a first response message based on the first response request, said first response message transmitted from the second electronic device and including first authentication data generated at the second electronic device based on the first random number; output a second response request, which is transmitted to the second electronic device using TCP, after receiving the first response message, the second response request generated based on a second random number; count a time elapsed from transmitting the second response request; receive a second response message based on the second response request, the second response message transmitted from the second electronic device and including second authentication data generated at the second electronic device based on said second random number; compare the second authentication data included in the second response message with expected authentication data generated by the electronic device; and judge that the second electronic device is authorized to receive content data from the electronic device when the comparison result indicates that the second authentication data matches the expected authentication data and the second response message is received by the electronic device before a predetermined time elapsed from transmitting the second response request expires. ### Claim 2 (depends on 1) The electronic device of claim 1, wherein plural second response requests are output by the processor and transmitted to the second electronic device. ### Claim 3 (depends on 2) The electronic device of claim 2, wherein each of the plural second response requests are generated based on a number of retry times corresponding to a respective second response request in the plural second response requests. ### Claim 4 (depends on 1) The electronic device of claim 1, wherein the first random number is a quasi random number having a predetermined number of bits. ### Claim 5 (depends on 1) The electronic device of claim 1, wherein the first response request is processed with a key previously shared with the second electronic device. ### Claim 6 (depends on 5) The electronic device of claim 5, wherein the key is inputted into a hash function. ### Claim 7 (depends on 6) The electronic device of claim 6, wherein the hash function outputs a quasi random number as the first random number. ### Claim 8 (depends on 7) The electronic device of claim 7, wherein the key is processed before receiving the first response request. ### Claim 9 (depends on 1) The electronic device of claim 1, wherein the first response request includes a session number uniquely identifying each time the second electronic device is authorized. ### Claim 10 An electronic device comprising: a processor; a non-transitory computer-readable medium configured to store computer program instructions which when executed by the processor cause the processor to: receive a first response request, the first response request transmitted from a second electronic device using Transmission Control Protocol (TCP) and generated at the second electronic device based on a first random number; generate a first response message based on the first response request, the first response message transmitted to the second electronic device and including first authentication data generated based on the first random number; receive a second response request, which is transmitted from the second electronic device after the second electronic device receives the first response message, the second response request generated by the second electronic device based on a second random number; and generate a second response message based on the second response request, the second response message transmitted to the second electronic device and including second authentication data generated based on the second random number, wherein the electronic device is permitted to receive data from the second electronic device when the second electronic device determines that the second authentication data matches expected authentication information generated by the second electronic device the second response message is received by the second electronic device before a predetermined time elapsed from transmitting the second response request expires. ### Claim 11 (depends on 10) The electronic device of claim 10, wherein plural second response requests are received from the second electronic device. ### Claim 12 (depends on 11) The electronic device of claim 11, wherein each of the plural second response requests are based on a number of retry times corresponding to a respective second response requests in the plural second response requests. ### Claim 13 (depends on 10) The electronic device of claim 10, wherein the first random number is a quasi random number having a predetermined number of bits. ### Claim 14 (depends on 10) The electronic device of claim 10, wherein the first response request is processed with a key previously shared with the second electronic device. ### Claim 15 (depends on 14) The electronic device of claim 14, wherein the key is inputted into a hash function. ### Claim 16 (depends on 15) The electronic device of claim 15, wherein the hash function outputs a quasi random number as the first random number. ### Claim 17 (depends on 16) The electronic device of claim 16, wherein the key is processed before receiving the first response request. ### Claim 18 (depends on 10) The electronic device of claim 10, wherein the first response request includes a session number uniquely identifying each time the electronic device is authorized. ### Claim 19 (depends on 1) The electronic device of claim 1, further comprising: a memory configured to store content data. ### Claim 20 (depends on 19) The electronic device of claim 19, further comprising: a display configured to display content data. ### Claim 21 (depends on 20) The electronic device of claim 20, further comprising: a user interface configured to receive a command input by a user. ### Claim 22 (depends on 10) The electronic device of claim 10, further comprising: a memory configured to store content data. ### Claim 23 (depends on 22) The electronic device of claim 22, further comprising: a display configured to display content data. ### Claim 24 (depends on 23) The electronic device of claim 23, further comprising: a user interface configured to receive a command input by a user. ### Claim 25 A non-transitory computer-readable medium including computer-program instructions, which when executed by an electronic device, cause the electronic device to: output a first response request, which is transmitted to a second electronic device using Transmission Control Protocol (TCP), the first response request is generated based on a first random number; receive a first response message based on the first response request, the first response message transmitted from the second electronic device and including first authentication data generated at the second electronic device based on the first random number; output a second response request, which is transmitted to the second electronic device using TCP, after receiving the first response message, the second response request generated based on a second random number; count a time elapsed from transmitting the second response request; receive a second response message based on the second response request, the second response message transmitted from the second electronic device and including second authentication data generated at the second electronic device based on the second random number; compare the second authentication data included in the second response message with expected authentication data generated by the electronic device; and judge that the second electronic device is authorized to receive content data from the electronic device when the comparison result indicates that the second authentication data matches the expected authentication data and the second response message is received by the electronic device before a predetermined time elapsed from transmitting the second response request expires. ### Claim 26 A non-transitory computer-readable medium including computer-program instructions, which when executed by an electronic device, cause the electronic device to: receive a first response request, the first response request transmitted from a second electronic device and generated at the second electronic device based on a first random number; generate a first response message based on the first response request, the first response message transmitted to the second electronic device and including first authentication data generated based on the first random number; receive a second response request, which is transmitted from the second electronic device after the second electronic device receives the first response message, the second response request generated by the second electronic device based on a second random number; and generate a second response message based on the second response request, the second response message transmitted to the second electronic device and including second authentication data generated based on the second random number, wherein the electronic device is permitted to receive data from the second electronic device when the second electronic device determines that the second authentication data matches expected authentication information generated by the second electronic device the second response message is received by the second electronic device before a predetermined time elapsed from transmitting the second response request expires. ### Claim 27 An information processing system having a non-transitory computer-readable medium and an interface comprising: the non-transitory computer-readable medium including computer-program instructions, which when executed by an electronic device, cause the electronic device to: output a first response request, which is transmitted to a second electronic device using Transmission Control Protocol (TCP), the first response request generated based on a first random number; receive a first response message based on the first response request, the first response message transmitted from the second electronic device and including first authentication data generated at the second electronic device based on the first random number; output a second response request, which is transmitted to the second electronic device using TCP, after receiving the first response message, the second response request generated based on a second random number; count a time elapsed from transmitting the second response request; receive a second response message based on the second response request, the second response message transmitted from the second electronic device and including second third authentication data generated at the second electronic device based on the second random number; compare the second authentication data included in the second response message with expected authentication data generated by the electronic device; and judge that the second electronic device is authorized to receive content data from the electronic device when the comparison result indicates that the second authentication data matches the expected authentication data and the second response message is received by the electronic device before a predetermined time elapsed from transmitting the second response request expires. ### Claim 28 An information processing system having a non-transitory computer-readable medium and an interface comprising: the non-transitory computer-readable medium including computer-program instructions, which when executed by an electronic device, cause the electronic device to: receive a first response request, the first response request transmitted from a second electronic device and generated at the second electronic device based on a first random number; generate a first response message based on the first response request, the first response message transmitted to the second electronic device and including first authentication data generated based on the first random number; receive a second response request, which is transmitted from the second electronic device after the second electronic device receives the first response message, the second response request generated by the second electronic device based on a second random number; and generate a second response message based on the second response request, the second response message transmitted to the second electronic device and including second authentication data generated based on the second random number, wherein the electronic device is permitted to receive data from the second electronic device when the second electronic device determines that the second authentication data matches does not match expected authentication information generated by the second electronic device and the second response message is received by the second electronic device before a predetermined time elapsed from transmitting the second response request expires.