Proof of device genuineness

A computing device, comprising:

• a storage device which stores code;
• and
• a processor associated with the storage device, the processor is configured to execute the code to:
• transmit a request to a server to access digital content;
• pursuant to the request, receive a genuineness challenge from the server, the genuineness challenge comprises a payload and a message authentication code of the payload which are generated by the server;
• in response to receipt of the genuineness challenges, transmit a response to the server, wherein:
• the response comprises a message and a message authentication code of the message which are generated by the computing device,
• the message authentication code of the message is a function of a key of the computing device,
• the key of the computing device is not shared with the server,
• the message comprising first and second data elements of the computing device and a copy of the genuineness challenge, and
• the message authentication code of the message is obtained from the message using the key of the computing device,
• the server verifies that the second data element was derived from the first data element, validates the message authentication code of the message, and validates the copy of the message authentication code of the payload to provide an authorization for the computing device to access the digital content, wherein the server provides the authorization for the computing device to access the digital content without using asymmetric cryptography;
• and
• pursuant to the authorization, receives, from the server, at least one of the digital content or a key for decrypting the digital content.

A computer-readable storage device having computer-readable software embodied thereon for programming a processor at a server to perform a method for ensuring the genuineness of a client device, the method comprising:

• transmitting a genuineness challenge to the client device, the genuineness challenge comprises a payload and a message authentication code of the payload which are generated by the server;
• receiving a response from the client device, the response comprises a message and a message authentication code of the message which are generated by the client device, the message comprising first and second data elements of the client device and a copy of the genuineness challenge, the copy of the genuineness challenge comprising a copy of the payload and a copy of the message authentication code of the payload, and the message authentication code is obtained from the message using a non-shared key of the client device;
• verifying that the second data element was derived from the first data element;
• calculating the non-shared key of the client device using the first and second data elements of the client device but without using asymmetric cryptography;
• responsive to the calculating, validating the message authentication code of the message;
• validating the copy of the message authentication code of the payload;
• and
• responsive to the verifying that the second data element was derived from the first data element, the validating the message authentication code of the message and the validating the copy of the message authentication code of the payload, authorizing the client device to access digital content.