# US 9,436,809 B2 · Secure authenticated distance measurement > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,436,809 B2 - Document ID: US9436809B2 - Status: Granted - Kind: B2 - Application number: 14/538,493 - Filed: 2014-11-11 - Published: 2015-03-12 - Granted: 2016-09-06 - Earliest claimed: 2002-07-26 - Assignees: Koninklijke Philips N.V. - Applicants: Koninklijke Philips N.V. - Inventors: Franciscus Lucas Antonius Johannes Kamperman - Web page: https://patentgrep.com/patent/US9436809B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]} - H04L 9/14: using a plurality of keys or algorithms - H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy - H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)} - H04L 43/0852: Delays - H04L 43/16: Threshold monitoring - H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)} - H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals} - H04W 12/069: using certificates or pre-shared keys - H04W 12/63: Location-dependent; Proximity-dependent - G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 2463/101: applying security measures for digital rights management - H04W 12/041: Key generation or derivation - H04W 24/00: Supervisory, monitoring or testing arrangements - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract The invention relates to a method for a first communication device to perform authenticated distance measurement between the first communication device and a second communication device, wherein the first and the second communication device share a common secret and the common secret is used for performing the distance measurement between the first and the second communication device. The invention also relates to a method of determining whether data stored on a first communication device are to be accessed by a second communication device. Moreover, the invention relates to a communication device for performing authenticated distance measurement to a second communication device. The invention also relates to an apparatus for playing back multimedia content comprising a communication device. ## Claims ### Claim 1 A first device for controlling delivery of protected content to a second device, the first device comprising: a memory; a processor, said processor arranged to: receive a certificate of the second device, the certificate providing information regarding the second device; determine whether the second device is compliant with a set of compliance rules utilizing said information provided in said certificate; provide a first signal to the second device depending when the second device is determined to be compliant with the set of compliance rules; receive a second signal from the second device after providing the first signal; determine whether the second signal is derived from a secret known by the first device; determine whether a time difference between providing the first signal and receiving the second signal is less than a predetermined time; and allow the protected content to be provided to the second device when at least the second signal is determined to be derived from the secret and the time difference is less than the predetermined time. ### Claim 2 (depends on 1) The first device of claim 1, wherein the first signal comprises a random number. ### Claim 3 (depends on 1) The first device of claim 1, wherein the second signal is formed by modifying the first signal based on the secret, wherein the modification comprises performing an XOR operation on the first signal. ### Claim 4 (depends on 1) The first device of claim 1, wherein the processor is further arranged to provide the secret to the second device. ### Claim 5 (depends on 4) The first device of claim 4, wherein the secret is securely provided using one of: a key transport protocol, a key management protocol and a key agreement protocol. ### Claim 6 (depends on 4) The first device of claim 4, wherein the processor arranged to provide the secret to the second device comprises the processor arranged to provide the secret to the second device via encryption by a public key of a private/public key-pair of the second device, if the second device is compliant, said secret comprising a random number. ### Claim 7 (depends on 1) The first device of claim 1, wherein the processor is further arranged to receive the secret from the second device. ### Claim 8 (depends on 7) The first device of claim 7, wherein the secret is securely received using one of: a key transport protocol, a key management protocol and a key agreement protocol. ### Claim 9 (depends on 1) The first device of claim 1, wherein the processor arranged to determine whether the second signal is derived from the secret is arranged to: modify the first signal according to the secret; compare the modified first signal with the second signal; and provide an indication when said modified first signal is identical to the second signal. ### Claim 10 (depends on 1) The first device of claim 1, wherein the first signal and the secret are of comparable length. ### Claim 11 (depends on 1) The first device of claim 1, wherein the processor is further arranged to determine an identity of the second device using the certificate. ### Claim 12 (depends on 1) The first device of claim 1, wherein the certificate comprises a public key. ### Claim 13 (depends on 1) The first device of claim 1, wherein the processor is further arranged to provide a certificate to the second device. ### Claim 14 (depends on 1) The first device of claim 1, wherein the predetermined time is based on a communication system associated with the first device. ### Claim 15 (depends on 1) The first device of claim 1, wherein the second signal comprises the first signal modified by the secret. ### Claim 16 (depends on 1) The first device of claim 1, wherein the processor is further arranged to: provide instruction to a third device to transmit said protected content, wherein said protected content is stored on said third device. ### Claim 17 A system for controlling the transmission of protected content from a content provider to a requesting device, the content provider comprising: means for receiving a certificate of the requesting device, the certificate providing information for validating the requesting device as being compliant with a set of compliancy rules; means for validating that the requesting device is compliant with the set of compliancy rules using said information contained in said certificate; means for transmitting a first signal to the requesting device at a first time when said requesting device is validated as being compliant with the set of compliancy rules; means for receiving a second signal at a second time from the requesting device; means for providing the protected content to the requesting device after determining the second signal depends on a secret known to the content provider, and a time difference between the first time and the second time is less than a predetermined time. ### Claim 18 (depends on 17) The system of claim 17, wherein said protected content is stored on a third device. ### Claim 19 (depends on 18) The system of claim 18, wherein said means for providing the requested content comprises: means for providing instruction to said third device to provide said content to said requesting device. ### Claim 20 (depends on 18) The system of claim 18, wherein the third device is one of: a DVD, CD and a storage device. ### Claim 21 (depends on 17) The system of claim 17, wherein the secret is securely received by the content provider. ### Claim 22 (depends on 17) The system of claim 17, wherein the secret is securely transmitted by the content provider. ### Claim 23 (depends on 17) The system of claim 17, wherein the certificate identifies the requesting device. ### Claim 24 (depends on 17) The system of claim 17, wherein the predetermined time is based on a type of communication protocol between the requesting device and the content provider. ### Claim 25 (depends on 17) The system of claim 17, wherein the content provider is one of: a DVD, CD and a storage device. ### Claim 26 (depends on 17) The system of claim 17, wherein the second signal comprises the first signal modified by the secret. ### Claim 27 A first device in communication with a second device, the first device comprising: a memory; a processor in communication with the memory, the processor arranged to execute software stored on the first device, the software configured to: receive from the second device a request for a protected content and a certificate providing information associated with the second device; determine whether the second device is suitable for receiving said protected content, wherein determining suitability of said second device is based on said information provided in said certificate; provide a first signal to said second device when said second device is determined to be suitable for receiving said protected content; receive from said second device a second signal; determine whether said second signal is representative of said first signal modified according to a secret known by said first device and said second device; determine whether a time difference between a time of providing the first signal and receiving the second signal is less than a predetermined time; and initiate transmission of said protected content to said second device when at least said second signal is representative of said first signal modified according to a secret known by said first device and said second device and said time difference is less than the predetermined time. ### Claim 28 (depends on 27) The first device of claim 27, wherein said protected content is stored on said first device. ### Claim 29 (depends on 27) The first device of claim 27, wherein the software configured to initiate said initiating transmission of said protected content is further configured to provide instruction to a third device to transmit said protected content, wherein said protected content is stored on said third device. ### Claim 30 (depends on 29) The first device of claim 29, wherein said third device is one of a DVD, a CD and a storage device. ### Claim 31 (depends on 29) The first device of claim 29, wherein said third device is remotely located from said first device. ### Claim 32 (depends on 27) The first device of claim 27, wherein suitability is determined as being compliant with a set of compliancy rules. ### Claim 33 (depends on 27) The first device of claim 27, wherein the software is further arranged to: provide the secret to the second device via encryption by a public key of a private/public key-pair of the second device, if the second device is suitable, said secret comprising a random number. ### Claim 34 A method of a first device controlling delivery of protected content to a second device, the method comprising: receiving a certificate of the second device, the certificate providing information regarding the second device; determining whether the second device is compliant with a set of compliance rules utilizing said information provided in said certificate; providing a first signal to the second device depending when the second device is determined to be compliant with the set of compliance rules; receiving a second signal from the second device after providing the first signal; determining whether the second signal is derived from a secret known by the first device; determining whether a time difference between providing the first signal and receiving the second signal is less than a predetermined time; and allowing the protected content to be provided to the second device when at least the second signal is determined to be derived from the secret and the time difference is less than the predetermined time. ### Claim 35 (depends on 34) The method of claim 34, wherein the first signal comprises a random number. ### Claim 36 (depends on 34) The method of claim 34, wherein the second signal is formed by modifying the first signal based on the secret, wherein the modification comprises performing an XOR operation on the first signal. ### Claim 37 (depends on 34) The method of claim 34, further comprising providing the secret to the second device. ### Claim 38 (depends on 37) The method of claim 37, wherein the secret is securely provided using one of: a key transport protocol, a key management protocol and a key agreement protocol. ### Claim 39 (depends on 34) The method of claim 34, further comprising receiving the secret from the second device. ### Claim 40 (depends on 39) The method of claim 39, wherein the secret is securely received using one of: a key transport protocol, a key management protocol and a key agreement protocol. ### Claim 41 (depends on 34) The method of claim 34, wherein the step of determining whether the second signal is derived from the secret comprises: modifying the first signal according to the secret; comparing the modified first signal with the second signal; and providing an indication when said modified first signal is identical to the second signal. ### Claim 42 (depends on 34) The method of claim 34, wherein the first signal and the secret are of comparable length. ### Claim 43 (depends on 34) The method of claim 34, further comprising determining an identity of the second device using the certificate. ### Claim 44 (depends on 34) The method of claim 34, wherein the certificate comprises a public key. ### Claim 45 (depends on 34) The method of claim 34, further comprising providing a certificate to the second device. ### Claim 46 (depends on 34) The method of claim 34, wherein the predetermined time is based on a communication system associated with the first device. ### Claim 47 (depends on 34) The method of claim 34, wherein the second signal comprises the first signal modified by the secret. ### Claim 48 (depends on 34) The method of claim 34, further comprising providing instruction to a third device to transmit said protected content, wherein said protected content is stored on said third device. ### Claim 49 A first device for controlling delivery of protected content to a second device, the first device comprising: a memory; a processor, the processor arranged to: receive a certificate from the second device prior to sending a first signal; determine from the certificate if the second device is compliant; provide a secret to the second device via encryption by a public key of a private/public key-pair of the second device, if the second device is compliant, said secret comprising a random number; provide the first signal to the second device; receive a second signal from the second device after providing the first signal; determine if the second signal is derived from the secret by determining whether the second signal is the first signal modified based on the secret; determine whether a time difference between providing the first signal and receiving the second signal is less than a predetermined time; and allow the protected content to be provided to the second device at least when the second signal is determined to be derived from the secret and the time difference is less than the predetermined time. ### Claim 50 (depends on 49) The first device of claim 49, wherein the processor is further arranged to: use the secret to generate a secure authenticated channel between the first device and the second device, use the secure authenticated channel to provide the protected content to the second device. ### Claim 51 (depends on 49) The first device of claim 49, wherein the secret and the first signal are of comparable length. ### Claim 52 (depends on 49) The first device of claim 49, wherein the modification is a XOR operation using the first signal. ### Claim 53 (depends on 49) The first device of claim 49, wherein the processor, arranged to determine that the second signal is derived from the secret, is further arranged to: modify the first signal according to the secret; compare the modified first signal with the second signal; and determine that the modified first signal is identical to the second signal. ### Claim 54 (depends on 49) The first device of claim 49, wherein the first signal comprises a random number. ### Claim 55 A method of a first device controlling delivery of protected content to a second device, the method comprising: receiving a certificate from the second device prior to sending a first signal; determining from the certificate if the second device is compliant; providing a secret to the second device via encryption by a public key of a private/public key-pair of the second device, if the second device is compliant, said secret comprising a random number; providing the first signal to the second device; receiving a second signal from the second device after providing the first signal; determining if the second signal is derived from the secret by determining whether the second signal is the first signal modified based on the secret; determining whether a time difference between providing the first signal and receiving the second signal is less than a predetermined time; and allowing the protected content to be provided to the second device at least when the second signal is determined to be derived from the secret and the time difference is less than the predetermined time. ### Claim 56 (depends on 55) The method of claim 55, further comprising: using the secret to generate a secure authenticated channel between the first device and the second device, using the secure authenticated channel to provide the protected content to the second device. ### Claim 57 (depends on 55) The method of claim 55, wherein the secret and the first signal have the same bit length. ### Claim 58 (depends on 55) The method of claim 55, wherein the modification is a XOR operation using the first signal. ### Claim 59 (depends on 55) The method of claim 55, wherein the step of determining that the second signal is derived from the secret comprises: modifying the first signal according to the secret; comparing the modified first signal with the second signal; and determining that the modified first signal is identical to the second signal. ### Claim 60 (depends on 55) The method of claim 55, wherein the first signal comprises a random number.