Distributed white list for security renewability
AssigneeSony Corporation
InventorsBrant Candelore, Graham Clift, Steven Richman
Life of this patent
Estimating the term…
Abstract
To provide for security and robustness in distribution of high value video content such as UHD video, a white list is provided that does not grant default access to content like a revocation listing does, but rather forces a software update on potentially compromised devices to bring them back into copy protection compliance, eliminating, e.g., the use of certain outputs that have been compromised. Prior to outputting content, a source device determines whether the receiving device is on a white list, whether the output is still valid, whether the version number of the receiving device is still valid, and that the receiving device does not have insecure outputs on which it could re-output content.
Claims20
A device for a computerized content gateway, comprising:
- at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to:
- receive a white list of sink devices authorized to receive at least some content from the gateway, entries on the list pertaining to respective devices, at least some entries being associated with a respective device identification (ID);
- receive a request to send content from the gateway to a sink configured to play video content;
- compare a device ID associated with the sink and received by the gateway in a digital certificate against at least a portion of the list of devices;
- based on the device ID associated with the sink received in the certificate matching a device ID on the list, provide the content to the sink;
- and
- based at least in part on the device ID received in the certificate not matching a device ID on the list, not provide the content to the sink, wherein a field added to a transport layer security (TLS) message associated with the certificate includes an unsigned character string that uniquely identifies the sink seeking authentication regardless of a type of Digital Transmission Copy Protection (DTCP) certificate being used.
An apparatus, comprising:
- at least one processor;
- at least one computer memory that is not a transitory signal and that comprises instructions executable by at least one processor to:
- receive a white list of sink devices authorized to receive at least some content from a gateway that is computerized, entries on the list pertaining to respective devices, at least some entries being associated with a respective device identification (ID);
- receive a request to send content from the gateway to a sink configured to play video content;
- compare a device ID associated with the sink and received by the gateway in a digital certificate against at least a portion of the list of devices;
- based on the device ID associated with the sink received in the certificate matching a device ID on the list, provide the content to the sink;
- and
- based at least in part on the device ID received in the certificate not matching a device ID on the list, not provide the content to the sink, wherein a field of a transport layer security (TLS) message associated with the certificate includes a character string that identifies the sink seeking authentication regardless of a type of Digital Transmission Copy Protection (DTCP) certificate being used.
A method, comprising:
- receiving a white list of sink devices authorized to receive at least some content from a gateway that is computerized, entries on the list pertaining to respective devices, at least some entries being associated with a respective device identification (ID);
- receiving a request to send content from the gateway to a sink configured to play video content;
- comparing a device ID associated with the sink and received by the gateway in a digital certificate against at least a portion of the list of devices;
- based on the device ID associated with the sink received in the certificate matching a device ID on the list, providing the content to the sink;
- and
- based at least in part on the device ID received in the certificate not matching a device ID on the list, not providing the content to the sink, wherein a field of a transport layer security (TLS) message associated with the certificate includes a character string that identifies the sink seeking authentication regardless of a type of Digital Transmission Copy Protection (DTCP) certificate being used.
Dependencies are inferred from the claim text.