WO2005020541A1 - Method and device for securing content delivery over a communication network via content keys - Google Patents
Method and device for securing content delivery over a communication network via content keys Download PDFInfo
- Publication number
- WO2005020541A1 WO2005020541A1 PCT/US2004/002407 US2004002407W WO2005020541A1 WO 2005020541 A1 WO2005020541 A1 WO 2005020541A1 US 2004002407 W US2004002407 W US 2004002407W WO 2005020541 A1 WO2005020541 A1 WO 2005020541A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- content
- recited
- key
- network
- information item
- Prior art date
Links
- 238000000034 method Methods 0.000 title claims abstract description 47
- 238000004891 communication Methods 0.000 title claims abstract description 25
- 230000001413 cellular effect Effects 0.000 claims description 5
- 238000012795 verification Methods 0.000 claims 2
- 230000008569 process Effects 0.000 description 16
- 230000005540 biological transmission Effects 0.000 description 7
- 238000010586 diagram Methods 0.000 description 4
- 238000006467 substitution reaction Methods 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 230000003111 delayed effect Effects 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 230000002093 peripheral effect Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04K—SECRET COMMUNICATION; JAMMING OF COMMUNICATION
- H04K1/00—Secret communication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/062—Network architectures or network communication protocols for network security for supporting key management in a packet data network for key distribution, e.g. centrally by trusted party
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0816—Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use
- H04L9/0819—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s)
- H04L9/0822—Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) using key encryption key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
- H04L2209/60—Digital content management, e.g. content distribution
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L2463/00—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00
- H04L2463/101—Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00 applying security measures for digital rights management
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
Definitions
- the CR may request the CS to download the requested data, information items, or content at a scheduled time. Still further, the CR may request the data, information items or content be downloaded or delivered to a second device, i.e., a content receiver or consumer (CC), either immediately or at a scheduled time.
- a second device i.e., a content receiver or consumer (CC)
- CC content receiver or consumer
- This latter operation is suitable when the CR device is operating on a low-bandwidth network and lacks sufficient bandwidth to download the required information.
- a user may use a cellular device operating over a low- speed network to request audio and/or visual (multimedia) information be delivered to a receiving device, such as a home or laptop computer.
- the method is operable at a receiving device located at a remote site in communication with a network for receiving a first information item scrambled using an encrypting key known by the remote site, descrambling the first information item using a corresponding decrypting key, wherein the information item includes an access code and a content key, receiving a second information item scrambled using the content encryption key after the server hosting the second information verifies the access code and descrambling the second information item using the content key.
- a location of the desired content is included with the first information item. The location may be also encrypted using the key.
- Figure 2 illustrates an exemplary process for providing secure content delivery for the delivery framework shown in Figure 1 ;
- Figure 3 illustrates a diagram of another exemplary content delivery framework
- Figure 4 illustrates an exemplary process for providing secure content delivery in the content delivery framework shown in Figure 3;
- Figure 5 illustrates a flow chart of a process for scrambling content information secured in accordance with an aspect of the invention
- Figure 6 illustrates a flow chart of a process for descrambling secure content information in accordance with an aspect of the invention.
- Figure 7 illustrates a device for executing the process shown herein.
- Figure 1 illustrates a diagram of the communications of a content delivery framework 100 comprising a Content Requester (CR) 110 in communication with Content Server (CS) 120 through network 130.
- CS 120 is further in communication with Content Consumer 150 through network 140.
- network 130 may be a low-speed network while network 140 may be a high-speed network.
- networks 130 and 140 may be the same network or different networks of comparable speeds.
- CR 110 may be a cellular telephone and network 130 may be a relatively low speed wireless network.
- Network 140 may be a high-speed network, such as the Internet or a specialized content delivery network (CDN).
- CDN content delivery network
- CR 110 may be a laptop computer and network 130 may be a local-area network connected to the Internet, which can be represented by network 140.
- Figure 2 illustrates an exemplary operation 200 for providing secure content delivery over the network configuration shown in Figure 1.
- CR 110 generates a request for information content, shown as arrow 210, to CS 120 via network 130.
- request 210 may include an encryption key associated with Content Consumer (CC) 150.
- CC Content Consumer
- the public key of CC 150 may be provided to CS 120.
- Digital certificates may also be used to verify that content requester 110 is authorized to access CS 120.
- the key, Pu may be a key value that is known or shared by CS 120 and CC 150.
- the provided encryption key may itself be scrambled or encrypted using a key that is known to or shared by both CR 110 and CS 120.
- a shared key denoted as So and represented by arrow 210, assures CS 120 that CR 110 is authorized to make a request.
- CR 110 may, in one aspect, be provided with shared key So when registering for the service provided by CS 120.
- CR 110 may be in communication with CS 120 using a secured link, which may be set up by transmitting a conventional user name and password to CS 120.
- CS 120 may in response provide shared key S 0 to user CR 110.
- a reference to the designated CC 150 e.g., Internet Protocol address, or location, etc., may also be contained within the request.
- CS 120 after authenticating that CR 110 is authorized to make request 310, creates a Content Access Credential (CAC) or access code for the designated content consumer.
- the CAC is used to access the requested content by the designated CC 150 at a later time.
- Notification 220 in this case, includes the CAC and a content key, referred to as K c .
- Key K c is used to scramble or encrypt the requested content.
- CAC and K c are scrambled or encrypted using key P u , associated with CC 150, which, in this illustrated case, was provided by CR 110.
- a use- limitation or license may also be associated with content key K c .
- license LIC may limit the number of times or a time period that key K c is rendered valid. Such use-limitation on key K c provides a means to limit subsequent distribution of the content.
- CC 150 decrypts or de-scrambles the notification message to obtain the CAC and key K c using the decryption key associated with the key P u .
- the CAC is then transmitted to CS 120, shown as arrow 225, to authorize the transmission or downloading of the requested information item.
- content downloading is represented by arrow 230.
- the information item is de-scrambled or decrypted, represented by arrow 240, using the provided key, K c .
- CC 150 is now able to view the de-scrambled content requested by CC 110.
- key K c is used to encrypt and decrypt the content provided and may thus be referred to as an encryption key, a decryption key or a content delivery key.
- CAC from CS 120 may occur at a predetermined time or with a predetermined delay calculated from the time the initial request was made.
- the transmission of CAC from CC 150 to CS 120 may be performed automatically or manually. In the manual case, a user may initiate an action on CC 150 to cause CAC to be transmitted.
- CS 120 may delay transmission of CAC and content key K c until a known time or after the lapse of a known time offset.
- FIG. 3 illustrates a diagram of a content delivery framework 300 in accordance with an aspect of the present invention.
- CR 110 and CS 120 are in communication via network 130 as previously described.
- CS 120 is also in communication with CDN broker 310 via network 140 and CDN broker 310 may further be in communication with one or more Edge Servers, represented by ES 320, via network 330.
- CC 150 in this illustrated case, has access to at least network 330.
- networks 130, 140 and 330 may be networks that have different, the same or comparable data transmission rates.
- network 130 may be a low-speed, low bandwidth network and networks 140 and 330 may be high speed, large bandwidth networks.
- Network 330 may further be representative of a specialized content delivery network (CDN). As would be recognized by those skilled in the art, networks 130, 140 and 330 may also be the same network.
- CDN broker 310 enables the system to distribute requested content to different edge servers that may be local to a plurality of users that may request the same content.
- FIG 4 illustrates an exemplary chronological sequence 400 for providing secure content delivery over the network configuration shown in Figure 3.
- CR 1 10 requests, represented as arrow 210, that CS 120 provide designated content to CC 150, as previously discussed.
- Content Server 120 obtains information regarding a designated ES associated with CC 150 from the CDN broker 310.
- CS 120 further generates a CAC and creates a Cache Content Access Credential (CCAC).
- CAC includes the address of the designated CC 150 and a password.
- the CCAC includes the address of a designated edge server (ES) 320, and a second password.
- the CAC and CCAC are encrypted and provided to CDN broker 310, as represented by arrow 410.
- CAC and CCAC are encrypted using a key, denoted as S ls which is known or shared by CS 120 and CDN broker 310.
- CDN broker 310 decrypts the transmitted information, and in this case, re-encrypts the CAC and CCAC using a key, referred to as S 2 .
- Key S 2 is common to or shared by CDN broker 310 and ES 320.
- ES 320 uses the CAC to access the requested content, as represented by arrow 430, which is scrambled using a content key, K c , from CS 120.
- CS 120 further provides a notification, as shown by arrow 220, to CC 150.
- the notification 220 contains information regarding the location of the requested information or content, e.g., address of ES 320, and the encrypted or scrambled CCAC and content key K c .
- the CCAC and key K c are encrypted using the key P u associated with or known by CC 150.
- the location of the content may also be encrypted.
- the location of the content may be provided unscrambled.
- CC 150 may then decrypt the information and transmit the received CCAC to
- FIG. 5 illustrates a flow chart of an exemplary process 500 for decrypting requested content in accordance with the principles of the invention. In this exemplary process, a determination is made at block 510 whether a message has been received. If the answer is negative, then the process continues to wait for the receipt of a message.
- the message is decrypted or descrambled using a private key at block 520.
- the content access code and a key, K c are obtained from the decrypted message.
- the content access key or code is the generated CAC whereas, with regard to Figure 3, the content access key or code is the generated CCAC.
- the location of the desired content may also be included in the message.
- the location may be provided in the clear or may be scrambled.
- the content location may be known by the CC 150 and, thus, need not be contained in the transmitted message.
- the content access key (CAC or CCAC) is transmitted to the known or specified content location, at block 550.
- the content is received and at block 570 a determination is made whether all the content has been received. If the answer is negative, then processing continues at block 560 to continue receiving the desired content. However, if the answer is in the affirmative, the content is decrypted using the provided content key, i.e., K c .
- FIG. 6 illustrates a flow chart of a process 600 for generating content delivery keys or codes in accordance with the principles of the invention.
- a determination is made whether a message has been received. If the answer is negative, then the process continues to wait for a message. [00029] However, if the answer is in the affirmative, then a determination is made, at block 620, whether the sender is authorized to request content delivery. If the answer is negative, then the process returns to block 610 to continue waiting for a message. However, if the answer is in the affirmative, then at block 625 the request message is decrypted using a key common to both parties.
- the message includes information regarding the desired content and may include a desired consumer location if the desired consumer location is not known, prefixed or predetermined, e.g., predesignated address. This information may be sent unencrypted.
- the consumer public key or other encryption information is sent encrypted.
- a content access key and a content key, K c are generated and are encrypted using the public key or other encryption information provided by the requester or user.
- the encrypted information is transmitted to the consumer via a notification message at block 640.
- the content access key or code is encrypted or scrambled using an encryption key known between the content server and the edge server that contains or will contain the desired content.
- the content is encrypted using the content delivery key, K c .
- K c to scramble the content is advantageous as the server does not require additional levels of security to prevent unauthorized access to the content.
- storing the media using the key, K c is further advantageous as it stores the content in a form that is transparent to the consumer regardless of whether the content server or an edge server delivers the content.
- the content is transmitted to the location of the consumer or user.
- process shown in Figure 5 relates more specifically to the sequence shown in Figure 4, which includes additional process sequence steps over those shown in Figure 1.
- process 600 may also relate to the sequence steps shown in Figure 1 when the location of the content is known by the consumer.
- Figure 7 illustrates a system 700 for implementing the principles of the invention as depicted in the exemplary processing shown in Figures 2-4.
- input data is received from sources 705 over network 750 and is processed in accordance with one or more programs, either software or firmware, executed by processing system 710.
- the results of processing system 710 may then be transmitted over network 770 for viewing on display 780, reporting device 790 and/or a second processing system 795.
- processing system 710 includes one or more input/output devices
- Communication medium 725 may represent a communication network, e.g., ISA, PCI, PCMCIA bus, one or more internal connections of a circuit, circuit card or other device, as well as portions and combinations of these and other communication media.
- Processing system 710 and/or processor 720 may be representative of a handheld calculator, special purpose or general purpose processing system, desktop computer, laptop computer, palm computer, or personal digital assistant (PDA) device, etc., as well as portions or combinations of these and other devices that can perform the operations illustrated.
- PDA personal digital assistant
- Processor 720 may be a central processing unit (CPU) or dedicated hardware/software, such as a PAL, ASIC, FGPA, operable to execute computer instruction code or a combination of code and logical operations.
- processor 720 may include code which, when executed, performs the operations illustrated herein.
- the code may be contained in memory 730, may be read or downloaded from a memory medium such as a CD-ROM or floppy disk, represented as 783, may be provided by a manual input device 785, such as a keyboard or a keypad entry, or may be read from a magnetic or optical medium (not shown) when needed.
- processor 720 may be accessible to processor 720 through input/output device 740, as shown. Further, the data received by input/output device 740 may be immediately accessible by processor 720 or may be stored in memory 730. Processor 720 may further provide the results of the processing to display 780, recording device 790 or a second processing unit 795.
- processor, processing system, computer or computer system may represent one or more processing units in communication with one or more memory units and other devices, e.g., peripherals, connected electronically to and communicating with the at least one processing unit.
- the devices illustrated may be electronically connected to the one or more processing units via internal busses, e.g., serial, parallel, ISA bus, microchannel bus, PCI bus, PCMCIA bus, USB, etc., or one or more internal connections of a circuit, circuit card or other device, as well as portions and combinations of these and other communication media, or an external network, e.g., the Internet and Intranet.
- internal busses e.g., serial, parallel, ISA bus, microchannel bus, PCI bus, PCMCIA bus, USB, etc.
- internal connections of a circuit, circuit card or other device e.g., the Internet and Intranet.
- an external network e.g., the Internet and Intranet.
- hardware circuitry may be used in place of, or in combination with, software instructions to implement the invention.
- the elements illustrated herein may also be implemented as discrete hardware elements or may be integrated into a single unit.
- Processing system 710 may also be in two-way communication with each of the sources 705. Processing system 710 may further receive or transmit data over one or more network connections from a server or servers over, e.g., a global computer communications network such as the Internet, Intranet, a wide area network (WAN), a metropolitan area network (MAN), a local area network (LAN), a terrestrial broadcast system, a cable network, a satellite network, a wireless network, or a telephone network (POTS), as well as portions or combinations of these and other types of networks.
- networks 750 and 770 may also be internal networks or one or more internal connections of a circuit, circuit card or other device, as well as portions and combinations of these and other communication media or an external network, e.g., the Internet and Intranet.
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- General Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Theoretical Computer Science (AREA)
- Computer Hardware Design (AREA)
- Software Systems (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Computing Systems (AREA)
- Multimedia (AREA)
- Technology Law (AREA)
- Databases & Information Systems (AREA)
- Mathematical Physics (AREA)
- Data Mining & Analysis (AREA)
- Storage Device Security (AREA)
- Mobile Radio Communication Systems (AREA)
- Two-Way Televisions, Distribution Of Moving Picture Or The Like (AREA)
Abstract
Description
Claims
Priority Applications (7)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
BRPI0413462-1A BRPI0413462A (en) | 2003-08-13 | 2004-01-27 | method and device for securing content distribution over a communication network through content keys |
CN2004800296147A CN1868187B (en) | 2003-08-13 | 2004-01-27 | Method and device for securing content delivery over a communication network via content keys |
DE602004005219T DE602004005219T2 (en) | 2003-08-13 | 2004-01-27 | METHOD AND DEVICE FOR SECURING CONTENT DELIVERY VIA A COMMUNICATION NETWORK CONTAINING CONTENT KEY |
EP04705725A EP1661355B1 (en) | 2003-08-13 | 2004-01-27 | Method and device for securing content delivery over a communication network via content keys |
US10/567,271 US20070033396A1 (en) | 2003-08-13 | 2004-01-27 | Method and device for securing content delivery over a communication network via content keys |
MXPA06001649A MXPA06001649A (en) | 2003-08-13 | 2004-01-27 | Method and device for securing content delivery over a communication network via content keys. |
JP2006523170A JP4690321B2 (en) | 2003-08-13 | 2004-01-27 | Method and apparatus for secure content transmission over a communication network via a content key |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US49483603P | 2003-08-13 | 2003-08-13 | |
US60/494,836 | 2003-08-13 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2005020541A1 true WO2005020541A1 (en) | 2005-03-03 |
Family
ID=34215904
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/US2004/002407 WO2005020541A1 (en) | 2003-08-13 | 2004-01-27 | Method and device for securing content delivery over a communication network via content keys |
Country Status (10)
Country | Link |
---|---|
US (1) | US20070033396A1 (en) |
EP (1) | EP1661355B1 (en) |
JP (1) | JP4690321B2 (en) |
KR (1) | KR101109144B1 (en) |
CN (1) | CN1868187B (en) |
BR (1) | BRPI0413462A (en) |
DE (1) | DE602004005219T2 (en) |
MX (1) | MXPA06001649A (en) |
MY (1) | MY137892A (en) |
WO (1) | WO2005020541A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1876549A1 (en) * | 2006-07-07 | 2008-01-09 | Swisscom Mobile AG | Method and system for encrypted data transmission |
WO2008102220A1 (en) | 2007-02-23 | 2008-08-28 | Sony Ericsson Mobile Communications Ab | Authorizing secure resources |
Families Citing this family (32)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US10181953B1 (en) | 2013-09-16 | 2019-01-15 | Amazon Technologies, Inc. | Trusted data verification |
EP1723763A1 (en) * | 2004-03-12 | 2006-11-22 | THOMSON Licensing | Cache server network and method of scheduling the distribution of content files |
BRPI0520341A2 (en) * | 2005-06-23 | 2009-05-05 | Thomson Licensing | media access device registration system and method |
CN101917393A (en) | 2010-05-26 | 2010-12-15 | 中兴通讯股份有限公司 | Information transmission method and system as well as data card |
TWI421724B (en) * | 2010-10-28 | 2014-01-01 | Chunghwa Telecom Co Ltd | Method for digital information rights management |
US9237155B1 (en) | 2010-12-06 | 2016-01-12 | Amazon Technologies, Inc. | Distributed policy enforcement with optimizing policy transformations |
US8769642B1 (en) | 2011-05-31 | 2014-07-01 | Amazon Technologies, Inc. | Techniques for delegation of access privileges |
US9203613B2 (en) | 2011-09-29 | 2015-12-01 | Amazon Technologies, Inc. | Techniques for client constructed sessions |
US9178701B2 (en) | 2011-09-29 | 2015-11-03 | Amazon Technologies, Inc. | Parameter based key derivation |
US9197409B2 (en) | 2011-09-29 | 2015-11-24 | Amazon Technologies, Inc. | Key derivation techniques |
US8739308B1 (en) | 2012-03-27 | 2014-05-27 | Amazon Technologies, Inc. | Source identification for unauthorized copies of content |
US9215076B1 (en) | 2012-03-27 | 2015-12-15 | Amazon Technologies, Inc. | Key generation for hierarchical data access |
US8892865B1 (en) | 2012-03-27 | 2014-11-18 | Amazon Technologies, Inc. | Multiple authority key derivation |
US9660972B1 (en) | 2012-06-25 | 2017-05-23 | Amazon Technologies, Inc. | Protection from data security threats |
US9258118B1 (en) | 2012-06-25 | 2016-02-09 | Amazon Technologies, Inc. | Decentralized verification in a distributed system |
US9407440B2 (en) | 2013-06-20 | 2016-08-02 | Amazon Technologies, Inc. | Multiple authority data security and access |
US9521000B1 (en) | 2013-07-17 | 2016-12-13 | Amazon Technologies, Inc. | Complete forward access sessions |
US9237019B2 (en) | 2013-09-25 | 2016-01-12 | Amazon Technologies, Inc. | Resource locators with keys |
US9311500B2 (en) | 2013-09-25 | 2016-04-12 | Amazon Technologies, Inc. | Data security using request-supplied keys |
US10243945B1 (en) | 2013-10-28 | 2019-03-26 | Amazon Technologies, Inc. | Managed identity federation |
US9420007B1 (en) | 2013-12-04 | 2016-08-16 | Amazon Technologies, Inc. | Access control using impersonization |
US9369461B1 (en) | 2014-01-07 | 2016-06-14 | Amazon Technologies, Inc. | Passcode verification using hardware secrets |
US9374368B1 (en) | 2014-01-07 | 2016-06-21 | Amazon Technologies, Inc. | Distributed passcode verification system |
US9292711B1 (en) | 2014-01-07 | 2016-03-22 | Amazon Technologies, Inc. | Hardware secret usage limits |
US9270662B1 (en) | 2014-01-13 | 2016-02-23 | Amazon Technologies, Inc. | Adaptive client-aware session security |
US10771255B1 (en) | 2014-03-25 | 2020-09-08 | Amazon Technologies, Inc. | Authenticated storage operations |
US9258117B1 (en) | 2014-06-26 | 2016-02-09 | Amazon Technologies, Inc. | Mutual authentication with symmetric secrets and signatures |
US10326597B1 (en) | 2014-06-27 | 2019-06-18 | Amazon Technologies, Inc. | Dynamic response signing capability in a distributed system |
US10122689B2 (en) | 2015-06-16 | 2018-11-06 | Amazon Technologies, Inc. | Load balancing with handshake offload |
US10122692B2 (en) | 2015-06-16 | 2018-11-06 | Amazon Technologies, Inc. | Handshake offload |
US10375030B2 (en) * | 2016-06-24 | 2019-08-06 | Combined Conditional Access Development & Support | Initialization encryption for streaming content |
US10116440B1 (en) | 2016-08-09 | 2018-10-30 | Amazon Technologies, Inc. | Cryptographic key management for imported cryptographic keys |
Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO1997038530A1 (en) * | 1996-04-03 | 1997-10-16 | Digco B.V. | Method for providing a secure communication between two devices and application of this method |
WO2001011883A1 (en) * | 1999-08-10 | 2001-02-15 | Intel Corporation | System and method for securely distributing content to groups of receivers |
WO2001059549A2 (en) * | 2000-02-07 | 2001-08-16 | Koninklijke Philips Electronics N.V. | Methods and apparatus for secure content distribution |
WO2001098903A1 (en) * | 2000-06-16 | 2001-12-27 | Entriq Limited BVI Abbot Building | Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (drm) |
WO2002047356A2 (en) * | 2000-12-07 | 2002-06-13 | Thomson Licensing S.A. | Method of secure transmission of digital data from a source to a receiver |
EP1253762A1 (en) * | 2001-04-25 | 2002-10-30 | Thomson Licensing S.A. | Process for managing a symmetric key in a communication network and devices for the implementation of this process |
Family Cites Families (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2000022680A (en) * | 1998-07-07 | 2000-01-21 | Open Loop:Kk | Digital contents distribution method and recording medium reproducibly recording contents |
US6611812B2 (en) * | 1998-08-13 | 2003-08-26 | International Business Machines Corporation | Secure electronic content distribution on CDS and DVDs |
AU5705400A (en) * | 1999-07-05 | 2001-01-22 | Sanyo Electric Co., Ltd. | Information distribution system and distribution server |
JP2001312639A (en) * | 2000-02-24 | 2001-11-09 | Nippon Telegr & Teleph Corp <Ntt> | Method and system for content distribution, storage medium stored with content distributing program, method and system for service reservation ticket distribution, and storage medium stored with service reservation ticket distributing program |
JP3281920B2 (en) * | 2000-03-14 | 2002-05-13 | 東北大学長 | Method for producing allylfuran compound |
US6507727B1 (en) * | 2000-10-13 | 2003-01-14 | Robert F. Henrick | Purchase and delivery of digital content using multiple devices and data networks |
JP4269023B2 (en) * | 2000-11-29 | 2009-05-27 | 株式会社ウィルコム | Content present management device, content present management system |
JP2002271316A (en) * | 2001-03-13 | 2002-09-20 | Sanyo Electric Co Ltd | Reproducing equipment |
SE0101295D0 (en) * | 2001-04-10 | 2001-04-10 | Ericsson Telefon Ab L M | A method and network for delivering streaming data |
JP2003037588A (en) * | 2001-07-26 | 2003-02-07 | Nippon Telegr & Teleph Corp <Ntt> | Method and system for digital contents reservation and delivery, device for reservation and downloading, and user information management device |
JP4186466B2 (en) * | 2002-01-16 | 2008-11-26 | ソニー株式会社 | Content distribution system, content distribution method, information processing apparatus, and computer program |
US7020636B2 (en) * | 2002-09-05 | 2006-03-28 | Matsushita Electric Industrial, Co., Ltd. | Storage-medium rental system |
-
2004
- 2004-01-27 WO PCT/US2004/002407 patent/WO2005020541A1/en active IP Right Grant
- 2004-01-27 EP EP04705725A patent/EP1661355B1/en not_active Expired - Fee Related
- 2004-01-27 BR BRPI0413462-1A patent/BRPI0413462A/en not_active IP Right Cessation
- 2004-01-27 US US10/567,271 patent/US20070033396A1/en not_active Abandoned
- 2004-01-27 KR KR1020067002867A patent/KR101109144B1/en active IP Right Grant
- 2004-01-27 JP JP2006523170A patent/JP4690321B2/en not_active Expired - Fee Related
- 2004-01-27 MX MXPA06001649A patent/MXPA06001649A/en active IP Right Grant
- 2004-01-27 DE DE602004005219T patent/DE602004005219T2/en not_active Expired - Lifetime
- 2004-01-27 CN CN2004800296147A patent/CN1868187B/en not_active Expired - Fee Related
- 2004-08-12 MY MYPI20043287A patent/MY137892A/en unknown
Patent Citations (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
WO1997038530A1 (en) * | 1996-04-03 | 1997-10-16 | Digco B.V. | Method for providing a secure communication between two devices and application of this method |
WO2001011883A1 (en) * | 1999-08-10 | 2001-02-15 | Intel Corporation | System and method for securely distributing content to groups of receivers |
WO2001059549A2 (en) * | 2000-02-07 | 2001-08-16 | Koninklijke Philips Electronics N.V. | Methods and apparatus for secure content distribution |
WO2001098903A1 (en) * | 2000-06-16 | 2001-12-27 | Entriq Limited BVI Abbot Building | Methods and systems to distribute content via a network utilizing distributed conditional access agents and secure agents, and to perform digital rights management (drm) |
WO2002047356A2 (en) * | 2000-12-07 | 2002-06-13 | Thomson Licensing S.A. | Method of secure transmission of digital data from a source to a receiver |
EP1253762A1 (en) * | 2001-04-25 | 2002-10-30 | Thomson Licensing S.A. | Process for managing a symmetric key in a communication network and devices for the implementation of this process |
Cited By (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1876549A1 (en) * | 2006-07-07 | 2008-01-09 | Swisscom Mobile AG | Method and system for encrypted data transmission |
US8484468B2 (en) | 2006-07-07 | 2013-07-09 | Swisscom Ag | Process and system for selectable data transmission |
US9479486B2 (en) | 2006-07-07 | 2016-10-25 | Swisscom Ag | Process and system for selectable data transmission |
US10097519B2 (en) | 2006-07-07 | 2018-10-09 | Swisscom Ag | Process and system for selectable data transmission |
US10972440B2 (en) | 2006-07-07 | 2021-04-06 | Swisscom Ag | Process and system for selectable data transmission |
WO2008102220A1 (en) | 2007-02-23 | 2008-08-28 | Sony Ericsson Mobile Communications Ab | Authorizing secure resources |
Also Published As
Publication number | Publication date |
---|---|
JP2007502576A (en) | 2007-02-08 |
KR101109144B1 (en) | 2012-03-08 |
EP1661355B1 (en) | 2007-03-07 |
BRPI0413462A (en) | 2006-10-17 |
KR20060069455A (en) | 2006-06-21 |
DE602004005219D1 (en) | 2007-04-19 |
CN1868187A (en) | 2006-11-22 |
MY137892A (en) | 2009-03-31 |
MXPA06001649A (en) | 2006-07-03 |
DE602004005219T2 (en) | 2007-06-28 |
CN1868187B (en) | 2010-06-16 |
EP1661355A1 (en) | 2006-05-31 |
US20070033396A1 (en) | 2007-02-08 |
JP4690321B2 (en) | 2011-06-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP1661355B1 (en) | Method and device for securing content delivery over a communication network via content keys | |
US5825884A (en) | Method and apparatus for operating a transactional server in a proprietary database environment | |
US8984295B2 (en) | Secure access to electronic devices | |
US8145898B2 (en) | Encryption/decryption pay per use web service | |
US20220131701A1 (en) | Dongle for ciphering data | |
CA2354704A1 (en) | Public key cryptosystem with roaming user capability | |
JP2000508854A (en) | Data re-encryption apparatus and method | |
WO2013178019A1 (en) | Method, device and system for implementing media data processing | |
USRE47324E1 (en) | Data encryption systems and methods | |
CN112597523B (en) | File processing method, file conversion encryption machine, terminal, server and medium | |
KR20010106325A (en) | Wireless pda ebook contents service method and system with user authentication function for the digital rights management | |
US20060129812A1 (en) | Authentication for admitting parties into a network | |
US20020131599A1 (en) | System for encryption of wireless transmissions from personal palm computers to world wide Web terminals | |
WO2000022773A1 (en) | System and method of sending and receiving secure data with a shared key | |
US20070098156A1 (en) | Digital rights management | |
CN109194650B (en) | Encryption transmission method based on file remote encryption transmission system | |
JP2003234734A (en) | Mutual authentication method, server device, client device, mutual authentication program and storage medium stored with mutual authentication program | |
CN106972928B (en) | Bastion machine private key management method, device and system | |
CN114945170A (en) | Mobile terminal file transmission method based on commercial cipher algorithm | |
CN109302287B (en) | Message forwarding method and system | |
JPH09270784A (en) | Ciphering/decoding/digital signature generating/ verification device | |
CN110691068A (en) | Cloud server login system, method and device | |
JPH11289323A (en) | Data transmission system | |
US20040019805A1 (en) | Apparatus and method for securing a distributed network | |
JP2007521525A (en) | System for authenticating and authorizing a party in a secure communication network |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 200480029614.7 Country of ref document: CN |
|
AK | Designated states |
Kind code of ref document: A1 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A1 Designated state(s): BW GH GM KE LS MW MZ SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
DPEN | Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed from 20040101) | ||
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
WWE | Wipo information: entry into national phase |
Ref document number: 2007033396 Country of ref document: US Ref document number: 10567271 Country of ref document: US |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2004705725 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006523170 Country of ref document: JP Ref document number: PA/a/2006/001649 Country of ref document: MX Ref document number: 1020067002867 Country of ref document: KR |
|
WWE | Wipo information: entry into national phase |
Ref document number: 732/DELNP/2006 Country of ref document: IN |
|
WWP | Wipo information: published in national office |
Ref document number: 2004705725 Country of ref document: EP |
|
ENP | Entry into the national phase |
Ref document number: PI0413462 Country of ref document: BR |
|
WWP | Wipo information: published in national office |
Ref document number: 10567271 Country of ref document: US |
|
WWG | Wipo information: grant in national office |
Ref document number: 2004705725 Country of ref document: EP |