Categorization of host security levels based on functionality implemented inside secure hardware

Abstract

A system for rating security levels a device according to the characteristics of functions executing within secure hardware components in the device. The security level of a host is placed in a digital certificate along with a corresponding private key at the time of manufacture of a device. The digital certificate can be provided to an inquiring device so that more comprehensive system-wide security levels can be communicated and maintained. When a network uses ticket-based key management protocols, the security rating, or level, is transferred from the certificate to an issued ticket. Inquiring devices can then check security levels of target devices by using certificates or tickets and perform transfers or grant authorizations accordingly. In a preferred embodiment a security ratings system uses six levels of security. The levels are structured according to characteristics of a device's processing. That is, the levels provide information on the amount and type of sensitive processing that can occur in non-secure (or low security) circuitry or components within a device. This gives a better indication of how prone a device is to threats that may be of particular concern in content delivery networks. Additional qualifiers can be optionally used to provide further information about a security level. For example, the degree of handling time management processing within secure hardware and whether a particular codec, watermarks or fingerprints are supported within secure hardware can each be represented by a policy qualifier.

Description

[0001] Related Application Citations [0002] This application is related to the following co-pending U.S. patent applications, which are hereby incorporated by reference in their entirety: [0003] “SYSTEM FOR DIGITAL RIGHTS MANAGEMENT USING DISTRIBUTED PROVISIONING AND AUTHENTICATION” technical field [0004] The present invention relates generally to security in digital information processing systems, and more particularly to conveying a device's security level based on details of the device's hardware and software processing. Background technique [0005] Today's digital systems process multiple types of information or content in business, education, entertainment, banking, government, and more. Typically, such information is transmitted over a digital network such as the Internet, a local area network (LAN), a campus or home network, or other transmission network or means. Naturally, one of the main concerns of content owners is preventing unauthorized users from copy...

AI Technical Summary

Problems solved by technology

In some applications, these levels do not provide sufficient information for judging the level of safety

Images