Authentication Server Detecting Unauthorized DVD Terminals

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods struggle to detect unauthorized DVD players that have copied terminal keys, making it difficult to determine which authorized terminal key is stored in an unauthorized device and whether multiple devices share the same terminal key.

Innovation Solution

An authentication server system that receives authentication data from terminals, verifies terminal key authenticity, searches for matching terminal information, and determines unauthorized terminals by comparing received IDs with registered IDs, using challenge-response authentication methods with secret or public key encryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If terminal keys are distributed to multiple terminals using traditional methods, then authorization for content playback is achieved, but unauthorized terminals can copy and share terminal keys making detection difficult

Engineering Contradiction:
Improveterminal key securityVSAvoidunauthorized terminal detection
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The terminal key system is segmented into two distinct components: terminal keys for content decryption and terminal IDs for identification. This segmentation allows the authentication server to verify terminal identity independently of the decryption key, enabling detection when multiple terminals share the same terminal key. The separation of identification and authentication functions resolves the contradiction by maintaining security while enabling unauthorized terminal detection.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If terminal keys are copied and stored in multiple unauthorized terminals, then content playback capability is achieved in unauthorized devices, but the ability to detect which authorized terminal key is stored in unauthorized terminals is lost

Engineering Contradiction:
Improvecontent playback capabilityVSAvoidterminal key tracking accuracy
Core Design Contradiction:
Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The authentication server implements a feedback mechanism by requiring terminals to present their terminal ID during authentication. The server maintains a record of which terminal IDs are authorized for each terminal key and provides feedback when a terminal attempts to authenticate with a terminal key that does not match its registered terminal ID. This feedback loop enables precise tracking and detection of unauthorized terminal key usage.

Inventive Principle:
Principle #23Feedback

3Ease of manufacture

If traditional terminal key distribution is used, then license fee-based authorization is implemented, but it is difficult to detect identical terminal keys stored in multiple terminals

Engineering Contradiction:
Improveterminal key distributionVSAvoidterminal key uniqueness
Core Design Contradiction:
Ease of manufactureVSReliability

Solution Approach 1:

The system performs preliminary registration of terminal IDs associated with each terminal key in the authentication server before actual content playback occurs. This preliminary action creates a binding record between terminal IDs and terminal keys, establishing a baseline for future authentication. When terminals attempt to authenticate, the server compares the presented terminal ID against the registered association, enabling detection of unauthorized key sharing while maintaining ease of initial terminal key distribution.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS7698743B2Authentication server, method and system for detecting unauthorized terminal
Publication Date: 2010.04.13 INTERTRUST TECH CORP
  • US7698743B2 patent drawing
  • US7698743B2 patent drawing
  • US7698743B2 patent drawing

AI summary

A DVD terminal (20) makes a request for sending a sub-content to an authentication server (40) (in this case, attaches the “model name and serial number” of the DVD terminal (20)) (S302). The authentication server (40) generates a random number R (S304) and sends it to the DVD terminal (20) (S306). The DVD terminal (20) reads a terminal key and a terminal ID that are stored in a terminal information memory unit (25), decrypts the received random number R using a terminal key (SK_X) (S308) and sends this and the terminal ID (ID_X) to the authentication server (40) (S310). The authentication server (40) verifies the random number R and the terminal ID that are received from the DVD terminal (20) and encrypted, and judges whether the DVD terminal (20) is the authenticated terminal or not (S312).