Outside DTCP Bridge for Secure Cross-Network Content Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current digital copyright protection mechanisms, such as DTCP, are limited to home networks and do not effectively allow access to protected content from outside networks, compromising user convenience and potentially leading to unauthorized data exchange.

Innovation Solution

A communication relay device and system that employs dual copyright protection units for authentication and key exchange, along with an identification information memory unit and bridge processing unit, to securely relay information between inside and outside networks while maintaining copyright protection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If DTCP copyright protection mechanism is used on home network, then copyright protection is ensured, but access from outside network is prevented

Engineering Contradiction:
Improvecopyright protectionVSAvoidaccess from outside network
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces an outside DTCP bridge as an intermediary device that mediates between the inside DTCP-protected network and outside networks. The bridge performs authentication and key exchange with outside devices, then establishes secure tunnels to relay data between outside devices and inside devices, enabling controlled access while maintaining copyright protection

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system segments the network into inside network (home network with DTCP protection) and outside network (public network), with the outside DTCP bridge acting as a boundary device. This segmentation allows different copyright protection mechanisms to operate in different network zones while enabling controlled communication between them

Inventive Principle:
Principle #1Segmentation

2Ease of operation

If access is allowed from outside network, then user convenience is improved, but risk of unauthorized data exchange increases

Engineering Contradiction:
Improveuser convenienceVSAvoidunauthorized data exchange
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary authentication and key exchange between the outside DTCP bridge and outside devices before allowing data transmission. The bridge stores authentication results and device identification information in advance, and only establishes data transmission paths after verifying authorization, preventing unauthorized access

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The outside DTCP bridge continuously monitors data transmission between inside and outside networks, verifying authorization status and controlling data flow based on authentication results. The bridge acts as a gatekeeper that feedback-controls access based on copyright protection requirements

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS7370112B2Communication scheme using outside DTCP bridge for realizing copyright protection
Publication Date: 2008.05.06 KK TOSHIBA
  • US7370112B2 patent drawing
  • US7370112B2 patent drawing
  • US7370112B2 patent drawing

AI summary

An outside DTCP bridge for relaying information between an outside communication device connected to an outside network and a home communication device connected to a home network, carries out a first authentication and key exchange processing for purpose of copyright protection between the outside DTCP bridge and the home communication device as well as a second authentication and key exchange processing for purpose of copyright protection between the outside DTCP bridge and the outside communication device, and stores an identification information of the outside communication device. Then, transmission/reception of information between the home network and the outside network is carried out only when the outside communication device which made the access request is stored and both the first authentication and key exchange processing and the second authentication and key exchange processing succeed.