Tamper-Resistant Controller Revocation List Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing content distribution systems face challenges in preventing unauthorized output of content due to potential tampering with check units in personal computers, which can lead to unauthorized devices being deemed legitimate, allowing unauthorized access to protected content.
Innovation Solution
A recording medium device equipped with a tamper-resistant controller that checks if the acquired apparatus identifier matches the revocation identifier, and if they match, it prohibits the output of content, ensuring that only legitimate devices can access the content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a check unit in a personal computer is used to verify device legitimacy, then authentication can be performed, but the check unit may be tampered with maliciously, allowing unauthorized devices to be deemed legitimate
Solution Approach 1:
The patent introduces a revocation list as an intermediary mechanism between the authentication system and the check unit. This revocation list contains identifiers of revoked public key certificates and serves as a mediator to prevent tampered check units from accepting unauthorized devices. The check unit must verify both the device's public key certificate and check whether it appears in the revocation list, creating an additional layer of verification that cannot be easily bypassed by tampering alone
Solution Approach 2:
The system performs preliminary action by pre-generating and storing a revocation list of revoked public key certificates before the actual authentication process. This revocation list is created in advance by the authentication server and distributed to check units, enabling them to proactively block known compromised devices rather than reacting after tampering occurs. The check unit loads this revocation list into memory before performing authentication checks
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A storage unit 601g of a recording medium device 600g stores a content and a revocation list. The revocation list includes a revocation identifier that is associated with the content and identifies a revoked public key certificate allocated to an apparatus related to use of the content. A controller 602g of the recording medium device 600g is provided with an acquisition unit 621g that acquires, from an apparatus 300g, an acquisition request for the content and an apparatus identifier identifying a public key certificate of the apparatus 300g; a judgment unit 622g that judges whether the apparatus identifier matches a revocation identifier; and a control unit 623g that controls to prohibit output of the content to the apparatus when the apparatus identifier and the revocation identifier match.