Method for joining user domain and method for exchanging information in user domain
View Patent ↗A method for joining a user domain based on digital right management (DRM), a method for exchanging information between a user device and a domain enforcement agent, and a method for exchanging information between user devices belonging to the same user domain include sharing a domain session key between the user device and the domain enforcement agent or between the user devices belonging to the same user domain. Information is exchanged through a secure session set up between the user device and domain enforcement agent or between the user devices, and information exchange occurs through encryption/decryption using the domain session key.
1. A method for joining a user domain based on digital rights management (DRM), comprising:
in a user device, transmitting a domain join request message including a first domain session key to a domain enforcement agent managing the user domain; and
receiving a domain join response message from the domain enforcement agent in response to the domain join request message, the domain join response message including a second domain session key,
wherein a new domain session key different from the second domain session key is requested from the domain enforcement agent, and the new domain session key allows the user device to share encrypted information with another user device, the new domain session key comprising a key value obtained by using the first domain session key and the second domain session key.
2. The method of claim 1 , wherein the first domain session key is stored in both the user device and the domain enforcement agent.
3. The method of claim 1 , wherein the second domain session key has a value corresponding to a value of the first domain session key.
4. The method of claim 3 , wherein the second domain session key has a value that is the same as the value of the first domain session key.
5. The method of claim 3 , wherein the second domain session key has a value obtained by transforming the value of the first domain session key.
6. The method of claim 3 , wherein the second domain session key has a predetermined value set by the domain enforcement agent.
7. The method of claim 3 , wherein the second domain session key has a value obtained by using the first domain session key and a predetermined value set by the domain enforcement agent.
8. The method of claim 3 , wherein the first domain session key, the second domain session key, or a value obtained by using the first domain session key and the second domain session key is used as a key value of a symmetric key algorithm, or as a seed to induce the key value.
9. The method of claim 1 , wherein the domain join request message further includes a device identifier to identify the user device, and a domain identifier to identify the user domain that the user device wants to join.
10. The method of claim 1 , wherein the domain join response message further includes a device identifier to identify the user device, a domain identifier to identify the user domain that the user device wants to join, and status information regarding a determination on whether to allow the user device to join the user domain.
11. The method of claim 1 , wherein the other user device is a mobile device.
12. A method for sharing information in a user domain based on digital rights management (DRM), comprising:
in a user device, transmitting a domain join request message including a first domain session key to a domain enforcement agent managing the user domain;
receiving a domain join response message from the domain enforcement agent in response to the domain join request message, the domain join response message including a second domain session key;
requesting from the domain enforcement agent a new domain session key different from the second domain session key; and
transmitting information to another user device in the user domain using the new domain session key,
wherein the new domain session key allows the user device to share encrypted information with the other user device, the new domain session key comprising a key value obtained by using the first domain session key and the second domain session key.
13. The method of claim 12 , wherein the second domain session key comprises certification status information obtained by requesting the certification status information from an Online Certificate Status Protocol (OCSP) responder.