Secure authenticated distance measurement

1. A receiving device comprising:

means for providing a certificate identifying said receiving device;

means for receiving a first signal from a first device after the first device determines, based on information obtained from the certificate, that the receiving device is compliant with a set of compliance rules;

means for generating a second signal after receiving the first signal, wherein said second signal is derived using a secret known by the first device;

means for transmitting said second signal;

means for generating a secure authenticated channel using the secret; and

means for receiving over the secure authenticated channel a protected content after the first device determines that the second signal is derived using the secret and a time between a transmission of the first signal and receipt of the second signal by the first device is less than a predetermined time.

2. The receiving device of claim 1 , wherein said providing said certificate is responsive to a request.

3. The receiving device of claim 1 , further comprising means for receiving said secret.

4. The receiving device of claim 1 , further comprising means for transmitting said secret.

5. The receiving device of claim 4 , wherein said secret is transmitted using a transfer protocol, said transfer protocol selected the group consisting of a key transport protocol, a key management protocol and a key exchange agreement.

6. The receiving device of claim 5 , wherein said transfer protocol is determined by said receiving device.

7. The receiving device of claim 5 , further comprising means for receiving said transfer protocol.

8. The receiving device of claim 1 , further comprising means for displaying said received protected content.

9. The receiving device of claim 1 , wherein the secret comprises a random number.

10. The second device of claim 1 , wherein the predetermined time is based on a communication system associated with the first device.

11. A second device for receiving protected content, the second device comprising:

a memory, the memory storing a public key and a private key, wherein the public key and private key are a pair;

a microprocessor circuit connected to the memory via a communication bus, the microprocessor circuit arranged to:

provide a certificate to a first device identifying said second device, said certificate comprising the public key;

receive a first signal from a first device after the first device determines, based on information obtained from the certificate that the receiving device is compliant;

obtain a secret encrypted by the public key, wherein the secret is known by the first device;

use the private key to determine the secret;

derive a second signal, wherein the second signal is the first signal modified using the secret;

send the second signal to the first device after receiving the first signal;

receive protected content after the first device has determined that at least the second signal is derived from the secret and a time difference between first device's provision of the first signal and first device's reception of the second signal difference is less than a predetermined time.

12. The second device of claim 11 , wherein the secret comprises a random number.

13. The second device of claim 11 , wherein the microprocessor circuit is further arranged to provide the secret to the first device.

14. The second device of claim 11 , wherein the microprocessor circuit is further arranged to receive the secret from the first device.

15. The second device of claim 11 , wherein the certificate comprise an identity of the second device.

16. The second device of claim 11 , wherein the predetermined time is based on a communication system associated with the first device.

17. The second device of claim 11 , wherein the microprocessor circuit is further arranged to:

use the secret to generate a secure authenticated channel between the first device and the second device; and

use the secure authenticated channel to receive the protected content.

18. The second device of claim 11 , wherein the modification is a XOR operation using the first signal.

19. The second device of claim 11 , wherein said secret is transmitted using a transfer protocol, said transfer protocol selected the group consisting of a key transport protocol, a key management protocol and a key exchange agreement.

20. The second device of claim 11 , wherein the microprocessor circuit is further arranged to receive the secret by using a key transfer protocol.

21. The second device of claim 11 ,

wherein the time difference is computed as the subtraction of a first time from a second time,

wherein the first device notes a first time when the first signal is sent and notes a second time when the second signal is revived.

22. A method for a second device controlling of receiving a protected content, the method comprising:

sending a certificate to a first device, the certificate providing information regarding the second device;

receiving a first signal from the first device after the first device determines based on the certificate whether the second device is compliant with a set of compliance rules, wherein the second signal is derived using a secret known by the first device;

sending a second signal to the first device after receiving the first signal;

generating a secure authenticated channel using the secret;

receiving over the secure authenticated channel the protected content after the first device determines that the second signal is derived using the secret and a time between a transmission of the first signal and receipt of the second signal by the first device is less than a predetermined time.

23. The method of claim 22 , wherein said providing the certificate is responsive to a request.

24. The method of claim 22 , further comprising a receiver of the secret.

25. The method of claim 22 , further comprising a transmitter of the secret.

26. The method of claim 25 , wherein the secret is transmitted using a transfer protocol, said transfer protocol selected the group consisting of a key transport protocol, a key management protocol and a key exchange agreement.

27. The method of claim 26 , wherein the transfer protocol is determined by the receiving device.

28. The method of claim 26 , further comprising a receiver for the transfer protocol.

29. The method of claim 22 , further comprising a display for displaying the protected content.

30. The method of claim 22 , wherein the secret comprises a random number.

31. The method of claim 22 , wherein the predetermined time is based on a communication system associated with the first device.