Abstract: A security domain management method and apparatus for managing at least one security domain in a trusted execution environment (TEE) including at least one security domain is provided. The method includes obtaining information related to an event for an arbitrary security domain when the event for the arbitrary security domain is generated; and transmitting the information related to the event to at least one other security domain, wherein the information related to the event is sent via a TEE kernel.

Abstract: A broadcasting system for providing access information of a broadcast service, wherein a transmission apparatus generates the access information for at least one of a broadcast network and an interaction network, from which the broadcast service is transmitted, and transmits the access information to a terminal via a specific communication network. A reception apparatus receives the access information of the broadcast service via the communication network, analyzes the received access information to determine a network from which the broadcast service is provided, among the broadcast network and the interaction network, and sets an access address for reception of the broadcast service.

Abstract: A method for providing a Digital Rights Management (DRM) service in a network is provided. The method includes receiving a request message for device registration, which includes DRM-related identification information, from a user device; and registering registration information of the user device, which is distinguished according to a corresponding user account and according to a corresponding DRM solution, based on the DRM-related identification information.

Abstract: A system and method are provided for generating a Short Term Key Message (STKM) for protection of a broadcast service being broadcasted to a terminal in a mobile broadcast system. The method includes transmitting, by a Broadcast Service Subscription Management (BSM) for managing subscription information, at least one key information for authentication of the broadcast service to a Broadcast Service Distribution/Adaptation (BSD/A) for transmitting the broadcast service, generating, by the BSD/A, a Traffic Encryption Key (TEK) for deciphering of the broadcast service in the terminal and inserting the TEK into a partially created STKM, and performing, by the BSD/A, Message Authentication Code (MAC) processing on the TEK-inserted STKM using the at least one key information, thereby generating a completed STKM.

Abstract: A broadcasting system for providing access information of a broadcast service, wherein a transmission apparatus generates the access information for at least one of a broadcast network and an interaction network, from which the broadcast service is transmitted, and transmits the access information to a terminal via a specific communication network. A reception apparatus receives the access information of the broadcast service via the communication network, analyzes the received access information to determine a network from which the broadcast service is provided, among the broadcast network and the interaction network, and sets an access address for reception of the broadcast service.

Abstract: A broadcasting system for providing access information of a broadcast service, wherein a transmission apparatus generates the access information for at least one of a broadcast network and an interaction network, from which the broadcast service is transmitted, and transmits the access information to a terminal via a specific communication network. A reception apparatus receives the access information of the broadcast service via the communication network, analyzes the received access information to determine a network from which the broadcast service is provided, among the broadcast network and the interaction network, and sets an access address for reception of the broadcast service.

Abstract: A method and apparatus for managing tokens for Digital Rights Management (DRM) in a terminal are provided. In the method, at least one token is acquired from a Rights Issuer (RI), and the token is moved to a Secure Removable Media (SRM) through a token move request message. The token can be shared by several terminals.

Abstract: A terminal and method for receiving a broadcast service by the terminal in a broadcast system are provided. The method includes performing a registration procedure for subscription and reception of the broadcast service through a Browser And Content Mobile Broadcast (BSCAST) Subscription Management (BSM) responsible for managing subscription information; receiving a Long Term Key Message (LTKM), including key information for encryption of the broadcast service, generated from the BSM; receiving a completed Short Term Key Message (STKM), the completed STKM being generated by performing Message Authentication Code (MAC) processing on a partially created STKM; receiving, from a Broadcast Service Distribution/Adaptation (BSD/A) which is responsible for transmitting the broadcast service, an encrypted broadcast service which is encrypted by a Traffic Encryption Key (TEK) for deciphering the broadcast service; and deciphering the encrypted broadcast service by the TEK obtained using the LTKM and the completed STKM.

Abstract: A storage device for protecting content, includes a Secure Area (SA) area in which a decryption key needed to decrypt encrypted content is stored, and access to which is available to a host device that has passed authentication using a secure authentication protocol. The storage device stores a security information file for mapping control information for controlling usage of the encrypted content and the decryption key to the encrypted content.

Abstract: A method and apparatus for using a non-volatile storage device includes reading device identification information from the non-volatile storage device, application identification information corresponding to a content application related to a type of content to be protected or utilized among a plurality of content applications is acquired, usage identification information is generated using the device identification information and the application identification information, and protecting or utilizing content using the usage identification information.

Abstract: A method for authentication, by a host device, of a storage device having a plurality of unit storage areas comprises acquiring information on the distribution of locations of defect referenceive areas to be used for uniquely identifying the storage device, sampling the unit storage areas of the storage device, identifying the distribution of locations of physically defective areas among the sampled areas, determining the similarity between the acquired distribution of locations and the identified distribution of location, and authenticating the storage device according to the result of the determination.

Abstract: An authentication method of a storage device includes an authentication device requesting an EID (Encoded IDentifer) from the storage device for authenticating the storage device, the authentication device receiving the EID and restoring original ID information by decoding the received EID, and finally the authentication device verifying, by using ID authentication information received from the storage device, individual ID information corresponding to use of the storage device included in ID information, wherein the ID information includes multiple pieces of individual ID information corresponding to the use of the storage device.

Abstract: An apparatus for providing a Digital Rights Management (DRM) service is provided. The apparatus includes a Media Presentation Description (MPD) information configurer for determining a DRM system required in each of representations of content provided by an adaptive streaming service, classifying the representations into one or more groups according to predetermined criteria, and configuring MPD information by inserting content protection information including representation group information representing classified groups and information about DRM systems corresponding to the representation group information; and a communication unit for transmitting the MPD information to a user terminal receiving the content.

Abstract: A method and apparatus for providing a broadcast service in a communication system is provided. The method includes generating a key pair comprising a first key and a second key, generating at least one of forward encryption keys by applying a forward hash chain to the first key, generating at least one of reverse encryption keys by applying a reverse hash chain to the second key, generating at least one of encryption keys using the at least one of forward encryption keys and the at least one of reverse encryption keys, encrypting broadcast service data using the at least one of encryption keys, and broadcasting the encrypted broadcast service data.

Abstract: A method and a system for distributing an encryption key for service protection and content protection in a mobile broadcasting system are provided where a network generates a first encryption key when a broadcasting service is first provided to the terminal, and transmits a long term key message including the generated first encryption key to the terminal. Also, the network generates a second encryption key before the lifetime of a first access value pair expires, and transmits a long term key message including the generated second encryption key to the terminal.

Abstract: A rights objects acquisition method of a mobile terminal in a digital right management system is provided for acquiring multiple rights objects in a composite manner. An objects right acquisition method of a mobile terminal may include generating, in response to a group rights object (RO) acquisition command, a group rights object acquisition request with content identifiers assigned to individual contents corresponding to the rights objects indicated by the group rights object acquisition command, sending the group rights object acquisition request to a rights issuer; and receiving an group rights object acquisition response containing rights object identifiers assigned to the rights objects from the rights issuer. The present invention streamlines the RO acquisition process, especially when acquiring multiple ROs.

Abstract: A method is provided for controlling content playback by a terminal in a content delivery system. The method includes receiving streaming content from a service provider, the streaming content including zone information of each zone and an associated identifier of each zone for identifying a terminal's operation mode, determining the terminal's operation mode depending on the identifier, and controlling playback of the streaming content in a zone corresponding to the zone information according to the determined operation mode.

Abstract: A method and system for generating a physical identifier in a storage device that includes a plurality of storage regions is provided. The method includes determining a number of reference storage regions for uniquely identifying the storage device; comparing the number of reference storage regions to a threshold; generating auxiliary storage regions for uniquely identifying the storage device, such that a number of the auxiliary storage regions corresponds to a result of the comparison; generating location distribution information of the reference storage regions and auxiliary storage regions; and storing the location distribution information in the storage device.

Abstract: A Digital Rights Management (DRM) service system providing digital content to which DRM technology is applied, when one or more DRM content is provided to a client device, download information for a DRM module capable of installing a DRM agent corresponding to a DRM system applied to the DRM content is provided together, making it possible for the client device to download the DRM module based on the download information, install the DRM agent, and use the DRM content.

Abstract: A license consignment method and system for a portable device playing a right-protected content with a license is provided for improving utilization reliability and manageability of a license by enabling a license server to manage the license consigned by the portable device. The method includes selecting a license to be consigned to a license server, transmitting the license server license information corresponding to the selected license, and transmitting, when the license is not downloaded in a certain time, a download trigger message to the portable device.