Microsoft Technology Licensing, LLC

Bruce Louis Lieberman

Robert M Fries

Daniel Ron Simon

Harry S Pyle

Guillaume Simonnet

William Dollar

Jeffrey Alan Davis

Alan R Steiner

A process for establishing secure mutual trust includes generating a one-time-password. The one-time-password is transferred between the devices in a communication occurring off of the network. Each device generates a set of authenticators by hashing a plurality of sub-strings of the password and the device's authentication certificate with a respective set of nonces. The devices exchange the respective sets of authenticators. Each device then alternates revealing its respective set of nonces and its authentication certificate in a multi-stage process. The devices re-calculate the authenticators based upon the respective set of nonces and authentication certificate revealed by the other device along with the one-time-password sub-strings that it posses. If each device determines that the authenticators re-calculated by the given device matches the authenticators previously received from the other device, secure mutual trust is established.

Establishing secure mutual trust using an insecure password

A consumer device is presented that utilizes a system and method for downloading from a network server the run time image of the device's operating system and/or application program. As such, the amount of Flash memory required to store the operating system may be greatly reduced, which also reduces the cost associated with such Flash memory. Since the run time image is downloaded from a network server, the image can be updated at the server for bug fixes and feature enhancements. For devices operating in audio/video distribution, additional security is provided to maintain the digital rights management of the A/V content. This security is provided through a combination of hardware and software security features including ROM in the CPU or board mounted Flash memory with an unwritable section. Further, each boot load program checks the digital signature of the program it is loading before that program is allowed to execute.

System and method for securely booting from a network

The present invention provides for the collection and delivery of broadcast data. Broadcast data is captured by broadcast data sources from television broadcasts and the captured broadcast data is collected by a broadcast data source miniport. The miniport differentiates the broadcast data to separate the requested broadcast data and to separate the broadcast data that complies with a protocol from broadcast data that does not comply with a protocol. The nonrequested broadcast data is preferably discarded and the broadcast data that does not comply with a protocol is encapsulated with appropriate headers. The broadcast data is then transferred through the network or system to a common application interface such as Winsock through NDIS and a protocol such as UDP/IP. Alternatively, a RawData module is used that does not rely on sockets and is capable of communicating with the miniport. A presenter retrieves the broadcast data from either the RawData module or Winsock and prepares the broadcast data for use by an application. The application then accesses the presenter for the prepared broadcast data it requested. In another mode, an application may access unprocessed broadcast data from either Winsock or the RawData module.

Methods and systems for broadcast data services

Growing community of inventors

Bellevue, WA, United States of America

Bruce Louis Lieberman