Patent ID: 8924731
Filing Date: 2014-12-30
Classification: H04N

Abstract:
1. A secure signing method, comprising: preparing digital signature header fields and setting an attribute, wherein the digital signature header field comprises a signed data field including a certificate field and a signer information field, calculating the hash value of the content using the hashing algorithm; storing the calculated hash value in a message digest field within the signed attribute field of the digital signature header; encrypting the message digest using a secret key and putting the encrypted message digest in the signature field of the digital signature header, wherein the digital signature header is located ahead of the content; and transmitting the content associated with the digital signature header to a device, wherein the device is associated with a security solution level profile that classifies a security characteristic of the device based on a predetermined criterion, and the device is configured to take the security solution level profile into consideration during a security solution authentication process corresponding to the content associated with the digital signature header, wherein the security solution level profile associated with the device is included in a device profile certificate of the device and determined based on: (1) whether an execution environment for the security solution authentication process of the device is secured, or (2) whether authentication and integrity checks of the security solution authentication process of the device are verified by hardware or software, and wherein the security solution level is at least one of: (i) a first level indicating no authentication, no integrity check and an execution environment that is non-secured, (ii) a second level indicating that authentication and integrity are verified by software on a receiving device and that the execution environment is non-secured, (iii) a third level indicating that authentication and integrity are verified by hardware on the receiving device and that the execution environment is non-secured, (iv) a fourth level indicating that authentication and integrity are verified by software on the receiving device and that the execution environment is secured, or (v) a fifth level indicating that authentication and integrity are verified by hardware on the receiving device and that the execution environment is secured.