Patent ID: 8205071

Claim:
A method of moving a use right, the method comprising: receiving, by a right issuing apparatus, a first request message for moving a rights object from a first device, wherein the first request message comprises a reqID element indicating an ID of the first device, a nonce element indicating a random value generated by the first device, and a time element indicating a time of the first device at the time of generating the first request message; comparing, by the right issuing apparatus, the reqID element and the nonce element in the first request message with each element in a replay cache of the right issuing apparatus; generating a new entry in the replay cache when the reqID element and the nonce element in the first movement request message are different from each element in the replay cache, wherein the replay cache is managed to prevent a third person's replay attack and process a retry of the request based on the first request message of the first device, and the new entry comprises at least one of the reqID element, the nonce element, and the time element included in the received first request message; generating, by the right issuing apparatus, a first response message; storing information related to results from processing of the first request message into the new entry; receiving, by the right issuing apparatus, a second request message from the first device, wherein the second request message comprises a reqID element which is the same as the reqID element in the first request message, a nonce element which is the same as the nonce element in the first request message, and a time element indicating a time of the first device at the time of generating the second request message; comparing, by the right issuing apparatus, the reqID element and the nonce element in the second request message with the reqID element and the nonce element of the new entry in the replay cache of the right issuing apparatus; comparing, by the right issuing apparatus, the time element in the second request message with the time element in the new entry when the reqID element and the nonce element in the second request message are identical to the reqID element and the nonce element of the new entry; generating, by the right issuing apparatus, a second response message when the time element in the second request message is different from the time element in the new entry, wherein the generated second response message includes at least one or more parameters based on the information related to the results stored in the new entry; transmitting the generated second response message to the first device; and ignoring the second request message when the time element in the second request message is identical to the time element in the new entry.