Authentication between device and portable storage for digital rights management ( DRM )

摘要

A method for performing authentication between a device and a portable storage is provided. The method comprises the steps of: transmitting a first key to the portable storage, receiving a third key and a first encrypted random number obtained by encrypting a first random number using the first key from the portable storage and decrypting the first encrypted random number using a second key related with the first key, generating a second encrypted random number by encrypting a second random number using the third key and transmitting the second encrypted random number to the portable storage, and generating a session key using the first random number and the second random number. The method provided may be performed by the device or by the portable storage. A portable storage for use with the invention is also provided.