Authentication and security for digital living network alliance (DLNA) device II

Abstract

Digital Living Network Alliance (DLNA) provides a guideline for the development of consumer products with auto-interconnecting capability. For example, a camera and printers are able to form a network automatically so that the printers can download the picture files and print them. In order to stop outsider or intruder to enter the home network, authentication and security are important parts in the protection. This project aims to develop a security scheme for Universal Plug and Play(UPnP) systems. This development will play a critical role in the future consumer electronics with DLNA devices. The security scheme is designed base on the Secure Terminal/Host Communication System. A simple authentication password used to authenticate the Control Point has the right to control the corresponding Device. Control Point needed to provide this password to device for getting the right to access it. To prevent password and information leaking through transmitting, both Symmetric Cryptography and Asymmetric Cryptography are used to encrypt the transmitting information. Asymmetric cryptography, RSA is chosen, used to encrypt the password and the generated symmetric session key while symmetric cryptography, DES is chosen, used to protect the further transmitting information after authentication. This simple security and authentication system is implemented successfully based on the java development package called “Cyberlink For Java” which is produced by Satoshi konno[1]. However, a lot of future developments are needed to improve the system such as improving security by choosing newer encryption method to encrypt information.