CN100527148C - Unauthorized device detection device, unauthorized device detection system, - Google Patents

Abstract

There is provided an unauthorized device detection system capable of finding and identifying a device which has been manufactured or altered in an unauthorized way. A DVD player (400a) writes in its device ID into a memory card (200a). When a user purchases a content, a register device (300) reads out a medium ID and a device ID from the memory card (200a) and transmits the medium ID and the device ID to a management server device (100). The management server device (100) calculates the total number of the medium ID corresponding to the received device ID from the sets of the medium ID and the device ID stored in advance and the set of the medium ID and the device ID received, and compares the calculated total number to a threshold value. If the number exceeds the threshold value, it is estimated that the DVD player identified by the received device ID is an unauthorized device.

Description

Improper assembly detection apparatus and improper device detection system

Technical field

The present invention relates to find or determine to pass through to copy the improper testing techniques of equipment of the improper equipment of making or transforming.

Background technology

In recent years, with the development of multimedia corresponding technology, the appearance of huge storage capacity recording medium etc. is background, the system that the digital content that has occurred being made of dynamic image, sound etc. (below be called content) is kept at issue in the huge storage capacity recording medium of CD etc. or distributes via network or broadcasting.

Generally, in order to protect the literary property of content, promptly for the improper utilization of the improper reproduction that prevents content or improper copy etc. and use encryption technology.Particularly, using the content of encryption keys to be recorded in the recording medium of CD etc. issues.With respect to this, only possess terminal corresponding to the decruption key of this encryption key, could will utilize this decruption key deciphering from the encrypted content that recording medium is read, carry out reproduction of content.

In addition, as method with content-encrypt, have and use encryption key that content itself is encrypted, utilized corresponding to the decruption key of the encryption key method with the encrypted content deciphering, and with content utilize content key encryption, again content key is utilized encryption keys, utilize decruption key corresponding to this encryption key with the encrypted content key deciphering, utilize method that the content key that generates deciphers encrypted content etc.

At this moment, the decruption key that terminal is possessed need strictly be managed so that it does not leak into the outside, but in the parsing of the terminal inner that improper person carries out, has to make certain decruption key be exposed to outside danger.If in a single day certain decruption key is exposed to improper person, think then that improper person can make pen recorder, the transcriber that utilizes content wrongly or can make improperly to utilize the software of content and they are scattered by the Internet.Under these circumstances, consider to wish to realize with copyright holder in case the key that exposes can't be provided by the content that then provides.This technology is called key ineffective treatment technology, and is open in patent documentation 1 and patent documentation 2.

But, in patent documentation 1 and patent documentation 2, for determining that the method that leaks into outside key (answering the key of ineffective treatment) does not have open.Therefore, will be passed in a large number thinking wrongful pen recorder, transcriber or thinking that wrongful software reclaims in the market, by resolving their inside, thereby determine improper equipment or improper software.This method needs many staff and fund.

In addition, according to patent documentation 3, purpose provides a kind of mobile communication system, in the mobile communication system of portable phone etc., can detect the existence of the clone terminal that copies wrongly and be notified to the guardian, in portable terminal, do not have and be used for carrying out the special function that there is detection in clone terminal, and can detect the existence of clone terminal, a kind of mobile communication system is disclosed, it is characterized in that possessing in order to carry out being used for the location of this portable terminal mechanism to the processing of the position of system side notice login to the incoming call handling of portable terminal, the other-end more than at least 1 that will have a telephone number identical with this portable terminal these other mobile terminal affiliated in the control of base station under the mechanism that compares of the position log-on message sent and position log-on message in the login of system side rearmost position, with the mechanism of detecting the existence of a plurality of portable terminals according to this comparative result with identical telephone number.

Patent documentation 1: 2000-No. 31922 communiques of TOHKEMY

Patent documentation 2: 2002-No. 281013 communiques of TOHKEMY

Patent documentation 3: 2000-No. 184447 communiques of TOHKEMY

But, at record or reproduce in the pen recorder or transcriber of content, as above-mentioned mobile communication system, not to be prerequisite on one side to move the communication of carrying out, also unrealistic by patent documentation 3 disclosed The Application of Technology.

Summary of the invention

The purpose of this invention is to provide a kind of improper assembly detection apparatus, improper device detection system, improper equipment detection method of the equipment that can find, determine by imitation manufacturing wrongly or transform and the computer program that is used for carrying out improper Equipment Inspection.

In order to achieve the above object, the present invention is a kind of improper assembly detection apparatus, detect the wrongful equipment of making by copying, it is characterized in that, possess: medium are counted storing mechanism, store the medium number by the employed rewritable removable media of equipment that keeps the device identifier identical with the object-based device identifier, wherein this object-based device identifier is kept by the detected object equipment as the object of improper detection; Relatively mechanism compares predefined improper threshold value and the above-mentioned medium number that calculates; And the identifier storing mechanism, surpass under the situation of above-mentioned improper threshold value at above-mentioned medium number, store above-mentioned object-based device identifier.

The invention effect

According to this structure, can infer the wrongful equipment of making by copying by the quantity of the removable media that uses by wrongful equipment.

Here, also can be, above-mentioned improper assembly detection apparatus also comprises: obtaining section, obtain the object media identifier of this object removable media of identification and the object-based device identifier that this detected object equipment is kept from the rewritable object removable media that is used by above-mentioned detected object equipment; Storage part, the management equipment identifier that is kept with management object equipment by the object that becomes improper detection in the past accordingly, the management of media identifier more than 1 of the rewritable removable media more than 1 that is used by this management object equipment is discerned in storage respectively; And calculation mechanism, use above-mentioned management device identifier and the above-mentioned management media identifier and the obtained above-mentioned object-based device identifier and the above-mentioned object media identifier of being stored, calculate the number of the device identifier pairing management of media identifier identical and the number sum of object media identifier with obtained object-based device identifier, as above-mentioned medium number, and the above-mentioned medium number that will calculate is written to above-mentioned medium and counts in the storing mechanism.

According to this structure, can calculate above-mentioned medium number reliably.

Here, also can be the warning threshold that above-mentioned relatively mechanism also will be littler than above-mentioned improper threshold value, to compare with the above-mentioned medium number that calculates; At the above-mentioned medium number that calculates is below the above-mentioned improper threshold value, and surpasses under the situation of above-mentioned warning threshold, the obtained above-mentioned object-based device identifier of above-mentioned identifier storing mechanism storage.

According to this structure, can infer wrongful equipment and the equipment that should warn.

Here, also can be that the said equipment is the contents decryption that will encrypt and the reproducer that reproduces; Above-mentioned improper assembly detection apparatus also comprises: forbid mechanism, surpass under the situation of improper threshold value at the above-mentioned medium number that calculates, forbid the decruption key that above-mentioned object removable media output is used for the contents decryption that will encrypt; And output mechanism, do not surpass under the situation of improper threshold value at the above-mentioned medium number that calculates, above-mentioned object removable media is exported above-mentioned decruption key.

According to this structure, being speculated as under the situation of wrongful equipment, can forbid the output of decruption key, and prevent the wrongful utilization of content.

Here, also can be, be to detect the wrongful equipment of making by copying, possess: serial number storing mechanism, store by the equipment that keeps the device identifier identical with the object-based device identifier and watch the serial number of the audiovisual resume series of the content of listening to, wherein this object-based device identifier is kept by the detected object equipment as the object of improper detection; Relatively mechanism compares predefined improper threshold value and the above-mentioned serial number that calculates; And storing mechanism, surpass under the situation of above-mentioned improper threshold value at above-mentioned serial number, store above-mentioned object-based device identifier.

According to this structure, the serial number of audiovisual resume series that can be by being watched the content of listening to by wrongful equipment is inferred the wrongful equipment of making by copying.

Here, also can be, be to detect the wrongful equipment of making by copying, possess: storing mechanism, with the management equipment identifier that keeps by the management object equipment of the object that becomes improper detection in the past accordingly, storage is identified in the organize content identifier more than 1 of watching the content of listening to more than 1 in this management object equipment respectively; Obtain mechanism, from the rewritable object removable media that detected object equipment, uses, obtain and be identified in the object-based device identifier that the contents of object identifier more than 1 of watching the content of listening to more than 1 in this detected object equipment and this detected object equipment keep respectively as the object of improper detection; Extraction mechanism, from above-mentioned storing mechanism extract with the obtained identical corresponding organize content identifier more than 1 of management equipment identifier of above-mentioned object-based device identifier; Mechanism relatively compares the above-mentioned management content identifier extracted and obtained above-mentioned contents of object identifier; And login mechanism, the above-mentioned management content identifier of being extracted any all with any inconsistent situation of obtained above-mentioned contents of object identifier under, obtained above-mentioned object-based device identifier is signed in in the improper list of devices.

According to this structure, can infer the wrongful equipment of making by copying by watching the content of listening to by wrongful equipment.

Here, also can be, above-mentioned storing mechanism also with above-mentioned management content identifier accordingly, store expression by the management audiovisual of the watching order of listening to of this organize content identifier content identified order; Above-mentioned obtain mechanism also with above-mentioned contents of object identifier accordingly, obtain expression by the object audiovisual of the watching order of listening to of this contents of object identifier content identified order; Said extracted mechanism also extracts the management audiovisual order corresponding to the organize content identifier; Above-mentioned relatively mechanism also compares the management audiovisual order extracted and obtained object audiovisual in proper order; Under the situation of the above-mentioned management content identifier of being extracted and obtained above-mentioned contents of object identifier unanimity, corresponding to the management audiovisual order of 1 organize content identifier with corresponding to the object audiovisual order of the contents of object identifier identical with above-mentioned management content identifier when inconsistent, above-mentioned login mechanism signs in to obtained above-mentioned object-based device identifier in the improper list of devices.

According to this structure, can infer the wrongful equipment of making by copying more closely by the audiovisual order of content.

Here, also can be that the said equipment is the contents decryption that will encrypt and the reproducer that reproduces; Above-mentioned improper assembly detection apparatus also comprises: forbid mechanism, the above-mentioned management content identifier of being extracted any all with any inconsistent situation of obtained above-mentioned contents of object identifier under, forbid the decruption key that above-mentioned object removable media output is used for the contents decryption that will encrypt; And output mechanism, the above-mentioned management content identifier of being extracted any with any consistent situation of obtained above-mentioned contents of object identifier under, above-mentioned object removable media is exported above-mentioned decruption key.

According to this structure, being speculated as under the situation of wrongful equipment, can forbid the output of decruption key, and prevent the wrongful utilization of content.

Usually, the platform number of considering improper equipment is 1000 or 10000 s' a magnitude, and on the contrary, the upper limit of the removable media that the individual is had is if 100 just enough.Thereby, be under 100 the situation for example establishing threshold value, even have the user of a plurality of removable medias, if be reference count medium ID with the device id, then its quantity can not surpass 100.In addition, the improper equipment with identical device id of circulation, because the medium ID difference of the removable media that each user keeps, so under the situation that has 1000 improper equipment, if with the device id be reference count medium ID then its quantity surpasses 1000, so, can judge that this device id is by improper equipment utilization in 100 the moment that has surpassed as threshold value.

Description of drawings

Fig. 1 is the system construction drawing of the structure of the improper device detection system 1 of expression.

Fig. 2 is the block diagram of the structure of expression management server apparatus 100.

Fig. 3 is the data configuration figure of the data configuration of expression admin table 120.

Fig. 4 is the data configuration figure of the data configuration of indication equipment cipher key list 130.

Fig. 5 is the data configuration figure of the data configuration of expression content key tabulation 140.

Fig. 6 is the data configuration figure that the data configuration of list of devices 150 is noted in expression.

Fig. 7 is the data configuration figure of the data configuration of expression apartment warning tabulation 160.

Fig. 8 is the data configuration figure of the data configuration of the improper list of devices 170 of expression.

Fig. 9 is the table of pattern of the control of expression control part 102.

Figure 10 is the block diagram of the structure of expression storage card 200.

Figure 11 is the block diagram of the structure of expression calling mechanism 300.

Figure 12 is the block diagram of the structure of expression DVD player 400.

Figure 13 is expression DVD player 400 obtains the action of device id from storage card 200a a process flow diagram.

Figure 14 is expression calling mechanism 300 is obtained the action of encrypted content key from management server apparatus 100 a process flow diagram.Back map interlinking 15.

Figure 15 is expression calling mechanism 300 is obtained the action of encrypted content key from management server apparatus 100 a process flow diagram.Back map interlinking 16.

Figure 16 is expression calling mechanism 300 is obtained the action of encrypted content key from management server apparatus 100 a process flow diagram.Back map interlinking 17.

Figure 17 is expression calling mechanism 300 is obtained the action of encrypted content key from management server apparatus 100 a process flow diagram.Preceding map interlinking 16.

Figure 18 is the process flow diagram of the action of the deciphering of encrypted content of expression DVD player 400 and reproduction.Back map interlinking 19.

Figure 19 is the process flow diagram of the action of the deciphering of encrypted content of expression DVD player 400 and reproduction.Preceding map interlinking 18.

Figure 20 is the block diagram of expression as the structure of the storage card 200e of variation.

The data configuration figure of the data configuration of Figure 21 server record information table 120e that to be expression had as the management server apparatus 100 of variation.

Figure 22 is the process flow diagram of the action of expression when reproducing content as the DVD player of variation.

Figure 23 is the process flow diagram of the action of each device of expression when buying as the DVD of variation.Back map interlinking 24.

Figure 24 is the process flow diagram of the action of each device of expression when buying as the DVD of variation.Preceding map interlinking 23.

Figure 25 represents to be used for gathering α and to gather the 1st example of the comparison of β.

Figure 26 represents to be used for gathering α and to gather the 2nd example of the comparison of β.

Figure 27 represents to be used for gathering α and to gather the 3rd example of the comparison of β.

The data configuration figure of the data configuration of Figure 28 user's record information tabulation 231f that to be expression had as the storage card 200e of variation.

The data configuration figure of the data configuration of Figure 29 server record information tabulation 120f that to be expression had as the management server apparatus 100 of variation.

Figure 30 is the process flow diagram of the action of the management server apparatus 100 of expression DVD when buying.

Figure 31 represents to be used for gathering α and to gather the 1st example of the comparison of β.

Figure 32 represents to be used for gathering α and to gather the 2nd example of the comparison of β.

Figure 33 is the process flow diagram of the action of the management server apparatus 100 of expression when buying as the DVD of variation.

Figure 34 is the data configuration figure of the server record information group's 621 that extracted of expression data configuration.

Embodiment

1, improper device detection system 1

Improper device detection system 1 as relevant 1 embodiment of the present invention is described.

1.1 the summary of improper device detection system 1

Improper device detection system 1 as shown in Figure 1, by management server apparatus 100, calling mechanism 300 and DVD player 400a ..., 400b, 400c ..., 400d constitutes.Management server apparatus 100 is connected via the Internet 10 with calling mechanism 300.

DVD player 400a ..., 400b is the regular player that regular manufacturer makes, and stores the device id of discerning self uniquely respectively in inside.Here, DVD player 400a ..., 400b total for example be assumed to be 10,000.

On the other hand, DVD player 400c ..., 400d is that wrongful manufacturer copys DVD player 400b and the player made wrongly.DVD player 400c ..., 400d stores the device id identical with the device id of discerning DVD player 400b uniquely respectively in inside.Here, DVD player 400c ..., 400d total for example be assumed to be 10,000.

The user of DVD player 400a is before newly buying DVD, and the user is installed to storage card 200a among the DVD player 400a.In storage card 200a, record the medium ID that discerns self uniquely.If storage card 200a has been installed, then DVD player 400a is written to the device id that self is stored in the inside among the storage card 200a.

Then, the user is when buying DVD, and the storage card 200a that holds the device id that stores identification DVD player 400a goes to retail shop.The user selects the DVD bag 500 of expectation in retail shop.In DVD bag 500, include DVD500a.Then, the user is with storage card 200a and DVD bag 500 salesmans that give as the operator of calling mechanism 300.The salesman is installed to storage card 200a in the calling mechanism 300, and the bar code reader scanning by calling mechanism 300 is presented at the bar code on the DVD bag 500.

The content ID of the content among the DVD500a of the bar code playback record of calling mechanism 300 on being presented at DVD bag 500 during being contained in DVD bag 500, and from storage card 200a readout equipment ID and the medium ID that installs, with the group of content ID, the device id of reading and medium ID, send to management server apparatus 100 via the Internet 10.

In the management server apparatus 100, store the medium ID sum that identification respectively is installed in the medium ID of the storage card more than 1 in this DVD player and represents the sum of said memory card accordingly with the device id of discerning DVD player.

If management server apparatus 100 receives the group of content ID, device id and medium ID from calling mechanism 300 via the Internet 10, judge then whether the device id that receives is stored in the inside.Under the device id that receives is stored in situation in the inside, judge again whether the medium ID that receives is stored in the inside.Do not have at the medium ID that receives under the situation of storage, the medium ID that receives is corresponding with the said equipment ID foundation and store, medium ID sum is added the value of " 1 ".Be not stored under the situation in the inside being judged as the device id that receives, the group of memory device ID and medium ID makes medium ID add up to " 1 ".

Then, management server apparatus 100 judge medium ID sum corresponding to the device id that receives belong to (i) " 100 " following, (ii) " 101 " above " 150 " following, (iii) below " 151 " above " 199 ", (iv) in which scope more than " 200 ".

(i) if medium ID adds up to below " 100 ", then management server apparatus 100 will be corresponding to the content key encryption of the content ID that receives, is not the equipment judgement grade of improper equipment with encrypted content key with the employed equipment of expression user, sends to calling mechanism 300 via the Internet 10.

If (ii) medium ID adds up to below " 101 " above " 150 ", then management server apparatus 100 is with the attention list of devices login of device id in remaining in inside, will be corresponding to the content key encryption of the content ID that receives, is that the equipment of the equipment that should be noted that is judged grade with encrypted content key with expression user employed equipment, sends to calling mechanism 300 via the Internet 10.

If (iii) medium ID adds up to below " 151 " above " 199 ", then management server apparatus 100 is with the apartment warning tabulation login of device id in remaining in inside, will be corresponding to the content key encryption of the content ID that receives, is to need the equipment of the equipment of warning to judge grade with encrypted content key with the employed equipment of expression user, sends to calling mechanism 300 via the Internet 10.

If (iv) medium ID adds up to more than " 200 ", then management server apparatus 100 is with the improper list of devices login of device id in remaining in inside, with the employed equipment of expression user is the equipment judgement grade of improper equipment, sends to calling mechanism 300 via the Internet 10.But, do not send content key in the case.

Calling mechanism 300 is judged grade via the Internet 10 from management server apparatus 100 receiving equipments.And also receive encrypted content key sometimes.

(i) represent that in the equipment judgement grade that receives the employed DVD player of user is not under the situation of improper equipment, calling mechanism 300 writes the encrypted content key that receives to storage card 200a.In the case, the user is to the price of the payment DVD of retail shop bag 500.

(ii) judge that at the equipment that receives grade represents that the employed equipment of user is that calling mechanism 300 is noted showing, the encrypted content key that receives is write to storage card 200a under the situation of the equipment that should be noted that.In the case, the user is to the price of the payment DVD of retail shop bag 500.

(iii) judge that at the equipment that receives grade represents that the employed equipment of user is under the situation of the needs equipment of warning, calling mechanism 300 is warned demonstration, the operator is required to ratify the input of the indication that provides or disapprove of encrypted content key, when indication is approval, the encrypted content key that receives is write to storage card 200a.At this moment, the user is to the price of the payment DVD of retail shop bag 500.In indication is when disapproving, and the encrypted content key that receives is not offered the user.At this moment, retail shop's refusal is to the sale of user's DVD bag 500.

(iv) represent that in the equipment judgement grade that receives the employed equipment of user is under the situation of improper equipment, calling mechanism 300 carries out improper demonstration and end.Encrypted content key is not offered the user.In the case, retail shop's refusal is to the sale of user's DVD bag 500.

At above-mentioned (i), (ii), under the situation (iii), having bought DVD the user wrapped 500 o'clock, the user brings back storage card 200a and DVD bag 500, and storage card 200a is installed among the DVD player 400a, and the DVD500a that is included in the DVD bag 500 is installed among the DVD player 400a.

DVD player 400a reads encrypted content key from storage card 200a, the encrypted content key of reading is deciphered and the generation decrypted content keys, utilize the decrypted content keys that is generated, to be recorded in the encrypted content deciphering among the DVD500a and generate decryption content, the decryption content that generates is transformed to signal of video signal and voice signal, signal of video signal and voice signal are exported to monitor 411a.

Here, DVD player 400a ..., 400b total be 10,000, but because device id difference separately, so for example have under each 10 storage card, the process situation of operation as described above user separately, the medium ID sum that management server apparatus 100 had, stores corresponding to device id is 10 at most.At this moment, management server apparatus 100 judge these DVD player 400a ..., 400b each be regular equipment.

On the other hand, DVD player 400c ..., 400d total be 10,000, but because device id separately is identical, so if user separately for example has each 1 storage card, then under the process situation of operation as described above, the medium ID that management server apparatus 100 had, stores corresponding to device id adds up to 10,000.At this moment, management server apparatus 100 with these DVD player 400c ..., 400d each be judged as wrongful equipment.Like this, management server apparatus 100 can be judged the legitimacy of DVD player.

1.2 the structure of management server apparatus 100

Management server apparatus 100 as shown in Figure 2, by Department of Communication Force 101, control part 102, admin table storage part 103, content key storage portion 104, selection portion 105, Device keys storage part 106, add compact part 107, list of devices storage part 108, input part 110, display part 111 and authentication department 112 and constitute.

Management server apparatus 100 particularly is the computer system that is made of microprocessor, ROM, RAM, hard disk unit, display unit, keyboard, mouse etc.In above-mentioned RAM or above-mentioned hard disk unit, store computer program.According to aforementioned calculation machine program behavior, management server apparatus 100 is realized its a part of function by above-mentioned microprocessor.

(1) admin table storage part 103, content key storage portion 104, Device keys storage part 106 and list of devices storage part 108

Admin table storage part 103, content key storage portion 104, Device keys storage part 106 and list of devices storage part 108 particularly are made of 1 hard disk unit.

(admin table storage part 103)

Admin table storage part 103 has admin table 120 as shown in Figure 2.

Admin table 120 as shown in Figure 3, possesses the zone that is used for storing the medium id information more than 1 as an example.The medium id information is usually corresponding to 1 regular equipment (being 1 DVD player in the present embodiment).But, existing under the situation of the improper equipment of memory device ID wrongly, the medium id information is corresponding to all equipment that stores identical device id.The medium id information comprises device id, the medium ID more than 1 and medium ID sum.

Device id is to discern uniquely and the identifying information that comprises the corresponding equipment of medium id information of this device id.But, as mentioned above, under the situation that has the wrongful equipment that stores device id wrongly, be not limited to identification equipment uniquely.

Medium ID is an identifying information of discerning the storage card that uses in the equipment that is installed in corresponding to the medium id information that includes these medium ID uniquely.

Medium ID sum is illustrated in the number of medium ID included in the medium id information that includes these medium ID sum.

As shown in Figure 3, admin table 120 by medium id information 128,129 ... constitute.

Medium id information 128 is owing to comprise device id 121 " ID-A ", medium ID122 " MID-1 ", 123 " MID-5 " and medium ID sum 124 " 2 ", so expression will be installed in by use in the equipment (DVD player) of " ID-A " identification by two storage cards that " MID-1 " reach " MID-5 " identification.

In addition, medium id information 129 is owing to comprising device id 125 " ID-B ", medium ID126 " MID-2 ", reaching medium ID sum 127 " 1 ", so expression will be installed in by 1 storage card of " MID-2 " identification by the middle use of the equipment (DVD player) of " ID-B " identification.

(Device keys storage part 106)

Device keys storage part 106 has Device keys tabulation 130 as shown in Figure 2.

Device keys tabulation 130 is as an example, as shown in Figure 4, comprises the Device keys information more than 1 and constitutes.Device keys information comprises device id and Device keys corresponding to 1 equipment (being 1 DVD player in the present embodiment).In addition, exist under the situation of wrongful equipment, the corresponding relation between Device keys information and the equipment is identical with above-mentioned situation.

Device id is to discern uniquely and the identifying information that comprises the corresponding equipment of Device keys information of this device id.

Device keys is the key information of distributing to corresponding to the equipment of the Device keys information that comprises this Device keys.Device keys as an example be 128 long.

As shown in Figure 4, Device keys tabulation 130 comprise Device keys information 133,134 ... and constitute.Device keys information 133 is " DK-A " owing to comprise device id 131 " ID-A " and Device keys 132 " DK-A " so the Device keys of the equipment of being discerned by " ID-A " (DVD player) is distributed in expression.

(content key storage portion 104)

Content key storage portion 104 has content key tabulation 140 as shown in Figure 2.

Content key tabulation 140 is as an example, as shown in Figure 5, comprise key information 143,144,145 more than 1 ... and constitute.Key information comprises content ID and content key corresponding to 1 content.For example, key information 143 comprises content ID141 " C001 " and content key 142 " CK-1 ".

Content ID discerns and the identifying information that includes the corresponding content of key information of this content ID uniquely.

Content key is the key information of distributing to corresponding to the content of the key information that comprises this content key.

(list of devices storage part 108)

List of devices storage part 108 has the list of devices 150 of attention, apartment warning tabulation 160 and improper list of devices 170 as shown in Figure 2.

Notice that list of devices 150 as an example, as shown in Figure 6, possesses the zone that is used for storing the attention device id more than 1.Noting device id as mentioned above, is to discern the identifying information that is judged as the equipment that should be noted that uniquely.

Note list of devices 150 as shown in Figure 6, since comprise note device id 151 " ID-X005 ", note device id 152 " ID-Y007 ", note device id 153 " ID-Z009 " ... so, should be noted that by the equipment (DVD player) of " ID-X005 ", " ID-Y007 ", " ID-Z009 " identification.

Apartment warning tabulation 160 as shown in Figure 7, possesses the zone that is used for storing the apartment warning ID more than 1 as an example.Apartment warning ID is to discern the identifying information that is judged as the equipment that needs warning uniquely as mentioned above.

Apartment warning tabulation 160 as shown in Figure 7, since comprise apartment warning ID161 " ID-X003 ", apartment warning ID162 " ID-Y004 ", apartment warning ID163 " ID-Z004 " ... so, be to need warning by the equipment (DVD player) of " ID-X003 ", " ID-Y004 ", " ID-Z004 " identification.

Improper list of devices 170 as shown in Figure 8, possesses the zone that is used for storing the improper device id more than 1 as an example.Improper device id is to discern the identifying information that is judged as wrongful equipment uniquely as mentioned above.

Improper list of devices 170 as shown in Figure 8, since comprise improper device id 171 " ID-X001 ", improper device id 172 " ID-Y002 ", improper device id 173 " ID-Z005 " ... so, be wrongful equipment by the equipment (DVD player) of " ID-X001 ", " ID-Y002 ", " ID-Z005 " identification.

(2) control part 102

(with the mutual device authentication of calling mechanism 300)

Control part 102 obtains connection request from calling mechanism 300 via the Internet 10 and Department of Communication Force 101.If obtained above-mentioned connection request, then to authentication department 122 indication with and calling mechanism 300 between carry out mutual device authentication.

Then, control part 102 obtains the result's of the mutual device authentication of expression authentication result information from authentication department 112.Under the situation of the mutual device authentication fails of the authentication result information representation of being obtained, do not carry out later processing.Carry out processing shown below in the device authentication case of successful that the authentication result information representation of being obtained is mutual.

(transmission of content key)

Control part 102 obtains request, content ID, device id and the medium ID of content key via the Internet 10 and Department of Communication Force 101 from calling mechanism 300.

If obtained request, content ID, device id and the medium ID of content key, then control part 102 is from the admin table 120 retrievals device id identical with the device id that is obtained, in admin table 120, do not exist under the situation of identical device id, medium ID sum is made as " 1 ", the device id, medium ID and the medium ID sum that are obtained as the medium id information, are write to admin table 120.

In admin table 120, exist under the situation of identical device id, control part 102 extracts the medium id information that includes identical device id from admin table 120, whether judgement includes the medium ID identical with the medium ID that is obtained in the medium id information that is extracted, under situation about not comprising, medium ID sum in the medium id information that extracts being included in adds the value of " 1 ", appends in the medium id information that is extracted and writes the medium ID that is obtained.Then, cover to above-mentioned medium id information in admin table 120 appending the above-mentioned medium id information that has write medium ID as the extraction object.

Include in the medium id information that is extracted under the situation of the medium ID identical with the medium ID that is obtained, control part 102 does not upgrade this medium id information that extracts.

Then, control part 102 judge medium ID sums belong to (i) " 100 " following, (ii) " 101 " above " 150 " following, (iii) below " 151 " above " 199 ", (iv) in which scope more than " 200 ".

Below, above-mentioned 4 kinds of situations are described respectively.In addition, in each hurdle of table 180 shown in Figure 9,, put down in writing the summary of the processing in the control part 102 to each of above-mentioned 4 kinds of situations of expression in hurdle 181, hurdle 182, hurdle 183 and hurdle 184.

(i) under medium ID adds up to situation below " 100 ", perhaps, in above-mentioned, from the admin table 120 retrievals device id identical with the device id that is obtained, do not exist in admin table 120 under the situation of identical device id, control part 102 judges that with equipment level setting is that the employed equipment of expression user is not " 0 " of improper equipment.Then, the equipment that will be set at " 0 " judges that grade sends to calling mechanism 300 via Department of Communication Force 101 and the Internet 10.In addition, control part 102 is exported the content ID that receives to selection portion 105, and the indication of the selection of content key is carried out in output.And then, the device id that receives to be exported to adding compact part 107, output is with the indication (hurdle 189) of content key encryption.

(ii) add up to more than " 101 " under the situation below " 150 " at medium ID, control part 102 judges that with equipment level setting is that the employed equipment of expression user is " 1 " of the equipment that should be noted that.Then, the equipment that will be set at " 1 " judges that grade sends to calling mechanism 300 via Department of Communication Force 101 and the Internet 10.Then, the device id that is obtained is write (hurdle 194) to noticing that list of devices 150 appends.And then control part 102 is exported the content ID that receives to selection portion 105, and the indication of the selection of content key is carried out in output, and the device id that receives is exported to adding compact part 107, and output is with the indication (hurdle 190) of content key encryption.

(iii) add up to more than " 151 " under the situation below " 199 " at medium ID, control part 102 judges that with equipment level setting is that the employed equipment of expression user is " 2 " that need the equipment of warning.Then, the equipment that will be set at " 2 " judges that grade sends to calling mechanism 300 via Department of Communication Force 101 and the Internet 10.Then, the device id that obtained is appended to apartment warning tabulation 160 write (hurdle 195).In addition, control part 102, obtains expression the indication that the indication that provides or the expression to the user of content key are disapproved is provided via the Internet 10 and Department of Communication Force 101 from calling mechanism 300, under the situation that the indication of being obtained is represented to disapprove, and end process.Under the situation that the indication of being obtained is represented to ratify, control part 102 is exported the content ID that receives to selection portion 105, the indication of the selection of content key is carried out in output, and the device id that receives is exported to adding compact part 107, and output is with the indication (hurdle 191) of content key encryption.

(iv) under medium ID add up to situation more than " 200 ", control part 102 judged that with equipment level setting is that the employed equipment of expression user is wrongful equipment " 3 ".Then, the device id that is obtained is appended to improper list of devices 170 write (hurdle 196).Then, the equipment that will be set at " 3 " judges that grade sends to calling mechanism 300 via Department of Communication Force 101 and the Internet 10.Then, control part 102 end process (hurdle 191).

(3) selection portion 105

Selection portion 105 is obtained the indication of the selection of carrying out content ID and content key from control part 102.If obtained content ID and above-mentioned indication, then from content key tabulation 140, read the key information that comprises the content ID identical with the content ID that is obtained, from the key information of being read, extract content key, then the content key that is extracted is exported to adding compact part 107.

(4) add compact part 107

Add compact part 107 and obtain the device id that to receive and the indication of content key encryption, obtain content key from selection portion 105 from control part 102.Then, read the Device keys information that comprises the device id identical in the slave unit cipher key list 130, from the Device keys information of being read, extract Device keys with the device id that is obtained.

Then, add compact part 107 and utilize the Device keys that is extracted, the content key that is obtained is implemented cryptographic algorithm E1, generate encrypted content key.

Encrypted content key=E1 (Device keys, content key)

Here, (B, C) expression utilizes the ciphertext A that key B generates plaintext C enforcement cryptographic algorithm E to A=E.

In addition, here, cryptographic algorithm E1 is based on AES (AdvancedEncryption Standard: algorithm Advanced Encryption Standard) as an example.

Then, add compact part 107, the above-mentioned encrypted content key that generates is sent to calling mechanism 300 via Department of Communication Force 101 and the Internet 10.

In addition, in Fig. 2, each piece of each structural portion of expression management server apparatus 100 is connected with other pieces by connecting line.But, the situation of having omitted a part of connecting line is also arranged.Here, each connecting line represents to transmit the path of signal and information.In addition, be connected in a plurality of connecting lines of piece that expression adds compact part 107, on connecting line, describe cipher key flag, expression will be as the information of key to adding the path that compact part 107 transmits.In addition, too for other accompanying drawings.

(5) input part 110 and display part 111

Input part 110 is accepted the input of various information from the operator of management server apparatus 100, perhaps accepts the input of various indications, and information or the indication of having accepted input are exported to control part 102.

Display part 111 is by the various information of indicated number of control part 102.

(6) authentication department 112

Authentication department 112 is according to the indication of control part 102, via Department of Communication Force 101 and the Internet 10, and calling mechanism 300 between carry out the mutual device authentication of inquire response (cha1lenge-response) type.In mutual device authentication, authentication department 112 confirms the legitimacy of calling mechanism 300, and accepts the authentication of the legitimacy of calling mechanism 300.

In addition, about above-mentioned mutual device authentication, owing to be known, so omit detailed explanation.

If success of mutual device authentication or failure, then authentication department 112 will represent that the authentication result of mutual device authentication success or failure is to control part 102 outputs.

(7) Department of Communication Force 101

The transmitting-receiving of Department of Communication Force 101 various information of relaying between calling mechanism 300 and control part 102.And the transmitting-receiving of the various information of relaying between calling mechanism 300 and authentication department 112.

1.3 the structure of storage card 200

Storage card 200 is made of input and output portion 201, authentication department 202 and storage part 203 as shown in figure 10.

Storage card 200 particularly is the computer system that is made of microprocessor, ROM, RAM etc.In above-mentioned RAM, store computer program.According to aforementioned calculation machine program behavior, storage card 200 is realized its a part of function by above-mentioned microprocessor.

Below, each key element that constitutes storage card 200 is described.

(1) storage part 203

Storage part 203 possesses medium ID zone 204 and general area 205 as shown in figure 10.

Medium ID zone 204 stores medium ID211 as shown in figure 10.Medium ID211 is the identifying information of identification memory card 200 uniquely.

General area 205 has encrypted content key tabulation 221 as shown in figure 10.

Encrypted content key tabulation 221 possesses the zone that is used for storing the encrypted content key information more than 1 as shown in figure 10.

Each encrypted content key information comprises the group more than 1 that is made of 1 device id, content ID and encrypted content key, encrypted content key information is corresponding to 1 equipment (being DVD player in this embodiment), and the group of content ID and encrypted content key is corresponding to 1 content.But, existing under the situation of the wrongful equipment of memory device ID wrongly, encrypted content key information is corresponding to all equipment that stores identical device id.

Device id is the identifying information of identification equipment (being DVD player in this embodiment) uniquely.But, as mentioned above, under the situation that has the improper equipment that stores device id wrongly, be not limited to identification equipment uniquely.

Content ID discerns and the identifying information that includes the corresponding content of group of this content ID uniquely.

Encrypted content key is generate by content key is encrypted with the Device keys of distributing to corresponding equipment, and wherein this content key is an employed content key will be corresponding to the content-encrypt of the group that comprises this encrypted content key the time.

The group 237 that encrypted content key information 236 shown in Figure 10 includes device id 231 " ID-A ", be made of content ID232 " C001 " and encrypted content key 234 " E1 (DK-A; CK-1) " and by the group 238 of content ID233 " C002 " and encrypted content key 238 " E1 (DK-A, CK-2) " formation.

Here, be included in the encrypted content key 234 " E1 (DK-A; CK-1) " of group in 237, be to use distribute to by the Device keys " DK-A " of the DVD player of device id 231 " ID-A " identification as key, will distribute to by the content key " CK-1 " of content ID232 " C001 " content identified and encrypt and generate.

In addition, be included in the encrypted content key 235 " E1 (DK-A; CK-2) " of group in 238, be to use distribute to by the Device keys " DK-A " of the DVD player of device id 231 " ID-A " identification as key, will distribute to by the content key " CK-2 " of content ID233 " C002 " content identified and encrypt and generate.

(2) input and output portion 201

Input and output portion 201 is sense information from the medium ID of storage part 203 zone 204 or general area 205, with the information of the reading device output to the outside that storage card 200 is installed.In addition, obtain information, the information of being obtained is write to the general area 205 of storage part 203 from the device of said external.Here, so-called external device (ED), be calling mechanism 300 and DVD player 400a ..., 400b, 400c ..., 400d.

(3) authentication department 202

When authentication department 202 is installed in the outside device at storage card 200, via input and output portion 201 and external device (ED) between carry out device authentication mutually.Here, device authentication is the authentication of inquire response type.In addition, about the device authentication of inquire response type, owing to be known, so omit detailed explanation here.

Here, so-called external device (ED), be calling mechanism 300 and DVD player 400a ..., 400b, 400c ..., 400d.

Authentication department 202 and external device (ED) between under the mutual device authentication case of successful, control input and output portion 201 is to carry out the transmitting-receiving of information between the device of storage part 203 and outside.Under the situation of device authentication fails, after this control input and output portion 201 not carry out the transmitting-receiving of information between the device in storage part 203 and outside.

1.4 the structure of calling mechanism 300

Calling mechanism 300 is made of authentication department 301, input part 302, display part 303, display part 304, input and output portion 305, control part 306, Department of Communication Force 307, lettering portion 308, safe-deposit vault 309, bar code processing portion 310, information storage part 312 and authentication department 313 as shown in figure 11.In addition, on calling mechanism 300, connecting bar code reader 311.

Calling mechanism 300 be carry out from user payment be the cash calling mechanism of clearing, keeping etc. of marketing expenses of the commodity of representative with DVD, and also be to obtain from management server apparatus 100 content key that is stored in the content the DVD and the device that provides to the user via storage card are provided.

Calling mechanism 300 particularly is the computer system that is made of microprocessor, ROM, RAM, hard disk unit, display unit, keyboard etc.In above-mentioned hard disk unit, store computer program.According to aforementioned calculation machine program behavior, calling mechanism 300 is realized its a part of function by above-mentioned microprocessor.

(1) information storage part 312

Information storage part 312 possesses price list 321 as shown in figure 11.

Price list 321 comprises a plurality of pricing informations as shown in figure 11.Each pricing information is corresponding with DVD, comprises content ID and selling price.

Content ID discerns the identifying information that is kept at corresponding to the content among the DVD of the marketing information that comprises this content ID uniquely.Here, suppose in this DVD, only to preserve 1 content.

Selling price is represented the selling price corresponding to the DVD of the marketing information that comprises this selling price.

(2) authentication department 313

When authentication department 313 is equipped with storage card in calling mechanism 300, via input and output portion 305 and the storage card installed between reciprocally carry out device authentication.Here, device authentication is the authentication of inquire response type.About the authentication of inquire response type, owing to be known, so omit detailed explanation here.

Authentication department 313 is notified to control part 306 with the authentication result of indication equipment authentication success under device authentication case of successful mutual between authentication department 313 and the storage card installed.In addition, under the situation of device authentication fails, the authentication result of indication equipment authentification failure is notified to control part 306.

Under the situation of device authentication fails, after this, calling mechanism 300 and this storage card between do not carry out the transmitting-receiving of information.

(3) authentication department 301

Authentication department 301 via Department of Communication Force 307 and management server apparatus 100 between carry out device authentication mutually.Here, device authentication is the authentication of inquire response type.About the authentication of inquire response type, owing to be known, so omit detailed explanation here.

Authentication department 301 is notified to control part 306 with the authentication result of indication equipment authentication success under device authentication case of successful mutual between authentication department 301 and the management server apparatus 100.In addition, under the situation of device authentication fails, the authentication result of indication equipment authentification failure is notified to control part 306.

Under the situation of device authentication fails, after this, calling mechanism 300 and management server apparatus 100 between do not carry out the transmitting-receiving of information.

(4) input and output portion 305

Input and output portion 305 perhaps carries out the transmitting-receiving of information based on the control of control part 306 and between control part 306 and the storage card installed two-wayly between the storage card of authentication department 313 and installation based on the control of authentication department 313.

(5) bar code reader 311 and bar code processing portion 310

Bar code reader 311 reads the lip-deep bar code that is printed on DVD bag 500 and generates the corresponding information that reads with optical mode, and the information that reads that generates is exported to bar code processing portion 310.

Bar code processing portion 310 obtains the information of reading from bar code reader 311, generates content ID from the information of being obtained that reads, and the content ID that generates is exported to control part 306.

(6) control part 306

(with being connected of management server apparatus 100)

Control part 306 sends connection request via Department of Communication Force 307 and the Internet 10 to management server apparatus 100.Then, 306 pairs of authentication departments of control part 301 indication so that its and management server apparatus 100 between carry out mutual device authentication.

If obtained the authentication result of indication equipment authentification failure, then control part 306 end process from authentication department 301.

(content ID obtains)

If obtained the authentication result of indication equipment authentication success from authentication department 301, then control part 306 obtains content ID from bar code processing portion 310, from price list 321, read the pricing information that includes the content ID identical with the content ID that is obtained, extract selling price from the pricing information of being read, content ID that is obtained and the selling price of being extracted to display part 303 and 304 outputs, are indicated so that they are shown display part 303 and 304.

(with being connected of storage card)

Control part 306 obtains the mount message that expression is equipped with storage card 200a from input and output portion 305.If obtained above-mentioned mount message, then 306 pairs of authentication departments of control part 313 indication so that its and the storage card 200a that installed between carry out mutual device authentication.If obtained the authentication result of indication equipment authentification failure, then control part 306 end process from authentication department 313.

If obtained the authentication result of indication equipment authentication success from authentication department 313, then control part 306 is stored in medium ID among the storage card 200a via input and output portion 305 with expression and the indication of reading of reading of device id is exported to storage card 200a.Then, obtain via input and output portion 305 and read the result.Reading the result is retrieved as medium ID, the device id more than 1 or represents that there is not information " nothing " in the device id of memory device ID.

Do not exist under the situation of information " nothing " having obtained device id, control part 306 will be illustrated among the storage card 200a not the message of memory device ID to display part 303 and 304 outputs, to display part 303 and 304 indications so that it shows this message, end process.

Under the situation of having obtained a plurality of device ids, control part 306 is exported a plurality of device ids that obtained to display part 303 and 304, display part 303 and 304 indications so that it shows this a plurality of device ids, are followed the appointment of obtaining 1 device id being selected among above-mentioned a plurality of device ids by the user from input part 302.

Under the situation of having obtained 1 device id, control part 306 former states are utilized this device id.

(from obtaining of the content key of management server apparatus 100)

Then, control part 306 sends the solicited message of the request of expression content key to management server apparatus 100 via Department of Communication Force 307, in addition, the content ID that is obtained, above-mentioned 1 device id and the medium ID that obtained are sent to management server apparatus 100 via Department of Communication Force 307.

Then, control part 306 obtains equipment judgement grade from management server apparatus 100 via Department of Communication Force 307.Sometimes also obtain encrypted content key.Here, obtain encrypted content key be the above-mentioned equipment that obtains judge grade be " 0 ", " 1 ", and " 2 " in any situation.At the above-mentioned device id that obtains is under the situation of " 3 ", does not obtain encrypted content key.

Then, control part 306 judges that the equipment judgement grade of being obtained is which of " 3 " " 0 ", " 1 ", " 2 " reach.

Judging that the equipment judgement grade of being obtained is under the situation of " 0 ", the message that control part 306 will be represented to allow to provide the encrypted content key of being obtained to the user is indicated so that it shows this message display part 303 and 304 to display part 303 and 304 outputs.In addition, device id and content ID are exported to storage card 200a via input and output portion 305, again encrypted content key is exported to storage card 200a via input and output portion 305.

Judging that the equipment judgement grade of being obtained is under the situation of " 1 ", the message that control part 306 will be represented the operator of calling mechanism 300 to note is indicated so that it shows this message display part 303 and 304 to display part 303 and 304 outputs.In addition, identical with the situation that is judged as " 0 ", device id, content ID and encrypted content key are exported to storage card 200a via input and output portion 305.

Judging that the equipment judgement grade of being obtained is under the situation of " 2 ", the message that control part 306 will be represented the operator of calling mechanism 300 to warn is indicated so that it shows this message display part 303 and 304 to display part 303 and 304 outputs.And then, obtain the expression approval from the operator of calling mechanism 300 via input part 302 and still disapprove the indication that this encrypted content key is provided to the user.Under the situation of having obtained the indication of disapproving, control part 306 end process.That is, for storage card 200a, not output device ID, content key and encrypted content key.Under the situation of the indication of having obtained approval, identical with the situation that is judged as " 0 ", device id, content ID and encrypted content key are exported to storage card 200a via input and output portion 305.

Judging that the equipment obtained judges that grade is under the situation of " 3 ", control part 306 will be represented wrongful message to the operator of calling mechanism 300 to display part 303 and 304 outputs, to display part 303 and 304 indications so that it shows this message.Then, control part 306 end process.That is, encrypted content key is not exported storage card 200a.

(7) input part 302, display part 303, display part 304, lettering portion 308 and safe-deposit vault 309

Input part 302 is exported information or the indication of having accepted input from the input that the operator of calling mechanism 300 accepts information or indication to control part 306.In addition, display part 303 and display part 304 obtain the information that will show from control part 306, and show the information of being obtained.

Various information are printed by the control of control part 306 by lettering portion 308.

Safe-deposit vault 309 keeping bank note and coins.

(8) Department of Communication Force 307

Department of Communication Force 307 is connected with management server apparatus 100 via the Internet 10, carries out the transmitting-receiving of information between control part 306 and management server apparatus 100, in addition, carries out the transmitting-receiving of information between authentication department 301 and management server apparatus 100.

1.5DVD player 400a ..., b, c ..., d structure

DVD player 400a ..., b, c ..., d has same structure respectively.Here, as their representative, the structure of DVD player 400 is described.

DVD player 400 as shown in figure 12, by device id storage part 401, input and output portion 402, Device keys storage part 403, decryption part 404, read portion 405, decryption part 406, recapiulation 407, display part 408, input part 409, control part 410 and authentication department 411 and constitute.In addition, on DVD player 400, be connected with the monitor of subsidiary loudspeaker.

DVD player 400 particularly is to comprise microprocessor, ROM, RAM etc. and the computer system of formation.In above-mentioned ROM, store computer program.According to aforementioned calculation machine program behavior, DVD player 400 realizes the part of its function by above-mentioned microprocessor.

(1) device id storage part 401 and Device keys storage part 403

Device id storage part 401 is designed to and can not as shown in figure 12, stores device id 421 in advance from external reference.Device id 421 is identifying informations of discerning DVD player 400 uniquely.But, be under the situation of wrongful equipment in DVD player 400, device id 421 is not limited to discern uniquely DVD player 400.

Device keys storage part 403 is designed to and can not as shown in figure 12, stores Device keys 422 in advance from external reference.

Device keys 422 is key informations of distributing to DVD player 400.

(2) read portion 405

Read portion 405 based on the control of control part 410 and the DVD sense information from be installed in DVD player 400, with the information of reading to control part 410 or decryption part 406 outputs.

(3) input and output portion 402

If input and output portion 402 is equipped with storage card, then detect the situation that storage card is installed, the detection information that expression is detected is exported to control part 410.

In addition, input and output portion 402 is based on the control of control part 410 and at control part 410 and be installed between the storage card in the DVD player 400 or carry out the transmitting-receiving of information based on the control of authentication department 411 between authentication department 411 and the storage card installed two-wayly.

(4) authentication department 411

When authentication department 411 is installed in the DVD player 400 at storage card, via input and output portion 402 and the storage card installed between reciprocally carry out device authentication.Here, device authentication is the authentication of inquire response type.About the authentication of inquire response type, owing to be known, so omit detailed explanation here.

Authentication department 411 notifies the authentication result of indication equipment authentication success under device authentication case of successful mutual between authentication department 411 and the storage card to control part 410.In addition, under the situation of device authentication fails, the authentication result of indication equipment authentification failure is notified to control part 410.

Under the situation of device authentication fails, after this, DVD player 400 and storage card between do not carry out the transmitting-receiving of information.

(5) decryption part 404

Decryption part 404 is according to the indication of control part 410, slave unit key storage part 403 readout equipment keys 422, obtain encrypted content key from input and output portion 402, use the Device keys of being read as key, encrypted content key is implemented decipherment algorithm D1, generate and reproduce content key, the reproduction content key that generates is exported to decryption part 406.Here, use AES as decipherment algorithm D1.

(6) decryption part 406

Decryption part 406 obtains the reproduction content key from decryption part 404, reads encrypted content via the portion of reading 405 from DVD, uses the reproduction content key that is obtained, and the encrypted content of reading is implemented decipherment algorithm D2, generates and reproduces content.Here, use AES as decipherment algorithm D2.Then, the decryption part 406 reproduction content that will generate is to recapiulation 407 outputs.

(7) recapiulation 407, monitor and loudspeaker

Recapiulation 407 is obtained the reproduction content from decryption part 406, the reproduction content of being obtained is separated into compressing image information and compression acoustic information, the compressing image information decoding is generated image information, image information is transformed to the signal of video signal of simulation, to compress the acoustic information decoding and generate acoustic information, acoustic information is transformed to the voice signal of simulation, the signal of video signal that generates is exported to monitor, with the voice signal that generates to the loudspeaker output that is attached to monitor.

Monitor obtains signal of video signal, show image, and the loudspeaker that is attached to monitor obtains voice signal and output sound.

(7) control part 410

(detection of storage card)

Control part 410 obtains expression from input and output portion 402 and detects the detection information that storage card has been installed.

If obtain above-mentioned detection information, then 410 pairs of authentication departments of control part 411 indication with and the storage card installed between carry out mutual device authentication.Then, obtain authentication result from authentication department 411.Represent in the authentication result of being obtained under the situation of authentification failure that control part 410 is indicated with the message that will represent this situation and exported and demonstration, end process then to display part 408.

Represent in the authentication result of being obtained under the situation of authentication success, control part 410 slave unit ID storage parts 401 readout equipment ID421, then, input and output portion 402 output expression read the indication of reading of the device id that is stored in the storage card of being installed, indicate with readout equipment ID.

Then, control part 410 obtains from the storage card of installing via input and output portion 402 and reads the result.The result that reads who is obtained is that device id more than 1 or indication equipment ID are not stored in and do not have information in the storage card.

Do not exist under the situation of information in the result that reads who is obtained, perhaps under the situation of having obtained the device id more than 1, when not having the device id of being read 421 therein, the device id of being read 421 is exported to the storage card of installing via input and output portion 402, input and output portion 402 is indicated so that it is written to device id 421 in the inside of storage card.

(reproduction of content)

Control part 410 is accepted from the user of DVD player 400 via input part 409 and is reproduced the indication that is kept at the encrypted content the DVD.If accepted above-mentioned indication, then read content ID from DVD via the portion of reading 405, to 402 output content ID of input and output portion and the device id of self, indicate to read from storage card corresponding to content ID and both content keys of the device id of self.

Then, control part 410 obtains via input and output portion 402 and reads the result.Here, read the result be 1 encrypted content key or the encrypted content key that do not meet of expression do not have information " nothing ".

Obtaining and do not exist under the situation of information " nothings " as reading the result, control part 410 will represent that the message of this situation exports to display part 408, and display part 408 is indicated so that it shows this message.

Reading under the situation that the result is an encrypted content key, 404 indications of 410 pairs of decryption parts of control part then, are indicated so that it deciphers encrypted content decryption part 406 so that it deciphers encrypted content key, then, recapiulation 407 is indicated so that it will reproduce content playback and export to monitor.

(8) display part 408 and input part 409

Display part 408 shows appointed message according to the indication of control part 410.

In addition, input part 409 is accepted indication from the user of DVD player 400, and the indication of being accepted is exported to control part 410.

1.6 the action of improper device detection system 1

Action to improper device detection system 1 describes.

What (1) DVD player 400 was carried out obtains the action of device id from storage card 200a

Utilize process flow diagram shown in Figure 13, to DVD player 400 carry out from storage card 200a obtain device id obtain the action describe.

If the control part 410 of DVD player 400 has obtained the detection information that expression detects the installation of storage card (being the step S101) from input and output portion 402, then to authentication department 411 indication so that its and the storage card installed between carry out mutual device authentication (step S102), under the authentication result of obtaining from authentication department 411 is represented the situation of authentification failure (the step S103 not), the message that control part 410 will be represented this situation is to display part 408 outputs and indicate it to show (step S105), end process then.

Under the authentication result of being obtained is represented the situation of authentication success (being among the step S103), control part 410 slave unit ID storage parts 401 readout equipment ID421 (step S106), then, input and output portion 402 output expression read the indication of reading of the device id that is stored in the storage card of being installed, indicate with readout equipment ID (step S107).

The input and output portion 201 of storage card 200 attempts read (the step S108) of device id from the encrypted content key tabulation 221 of general area 205, to read the result to DVD player 400 outputs, control part 410 obtains from the storage card of installing via input and output portion 402 and reads result (step S109).

Do not exist under the situation of information in the result that reads who is obtained, perhaps under the situation of having obtained the device id more than 1, when not having the device id of reading 421 therein (being among the step S110), the device id of being read 421 is exported (step S111) via input and output portion 402 to the storage card of installing, and the input and output portion 201 of storage card 200 writes (step S112) with the device id that is obtained to encrypted content key tabulation 221.

(2) encrypted content key of calling mechanism 300 obtains action

Utilize Figure 14～process flow diagram shown in Figure 17, the action that obtains encrypted content key from management server apparatus 100 of calling mechanism 300 is described.

The control part 306 of calling mechanism 300 sends connection request (step S200) via Department of Communication Force 307 and the Internet 10 to management server apparatus 100.Then, 306 pairs of authentication departments of control part 301 indication so that its and management server apparatus 100 between carry out mutual device authentication (step S201), if obtained the authentication result (the step S203 not) of indication equipment authentification failure, then control part 102 end process from authentication department 301.If obtained the authentication result (being the step S203) of indication equipment authentication success from authentication department 301, then control part 306 obtains content ID (step S204) from bar code processing portion 310, read the pricing information that includes the content ID identical with the content ID that is obtained from price list 321, from the object information of being read, extract selling price, content ID that is obtained and the selling price of being extracted to display part 303 and 304 outputs, are indicated so that they are shown (step S205) display part 303 and 304.

Then, 306 pairs of authentication departments of control part 313 indication so that its and the storage card 200a that installs between carry out mutual device authentication (step S206).If obtained the authentication result (the step S207 not) of indication equipment authentification failure from authentication department 313, then control part 306 is exported the message of indication equipment authentification failure to display part 303 and 304, display part 303 and 304 is indicated so that they are shown (step S209), end process then.

If obtained the authentication result (being the step S207) of indication equipment authentication success from authentication department 313, then control part 306 is read indication to storage card 200a output (step S210) via input and output portion 305 with what the medium ID that is stored among the storage card 200a and device id were read in expression.

Then, if the input and output portion 201 of storage card 200 has obtained the authentication result (the step S208 not) of indication equipment authentification failure, then input and output portion 201 end process from authentication department 202.

If obtained the authentication result (being the step S208) of indication equipment authentication success from authentication department 202, then input and output portion 201 attempts read (the step S211) of device id from the encrypted content key tabulation 221 of general area 205, then, will read the result to DVD player 400 outputs (step S212).

Control part 306 obtains via input and output portion 305 and reads result (step S212).

Obtaining under the situation that there be not information " nothing " in device id (step S213), control part 306 will be illustrated among the storage card 200a not the message of memory device ID to display part 303 and 304 outputs, display part 303 and 304 is indicated so that it shows this message (step S214), then end process.

Under the situation of having obtained a plurality of device ids (step S213), control part 306 is exported a plurality of device ids that obtained to display part 303 and 304, display part 303 and 304 is indicated so that it shows these a plurality of device ids (step S215), then, obtain the appointment (step S216) of 1 device id selecting among above-mentioned a plurality of device ids by the user from input part 302.

Then, control part 306 is via Department of Communication Force 307, send the solicited message (step S231) of the request of expression content key to management server apparatus 100, in addition, the content ID that is obtained, above-mentioned 1 device id and the medium ID that obtained are sent (step S232) via Department of Communication Force 307 to management server apparatus 100.

The control part 102 of management server apparatus 100 obtains the request of content key from calling mechanism 300 via the Internet 10 and Department of Communication Force 101, content ID, device id and medium ID (step S231～step S232), the retrieval device id (step S233) identical from admin table 120 with the device id that is obtained, in admin table 120, do not exist under the situation of identical device id (among the step S234 not), if medium ID adds up to " 1 " (step S235), with the device id that obtained and medium ID sum as the medium id information, write (step S236) to admin table 120, then will control to step S252 and shift.

In admin table 120, exist under the situation of identical device id (being among the step S234), control part 102 extracts the medium id information that comprises identical device id from admin table 120, whether judgement includes the medium ID (step S237) identical with the medium ID that is obtained in the medium id information that is extracted, under situation about not comprising (among the step S238 not), medium ID sum in the medium id information that extracts being included in adds the value (step S239) of " 1 ", the medium ID that is obtained is appended be written in the medium id information that is extracted (step S240).

Then, control part 102 judge the medium ID sum that is included in the medium id information that is extracted belong to (i) " 100 " following, (ii) " 101 " above " 150 " following, (iii) below " 151 " above " 199 ", (iv) (step S251) in which scope more than " 200 ".

(i) add up under the situation below " 100 " (step S251) at medium ID, perhaps in above-mentioned, from the admin table 120 retrievals device id identical with the device id that is obtained, and in admin table 120, do not exist under the situation of identical device id (among the step S234 not, step S235, S236), control part 102 judges that with equipment level setting is that the employed equipment of expression user is not " 0 " (step S252) of improper equipment.Then, the equipment that will be set at " 0 " judges that grade sends (step S253) via Department of Communication Force 101 and the Internet 10 to calling mechanism 300.Then, add in the compact part 107 slave unit cipher key list 130 and read the Device keys information that includes the device id identical with the device id that is obtained, from the Device keys information of being read, extract Device keys (step S265), selection portion 105 is read the key information that includes the content ID identical with the content ID that is obtained from content key tabulation 140, from the key information of being read, extract content key, then the content key that is extracted is exported (step S266) to adding compact part 107, then, add compact part 107 and utilize the Device keys that is extracted, the content key that is obtained is implemented cryptographic algorithm E1 and generated encrypted content key (step S267), and the above-mentioned encrypted content key that will generate via Department of Communication Force 101 and the Internet 10 sends (step S268) to calling mechanism 300.

(ii) add up to more than " 101 " under the situation below " 150 " (step S251) at medium ID, control part 102 judges that with equipment level setting is that expression user employed equipment is " 1 " (step S254) of the equipment that should be noted that, the equipment that will be set at " 1 " judges that grade sends (step S255) via Department of Communication Force 101 and the Internet 10 to calling mechanism 300, and the device id that is obtained is write (step S256) to noticing that list of devices 150 appends.Then, will control to step S265 and shift.

(iii) add up to more than " 151 " under the situation below " 199 " (step S251) at medium ID, control part 102 judges that with equipment level setting is that the employed equipment of expression user is " 2 " (the step S257) that needs the equipment of warning, the equipment that will be set at " 2 " judges that grade sends (step S258) via Department of Communication Force 101 and the Internet 10 to calling mechanism 300, the device id that is obtained is appended to apartment warning tabulation 160 write (step S259).Then, control part 102 obtains expression approval from calling mechanism 300 via the Internet 10 and Department of Communication Force 101 and provides the indication of content key or indication (step S260) that expression is disapproved to the user, under the situation that the indication of being obtained is represented to disapprove (step S261), end process.Under the situation that the indication of being obtained is represented to ratify (step S261), will control to step S265 and shift.

(iv) add up under the situation more than " 200 " (step S251) at medium ID, control part 102 judges that with equipment level setting is that the employed equipment of expression user is wrongful equipment " 3 " (step S262), the equipment that will be set at " 3 " judges that grade sends (step S263) via Department of Communication Force 101 and the Internet 10 to calling mechanism 300, appends the device id that is obtained and writes (step S264) to improper list of devices 170.Then, end process.

Then, control part 306 obtains equipment judgement grade (step S253, S255, S258, S263) via Department of Communication Force 307 from management server apparatus 100.And also obtain encrypted content key (step S268) sometimes.

Then, control part 306 judges the equipment judgement grade of being obtained is that " 0 ", " 1 ", " 2 " reach which (step S281) of " 3 ".

The equipment that obtains being judged as judges that grade is (step S281) under the situation of " 0 ", the message that control part 306 will be represented to allow to provide the encrypted content key of being obtained to the user is indicated so that it shows this message (step S282) display part 303 and 304 to display part 303 and 304 outputs.In addition, device id and content ID are exported (step S291) via input and output portion 305 to storage card 200a, again encrypted content key is exported (step S293) via input and output portion 305 to storage card 200a.

The equipment that obtains being judged as judges that grade is (step S281) under the situation of " 1 ", the message that control part 306 will be represented the operator of calling mechanism 300 to note is indicated so that it shows this message (step S283) display part 303 and 304 to display part 303 and 304 outputs.Then, will control to step S291 and shift.

The equipment that obtains being judged as judges that grade is (step S281) under the situation of " 2 ", the message that control part 306 will be represented the operator of calling mechanism 300 to warn is indicated so that it shows this message (step S284) display part 303 and 304 to display part 303 and 304 outputs.And then the operator from calling mechanism 300 obtains the expression approval or disapproves the indication (step S285) that this encrypted content key is provided to the user via input part 301, and the indication of being obtained is exported (step S260) to management server apparatus 100.Under the situation of having obtained the indication of disapproving (step S287), control part 306 end process.Under the situation of the indication of having obtained approval (step S287), then, will control to step S291 and shift.

The equipment that obtains being judged as judges that grade is (step S281) under the situation of " 3 ", control part 306 will represent the operator of calling mechanism 300 wrongful message to display part 303 and 304 output, to display part 303 and 304 the indication so that it shows this message (step S288).Then, control part 306 end process.

The input and output portion 201 of storage card 200 obtains device id and content ID (step S291), corresponding to device id content ID is written in the encrypted content key tabulation 221 (step S292), obtain encrypted content key (step S293), accordingly encrypted content key is written in the encrypted content key tabulation 221 (step S294) with content ID.

(3) deciphering of the encrypted content of DVD player 400 and reproduction

Utilize Figure 18～process flow diagram shown in Figure 19, the deciphering and the reproduction of the encrypted content of DVD player 400 described.

DVD player 400 obtains device id (step S301) by the step shown in the process flow diagram of Figure 13 from storage card 200.Then, control part 410 is accepted from the user of DVD player 400 via input part 409 and is reproduced the indication (step S302) that is kept at the encrypted content the DVD.If accepted above-mentioned indication, then read content ID (step S305) from DVD, to 402 output content ID of input and output portion and the device id of self (step S306) via the portion of reading 405.Read (the step S307) that the input and output portion 201 of storage card 200 attempts corresponding to content ID and both content keys of the device id of self will read the result to DVD player 400 outputs (step S308).

Then, control part 410 obtains from storage card via input and output portion 402 and reads result (step S308), obtaining under the situation that does not have information " nothing " (step S309) as reading the result, control part 410 will represent that the message of this situation is to display part 408 outputs, display part 408 is indicated so that it shows this message (step S310), end process.

Reading under the situation that the result is an encrypted content key (step S309), decryption part 404 is according to the indication of control part 410 and slave unit key storage part 403 readout equipment keys 422 (step S311), utilize the Device keys of being read as key, encrypted content key is implemented decipherment algorithm D1, generate and reproduce content key (step S312).

Decryption part 406 is read encrypted content (step S313) via the portion of reading 405 from DVD, utilize and reproduce the encrypted content enforcement decipherment algorithm D2 of content key to being read, and generates and reproduces content (step S314).

Recapiulation 407 is separated into compressing image information and compression acoustic information with the reproduction content of being obtained, the compressing image information decoding is generated image information, image information is transformed to the signal of video signal of simulation, to compress the acoustic information decoding and generate acoustic information, acoustic information is transformed to the voice signal of simulation, monitor monitors image, is attached to the loudspeaker output sound (step S315) of monitor.

1.7 the summary of improper device detection system 1

In improper device detection system 1, wrongful DVD player stores the device id identical with the device id of discerning proper DVD player uniquely wrongly, supposes so wrongful DVD player of only storing 1 identical device id a plurality of situation that circulated in market.

The user of wrongful DVD player who stores identical device id is with content playback the time, and as mentioned above, the device id that wrongful DVD player is stored this DVD player is written in the storage card.

The medium ID that is stored in the device id in the storage card and discerns this storage card uniquely is collected in the management server apparatus 100 via calling mechanism 300 when the buying of user's new DVD.

Device id that management server apparatus 100 utilizations are collected and a plurality of groups of medium ID, statistics is computing medium ID sum corresponding to the quantity of the medium ID of 1 device id, if the medium ID sum that calculates is more than the defined threshold, judge that then the DVD player with this device id is wrongful equipment.

Here, suppose that above-mentioned threshold value for example is " 100 ".This threshold value is represented the maximal value of the storage card quantity that a user may have.If a user does not think factitious even then have 100 with interior storage card yet.

But, suppose that wrongful DVD player is manufactured a plurality of, for example manufactured 1000 and circulate, the user who has supposed to obtain wrongful DVD player has 100 storage card, because 1000 wrongful DVD player stores identical device id, so management server apparatus 100 calculates the quantity of 100 * 1000=100000 conduct corresponding to the medium ID of this device id.Therefore, under the situation of the medium ID sum that calculates the quantity that surpasses the rational storage card that a people may have, the DVD player that will have this device id is speculated as wrongful.

2, variation (1)

Here, the improper device detection system 1e (not shown) as the 1st variation of improper device detection system 1 is described.

In improper device detection system 1, use medium ID sum to determine wrongful DVD player, but in improper device detection system 1e, as described below, management server apparatus 100 stores the content ID that discerns respectively with the content of being reproduced by the DVD player of this device id identification more than 1 accordingly with device id, identification is used the set of the content ID of the content of reproducing by the DVD player of specific device id identification, compare with the set of the corresponding content ID of the said equipment ID with storage in management server apparatus 100, in the set situation that is the subclass of another set, and set and another are gathered under the on all four situation, to be speculated as proper equipment by the DVD player of this device id identification, otherwise, will be speculated as wrongful equipment by the DVD player of this device id identification.

Improper device detection system 1e has the structure same with improper device detection system 1.Here, be that the center describes with difference with improper device detection system 1.

(1) structure of storage card 200e

In improper device detection system 1e, replace the storage card 200 of improper device detection system 1 and use storage card 200e shown in Figure 20.

Storage card 200e is made of 201e of input and output portion and storage part 203e as shown in figure 20.In addition, storage card 200e and storage card 200 are same, also can also possess the same 202e of authentication department (not shown) of the authentication department that had with storage card 200 202.

Storage part 203e possesses general area 205e, and general area 205e has user's record information tabulation 231e.

User's record information tabulation 231e possesses the zone that is used for storing the user's record information more than 1.

Each user's record information comprises 1 device id and 1 content ID, and user's record information is corresponding to 1 content reproducing in 1 equipment (being DVD player in this embodiment).

Device id be discern uniquely will with the identifying information of the equipment (being DVD player in this embodiment) of the corresponding content playback of user's record information that comprises this device id.But, as mentioned above,, be not limited to identification equipment uniquely existing under the situation of the improper equipment of medium ID wrongly.

Content ID discerns and the identifying information that comprises the corresponding content of user's record information of this content ID uniquely.

The 201e of input and output portion sense information from the general area 205e of storage part 203e is exported the information of reading to the device of the outside that storage card 200e is installed.In addition, obtain information, the information of being obtained is write to the general area 205e of storage part 203e from the device of said external.Here, the device of so-called outside is calling mechanism and each DVD player.

(2) structure of management server apparatus 100

Management server apparatus 100 has the structure same with the management server apparatus 100 of improper device detection system 1.

Management server apparatus 100 has server record information tabulation 120e shown in Figure 21 in admin table storage part 103.

Server record information tabulation 120e comprises a plurality of server record informations, and each server record information is corresponding to 1 content reproducing in 1 equipment (being DVD player in this embodiment).

Each server record information comprises device id and content ID.

Device id be discern uniquely will with the identifying information of the equipment of the corresponding content playback of server record information that comprises this device id.But, as mentioned above, under the situation that has the wrongful equipment that stores medium ID wrongly, be not limited to identification equipment uniquely.

Content ID discerns and the identifying information that comprises the corresponding content of server record information of this content ID uniquely.

Control part 102 receives the tabulation of user's record information via calling mechanism 300 and the Internet 10 from storage card 200e, extracts device id from the user's record information tabulation that receives.Here, suppose to have extracted 1 device id.

Control part 102 extracts whole server record informations that comprises the device id that is extracted from server record information tabulation 120e.To be called server record information group β by the set that the whole server record information that is extracted constitutes.In addition, the above-mentioned user's record information tabulation that receives is called set α.

Then, control part 102 will be gathered α and set β relatively, the subclass that judgement is set α is in full accord with set β, set α is set β a subclass, set β is set α, or other state.

Under the situation of the subclass that subclass in full accord with set β at set α, that set α is set β or set β are set α, control part 102 will be by the DVD player of the device id identification of extracting as proper equipment, make equipment judge that grade is " 0 ", at set β is under the situation of subclass of set α, set β appended with the difference of set α be written among the server record information tabulation 120e, equipment is judged that grade sends to calling mechanism 300 via the Internet 10.

Under the situation that is other states, control part 102 will be by the DVD player of the device id identification of extracting as wrongful equipment, make equipment judge that grade is " 3 ", the device id that is extracted appended to improper list of devices write, at set β is under the situation of subclass of set α, set β appended with the difference of set α be written among the server record information tabulation 120e, equipment is judged that grade sends to calling mechanism 300 via the Internet 10.

(3) action the during content playback of DVD player

Action when utilizing process flow diagram shown in Figure 22 to the content playback of DVD player describes.

DVD player detects the installation (step S401) of DVD, read self the device id of being stored (step S402), read content ID (step S403) from the DVD that is installed, the device id read and content ID read indication to storage card 200e output (step S404).Storage card 200e attempts the reading of group (audiovisual record information) (step S405) of device id and content ID, will read the result and export (step S406) to DVD player.

DVD player is represented not exist under above-mentioned group the situation reading the result, and the said equipment ID and content ID write indication to storage card 200e output (step S408).Storage card 200e is written to (step S411) among the general area 205e with device id and the content ID that is obtained.

On the other hand, DVD player is read content (step S409) from the DVD that installs, with the content playback of being read (step S410).

Action when (4) DVD buys

Utilize Figure 23～process flow diagram shown in Figure 24, the action of each device when DVD is bought describes.

Calling mechanism is read indication (step S431) to what the tabulation of user's record information was read in the storage card 200e output expression of installing, storage card 200e reads user's record information tabulation 231e (step S432) from general area 205e, and the user's record information tabulation 231e that reads is exported (step S433) to calling mechanism 300.

Calling mechanism 300 sends (step S434) via the Internet 10 to management server apparatus 100 with user's record information tabulation of being obtained.

The control part 102 of management server apparatus 100 receives user's record information tabulation (step S433～S434), extract device id (step S435) from the user's record information tabulation that receives from storage card 200e via calling mechanism 300 and the Internet 10.

Then, control part 102 extracts all and comprises the server record information (step S436) of the device id that is extracted from server record information tabulation 120e.

Then, control part 102 is relatively gathered α and set β, and judgement is that subclass, the set β that set α is in full accord with set β, set α is set β is subclass, or other the state (step S437) of set α.

Under the situation of the subclass that subclass in full accord with set β at set α, that set α is set β or set β are set α, control part 102 makes equipment judge that grade is " 0 " (step S438), at set β is under the situation of subclass of set α, set β appended with the difference of set α be written among the server record information tabulation 120e (step S441), equipment is judged that grade sends (step S442) via the Internet 10 to calling mechanism 300.

Under the situation that is other states, control part 102 makes equipment judge that grade is " 3 " (step S439), the device id that is extracted appended to improper list of devices write (step S440), at set β is under the situation of subclass of set α, set β appended with the difference of set α be written among the server record information tabulation 120e (step S441), equipment is judged that grade sends (step S442) via the Internet 10 to calling mechanism 300.

(5) illustration of the comparison of set α and set β

For control part 102 set α that carries out and the comparison of gathering β, in the expression example, describe.Here, as mentioned above, set α obtains from storage card 200e, and set β extracts from the server record information tabulation 120e that management server apparatus 100 is had.

The 1st example of set α and set β is represented in Figure 25.Set α 601 shown in this figure comprise as content ID " C001 ", " C002 " ..., " C006 ", the set β 602 comprise as content ID " C001 ", " C002 " ..., " C005 ".Like this, set β 602 is subclass of set α 601, so be judged as the device id that is extracted proper.

In addition, in set α 601 shown in Figure 25 and set β 602, omit demonstration for simplification, only displaying contents ID as the device id of the part of the key element of set.In Figure 26, Figure 27 too.

The 2nd example of set α and set β is represented in Figure 26.Set α 603 shown in this figure comprises " C001 ", " C002 " as content ID, the set β 604 comprise as content ID " C001 ", " C002 " ..., " C005 ".Like this, set α 603 is subclass of set β 604, so also be judged as the device id that is extracted proper in the case.

The 3rd example of set α and set β is represented in Figure 27.Set α 605 shown in this figure comprises " X001 ", " YC002 " as content ID, and set β 606 comprises " M001 ", " M002 " as content ID.Like this, set α 605 and the set β 606 mutual relations that are not in subclass are so be judged as the device id that is extracted wrongful in the case.

(6) supplementary notes (1)

Before the user reproduces content at first, do not comprise user's record information among the user's record information tabulation 231e in being stored in storage card 200e.Perhaps, in the case, in storage card 200e, also can not store user's record information tabulation 231e.

In the case, when said memory card 200e is installed in calling mechanism 300, calling mechanism 300 is not owing to comprise user's record information in user's record information tabulation 231e, perhaps owing to there not being user's record information tabulation 231e, so user's record information is not sent to management server apparatus 100.

(7) supplementary notes (2)

As mentioned above, before the user reproduces content at first, do not comprise user's record information among the user's record information tabulation 231e in being stored in storage card 200e.

Then, if the user will be reproduced by content ID " C001 " content identified, then in user's record information tabulation 231e of storage card 200e, write the device id of the equipment that is used to reproduce by identification, user's record information of " ID-A " and content ID " C001 " formation for example.

Then, storage card 200e is installed in the calling mechanism 300, from calling mechanism 300 user's record information tabulation 231e is sent to management server apparatus 100, management server apparatus 100 will be written to by user's record information that " ID-A " and content ID " C001 " constitute among the server record information tabulation 120e.

Then, if the user will be reproduced by content ID " C002 " content identified, then in user's record information tabulation 231e of storage card 200e, write the device id of the equipment that is used to reproduce by identification, user's record information of " ID-A " and content ID " C002 " formation for example.Thereby in the case, user's record information tabulation 231e comprises user's record information that is made of " ID-A " and " C001 " and the user's record information that is made of " ID-A " and " C002 ".

Then, storage card 200e is installed in the calling mechanism 300, from calling mechanism 300 user's record information tabulation 231e is sent to management server apparatus 100, management server apparatus 100 will be written to by user's record information that " ID-A " and content ID " C002 " constitute among the server record information tabulation 120e.

More than, only use under the situation of 1 storage card the subclass of the set α that always sends from storage card 200e by the set β of management server apparatus 100 storage the user.

Then, suppose because certain reason, user are used has and the situation of other storage cards of storage card 200e same structure.The situation that the memory capacity of the situation of using the reason of other storage cards can consider user for example storage card 200e is lost, the situation that storage card 200e damages, storage card 200e is all used up etc.

In the case, suppose that the user uses above-mentioned other storage card to reproduce the content identified by content ID " C001 ".At this moment, in the tabulation of user's record information of other storage cards, write the device id of the equipment that is used to reproduce by identification, user's record information of " ID-A " and content ID " C001 " formation for example.Thereby in the case, the tabulation of user's record information of these other storage cards comprises the user's record information that is made of " ID-A " and " C001 ".

In the case, because the user only uses the 2nd storage card, so the subclass of the set α that is not always sent from storage card 200e by the set β of management server apparatus 100 storages, set α is the subclass of set β.

Under these circumstances, can will regard proper equipment as by the equipment of the said equipment ID identification.

According to above reason, control part 102 is that the situation and the set β of the subclass of set β is under the situation both of these case of subclass of set α at set α, will be speculated as proper equipment by the equipment of the said equipment ID identification.

(8) DVD player as the reproduction of content device also can as described belowly constitute.

DVD player is by constituting with the lower part: the identifier storage part stores the device identifier of discerning self; The resume storage part, if BD has been installed, if perhaps having accepted user's the reproduction of content that is stored among the BD indicates, then at every turn, promptly at every turn when content playback, obtain the content identifier of this content of identification from BD, and the date temporal information of the time on date that obtained content identifier and expression are reproduced is stored with the reproduction of content order as the reproduction record information of this reproduction of content of expression; Write section, if storage card is installed in the DVD player, then the storage card to installing is written to the said equipment identifier, above-mentioned reproduction record information and above-mentioned reproduction order in the said memory card.

3, variation (2)

Here, the improper device detection system 1f (not shown) as the further variation of improper device detection system 1e is described.

In improper device detection system 1f, as described below, management server apparatus 100 stores the content ID that the content of being reproduced by the DVD player of this device id identification more than 1 is used in identification respectively accordingly with device id, with expression with the reproduction order of the order of these content playbacks number, identification is used the set of the content ID of the content of reproducing by the DVD player of specific device id identification and reproduction order number, compare with the set corresponding content ID of the said equipment ID and reproduction order number with storage in management server apparatus 100, gather under the on all four situation in a set and another, promptly all content ID in being included in a set are in full accord with all content ID that are included in another set, and each group about two content ID of unanimity, under the situation of reproduction order unanimity separately, to be speculated as proper equipment by the DVD player of this device id identification, otherwise, will be speculated as wrongful equipment by the DVD player of this device id identification.

Improper device detection system 1f has the structure same with improper device detection system 1e.Here, be that the center describes with difference with improper device detection system 1e.

(1) structure of storage card 200e

In improper device detection system 1f, use storage card 200e equally with improper device detection system 1e.The storage part 203e of storage card 200e possesses general area 205e, and general area 205e replaces user's record information tabulation 231e and has user's record information tabulation 231f shown in Figure 28.Here, describe as the center with difference with the storage card 200e that in improper device detection system 1e, uses.

User's record information tabulation 231f possesses the zone that is used for storing the user's record information more than 1.

Each user's record information comprises 1 device id, 1 reproduction order number and 1 each content ID, and user's record information is corresponding to 1 content reproducing in 1 equipment (being DVD player in this embodiment).

Device id be discern uniquely will with the identifying information of the equipment (being DVD player in this embodiment) of the corresponding content playback of user's record information that comprises this device id.But, as mentioned above,, be not limited to identification equipment uniquely existing under the situation of the improper equipment of medium ID wrongly.

Content ID discerns and the identifying information that comprises the corresponding content of user's record information of this content ID uniquely.

Reproduction order number is expression and the corresponding content of user's record information that comprises this reproduction order number, the information of the order of reproducing in the said equipment.

(2) structure of management server apparatus 100

Management server apparatus 100 has the structure same with the management server apparatus 100 of improper device detection system 1e.Here, be that the center describes with difference with the management server apparatus 100 of improper device detection system 1e.

Management server apparatus 100 replaces server record information tabulation 120e and has server record information tabulation 120f shown in Figure 29 in admin table storage part 103.

Server record information tabulation 120f comprises a plurality of server record informations, and each server record information is corresponding to 1 content reproducing in 1 equipment (being DVD player in this embodiment).

Each server record information comprises device id, reproduction order number and content ID.

Device id be discern uniquely will with the identifying information of the equipment of the corresponding content playback of server record information that comprises this device id.But, as mentioned above, under the situation that has the wrongful equipment that stores medium ID wrongly, be not limited to identification equipment uniquely.

Content ID discerns and the identifying information that comprises the corresponding content of server record information of this content ID uniquely.

The information of the reproduction order order that number to be expression reproduce in the said equipment with the corresponding content of server record information that comprises this reproduction order number.

Control part 102 receives the tabulation of user's record information via calling mechanism 300 and the Internet 10 from storage card 200e, extracts device id from the user's record information tabulation that receives.Here, suppose to have extracted 1 device id.

Control part 102 extracts whole server record informations that comprises the device id that is extracted from server record information tabulation 120f.To be called server record information group β by the set that the whole server record information that is extracted constitutes.In addition, the above-mentioned user's record information tabulation that receives is called set α.

Then, control part 102 will be gathered α and set β relatively, and judgement is set α, or other a state in full accord with set β.

Here, so-called in full accord, be meant following state.

Be included in all content ID of set among the α, in full accord with all content ID that are included among the set β, and, for each group of two content ID of unanimity, corresponding to two reproduction order unanimities of each content ID.

Under set α and set β on all four situation, control part 102 will make equipment judge that grade is " 0 " by the DVD player of the device id identification of extracting as proper equipment, and equipment is judged that grade sends to calling mechanism 300 via the Internet 10.

Under the situation that is other states, control part 102 will be by the DVD player of the device id identification of extracting as wrongful equipment, make equipment judge that grade is " 3 ", the device id that is extracted appended to improper list of devices write, to gather α and append and be written among the server record information tabulation 120f, equipment will be judged that grade sends to calling mechanism 300 via the Internet 10.

Action when (3) DVD buys

Utilize process flow diagram shown in Figure 30, the action of the management server apparatus 100 when DVD is bought describes.

The control part 102 of management server apparatus 100 receives the tabulation of user's record information from storage card 200e via calling mechanism 300 and the Internet 10, extract device id from the user's record information tabulation that receives, from server record information tabulation 120e, extract all and comprise the server record information of the device id that is extracted.

Then, control part 102 is relatively gathered α and set β, under being contained in the content ID of set among the α situation consistent (step S437f) with being included in the content ID that gathers among the β, reproduction order number relatively, under the situation of two reproduction order unanimities, promptly under set α and set β on all four situation (step S451), control part 102 makes equipment judge that grade is " 0 " (step S438f).

Under the situation that is other states (step S437f), control part 102 makes equipment judge that grade is " 3 " (step S439f), appends the device id that is extracted and writes (step S440f) to improper list of devices.

(4) illustration of the comparison of set α and set β

For control part 102 set α that carries out and the comparison of gathering β, in the expression example, describe.Here, as mentioned above, set α obtains from storage card 200e, and set β extracts from the server record information tabulation 120e that management server apparatus 100 is had.

The 1st example of set α and set β is represented in Figure 31.Set α 611 shown in this figure is as the group of reproduction order number and content ID and comprise { " 1 ", " C001 " }, { " 2 ", " C002 " }, { " 3 ", " C003 " }, { " 4 ", " C004 " }, { " 5 ", " C005 " }, set β 612 comprises { " 1 ", " C001 " }, { " 2 " as the group of reproduction order number and content ID, " C002 " }, { " 3 ", " C003 " }, { " 4 ", " C004 " }, { " 5 ", " C005 " }.

In the case, because set α 611 is in full accord with set β 612, so be speculated as the device id that is extracted proper.

The 2nd example of set α and set β is represented in Figure 32.Set α 613 shown in this figure is as the group of reproduction order number and content ID and comprise { " 2 ", " C001 " }, { " 1 ", " C002 " }, { " 3 ", " C003 " }, { " 4 ", " C004 " }, { " 5 ", " C005 " }, set β 614 comprises { " 1 ", " C001 " }, { " 2 " as the group of reproduction order number and content ID, " C002 " }, { " 3 ", " C003 " }, { " 4 ", " C004 " }, { " 5 ", " C005 " }.Like this, if relatively gather α 613 and set β 614, though then be included in the content ID unanimity in each set, content ID " C001 " reaches the reproduction order difference of " C002 ".Thereby, in the case, be speculated as the device id that is extracted wrongful.

(5) variation of improper device detection system 1f

In above-mentioned, under set α and the on all four situation of set β, be speculated as proper equipment, but be not limited to this.Except set α and the on all four situation of set β, also can be for as follows.

Control part 102 is conceived to the content ID as the part of the key element of the content ID of the part of the key element of set α and conduct set β, relatively as the set A of the content ID of the key element of set α with as the set B of the content ID of the key element of set β, judgement is that set A is the subclass of set B, subclass that set B is set A, or other state.

Then, control part 102 is under the situation of subclass of set B in set A, and set B is under the situation of subclass of set A, extracts to be included in set A and the set B content ID more than 1 among both.

Then, to each the content ID that is extracted, extract corresponding reproduction order number from set α, it is good to extract corresponding reproduction order from set β, judges whether two reproduction order being extracted are number consistent.Under two inconsistent situations of reproduction order being extracted, the device id that is extracted is speculated as the device id of the wrongful equipment of identification.

For all content ID that extracted, under the situation of two reproduction order unanimities being extracted, the device id that is extracted is speculated as the device id of the proper equipment of identification.

4, variation (3)

Here, the improper device detection system 1g (not shown) as the further variation of improper device detection system 1f is described.

As to described in the explanation of improper device detection system 1f, before the user is at first with content playback, do not comprise user's record information among the user's record information tabulation 231f in being stored in storage card 200e.

Then, if the user will be reproduced by content ID " C001 " content identified, then the device id of the equipment that will be used to reproduce by identification, user's record information of constituting of " ID-A " and reproduction order number " 1 " and content ID " C001 " for example are written among user's record information tabulation 231f of storage card 200e.

Then, storage card 200e is installed in the calling mechanism 300,231f sends to management server apparatus 100 from calling mechanism 300 with the tabulation of user's record information, and management server apparatus 100 will be written to by user's record information that " ID-A ", reproduction order number " 1 " and content ID " C001 " constitute among the server record information tabulation 120f.

Then, if the user will be reproduced by content ID " C002 " content identified, the then device id of the equipment that will be used for reproducing by identification, user's record information of constituting of " ID-A ", reproduction order number " 2 " and content ID " C002 " user's record information of being written to storage card 200e 231f that tabulates for example.Thereby in the case, user's record information tabulation 231f comprises user's record information that is made of " ID-A ", " 1 " and " C001 " and the user's record information that is made of " ID-A ", " 2 " and " C002 ".

Then, storage card 200e is installed in the calling mechanism 300,231f sends to management server apparatus 100 from calling mechanism 300 with the tabulation of user's record information, and management server apparatus 100 will be written to by user's record information that " ID-A ", reproduction order number " 1 " and content ID " C002 " constitute among the server record information tabulation 120f.

As described above, only use under the situation of 1 storage card the subclass of the set α that always sends from storage card 200e by the set β of management server apparatus storage the user.

Then, suppose that the user uses other storage cards with structure identical with storage card 200e, will be reproduced by content ID " C003 " content identified.About the reason of using other storage cards as mentioned above.At this moment, in other user's information list of storage card, write the device id of the equipment that identification is used to reproduce, user's record information of " ID-A ", reproduction order number " 1 " and content ID " C003 " formation for example.Thereby in the case, the tabulation of user's record information of these other storage cards comprises the user's record information by " ID-A ", reproduction order number " 1 " and " C003 " formation.

Under these circumstances, not the subclass of the set α that sends from storage card 200e by the set β of management server apparatus 100 storage, in addition, set α neither gather the subclass of β.But, also can will regard proper as under these circumstances by the equipment of the said equipment ID identification.

Here, the state that in user's record information tabulation 231f of storage card 200e, does not comprise user's record information at first, then append and write by " ID-A ", the state of user's record information that " 1 " and " C001 " constitutes, append again and write by " ID-A ", the state of user's record information that " 2 " and " C002 " constitute, append then and write by " ID-A ", the state of user's record information that reproduction order number and other guide ID constitute, also comprise same state then, these a plurality of states are called 1 the audiovisual resume series (the 1st audiovisual resume series) that belongs to identical.

In addition, in the tabulation of user's record information of other storage cards, write the state of the user's record information that constitutes by " ID-A ", reproduction order number " 1 " and content ID " C003 ", then write, also comprised same state then, these a plurality of states have been called 1 the audiovisual resume series (the 2nd audiovisual resume series) that belongs to identical by the state of user's record information of " ID-A ", reproduction order number and other guide ID formation.

The 1st audiovisual resume series and the 2nd audiovisual resume series are corresponding to identical device id, but the 1st audiovisual resume serial be different with the 2nd audiovisual resume series.

(1) structure of improper device detection system 1g

The management server apparatus 100 of improper device detection system 1g utilizes the server record information tabulation 120f (the server record information tabulation 120f that is had with improper device detection system 1f is identical) that is stored in the inside, extract corresponding to the device id identical from storage card 200f with the device id that receives via calling mechanism 300, audiovisual resume series more than 1, judge that audiovisual resume series that the user's record information tabulation receive belongs to is whether identical with any of the audiovisual resume series of being extracted, if it is identical, then calculate the serial number of the quantity of the audiovisual resume series that expression extracted, if it is different, then the quantity to the audiovisual resume series extracted adds " 1 " and calculates serial number, with the serial number that calculates and the threshold value of regulation, for example compare " 100 ", if the serial number that calculates is bigger than " 100 ", then will be speculated as wrongful equipment by the equipment of the device id identification that receives, if the serial number that calculates is littler or equal than " 100 ", then will be speculated as proper equipment by the equipment of the device id identification that receives.

Improper device detection system 1g has the structure identical with improper device detection system 1f.Here, be that the center describes with difference with improper device detection system 1f.

In improper device detection system 1g, use storage card 200e with structure identical with improper device detection system 1f.Storage card 200e has user's record information tabulation 231f shown in Figure 28.

(2) structure of management server apparatus 100

The management server apparatus 100 of improper device detection system 1g has the structure same with the management server apparatus 100 of improper device detection system 1f.Here, be that the center describes with difference with the management server apparatus 100 of improper device detection system 1f.

Management server apparatus 100 has server record information tabulation 120f shown in Figure 29 in admin table storage part 103.

About server record information tabulation 120f as mentioned above.In addition, in server record information tabulation 120f, the server record information that belongs to identical audiovisual resume series is adjacent to configuration, arranges by the ascending order of reproduction order number.

Control part 102 receives the tabulation of user's record information from storage card 200e via calling mechanism 300 and the Internet 10, extracts device id from the user's record information tabulation that receives.Here, establish and extract 1 device id.

Control part 102 extracts the server record information that all comprises the device id that is extracted from server record information tabulation 120f.The whole server record information that is extracted is called server record information group.Server record information group's a example is expressed as server record information group 621 in Figure 34.

Then, all server record informations that extracted are categorized as shown below like that audiovisual resume series more than 1.

In server record information tabulation 120f, be adjacent to configuration owing to belong to the server record information of identical audiovisual resume series, ascending order by reproduction order number is arranged, so with all server record informations of being extracted successively 1 each and every one read, reproduction order in the server record information of reading being included in number, with the reproduction order comparison that is included in preceding 1 server record information of reading, if this reproduction order number is number littler than preceding 1 reproduction order, then regard preceding 1 the server record information of reading and this server record information of reading as represent audiovisual resume series border, to arrive the server record information read till preceding 1 as 1 audiovisual resume series, with after this server record information of reading as another audiovisual resume series.

In server record information group 621 shown in Figure 34, the set 631 of a plurality of server record informations belongs to 1 audiovisual resume series, the set 632 of a plurality of server record informations in addition belongs to 1 audiovisual resume series in addition, and the set 633 of other more a plurality of server record informations belongs to 1 audiovisual resume series in addition again.As shown in the drawing, on set 631 and set 632 border, the value of reproduction order number is reduced to " 1 " from " 3 ".

Like this, control part 102 is categorized as audiovisual resume series more than 1 with all server record informations that extracted.

Whether then, control part 102 is judged the audiovisual resume series that user's record information tabulation of receiving belongs to, be identical with any of the audiovisual resume series of being extracted.If identical, then calculate the serial number of the quantity of the audiovisual resume series that expression extracted, if different, then the quantity to the audiovisual resume series extracted adds " 1 " and calculates serial number.

Then, the serial number that control part 102 will calculate and the threshold value of regulation, for example " 100 " comparison, if the serial number that calculates is bigger than " 100 ", then will be speculated as wrongful equipment by the equipment of the device id identification that receives, equipment is judged that grade is made as " 3 ", the device id that is extracted appended to improper list of devices write, the tabulation of user's record information of receiving appended be written among the server record information tabulation 120f, equipment is judged that grade sends to calling mechanism 300 via the Internet 10.

If the serial number that calculates is littler or equal than " 100 ", then control part 102 will be speculated as proper equipment by the equipment of the device id identification that receives, equipment is judged that grade is made as " 0 ", the tabulation of user's record information of receiving appended be written among the server record information tabulation 120f, equipment is judged that grade sends to calling mechanism 300 via the Internet 10.

Action when (3) DVD buys

Utilize process flow diagram shown in Figure 33, the action of the management server apparatus 100 when DVD is bought describes.

Calling mechanism is read indication (step S431) to what the tabulation of user's record information was read in the storage card 200e output expression of installing, storage card 200e reads user's record information tabulation 231f (step S432) from general area 205e, the user's record information tabulation 231f that reads is exported (step S433) to calling mechanism 300.

Calling mechanism 300 sends (step S434) via the Internet 10 to management server apparatus 100 with user's record information tabulation of being obtained.

The control part 102 of management server apparatus 100 receives user's record information tabulation (step S433～S434), extract device id (step S435) from received user's record information tabulation via calling mechanism 300 and the Internet 10 from storage card 200e.

Then, control part 102 extracts the Servers-all record information (step S436) that comprises the device id that extracts to some extent from server record information tabulation 120f.

Then, control part 102 utilizes user's record information tabulation that receives and all server record informations that extract, extract audiovisual resume series, calculate the serial number of the audiovisual resume series of being extracted, the serial number that calculates temporarily is stored in (step S461) in the inside.

Then, the serial number that control part 102 will calculate and store compares with " 100 ", if the serial number that calculates and store is than " 100 " big (step S462), then equipment is judged that grade is made as " 3 " (step S439), the device id that is extracted is appended to improper list of devices write (step S440).

If the serial number that calculates and store is than " 100 " little or equal (step S462), then control part 102 judges that with equipment grade is made as " 0 " (step S438).

Then, control part 102 appends the user's record information tabulation that receives and is written among the server record information tabulation 120f (step S441), and equipment is judged that grade sends (step S442) via the Internet 10 to calling mechanism 300.

5, other variation

In addition, describe the present invention, but the present invention is not limited to above-mentioned embodiment certainly according to above-mentioned embodiment.Below such situation be also contained among the present invention.

(1) in the above-described embodiment, DVD player will be recorded in the encrypted content deciphering among the DVD and reproduce, but be not limited to this.Also can replace DVD player, obtain encrypted content by content playback unit via the Internet and be decrypted and reproduce.In addition, also can with encrypted content by digital broadcasting broadcast, digital broacast receiver receives broadcast wave, extract encrypted content from the broadcast wave that receives, with the encrypted content deciphering of extracting and reproduce.

In addition, also can be that with encrypted content key recording of encrypted content, content playback unit is read encrypted content, the encrypted content of reading is deciphered and reproduced from storage card in the storage card of movable-type.

(2) in the above-described embodiment, DVD player has been distributed 1 Device keys, but the number of distributing to the Device keys of 1 transcriber might not be 1, also can be a plurality of.And then, also can be by the shared identical Device keys of a plurality of device ids.

(3) in the above-described embodiment, by content key encryption, content key is encrypted by Device keys, but the present invention is not limited to this structure with content.

For example, also can in the key level, append one deck again, become content is passed through content key encryption, content key is encrypted, media key is encrypted such key level by Device keys by media key.Do not need special restriction in the number of plies of key level.

(4) in the above-described embodiment, management server apparatus judges that being to use the regular equipment of content still is improper equipment, detect improper equipment, but the present invention is not limited to this structure.

For example, also can replace the present invention is applied in the content using system and be applied in the periodical ticket using system of electric car etc., management equipment judges that its use is regular use or improper use, detects improper use.

For example, the periodical ticket using system by the portable terminal device with device id and record periodical ticket information and have medium ID removable media to and the ticket checking machine that is arranged in the station constitute.Removable media is inserted in the portable terminal device and uses.The management server apparatus of ticket checking machine and above-mentioned embodiment similarly moves.The group of ticket checking machine management equipment ID and medium ID, for example be inserted under the situation about using in other people portable terminal device at certain removable media, management equipment can judge that these medium ID is to use with the group that different device id constitutes, so can detect the improper utilization of removable media.

And then, in the case, also can be the structure that threshold value is set, can sets the quantity (quantity of device id) of the equipment that 1 removable media can use.

In addition, so long as utilize device id and medium ID to detect the system of improper equipment or improper use, also can use the present invention in the system beyond above-mentioned.

(5) in the above-described embodiment, use the form of shop equipment for the user keeps removable media, but the present invention is not limited to this structure.

For example, also can use MAC Address to replace medium ID.Via network device id and MAC Address are sent to management equipment, management equipment utilizes MAC Address to carry out the judgement of improper equipment, if not improper equipment, then sends encrypted content key.

In addition, beyond MAC Address, also can be to use to have form intrinsic information, for example IC-card that to rewrite.The present invention is so long as the form of the intrinsic information that utilization can not be rewritten or change also can be that any structure replaces medium ID.

(6) in embodiments of the present invention, be the form of the intrinsic medium ID of removable media maintenance, but the present invention is not limited to this structure.For example, also can be that (manageable) a plurality of removable medias of setting have the structure of identical medium ID.

(7) in embodiments of the present invention, have a plurality of threshold values, gave a warning before being judged as improper equipment under the situation that has surpassed the 1st threshold value, judging in the situation that has surpassed the 2nd threshold value is improper equipment, but also can use 1 threshold value.If bigger then be speculated as wrongful equipment than threshold value, if would be speculated as proper equipment with next for threshold value.

(8) in above-mentioned embodiment and variation, also can use IC-card to replace storage card.

(9) in above-mentioned embodiment and variation, also management server apparatus 100 can be combined, realizes as the device of one with calling mechanism 300.

(10) each above-mentioned device particularly is the computer system that is made of microprocessor, ROM, RAM, hard disk unit, display unit, keyboard, mouse etc.In above-mentioned RAM or above-mentioned hard disk unit, store computer program.Here, computer program makes up a plurality of expressions the command code of the instruction of computing machine is constituted for the function that realizes stipulating.According to aforementioned calculation machine program behavior, each device is realized its function by above-mentioned microprocessor.That is, above-mentioned microprocessor will be included in the aforementioned calculation machine program respectively order 1 each and every one read, the order of reading is understood, according to understanding result action.

(11) part or all of the textural element of above-mentioned each device of formation also can be by 1 system LSI (Large Scale Integration: large scale integrated circuit) constitute.System LSI is a plurality of structural portion to be integrated on 1 chip and the super multi-functional LSI that makes, particularly is to comprise microprocessor, ROM, RAM etc. and the computer system that constitutes.In above-mentioned RAM, store computer program.According to aforementioned calculation machine program behavior, system LSI is realized its function by above-mentioned microprocessor.

In addition, constitute each single chip individually of the textural element of above-mentioned each device, also can comprise part or all and single chip.In addition, be made as LSI here, but according to the difference of integrated level, be also referred to as IC, system LSI, super (super) LSI, (ultra) LSI very sometimes.

In addition, the method for integrated circuit is not limited to LSI, also can realize by special circuit or general processor.Field programmable gate array) and can reconstruct the connection of circuit unit of LSI inside and the reconfigurable processor of setting after LSI makes, also can use programmable FPGA (FieldProgrammable Gate Array:.

(12) constituting part or all also can be in each device detachable IC-card of textural element of each above-mentioned device or the module of monomer constitutes.Above-mentioned IC-card or above-mentioned module are the computer systems that is made of microprocessor, ROM, RAM etc.Above-mentioned IC-card or above-mentioned module also can comprise above-mentioned super multi-functional LSI.Move according to computer program by microprocessor, above-mentioned IC-card or above-mentioned module realize its function.This IC-card or this module also can have tamper-resistance properties.

(13) the present invention also can be the method shown in above-mentioned.In addition, also can be computer program by these methods of computer realization, also can be the digital signal that constitutes by aforementioned calculation machine program.

Blu-ray Disc), the product that forms in the semiconductor memory etc. in addition, the present invention also can be at the recording medium of embodied on computer readable, for example floppy disk, hard disk, CD-ROM, MO, DVD, DVD-ROM, DVD-RAM, BD (Blu-ray Disc: with aforementioned calculation machine program or above-mentioned digital signal record.In addition, also can be aforementioned calculation machine program or the above-mentioned digital signal that is recorded in these recording mediums.

In addition, the present invention also can be to be the structure that the network, data broadcasting etc. of representative transmit via electrical communication line, wireless or wire communication line, with the Internet with aforementioned calculation machine program or above-mentioned digital signal.

In addition, the present invention also can be the computer system that possesses microprocessor and storer, and above-mentioned memory stores has aforementioned calculation machine program, and above-mentioned microprocessor is according to aforementioned calculation machine program behavior.

In addition, also can by with said procedure or above-mentioned digital signal record in above-mentioned recording medium and transfer, perhaps with said procedure or above-mentioned digital signal via handovers such as networks, implement by other computer systems independently.

(14) also above-mentioned embodiment and above-mentioned variation can be made up respectively.

(15) sum up

As described above, the present invention is the improper device detection system that the removable media by the wrongful management equipment of utilizing equipment, management and utilization equipment of utilizing content and record data constitutes.The above-mentioned equipment that utilizes possesses the storage part that storage can be discerned the device identifying information of this equipment.Above-mentioned removable media possesses the 1st storage area of storage the said equipment identifying information and the 2nd storage area that storage can be discerned the media identification information of this removable media.Above-mentioned management equipment possess from the 1st storage area of above-mentioned removable media and the 2nd storage area respectively readout equipment identifying information and media identification information the portion of reading and judge according to above-mentioned device identifying information of reading and media identification information whether the equipment that utilizes of possessing the said equipment identifying information is the judging part of improper equipment.

Here, above-mentioned management equipment also can possess the table generating unit that generates the admin table of management of media identifying information based on the said equipment identifying information.

Here, also can be, above-mentioned management equipment possesses storage and is used for judging whether to be the threshold value storage part of the threshold value of improper equipment, the table generating unit of above-mentioned management equipment is counted media identification information based on device identifying information, generate the admin table of the sum of the above-mentioned counting of storage, the judging part of above-mentioned management equipment surpasses the situation that is stored in the threshold value in the above-mentioned threshold value storage part at the sum of above-mentioned counting and judges and be improper equipment.

Here, also can be that the threshold value storage part of above-mentioned management equipment is to the threshold value of each device identifying information storage more than 1.

Here, also can be, above-mentioned management equipment possesses: with device identifying information accordingly the selection portion of utilizing required content key, the content key that will select by above-mentioned selection portion of Device keys storage part, the chosen content of memory device key add compact part and the content key of above-mentioned encryption be written to write section in the above-mentioned removable media by what encrypt corresponding to the Device keys of the said equipment identifying information, above-mentioned removable media possesses the 3rd storage area of the above-mentioned encrypted content key of storage.

Here, also can be whether the above-mentioned device identifying information that utilizes equipment to possess to judge self storage is stored in judging part and the write section in above-mentioned the 1st storage area that the said equipment identifying information is written under for the situation that not have to store above-mentioned removable media by judgement section judges in the above-mentioned removable media.

Here, also can be, above-mentioned removable media possesses the 3rd storage area of the content key of the required encryption of utilizing of memory contents, and the above-mentioned equipment that utilizes possesses the portion of reading of reading corresponding to the encrypted content of this equipment from the 3rd storage area of above-mentioned removable media storage.

Here, also can be, above-mentioned removable media possesses the 3rd storage area of content key of the required encryption of utilizing of memory contents and storage the 4th storage area by the content of foregoing secret key encryption, and the above-mentioned equipment that utilizes possesses the portion of reading of reading the content of encryption from the 4th storage area of above-mentioned removable media storage.

Here, also can be, above-mentioned removable media possesses the 3rd storage area of the content key of the required encryption of utilizing of memory contents, and the above-mentioned equipment that utilizes possesses the judging part that judges whether to exist the required encrypted content key of this equipment from the 3rd storage area of above-mentioned removable media storage.

Here, above-mentioned removable media also can be a storage card.

Here, above-mentioned removable media also can be an IC-card.

In addition, the present invention is the wrongful management equipment of utilizing equipment of management and utilization content, the removable media of record data possesses storage can discern above-mentioned the 1st storage area that utilizes the device identifying information of equipment, and storage can discern the 2nd storage area of media identification information of this removable media, and above-mentioned management equipment possesses from the 1st storage area of above-mentioned removable media and the 2nd storage area portion of reading of readout equipment identifying information and media identification information respectively, with judge according to the above-mentioned device identifying information of reading and media identification information whether the equipment that utilizes of possessing the said equipment identifying information is the judging part of improper equipment.

Here, also can be that above-mentioned management equipment possesses the table generating unit that generates the admin table of management of media identifying information based on the said equipment identifying information.

Here, also can be, above-mentioned management equipment possesses storage and is used for judging whether to be the threshold value storage part of the threshold value of improper equipment, the table generating unit of above-mentioned management equipment is counted media identification information based on device identifying information, generate the admin table of the sum of the above-mentioned counting of storage, the judging part of above-mentioned management equipment surpasses the situation that is stored in the threshold value in the above-mentioned threshold value storage part at the sum of above-mentioned counting and judges and be improper equipment.

Here, also can be that the threshold value storage part of above-mentioned management equipment is to the threshold value of each device identifying information storage more than 1.

Here, also can be that above-mentioned management equipment possesses that the selection portion of utilizing required content key, the content key that will be selected by above-mentioned selection portion of Device keys storage part, the chosen content of memory device key add compact part and the content key of above-mentioned encryption is written to write section in the above-mentioned removable media by what encrypt corresponding to the Device keys of the said equipment identifying information accordingly with device identifying information.

In addition, the present invention is the equipment that utilizes that utilizes content, the removable media of record data possesses storage can discern the 1st storage area of the above-mentioned device identifying information that utilizes equipment and the 2nd storage area that storage can be discerned the media identification information of this removable media, and the above-mentioned equipment that utilizes possesses the storage part that storage can be discerned the device identifying information of this equipment.

Here, also can be whether the above-mentioned device identifying information that utilizes equipment to possess to judge self storage is stored in judging part and the write section in above-mentioned the 1st storage area that the said equipment identifying information is written under for the situation that not have to store above-mentioned removable media by judgement section judges in the above-mentioned removable media.

Here, also can be, above-mentioned removable media possesses the 3rd storage area of the content key of the required encryption of utilizing of memory contents, and the above-mentioned equipment that utilizes possesses the portion of reading of reading corresponding to the encrypted content of this equipment from the 3rd storage area of above-mentioned removable media storage.

Here, also can be, above-mentioned removable media possesses the 3rd storage area of content key of the required encryption of utilizing of memory contents and storage the 4th storage area by the content of foregoing secret key encryption, and the above-mentioned equipment that utilizes possesses the portion of reading of reading the content of encryption from the 4th storage area of above-mentioned removable media storage.

Here, also can be, above-mentioned removable media possesses the 3rd storage area of the content key of the required encryption of utilizing of memory contents, and the above-mentioned equipment that utilizes possesses the judging part that judges whether to exist the required encrypted content key of this equipment from the 3rd storage area of above-mentioned removable media storage.

In addition, the present invention is the removable media of record data also, and above-mentioned removable media possesses storage can discern the 1st storage area of the device identifying information that utilizes equipment that utilizes content and the 2nd storage area that storage can be discerned the media identification information of this removable media.

Here, also can be that above-mentioned removable media possesses the 3rd storage area of the content key of the required encryption of utilizing of memory contents.

Here, above-mentioned removable media also can be a storage card.

Here, above-mentioned removable media also can be an IC-card.

In addition, the present invention is the improper detection system of utilizing that the removable media by management management equipment of improper utilization and record data constitutes.Above-mentioned removable media possesses storage can discern the 1st storage area of the device identifying information that utilizes equipment and the 2nd storage area that storage can be discerned the media identification information of this removable media.Above-mentioned management equipment possess from the 1st storage area of above-mentioned removable media and the 2nd storage area respectively readout equipment identifying information and media identification information the portion of reading and judge according to above-mentioned device identifying information of reading and media identification information whether the equipment that utilizes of possessing the said equipment identifying information is the judging part of improper equipment.

Here, also can be that above-mentioned management equipment possesses and generates management the said equipment identifying information with the table generating unit of the admin table of the group of above-mentioned media identification information with based on above-mentioned media identification information, under the situation that obtains different device identifying informations this utilization is judged as wrongful judging part.

Here, also can be that above-mentioned management equipment possesses each above-mentioned medium intrinsic information is provided with different threshold values and the storage part stored.

In addition, the present invention is the management equipment of the improper utilization of management, and the removable media of record data possesses storage can discern the 1st storage area of the device identifying information that utilizes equipment and the 2nd storage area that storage can be discerned the media identification information of this removable media.Above-mentioned management equipment possess from the 1st storage area of above-mentioned removable media and the 2nd storage area respectively readout equipment identifying information and media identification information the portion of reading and judge according to above-mentioned device identifying information of reading and media identification information whether the equipment that utilizes of possessing the said equipment identifying information is the judging part of improper equipment.

Here, also can be that above-mentioned management equipment possesses and generates management the said equipment identifying information with the table generating unit of the admin table of the group of above-mentioned media identification information with based on above-mentioned media identification information, under the situation that obtains different device identifying informations this utilization is judged as wrongful judging part.

Here, also can be that above-mentioned management equipment possesses each above-mentioned medium intrinsic information is provided with different threshold values and the storage part stored.

In addition, the present invention is the improper equipment detection method that uses in the removable media of the wrongful management equipment of utilizing equipment, management and utilization equipment of utilizing content and record data, it is characterized in that, comprise: storing step, store the device identifying information that can discern this equipment in the equipment above-mentioned the utilization; The 1st storing step, storage the said equipment identifying information in above-mentioned removable media; The 2nd storing step, storage can be discerned the media identification information of this removable media; Reading step, the 1st storage area and the 2nd storage area from above-mentioned removable media in above-mentioned management equipment are distinguished readout equipment identifying information and media identification information; Determining step judges according to above-mentioned device identifying information of reading and media identification information whether the use equipment of possessing the said equipment identifying information is improper equipment.

Industrial applicibility

Consist of each device of the present invention and medium detect wrongful equipment at needs institute In the industry that has, particularly in the contents distribution industry of making and distributing contents, can manage Property ground also continues and uses repeatedly. In addition, consisting of each device of the present invention and recording medium exists Can also continue to reach to make repeatedly, sell in operational ground in the electric equipment manufacturing industry.

Claims (10)

1, a kind of improper assembly detection apparatus detects the wrongful equipment of making by copying, and it is characterized in that possessing:

Medium are counted storing mechanism, store the medium number by the employed rewritable removable media of equipment that keeps the device identifier identical with the object-based device identifier, wherein this object-based device identifier is kept by the detected object equipment as the object of improper detection;

Relatively mechanism compares predefined improper threshold value and the above-mentioned medium number that calculates; And

The identifier storing mechanism surpasses under the situation of above-mentioned improper threshold value at above-mentioned medium number, stores above-mentioned object-based device identifier.

2, improper assembly detection apparatus as claimed in claim 1 is characterized in that,

Above-mentioned improper assembly detection apparatus also comprises:

Obtaining section obtains the object media identifier of this object removable media of identification and the object-based device identifier that this detected object equipment is kept from the rewritable object removable media that is used by above-mentioned detected object equipment;

Storage part, the management equipment identifier that is kept with management object equipment by the object that becomes improper detection in the past accordingly, the management of media identifier more than 1 of the rewritable removable media more than 1 that is used by this management object equipment is discerned in storage respectively; And

Calculation mechanism, use above-mentioned management device identifier and the above-mentioned management media identifier and the obtained above-mentioned object-based device identifier and the above-mentioned object media identifier of being stored, calculate the number of the device identifier pairing management of media identifier identical and the number sum of object media identifier with obtained object-based device identifier, as above-mentioned medium number, and the above-mentioned medium number that will calculate is written to above-mentioned medium and counts in the storing mechanism.

3, improper assembly detection apparatus as claimed in claim 2 is characterized in that,

Above-mentioned relatively mechanism also will be littler than above-mentioned improper threshold value warning threshold, compare with the above-mentioned medium number that calculates;

At the above-mentioned medium number that calculates is below the above-mentioned improper threshold value, and surpasses under the situation of above-mentioned warning threshold, and above-mentioned identifier storing mechanism is also stored obtained above-mentioned object-based device identifier.

4, improper assembly detection apparatus as claimed in claim 2 is characterized in that,

The said equipment is the contents decryption that will encrypt and the reproducer that reproduces;

Above-mentioned improper assembly detection apparatus also comprises:

Forbid mechanism, surpass under the situation of improper threshold value, forbid the decruption key that above-mentioned object removable media output is used for the contents decryption that will encrypt at the above-mentioned medium number that calculates; And

Output mechanism does not surpass under the situation of improper threshold value at the above-mentioned medium number that calculates, and above-mentioned object removable media is exported above-mentioned decruption key.

5, improper assembly detection apparatus as claimed in claim 1 detects the wrongful equipment of making by copying, and it is characterized in that, comprising:

Series number storing mechanism, store by the equipment that keeps the device identifier identical with the object-based device identifier and watch the serial number of the audiovisual resume series of the content of listening to, wherein this object-based device identifier is kept by the detected object equipment as the object of improper detection;

Relatively mechanism compares predefined improper threshold value and the above-mentioned serial number that calculates; And

Storing mechanism surpasses under the situation of above-mentioned improper threshold value at above-mentioned serial number, stores above-mentioned object-based device identifier.

6, improper assembly detection apparatus as claimed in claim 1 detects the wrongful equipment of making by copying, and it is characterized in that, comprising:

Storing mechanism, with the management equipment identifier that keeps by the management object equipment of the object that becomes improper detection in the past accordingly, storage is identified in the organize content identifier more than 1 of watching the content of listening to more than 1 in this management object equipment respectively;

Obtain mechanism, from the rewritable object removable media that detected object equipment, uses, obtain and be identified in the object-based device identifier that the contents of object identifier more than 1 of watching the content of listening to more than 1 in this detected object equipment and this detected object equipment keep respectively as the object of improper detection;

Extraction mechanism is extracted the management equipment identifier pairing organize content identifier 1 or more identical with obtained above-mentioned object-based device identifier from above-mentioned storing mechanism;

Mechanism relatively compares the above-mentioned management content identifier extracted and obtained above-mentioned contents of object identifier; And

Login mechanism, the above-mentioned management content identifier of being extracted any all with any inconsistent situation of obtained above-mentioned contents of object identifier under, obtained above-mentioned object-based device identifier is signed in in the improper list of devices.

7, improper assembly detection apparatus as claimed in claim 6 is characterized in that,

Above-mentioned storing mechanism also with above-mentioned management content identifier accordingly, store expression by the management audiovisual of the watching order of listening to of this organize content identifier content identified order;

Above-mentioned obtain mechanism also with above-mentioned contents of object identifier accordingly, obtain expression by the object audiovisual of the watching order of listening to of this contents of object identifier content identified order;

Said extracted mechanism also extracts the management audiovisual order corresponding to the organize content identifier;

Above-mentioned relatively mechanism also compares the management audiovisual order extracted and obtained object audiovisual in proper order;

Under the above-mentioned management content identifier of the being extracted situation consistent with obtained above-mentioned contents of object identifier, corresponding to the management audiovisual of 1 organize content identifier order with corresponding to the object audiovisual order of the contents of object identifier identical when inconsistent with above-mentioned management content identifier, above-mentioned login mechanism also signs in to obtained above-mentioned object-based device identifier in the improper list of devices.

8, improper assembly detection apparatus as claimed in claim 6 is characterized in that,

The said equipment is the contents decryption that will encrypt and the reproducer that reproduces;

Above-mentioned improper assembly detection apparatus also comprises:

Forbid mechanism, in any of the above-mentioned management content identifier of being extracted all with obtained

Any inconsistent situation of above-mentioned contents of object identifier under, forbidding can to above-mentioned object

The decruption key that mobile media output is used for the contents decryption that will encrypt; And

Output mechanism, the above-mentioned management content identifier of being extracted any with any consistent situation of obtained above-mentioned contents of object identifier under, above-mentioned object removable media is exported above-mentioned decruption key.

9, a kind of improper device detection system by detecting the improper assembly detection apparatus by copying the wrongful equipment of making and constituting as the detected object equipment of the object of improper detection, is characterized in that,

Above-mentioned improper assembly detection apparatus possesses:

Medium are counted storing mechanism, store the medium number by the employed rewritable removable media of equipment that keeps the device identifier identical with the object-based device identifier, wherein this object-based device identifier is kept by the detected object equipment as the object of improper detection;

Relatively mechanism compares predefined improper threshold value and the above-mentioned medium number that calculates; And

The identifier storing mechanism surpasses under the situation of above-mentioned improper threshold value at above-mentioned medium number, stores above-mentioned object-based device identifier;

Above-mentioned detected object equipment comprises and writes mechanism that this writes mechanism and above-mentioned removable media is write the object-based device identifier that self keeps.

10, a kind of improper equipment detection method, in improper assembly detection apparatus, use, this improper assembly detection apparatus detects by copying the wrongful equipment of making and possessing medium and counts storing mechanism, these medium are counted storing mechanism and are stored medium number by the employed rewritable removable media of equipment that keeps the device identifier identical with the object-based device identifier, wherein this object-based device identifier is kept by the detected object equipment as the object of improper detection, it is characterized in that this method comprises:

Comparison step compares predefined improper threshold value and the above-mentioned medium number that calculates; And

The identifier storing step surpasses under the situation of above-mentioned improper threshold value at above-mentioned medium number, stores above-mentioned object-based device identifier.

Images