US20080044017A1 - Copyright protection system, recording device, and reproduction device - Google Patents

Copyright protection system, recording device, and reproduction device Download PDF

Info

Publication number
US20080044017A1
US20080044017A1 US11/503,180 US50318006A US2008044017A1 US 20080044017 A1 US20080044017 A1 US 20080044017A1 US 50318006 A US50318006 A US 50318006A US 2008044017 A1 US2008044017 A1 US 2008044017A1
Authority
US
United States
Prior art keywords
key
recording medium
encrypted content
decryption
license information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Abandoned
Application number
US11/503,180
Inventor
Toshihisa Nakano
Shunji Harada
Natsume Matsuzaki
Makoto Tatebayashi
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Individual
Original Assignee
Individual
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Individual filed Critical Individual
Priority to US11/503,180 priority Critical patent/US20080044017A1/en
Publication of US20080044017A1 publication Critical patent/US20080044017A1/en
Abandoned legal-status Critical Current

Links

Images

Classifications

    • GPHYSICS
    • G09EDUCATION; CRYPTOGRAPHY; DISPLAY; ADVERTISING; SEALS
    • G09CCIPHERING OR DECIPHERING APPARATUS FOR CRYPTOGRAPHIC OR OTHER PURPOSES INVOLVING THE NEED FOR SECRECY
    • G09C1/00Apparatus or methods whereby a given sequence of signs, e.g. an intelligible text, is transformed into an unintelligible sequence of signs by transposing the signs or groups of signs or by replacing them by others according to a predetermined system
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/107License processing; Key processing
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/78Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure storage of data
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/00094Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised record carriers
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/00166Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software
    • G11B20/00173Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software wherein the origin of the content is checked, e.g. determining whether the content has originally been retrieved from a legal disc copy or another trusted source
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • G11B20/00217Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
    • G11B20/00246Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • G11B20/00217Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
    • G11B20/00253Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is stored on the record carrier
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • G11B20/00217Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
    • G11B20/00253Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is stored on the record carrier
    • G11B20/00347Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is stored on the record carrier wherein the medium identifier is used as a key
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • G11B20/00485Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier
    • G11B20/00492Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein content or user data is encrypted
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • G11B20/00485Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier
    • G11B20/00492Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein content or user data is encrypted
    • G11B20/00514Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein content or user data is encrypted wherein the entire content is encrypted with the same key, e.g. disc key or master key
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/0021Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
    • G11B20/00485Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier
    • G11B20/0055Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein license data is encrypted
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/00731Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction
    • G11B20/00847Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a digital rights management system for enforcing a usage restriction wherein the usage restriction is defined by a licence file
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B20/00Signal processing not specific to the method of recording or reproducing; Circuits therefor
    • G11B20/00086Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
    • G11B20/00855Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving a step of exchanging information with a remote server
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/101Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities
    • G06F21/1014Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities to tokens
    • GPHYSICS
    • G11INFORMATION STORAGE
    • G11BINFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
    • G11B2220/00Record carriers by type
    • G11B2220/20Disc-shaped record carriers
    • G11B2220/25Disc-shaped record carriers characterised in that the disc is based on a specific recording technology
    • G11B2220/2537Optical discs

Definitions

  • the present invention relates to techniques for protecting a copyright of content recorded on a writable recording medium on which a media number unique to the recording medium has been recorded.
  • a content distribution form of receiving content such as a movie film that is broadcast by digital broadcasting, recording the content on a recording medium such as an optical disk, and reproducing the content from the recording medium is becoming widespread in recent years.
  • unauthorized distribution and reproduction of such content by copying the content through a personal computer and the like without license is also increasing.
  • a copyright protection system shown in FIG. 1 is conventionally known as a technique of restricting distribution and reproduction of content.
  • the copyright protection system is roughly made up of a recording device 1000 and a reproduction device 3000 .
  • the recording device 1000 encrypts content and records the encrypted content on a recording medium 2000 .
  • the reproduction device 3000 decrypts the encrypted content recorded on the recording medium 2000 , and reproduces the decrypted content.
  • the recording device 1000 includes a key encryption key computing unit 1001 , a content key generating unit 1002 , a content key encrypting unit 1003 , a content storing unit 1004 , and a content encrypting unit 1005 .
  • the reproduction device 3000 includes a key decryption key computing unit 3001 , a content key decrypting unit 3002 , a content key temporary storing unit 3003 , a content decrypting unit 3004 , and a digital AV processing unit 3005 .
  • the recording medium 2000 is a recording medium such as an optical disk, and has a media number area 2001 in which a media number has been recorded.
  • a media number is an identifier that is unique to each recording medium, and is written at the time of manufacturing the recording medium.
  • the media number area 2001 is protected so that the media number recorded at the time of manufacturing cannot be rewritten thereafter.
  • the recording device 1000 acquires content from the outside, and stores the acquired content in the content storing unit 1004 .
  • the content encrypting unit 1005 reads the content from the content storing unit 1004 , and encrypts the content by using a content key.
  • the content encrypting unit 1005 records the encrypted content in an encrypted content area 2003 of the recording medium 2000 .
  • the content key is a random number generated by the content key generating unit 1002 .
  • the content key encrypting unit 1003 encrypts the content key by using a content key encryption key, and records the encrypted content key in an encrypted content key area 2002 of the recording medium 2000 .
  • the content key encryption key is a key computed by the key encryption key computing unit 1001 .
  • the key encryption key computing unit 1001 computes the content key encryption key according to a hash function, by using a master key and the media number recorded in the media number area 2001 .
  • the master key is a key which is held commonly by the recording device 1000 and the reproduction device 3000 in secrecy from third parties.
  • FIG. 2 shows an inner computational mechanism of the key encryption key computing unit 1001 .
  • the media number is input from a point A, and is encrypted by a DES encrypting unit 4000 using the master key held in a master key storing unit 4001 according to DES (Data Encryption Standard). After this, an exclusive-OR operation is performed on the encrypted media number and the media number by an exclusive-OR circuit 4002 . The outcome is output from a point B as the content key encryption key.
  • DES Data Encryption Standard
  • the key decryption key computing unit 3001 reads the media number from the media number area 2001 of the recording medium 2000 .
  • the key decryption key computing unit 3001 performs the same computation as the key encryption key computing unit 1001 in the recording device 1000 , to obtain a content key decryption key.
  • the key decryption key computing unit 3001 uses the same master key and media number as the key encryption key computing unit 1001 , the content key decryption key will end up being the same as the content key encryption key.
  • the content key decrypting unit 3002 reads the encrypted content key from the encrypted content key area 2002 , and decrypts the encrypted content key by using the content key decryption key to obtain the content key.
  • the content key decrypting unit 3002 temporarily stores the content key in the content key temporary storing unit 3003 .
  • the content decrypting unit 3004 reads the encrypted content from the encrypted content area 2003 , and decrypts the encrypted content by using the content key to obtain the content.
  • the digital AV processing unit 3005 converts the content to analog audio/video data, and outputs the converted data to external devices such as a speaker and a display.
  • the encrypted content key can be decrypted properly only if the reproduction device 3000 uses the same media number as that used for encrypting the content key.
  • the reproduction device 3000 uses a media number which is different from the media number used for encrypting the content key, the encrypted content key cannot be decrypted properly.
  • an unauthorized party copies the encrypted content key and encrypted content recorded on the recording medium 2000 , to another recording medium. Even if the reproduction device 3000 tries to reproduce this recording medium, the reproduction device 3000 cannot recover the correct content key from the encrypted content key copied on this recording medium, since a media number of this recording medium is different from that of the recording medium 2000 .
  • the conventional copyright protection system enables the reproduction device 3000 to properly decrypt an encrypted content key of an original recording medium which has been recorded by the recording device 1000 .
  • the conventional copyright protection system makes it impossible for the reproduction device 3000 to properly decrypt an encrypted content key of a copy recording medium, thereby preventing content from being distributed by unauthorized copying.
  • the reproduction device 3000 reproduces a recording medium irrespective of whether the recording medium is an original or a copy. This being so, if the recording medium is a copy, the reproduction device 3000 will end up reproducing unintelligible data which is different from the original content, as video and audio.
  • a user who is using the recording medium without knowing it is a copy may suspect so, seeing that the reproduced video and audio are abnormal.
  • abnormal reproduction can also be caused by other factors such as a malfunction of the device and an error of reading data from the recording medium. Therefore, even if an abnormal reproduction occurs, the user cannot determine right away that the recording medium is a copy.
  • the present invention has an object of providing a copyright protection system that can prevent content from being distributed by unauthorized copying. This is done by checking whether a recording medium is an original or a copy, and allowing the recording medium to be reproduced if the recording medium is an original, while prohibiting the recording medium from being reproduced if the recording medium is a copy.
  • a copyright protection system including a recording device for recording encrypted content on a recording medium and a decryption device for decrypting the encrypted content recorded on the recording medium.
  • the recording medium has an unrewritable area in which a media number that is unique to the recording medium is recorded.
  • the recording device includes: a generating unit operable to acquire the media number from the recording medium, and generate license information by performing a specific operation using the media number and decryption information so that the license information reflects both the media number and the decryption information, which is needed to decrypt the encrypted content; and a recording unit operable to record the license information, the decryption information, and the encrypted content on the recording medium.
  • the decryption device includes: a judging unit operable to read the media number, the decryption information, and the license information from the recording medium, and judge whether the read license information can be obtained if the specific operation is performed using the read media number and the read decryption information; and a decrypting unit operable to read the encrypted content from the recording medium and decrypt the encrypted content by using the decryption information, only if the judgement by the judging unit is in the affirmative.
  • the license information is generated by using the media number recorded on the recording medium and the decryption information for decrypting the encrypted content, so that the license information reflects both the media number and the decryption information.
  • the license information is a hash value that is generated by applying a hash function to input data which is a concatenated value of the media number and the decryption information. Since the hash function involves an irreversible one-way function, it is computationally infeasible to recover the media number and the decryption information from the license information. Also, it is computationally infeasible to generate different input data that hashes to the same license information.
  • This property of the hash function prevents the license information from being obtained by using data other than the media number and decryption information which are used for generating the license information.
  • the recording medium is not a copy but an original
  • the license information recorded on the recording medium can be obtained by applying the hash function to the media number and decryption information recorded on the recording medium.
  • the judging unit judges whether the recording medium is an original or a copy, by checking whether the license information can be obtained if the hash function is performed on the media number and decryption information recorded on the recording medium. If the recording medium is an original, the decrypting unit decrypts the encrypted content. On the other hand, if the recording medium is a copy, the decrypting unit does not decrypt the encrypted content. In this way, content can be protected from being copied to another recording medium and put to use by an unauthorized party.
  • FIG. 1 is a block diagram showing a construction of a conventional copyright protection system
  • FIG. 2 shows an inner computational mechanism of a key encryption key computing unit shown in FIG. 1 ;
  • FIG. 3 is a block diagram showing a construction of a copyright protection system to which the first embodiment of the present invention relates;
  • FIG. 4 is a flowchart showing an operation of a recording device shown in FIG. 3 ;
  • FIG. 5 is a flowchart showing an operation of a reproduction device shown in FIG. 3 ;
  • FIG. 6 is a block diagram showing a construction of a copyright protection system to which the second embodiment of the present invention relates;
  • FIG. 7 shows one example of media key data recorded in a media key data area shown in FIG. 6 ;
  • FIG. 8 is a block diagram showing a construction of a copyright protection system to which the third embodiment of the present invention relates;
  • FIG. 9 is a block diagram showing a construction of a copyright protection system to which the fourth embodiment of the present invention relates.
  • FIG. 10 shows an example construction of a recording medium
  • FIG. 11 shows another example construction of a recording medium.
  • FIG. 3 is a block diagram showing a construction of a copyright protection system 100 to which the first embodiment of the present invention relates.
  • the copyright protection system 100 is roughly made up of a recording device 10 and a reproduction device 30 .
  • the recording device 10 records encrypted content on a recording medium 20 .
  • the reproduction device 30 decrypts the encrypted content recorded on the recording medium 20 , and reproduces the decrypted content.
  • the following explanation begins with the recording medium 20 , followed by the constructions of the recording device 10 and reproduction device 30 .
  • the recording medium 20 is an optical disk.
  • the recording medium 20 has an unrewritable media number area 21 in which a media number has been recorded, and a recordable area.
  • a media number is a 64-bit identifier that is unique to each recording medium, and is written in the media number area 21 at the time of manufacturing the recording medium.
  • the media number area 21 is protected so that the media number written at the time of manufacturing cannot be rewritten thereafter.
  • the recordable area is used by the recording device 10 to reserve a license information area 22 , an encrypted content key area 23 , and an encrypted content area 24 .
  • the recording device 10 records various data to these reserved areas.
  • the encrypted content area 24 is used by the recording device 10 to record encrypted content.
  • the encrypted content key area 23 is used by the recording device 10 to record an encrypted content key.
  • the encrypted content key is information which is needed when the reproduction device 30 decrypts the encrypted content. That is, the encrypted content key is a content key in encrypted form.
  • the content key is a secret key of a secret key cipher, and is used for both encrypting and decrypting content.
  • the license information area 22 is used by the recording device 10 to record license information.
  • the license information is information used for verifying whether or not the data recorded on the recording medium 20 is original data recorded by the recording device 10 .
  • the license information is used for verifying whether the recording medium 20 is an original or a copy.
  • the reproduction device 30 can determine whether the recording medium 20 is an original or a copy, by checking this license information.
  • the license information is explained in detail later.
  • the recording device 10 is constructed as follows.
  • the recording device 10 includes a master key storing unit 11 , a content key generating unit 12 , a content key encrypting unit 13 , a content storing unit 14 , a content encrypting unit 15 , and a license information computing unit 16 .
  • the master key storing unit 11 is a memory in which a 56-bit master key has been stored in advance.
  • the master key is possessed commonly by the recording device 10 and the reproduction device 30 , in secrecy from outside the recording device 10 .
  • the content key generating unit 12 is a random number generator for generating a random number as a content key. Upon receiving a start signal from a control circuit (not illustrated) in the recording device 10 , the content key generating unit 12 generates 56-bit random data, and outputs the generated 56-bit random data as a content key.
  • the content key encrypting unit 13 encrypts the content key by using the master key, and records the encrypted content key on the recording medium 20 .
  • an encryption algorithm such as DES is used.
  • the content key encrypting unit 13 acquires the content key generated by the content key generating unit 12 and the master key stored in the master key storing unit 11 , and encrypts the content key by using the master key to obtain the encrypted content key of 64 bits in length.
  • the content key encrypting unit 13 reserves the encrypted content key area 23 in the recordable area of the recording medium 20 , and records the encrypted content key to the encrypted content key area 23 .
  • the content storing unit 14 is a storage device such as a hard disk, and stores content which is input from outside the recording device 10 .
  • a satellite broadcast reception device receives digital content of a movie film that is broadcast by digital satellite broadcasting, and inputs the content to the recording device 10 so that the content is stored in the content storing unit 14 .
  • the content encrypting unit 15 encrypts the content by using the content key, and records the encrypted content on the recording medium 20 .
  • an encryption algorithm such as DES is used.
  • the content encrypting unit 15 acquires the content key generated by the content key generating unit 12 and the content stored in the content storing unit 14 .
  • the content encrypting unit 15 divides the content into 64-bit blocks, and encrypts each block by using the content key.
  • the content encrypting unit 15 then reserves the encrypted content area 24 in the recordable area of the recording medium 20 , and records the encrypted content which is made up of the encrypted blocks to the encrypted content area 24 .
  • the license information computing unit 16 has a computational mechanism for generating license information.
  • the license information computing unit 16 acquires the media number stored in the media number area 21 of the recording medium 20 , the encrypted content key generated by the content key encrypting unit 13 , and the master key stored in the master key storing unit 11 .
  • the license information computing unit 16 concatenates the media number, the master key, and the encrypted content key into one bit string.
  • the license information computing unit 16 takes this bit string as input, and performs a computation according to a hash function such as SHA-1 (Secure Hash Algorithm 1). As a result, the license information computing unit 16 obtains a hash value of 160 bits in length, and sets this hash value as license information.
  • the license information computing unit 16 reserves the license information area 22 in the recordable area of the recording medium 20 , and records the license information to the license information area 22 .
  • the SHA-1 hash function is as follows.
  • the SHA-1 hash function is a hash function that is used for authentication, digital signatures, and the like. This hash function generates a 160-bit hash value from data of no more than 264 bits in length. Since the SHA-1 hash function involves an irreversible one-way function, it is computationally infeasible to recover the original data from the hash value. Also, it is computationally infeasible to generate data which is different from the original data but which hashes to the same value as the original data. This property can be utilized in the following manner.
  • the sender sends data and a hash value generated from the data to the recipient.
  • the recipient receives the data and the hash value, generates a hash value from the received data, and compares the generated hash value with the received hash value. This enables the recipient to detect whether or not the data has been tampered during communication.
  • the license information reflects all of the media number, encrypted content key, and master key that were used for generating the license information.
  • the license information verifies that the data recorded on the recording medium 20 is authentic.
  • the reproduction device 30 is constructed as follows.
  • the reproduction device 30 includes a master key storing unit 31 , a content key decrypting unit 32 , a content decrypting unit 33 , a digital AV processing unit 34 , a reference license information computing unit 35 , a comparing unit 36 , a first switch 37 , a second switch 38 , and an alarm 39 .
  • the master key storing unit 31 is a memory in which a 56-bit master key has been stored in advance. This master key is the same as the master key stored in the master key storing unit 11 in the recording device 10 .
  • the content key decrypting unit 32 decrypts the encrypted content key recorded on the recording medium 20 , by using the master key.
  • the content key decrypting unit 32 acquires the encrypted content key recorded in the encrypted content key area 23 and the master key stored in the master key storing unit 31 , and decrypts the encrypted content key by using the master key to obtain the content key.
  • the content decrypting unit 33 decrypts the encrypted content recorded on the recording medium 20 , by using the content key.
  • the content decrypting unit 33 outputs the decrypted content to the digital AV processing unit 34 .
  • the content decrypting unit 33 acquires the content key decrypted by the content key decrypting unit 32 and the encrypted content recorded in the encrypted content area 24 .
  • the content decrypting unit 33 divides the encrypted content into 64-bit blocks, and decrypts each block by using the content key.
  • the content decrypting unit 33 then outputs the content which is made up of the decrypted blocks, to the digital AV processing unit 34 .
  • the digital AV processing unit 34 receives the content from the content decrypting unit 33 , and converts the content to analog audio/video data.
  • the digital AV processing unit 34 outputs the analog audio/video data to external devices such as a speaker and a display.
  • the first switch 37 is opened or closed under control of the comparing unit 36 .
  • the content key decrypting unit 32 is permitted to read the encrypted content key from the encrypted content key area 23 .
  • the content key decrypting unit 32 is inhibited from reading the encrypted content key from the encrypted content key area 23 .
  • the second switch 38 is opened or closed under control of the comparing unit 36 .
  • the second switch 38 is closed, power is supplied to the alarm 39 .
  • the second switch 38 is opened, power is not supplied to the alarm 39 .
  • the alarm 39 is a circuit that operates to produce a warning sound when supplied with power.
  • the reference license information computing unit 35 has a computational mechanism that performs the same computation as the license information computing unit 16 , to compute reference license information.
  • the reference license information computing unit 35 acquires the media number recorded in the media number area 21 , the encrypted content key recorded in the encrypted content key area 23 , and the master key stored in the master key storing unit 31 .
  • the reference license information computing unit 35 concatenates the media number, the master key, and the encrypted content key into one bit string.
  • the order of concatenating these data is the same as the order used by the license information computing unit 16 .
  • the reference license information computing unit 35 takes this bit string as input, and performs a computation using a hash function such as SHA-1. As a result, the reference license information computing unit 35 obtains a hash value of 160 bits in length, and sets the hash value as reference license information.
  • the comparing unit 36 acquires the license information recorded in the license information area 22 and the reference license information generated by the reference license information computing unit 35 , and compares the two values. If they match, the comparing unit 36 exercises control so that the encrypted content can be decrypted. On the other hand, if they do not match, the comparing unit 36 exercises control so that the decryption of the encrypted content is inhibited and the alarm 39 produces a warning sound.
  • the comparing unit 36 closes the first switch 37 so that the content key decrypting unit 32 reads the encrypted content key from the encrypted content key area 23 .
  • the encrypted content key is decrypted, and the encrypted content is decrypted and reproduced.
  • the comparing unit 36 opens the first switch 37 , and closes the second switch 38 . Since the first switch 37 is opened, the content key decrypting unit 32 cannot read the encrypted content key from the encrypted content key area 23 . Therefore, the encrypted content key is not decrypted, and so the encrypted content is neither decrypted nor reproduced. Also, since the second switch 38 is closed, power is supplied to the alarm 39 which accordingly produces a warning sound.
  • the reference license information computing unit 35 and the comparing unit 36 determine whether or not the media number recorded in the media number area 21 , the encrypted content key recorded in the encrypted content key area 23 , and the master key stored in the master key storing unit 31 are all reflected in the license information recorded in the license information area 22 . If they are, the reference license information computing unit 35 and the comparing unit 36 exercise control so that the encrypted content is decrypted. Otherwise, the reference license information computing unit 35 and the comparing unit 36 exercise control so that the encrypted content is not decrypted and, instead, a warning sound is produced from the alarm 39 .
  • the reference license information and the license information will end up being the same. In other words, if any of the media number, encrypted content key, and master key used for generating the reference license information is different from the corresponding one of the media number, encrypted content key, and master key used for generating the license information, the reference license information will be different from the license information.
  • FIG. 4 is a flowchart showing an operation of the recording device 10 .
  • the content key generating unit 12 generates a content key (S 201 ).
  • the content key encrypting unit 13 reads a master key from the master key storing unit 11 (S 202 ).
  • the content key encrypting unit 13 encrypts the content key by using the master key (S 203 ).
  • the content key encrypting unit 13 reserves the encrypted content key area 23 in the recordable area of the recording medium 20 , and records the encrypted content key to the encrypted content key area 23 (S 204 ).
  • the content encrypting unit 15 reads content from the content storing unit 14 .
  • the content encrypting unit 15 divides the content into blocks of 64 bits, and encrypts each block by using the content key (S 205 ).
  • the content encrypting unit 15 reserves the encrypted content area 24 in the recordable area of the recording medium 20 , and records the encrypted content to the encrypted content area 24 (S 206 ).
  • the license information computing unit 16 reads a media number from the media number area 21 of the recording medium 20 (S 207 ).
  • the license information computing unit 16 generates license information by a hash function, by using the read media number, the master key stored in the master key storing unit 11 , and the encrypted content key generated by the content key encrypting unit 13 (S 208 ).
  • the license information computing unit 16 reserves the license information area 22 in the recordable area of the recording medium 20 , and records the license information to the license information area 22 (S 209 ).
  • FIG. 5 is a flowchart showing an operation of the reproduction device 30 .
  • the reference license information computing unit 35 reads a media number from the media number area 21 of the recording medium 20 , and an encrypted content key from the encrypted content key area 23 of the recording medium 20 .
  • the comparing unit 36 reads license information from the license information area 22 of the recording medium 20 (S 301 ).
  • the reference license information computing unit 35 reads a master key from the master key storing unit 31 (S 302 ).
  • the reference license information computing unit 35 generates reference license information by a hash function, by using the media number, the encrypted content key, and the master key.
  • the hash function used here is the same as the hash function used in step S 208 (S 303 ).
  • the comparing unit 36 compares the reference license information with the license information read from the recording medium 20 (S 304 ).
  • steps S 306 -S 308 are performed. Otherwise, step S 309 is performed.
  • the comparing unit 36 closes the first switch 37 .
  • the content key decrypting unit 32 reads the encrypted content key from the encrypted content key area 23 , and decrypts the encrypted content key by using the master key stored in the master key storing unit 31 to obtain a content key (S 306 ).
  • the content decrypting unit 33 reads encrypted content from the encrypted content area 24 , and decrypts the encrypted content by using the content key to obtain content (S 307 ).
  • the digital AV processing unit 34 reproduces the content as an audio/video signal, and outputs the audio/video signal to a speaker, a display, and the like (S 308 ).
  • the comparing unit 36 opens the first switch 37 , and closes the second switch 38 .
  • the content key decrypting unit 32 is inhibited form decrypting the encrypted content key, so that the encrypted content will be neither decrypted nor reproduced.
  • power is supplied to the alarm 39 , which accordingly produces a warning sound and outputs the warning sound to a speaker or the like (S 309 ).
  • the reproduction device 30 does not reproduce a recording medium in any of the following Cases 1 to 3.
  • a media number used for generating license information which is recorded on a recording medium is different from a media number used for generating reference license information.
  • Case 1 applies when the reproduction device 30 tries to reproduce this recording medium, because a media number of this other recording medium is different from a media number of the recording medium 20 .
  • Case 2 applies when the reproduction device 30 tries to reproduce the recording medium 20 , because the encrypted content key copied from the other recording medium is usually different from the encrypted content key originally recorded on the recording medium 20 . It is extremely rare that the copied encrypted content key and the original encrypted content key have the same value.
  • a master key used for generating license information which is recorded on a recording medium is different from a master key used for generating reference license information.
  • Case 3 applies when the reproduction device 30 tries to reproduce this recording medium. Since the master key is concealed from outside devices that do not belong to the copyright protection system 100 , unless the master key is stolen, it is impossible for the outside devices to make a recording medium that can be reproduced by the reproduction device 30 .
  • the reproduction device 30 reproduces only original recording media recorded by the recording device 10 , and does not reproduce recording media made by unauthorized copying and the like.
  • the copyright protection system 100 can keep content from being distributed by unauthorized copying and the like.
  • the first embodiment has a construction in which the recording device 10 and the reproduction device 30 prestore the same master key that is necessary for encrypting and decrypting a content key and content. This being so, when there are a plurality of recording devices 10 and reproduction devices 30 , each of these devices stores the same master key. In this construction, if one device is physically attacked, i.e., if one device is analyzed by an unauthorized party to reveal the master key stored in that device, not only the attacked device but also the rest of the devices become inoperative.
  • the second embodiment makes improvements to the copyright protection system 100 of the first embodiment, so that even when one recording device or reproduction device is physically attacked, the rest of the devices can be kept from becoming inoperative.
  • a different device key is assigned to and stored in each of the plurality of recording devices and reproduction devices.
  • a media key is processed and stored in the recording medium at the time of manufacturing.
  • the media key is a key that is necessary for encrypting and decrypting a content key and content.
  • the media key is processed in such a way that the media key can be recovered from the processed media key only when a media key-acquirable device key is used and not when a media key-unacquirable device key is used (as will be described in detail later).
  • the media key-acquirable device key is a device key assigned to a device that is not reported, at the time of manufacturing the recording medium, as having been physically attacked.
  • the media key-unacquirable device key is a device key assigned to a device that is reported as having been physically attacked.
  • a recording device tries to acquire the media key from the recording medium by using a device key held in the recording device. If the recording device has succeeded in acquiring the media key, the recording device performs encryption on a content key and content by using the media key. Otherwise, the recording device does not perform the encryption.
  • a reproduction device tries to acquire the media key from the recording medium by using a device key held in the reproduction device. If the reproduction device has succeeded in acquiring the media key, the reproduction device performs decryption on an encrypted content key and encrypted content recorded on the recording medium by using the media key. Otherwise, the reproduction device does not perform the decryption.
  • FIG. 6 is a block diagram showing a construction of a copyright protection system 200 to which the second embodiment of the present invention relates.
  • the copyright protection system 200 is roughly made up of a recording device 60 and a reproduction device 80 .
  • the recording device 60 records encrypted content on a recording medium 70 .
  • the reproduction device 80 decrypts the encrypted content recorded on the recording medium 70 , and reproduces the decrypted content.
  • the recording medium 70 is an optical disk similar to the recording medium 20 .
  • the recording medium 70 has a media key data area 25 , in addition to the same construction as the recording medium 20 .
  • the media key data area 25 is a read-only area. Media key data is recorded in the media key data area 25 at the time of manufacturing the recording medium 70 .
  • the media key data is a result of processing a media key as explained in the above point (2).
  • FIG. 7 shows one example of media key data recorded in the media key data area 25 .
  • the media key data is made up of 128 records of 8 bytes in length.
  • Each record contains ciphertext data which is expressed as either E(Kdi,Km) or E(Kdi, 0 ) (i being an integer from 1 to 128).
  • Km denotes the media key which is a 56-bit random value.
  • a plurality of recording media 70 have been divided into groups of at least one recording medium 70 , and a unique media key has been assigned to each group.
  • the media key takes a value other than 0, to distinguish it from 0 in E(Kdi, 0 ).
  • Kdi (i being an integer from 1 to 128) denotes a 56-bit device key.
  • the device numbers 1 , 2 , . . . , 128 have been respectively assigned to the 128 devices beforehand.
  • the first to 128th records correspond to the device keys Kd 1 to Kd 128 respectively, and so correspond to the devices of the device numbers 1 to 128 respectively.
  • E( ) denotes an encryption algorithm such as DES. That is, E(Kdi,Km) denotes ciphertext obtained by encrypting the media key Km as plain text by using the device key Kdi as an encryption key, according to DES. For example, E(Kd 2 ,Km) in the second record is ciphertext obtained by encrypting the media key Km by using a device key Kd 2 . Meanwhile, E(Kdi, 0 ) denotes ciphertext obtained by encrypting the value 0 by using the device key Kdi. For example, E(Kd 3 , 0 ) in the third record is ciphertext obtained by encrypting 0 by using a device key Kd 3 .
  • E(Kdi,Km) is decrypted by using the device key Kdi
  • the outcome is the media key Km.
  • E(Kd 2 ,Km) in the second record is decrypted by using the device key Kd 2
  • the media key Km is obtained.
  • E(Kdi, 0 ) is decrypted by using the device key Kdi
  • the outcome is 0.
  • E(Kd 3 , 0 ) in the third record is decrypted by using the device key Kd 3 , 0 is obtained.
  • the 128 device keys can be distinguished between the device keys with which the media key can be acquired (media key-acquirable device keys) and the device keys with which the media key cannot be acquired (media key-unacquirable device keys).
  • a manufacturer of the recording medium 70 obtains information concerning devices which have been physically attacked, and classifies the device keys into the media key-acquirable type and the media key-unacquirable type according to the obtained information.
  • the manufacturer then generates media key data in which the contents of a record corresponding to each media key-acquirable device key are set as E (Kdi,Km), whereas the contents of a record corresponding to each media key-unacquirable device key are set as E(Kdi, 0 ).
  • the manufacturer records the media key data in the media key data area 25 of the recording medium 70 . In this way, the media key can be acquired only when a media key-acquirable device key is used, and cannot be acquired when a media key-unacquirable device key is used.
  • the recording device 60 differs from the recording device 10 in that a device key storing unit 17 , a media key computing unit 18 , and a media key temporary storing unit 19 are included in place of the master key storing unit 11 .
  • the device key storing unit 17 is a memory in which a device key assigned to the recording device 60 has been stored in advance.
  • the recording device 60 holds the device key in secrecy from outside the recording device 60 .
  • the media key computing unit 18 reads the device key from the device key storing unit 17 , and ciphertext data of a record corresponding to a device number of the recording device 60 from the media key data area 25 .
  • the media key computing unit 18 decrypts the ciphertext data by using the read device key. Since the ciphertext data is either E(Kdi,Km) or E(Kdi, 0 ), decrypting the ciphertext data by using the device key Kdi produces the outcome which is either the media key Km or the value 0.
  • the media key computing unit 18 judges whether or not the outcome is 0. If the outcome is 0, the recording device 60 terminates subsequent processing, that is, processing such as encrypting a content key and content is aborted.
  • the media key computing unit 18 temporarily stores the media key Km in the media key temporary storing unit 19 .
  • temporarily storing the media key Km means that the media key Km is held in the media key temporary storing unit 19 only until the media key Km has been used for encrypting a content key and as a result has become unnecessary.
  • the media key temporary storing unit 19 is initialized to erase the media key Km. By erasing the media key Km once it has become unnecessary, damage caused by physical attack to the recording device 60 is minimized.
  • the media key temporary storing unit 19 is a memory for temporarily storing the media key Km which is acquired by the media key computing unit 18 .
  • the license information computing unit 16 and the content key encrypting unit 13 are similar to those in the first embodiment, but differ in that the media key Km held in the media key temporary storing unit 19 is used instead of the master key.
  • the reproduction device 80 differs from the reproduction device 30 in that a device key storing unit 40 , a media key computing unit 41 , and a media key temporary storing unit 42 are included in place of the master key storing unit 31 .
  • the device key storing unit 40 is a memory in which a device key assigned to the reproduction device 80 has been stored in advance.
  • the reproduction device 80 holds the device key in secrecy from outside the reproduction device 80 .
  • the media key computing unit 41 reads the device key from the device key storing unit 40 , and ciphertext data of a record corresponding to a device number of the reproduction device 80 from the media key data area 25 .
  • the media key computing unit 41 decrypts the ciphertext data by using the device key. Since the ciphertext data is either E (Kdi,Km) or E (Kdi, 0 ), decrypting the ciphertext data by using the device key Kdi produces the outcome which is either the media key Km or the value 0.
  • the media key computing unit 41 judges whether or not the outcome is 0. If the outcome is 0, the reproduction device 80 terminates subsequent processing, that is, processing such as decrypting an encrypted content key and encrypted content is aborted.
  • the media key computing unit 41 temporarily stores the media key Km in the media key temporary storing unit 42 .
  • Temporarily storing the media key Km means that the media key Km is held in the media key temporary storing unit 42 only until the media key Km has been used for decrypting an encrypted content key and as a result has become unnecessary.
  • the media key temporary storing unit 42 is initialized to erase the media key Km. By erasing the media key Km once it has become unnecessary, damage caused by physical attack to the reproduction device 80 is minimized.
  • the media key temporary storing unit 42 is a memory for temporarily storing the media key Km which is obtained by the media key computing unit 41 .
  • the reference license information computing unit 35 and the content key decrypting unit 32 are similar to those in the first embodiment, but differ in that the media key Km held in the media key temporary storing unit 42 is used instead of the master key.
  • the recording device 60 operates as follows.
  • the media key computing unit 18 reads a device key from the device key storing unit 17 , and ciphertext data of a record corresponding to the recording device 60 from the media key data area 25 .
  • the media key computing unit 18 decrypts the ciphertext data by using the device key, and judges whether or not the outcome is 0.
  • the media key computing unit 18 stores the outcome in the media key temporary storing unit 19 as a media key.
  • the recording device 60 performs the operation shown in FIG. 4 , with “the master key storing unit 11 ” and “the master key” in FIG. 4 and its explanation being changed respectively to “the media key temporary storing unit 19 ” and “the media key”.
  • the recording device 60 initializes the media key temporary storing unit 19 to erase the media key.
  • the reproduction device 80 operates as follows.
  • the media key computing unit 41 reads a device key from the device key storing unit 40 , and ciphertext data of a record corresponding to the reproduction device 80 from the media key data area 25 .
  • the media key computing unit 41 decrypts the ciphertext data by using the device key, and judges whether or not the outcome is 0.
  • the media key computing unit 41 stores the outcome in the media key temporary storing unit 42 as a media key.
  • the reproduction device 80 performs the operation shown in FIG. 5 , with “the master key storing unit 31 ” and “the master key” in FIG. 5 and its explanation being changed respectively to “the media key temporary storing unit 42 ” and “the media key”.
  • the reproduction device 80 initializes the media key temporary storing unit 42 to erase the media key.
  • ciphertext data of each record in media key data is set as either E(Kdi,Km) or E(Kdi, 0 ), so as to allow a media key to be acquired only when a media key-acquirable device key is used and not when a media key-unacquirable device key is used.
  • the manufacturer of the recording medium 70 generates media key data in which ciphertext data of a record corresponding to the attacked device is set as E(Kdi, 0 ), and records the media key data on the recording medium 70 .
  • the media key cannot be acquired. Without the media key, it is impossible to decrypt an encrypted content key and encrypted content which have been generated by using the media key. Hence, unauthorized use of content can be blocked.
  • the copyright protection system 200 controls which devices can perform encryption and decryption and which devices cannot, by setting the ciphertext data of each record in the media key data either as E(Kdi,Km) or E(Kdi, 0 ).
  • the manufacturer of the recording medium 70 sets ciphertext data of a record corresponding to that device as E (Kdi, 0 ), with it being possible to make that device inoperative.
  • a plurality of recording devices and reproduction devices having different device keys can use the same recording medium, unless their ciphertext data is E(Kdi, 0 ). This adds to the portability of the recording medium.
  • the recording device 60 and the reproduction device 80 are each constructed to terminate encryption or decryption processing if the outcome of decrypting ciphertext data using a device key is 0.
  • the recording device 60 and the reproduction device 80 may each be constructed to perform the encryption or decryption using the value 0 as a key.
  • An encrypted by content key and encrypted content which are generated using 0 as a key cannot be decrypted by using the media key Km.
  • an encrypted content key and encrypted content which are generated by using the media key Km cannot be decrypted by using 0 as a key.
  • unauthorized use of content through the use of an attacked device can be prevented.
  • a unique device key is assigned to each device
  • a unique device key may instead be assigned to each group that is made up of more than one device.
  • ciphertext data corresponding to a group to which the attacked device belongs is set as E(Kdi, 0 ).
  • all devices belonging to that group are rendered inoperative.
  • devices belonging to the rest of the groups remain operative.
  • the recording device and the reproduction device have different construction elements, that is, the recording device has the content key encrypting unit, whereas the reproduction device has the content key decrypting unit.
  • the recording device and the reproduction device are constructed to have the same content key generating unit, thereby reducing manufacturing costs when compared with the case where the two devices have different construction elements.
  • FIG. 8 is a block diagram showing a construction of a copyright protection system 300 to which the third embodiment of the present invention relates.
  • the copyright protection system 300 is roughly made up of a recording device 110 and a reproduction device 130 .
  • the recording device 110 records encrypted content on a recording medium 120 .
  • the reproduction device 130 decrypts the encrypted content recorded on the recording medium 120 , and reproduces the decrypted content.
  • the recording medium 120 differs from the recording medium 20 only in that a random number area 121 is provided instead of the encrypted content key area 23 .
  • the random number area 121 is reserved in the recordable area of the recording medium 120 by the recording device 110 , to record a random number.
  • This random number is a source of a content key.
  • the recording device 110 differs from the recording device 10 only in that a random number generating unit 111 and a content key generating unit 112 are included in place of the content key generating unit 12 and the content key encrypting unit 13 .
  • the random number generating unit 111 generates a random number, and outputs the generated random number to the license information computing unit 16 and the content key generating unit 112 .
  • the random number generating unit 111 also reserves the random number area 121 in the recordable area of the recording medium 120 , and records the random number in the random number area 121 .
  • the content key generating unit 112 performs a computation according to the SHA-1 hash function or the like, by using the random number received from the random number generating unit 111 and a master key stored in the master key storing unit 11 . As a result, the content key generating unit 112 generates a content key.
  • the content encrypting unit 15 encrypts content by using the content key generated by the content key generating unit 112 , and records the encrypted content in the encrypted content area 24 .
  • the license information computing unit 16 acquires a media number, the master key, and the random number generated by the random number generating unit 111 , and concatenates these data into one bit string.
  • the license information computing unit 16 takes this bit string as input, and performs a computation according to the SHA-1 hash function or the like to obtain a hash value.
  • the license information computing unit 16 records the hash value in the license information area 22 as license information.
  • the reproduction device 130 differs from the reproduction device 30 only in that a content key generating unit 131 is included in place of the content key decrypting unit 32 .
  • the content key generating unit 131 is the same as the content key generating unit 112 .
  • the content key generating unit 131 performs the same computation as the content key generating unit 112 by using the random number recorded in the random number area 121 and a master key stored in the master key storing unit 31 , to generate the content key.
  • the content decrypting unit 33 decrypts the encrypted content recorded in the encrypted content area 24 , by using the content key generated by the content key generating unit 131 .
  • the reference license information computing unit 35 acquires the media number, the master key, and the random number recorded in the random number area 121 , and performs the same computation as the license information computing unit 16 to generate reference license information.
  • the copyright protection system 300 of the third embodiment can reduce manufacturing costs when compared with the copyright protection system 100 of the first embodiment.
  • a copyright protection system of the fourth embodiment is a combination of the construction elements of the copyright protection systems 200 and 300 of the second and third embodiments.
  • FIG. 9 is a block diagram showing a construction of a copyright protection system 400 to which the fourth embodiment of the present invention relates.
  • the copyright protection system 400 is roughly made up of a recording device 160 and a reproduction device 180 .
  • the recording device 160 records encrypted content on a recording medium 170 .
  • the reproduction device 180 decrypts the encrypted content recorded on the recording medium 170 , and reproduces the decrypted content.
  • the recording medium 170 has a construction in which the media key data area 25 of the recording medium 70 has been added to the recording medium 120 .
  • the recording device 160 has a construction in which the master key storing unit 11 of the recording device 110 has been replaced with the device key storing unit 17 , media key computing unit 18 , and media key temporary storing unit 19 of the recording device 60 .
  • the reproduction device 180 has a construction in which the master key storing unit 31 of the reproduction device 130 has been replaced with the device key storing unit 40 , media key computing unit 41 , and media key temporary storing unit 42 of the reproduction device 80 .
  • the copyright protection system 400 has the advantages of both the copyright protection systems 200 and 300 .
  • the recording device records one set of encrypted content, one encrypted content key (or one random number), and one set of license information on the recording medium, but the present invention should not be limited thereto.
  • the recording device may record a plurality of sets of encrypted content, a plurality of encrypted content keys, and a plurality of sets of license information, as shown in a recording medium 800 of FIG. 10 .
  • the recording device encrypts a plurality of sets of content A, B, and C by using content keys A, B, and C, respectively.
  • the recording device then records the encrypted sets of content A, B, and C in an encrypted content area 840 .
  • the recording device also encrypts the content keys A, B, and C by using a master key, and records the encrypted content keys A, B, and C in an encrypted content key area 830 .
  • the recording device further generates license information A by using a media number, the master key, and the encrypted content key A, and records the license information A in a license information area 820 .
  • the recording device generates license information B and C by using the encrypted content keys B and C, respectively, and records the license information B and C in the license information area 820 .
  • the reproduction device generates reference license information A by using the media number, the master key, and the encrypted content key A in the encrypted content key area 830 , and compares the reference license information A with the license information A in the license information area 820 . If they match, the reproduction device decrypts the encrypted content key A in the encrypted content key area 830 by using the master key. The reproduction device then decrypts the encrypted content A in the encrypted content area 840 by using the decrypted content key A, and reproduces the decrypted content A. The reproduction device performs the same processing on the encrypted content B and C.
  • the recording device may record data as shown in a recording medium 900 of FIG. 11 .
  • the recording device generates the encrypted content A, B, and C and the encrypted content keys A, B, and C in the same way as the above (1), and records them in an encrypted content area 940 and an encrypted content key area 930 .
  • the recording device then generates license information by using the media number, the master key, and all of the encrypted content keys A, B, and C, and records the license information in a license information area 920 .
  • the reproduction device generates reference license information by using the media number, the master key, and all of the encrypted content keys A, B, and C, and compares the reference license information with the license information in the license information area 920 . If they match, the reproduction device decrypts the encrypted content keys A, B, and C by using the master key. The reproduction device then decrypts the encrypted content A, B, and C by using the decrypted content keys A, B, and C, respectively, and reproduces the decrypted content A, B, and C.
  • the recording medium may be a different type of recording medium such as a magnetic disk, a magneto-optical disk, or a memory card on which a media number has been recorded in an unrewritable state.
  • the media number may be recorded in an area other than the unrewritable area of the recording medium.
  • SHA-1 hash function is used for generating license information and the like
  • hash functions other than SHA-1 or operations other than hashing are also applicable.
  • encryption algorithms other than DES may be used.
  • bit length of each value is not limited to above.
  • license information and reference license information are generated using a master key, a media number, and information relating to decryption, but they may be generated using only the media number and the decryption-relating information without using the master key.
  • the present invention also applies to the methods corresponding to the operational procedures of the copyright protection systems of the first to fourth embodiments and the modifications (1) and (2).
  • the operational procedures of the copyright protection systems of the first to fourth embodiments and the modifications (1) and (2) may be realized by computer programs that are executed by computers. Such computer programs may be distributed having been recorded onto a storage medium or by being transmitted via a communication path. Examples of such a storage medium include an IC card, an optical disk, a flexible disk, and a ROM.

Abstract

A copyright protection system includes a recording device and a reproduction device. The recording device writes encrypted content, an encrypted content key for decrypting the encrypted content, and license information on a recording medium on which a unique media number has been recorded in an unrewritable state. The license information is generated using both the media number and the encrypted content key, and therefore reflects both values. The reproduction device reads the media number, the encrypted content key, and the license information from the recording medium, and judges whether the license information reflects both the media number and the encrypted content key. The reproduction device decrypts the encrypted content key, and decrypts the encrypted content using the content key only if the license information reflects both values. Thus, the copyright protection system allows only original recording media to be reproduced, and prohibits reproduction of copy recording media.

Description

  • This application is a divisional of U.S. application Ser. No. 10/213,154, filed Aug. 7, 2002, which is based on applications Nos. 2001-240778 and 2001-260932 filed in Japan, the contents of which are hereby incorporated by reference.
  • BACKGROUND OF THE INVENTION
  • 1. Field of the Invention
  • The present invention relates to techniques for protecting a copyright of content recorded on a writable recording medium on which a media number unique to the recording medium has been recorded.
  • 2. Prior Art
  • A content distribution form of receiving content such as a movie film that is broadcast by digital broadcasting, recording the content on a recording medium such as an optical disk, and reproducing the content from the recording medium is becoming widespread in recent years. On the other hand, unauthorized distribution and reproduction of such content by copying the content through a personal computer and the like without license is also increasing.
  • To block unauthorized copying, a copyright protection system shown in FIG. 1 is conventionally known as a technique of restricting distribution and reproduction of content.
  • In FIG. 1, the copyright protection system is roughly made up of a recording device 1000 and a reproduction device 3000. The recording device 1000 encrypts content and records the encrypted content on a recording medium 2000. The reproduction device 3000 decrypts the encrypted content recorded on the recording medium 2000, and reproduces the decrypted content. The recording device 1000 includes a key encryption key computing unit 1001, a content key generating unit 1002, a content key encrypting unit 1003, a content storing unit 1004, and a content encrypting unit 1005. The reproduction device 3000 includes a key decryption key computing unit 3001, a content key decrypting unit 3002, a content key temporary storing unit 3003, a content decrypting unit 3004, and a digital AV processing unit 3005.
  • The recording medium 2000 is a recording medium such as an optical disk, and has a media number area 2001 in which a media number has been recorded. A media number is an identifier that is unique to each recording medium, and is written at the time of manufacturing the recording medium. The media number area 2001 is protected so that the media number recorded at the time of manufacturing cannot be rewritten thereafter.
  • The recording device 1000 acquires content from the outside, and stores the acquired content in the content storing unit 1004.
  • When the recording medium 2000 is connected to the recording device 1000, the content encrypting unit 1005 reads the content from the content storing unit 1004, and encrypts the content by using a content key. The content encrypting unit 1005 records the encrypted content in an encrypted content area 2003 of the recording medium 2000. Here, the content key is a random number generated by the content key generating unit 1002. The content key encrypting unit 1003 encrypts the content key by using a content key encryption key, and records the encrypted content key in an encrypted content key area 2002 of the recording medium 2000. Here, the content key encryption key is a key computed by the key encryption key computing unit 1001. The key encryption key computing unit 1001 computes the content key encryption key according to a hash function, by using a master key and the media number recorded in the media number area 2001. The master key is a key which is held commonly by the recording device 1000 and the reproduction device 3000 in secrecy from third parties.
  • FIG. 2 shows an inner computational mechanism of the key encryption key computing unit 1001.
  • The media number is input from a point A, and is encrypted by a DES encrypting unit 4000 using the master key held in a master key storing unit 4001 according to DES (Data Encryption Standard). After this, an exclusive-OR operation is performed on the encrypted media number and the media number by an exclusive-OR circuit 4002. The outcome is output from a point B as the content key encryption key.
  • On the other hand, when the recording medium 2000 is connected to the reproduction device 3000, the key decryption key computing unit 3001 reads the media number from the media number area 2001 of the recording medium 2000. The key decryption key computing unit 3001 performs the same computation as the key encryption key computing unit 1001 in the recording device 1000, to obtain a content key decryption key. Here, if the key decryption key computing unit 3001 uses the same master key and media number as the key encryption key computing unit 1001, the content key decryption key will end up being the same as the content key encryption key.
  • The content key decrypting unit 3002 reads the encrypted content key from the encrypted content key area 2002, and decrypts the encrypted content key by using the content key decryption key to obtain the content key. The content key decrypting unit 3002 temporarily stores the content key in the content key temporary storing unit 3003.
  • The content decrypting unit 3004 reads the encrypted content from the encrypted content area 2003, and decrypts the encrypted content by using the content key to obtain the content.
  • The digital AV processing unit 3005 converts the content to analog audio/video data, and outputs the converted data to external devices such as a speaker and a display.
  • Thus, the encrypted content key can be decrypted properly only if the reproduction device 3000 uses the same media number as that used for encrypting the content key.
  • In other words, if the reproduction device 3000 uses a media number which is different from the media number used for encrypting the content key, the encrypted content key cannot be decrypted properly.
  • Suppose an unauthorized party copies the encrypted content key and encrypted content recorded on the recording medium 2000, to another recording medium. Even if the reproduction device 3000 tries to reproduce this recording medium, the reproduction device 3000 cannot recover the correct content key from the encrypted content key copied on this recording medium, since a media number of this recording medium is different from that of the recording medium 2000.
  • Thus, the conventional copyright protection system enables the reproduction device 3000 to properly decrypt an encrypted content key of an original recording medium which has been recorded by the recording device 1000. On the other hand, the conventional copyright protection system makes it impossible for the reproduction device 3000 to properly decrypt an encrypted content key of a copy recording medium, thereby preventing content from being distributed by unauthorized copying.
  • The reproduction device 3000 reproduces a recording medium irrespective of whether the recording medium is an original or a copy. This being so, if the recording medium is a copy, the reproduction device 3000 will end up reproducing unintelligible data which is different from the original content, as video and audio.
  • A user who is using the recording medium without knowing it is a copy may suspect so, seeing that the reproduced video and audio are abnormal. However, abnormal reproduction can also be caused by other factors such as a malfunction of the device and an error of reading data from the recording medium. Therefore, even if an abnormal reproduction occurs, the user cannot determine right away that the recording medium is a copy.
  • SUMMARY OF THE INVENTION
  • The present invention has an object of providing a copyright protection system that can prevent content from being distributed by unauthorized copying. This is done by checking whether a recording medium is an original or a copy, and allowing the recording medium to be reproduced if the recording medium is an original, while prohibiting the recording medium from being reproduced if the recording medium is a copy.
  • The stated object can be achieved by a copyright protection system including a recording device for recording encrypted content on a recording medium and a decryption device for decrypting the encrypted content recorded on the recording medium. The recording medium has an unrewritable area in which a media number that is unique to the recording medium is recorded. The recording device includes: a generating unit operable to acquire the media number from the recording medium, and generate license information by performing a specific operation using the media number and decryption information so that the license information reflects both the media number and the decryption information, which is needed to decrypt the encrypted content; and a recording unit operable to record the license information, the decryption information, and the encrypted content on the recording medium. The decryption device includes: a judging unit operable to read the media number, the decryption information, and the license information from the recording medium, and judge whether the read license information can be obtained if the specific operation is performed using the read media number and the read decryption information; and a decrypting unit operable to read the encrypted content from the recording medium and decrypt the encrypted content by using the decryption information, only if the judgement by the judging unit is in the affirmative.
  • With this construction, the license information is generated by using the media number recorded on the recording medium and the decryption information for decrypting the encrypted content, so that the license information reflects both the media number and the decryption information. In more detail, the license information is a hash value that is generated by applying a hash function to input data which is a concatenated value of the media number and the decryption information. Since the hash function involves an irreversible one-way function, it is computationally infeasible to recover the media number and the decryption information from the license information. Also, it is computationally infeasible to generate different input data that hashes to the same license information. This property of the hash function prevents the license information from being obtained by using data other than the media number and decryption information which are used for generating the license information. In other words, if the recording medium is not a copy but an original, the license information recorded on the recording medium can be obtained by applying the hash function to the media number and decryption information recorded on the recording medium. Accordingly, the judging unit judges whether the recording medium is an original or a copy, by checking whether the license information can be obtained if the hash function is performed on the media number and decryption information recorded on the recording medium. If the recording medium is an original, the decrypting unit decrypts the encrypted content. On the other hand, if the recording medium is a copy, the decrypting unit does not decrypt the encrypted content. In this way, content can be protected from being copied to another recording medium and put to use by an unauthorized party.
  • BRIEF DESCRIPTION OF THE DRAWINGS
  • These and other objects, advantages and features of the present invention will become apparent from the following description thereof when taken in conjunction with the accompanying drawings which illustrate specific embodiments of the invention.
  • In the drawings:
  • FIG. 1 is a block diagram showing a construction of a conventional copyright protection system;
  • FIG. 2 shows an inner computational mechanism of a key encryption key computing unit shown in FIG. 1;
  • FIG. 3 is a block diagram showing a construction of a copyright protection system to which the first embodiment of the present invention relates;
  • FIG. 4 is a flowchart showing an operation of a recording device shown in FIG. 3;
  • FIG. 5 is a flowchart showing an operation of a reproduction device shown in FIG. 3;
  • FIG. 6 is a block diagram showing a construction of a copyright protection system to which the second embodiment of the present invention relates;
  • FIG. 7 shows one example of media key data recorded in a media key data area shown in FIG. 6;
  • FIG. 8 is a block diagram showing a construction of a copyright protection system to which the third embodiment of the present invention relates;
  • FIG. 9 is a block diagram showing a construction of a copyright protection system to which the fourth embodiment of the present invention relates;
  • FIG. 10 shows an example construction of a recording medium; and
  • FIG. 11 shows another example construction of a recording medium.
  • DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS First Embodiment
  • The following describes the first embodiment of the present invention with reference to drawings.
  • (Construction)
  • FIG. 3 is a block diagram showing a construction of a copyright protection system 100 to which the first embodiment of the present invention relates.
  • The copyright protection system 100 is roughly made up of a recording device 10 and a reproduction device 30. The recording device 10 records encrypted content on a recording medium 20. The reproduction device 30 decrypts the encrypted content recorded on the recording medium 20, and reproduces the decrypted content. The following explanation begins with the recording medium 20, followed by the constructions of the recording device 10 and reproduction device 30.
  • (Recording Medium 20)
  • The recording medium 20 is an optical disk. The recording medium 20 has an unrewritable media number area 21 in which a media number has been recorded, and a recordable area.
  • A media number is a 64-bit identifier that is unique to each recording medium, and is written in the media number area 21 at the time of manufacturing the recording medium. The media number area 21 is protected so that the media number written at the time of manufacturing cannot be rewritten thereafter.
  • The recordable area is used by the recording device 10 to reserve a license information area 22, an encrypted content key area 23, and an encrypted content area 24. The recording device 10 records various data to these reserved areas.
  • The encrypted content area 24 is used by the recording device 10 to record encrypted content.
  • The encrypted content key area 23 is used by the recording device 10 to record an encrypted content key.
  • The encrypted content key is information which is needed when the reproduction device 30 decrypts the encrypted content. That is, the encrypted content key is a content key in encrypted form. The content key is a secret key of a secret key cipher, and is used for both encrypting and decrypting content.
  • The license information area 22 is used by the recording device 10 to record license information.
  • The license information is information used for verifying whether or not the data recorded on the recording medium 20 is original data recorded by the recording device 10. In other words, the license information is used for verifying whether the recording medium 20 is an original or a copy. The reproduction device 30 can determine whether the recording medium 20 is an original or a copy, by checking this license information. The license information is explained in detail later.
  • (Construction of the Recording Device 10)
  • The recording device 10 is constructed as follows.
  • The recording device 10 includes a master key storing unit 11, a content key generating unit 12, a content key encrypting unit 13, a content storing unit 14, a content encrypting unit 15, and a license information computing unit 16.
  • The master key storing unit 11 is a memory in which a 56-bit master key has been stored in advance. The master key is possessed commonly by the recording device 10 and the reproduction device 30, in secrecy from outside the recording device 10.
  • The content key generating unit 12 is a random number generator for generating a random number as a content key. Upon receiving a start signal from a control circuit (not illustrated) in the recording device 10, the content key generating unit 12 generates 56-bit random data, and outputs the generated 56-bit random data as a content key.
  • The content key encrypting unit 13 encrypts the content key by using the master key, and records the encrypted content key on the recording medium 20. Here, an encryption algorithm such as DES is used. In detail, the content key encrypting unit 13 acquires the content key generated by the content key generating unit 12 and the master key stored in the master key storing unit 11, and encrypts the content key by using the master key to obtain the encrypted content key of 64 bits in length. The content key encrypting unit 13 reserves the encrypted content key area 23 in the recordable area of the recording medium 20, and records the encrypted content key to the encrypted content key area 23.
  • The content storing unit 14 is a storage device such as a hard disk, and stores content which is input from outside the recording device 10. As one example, a satellite broadcast reception device receives digital content of a movie film that is broadcast by digital satellite broadcasting, and inputs the content to the recording device 10 so that the content is stored in the content storing unit 14.
  • The content encrypting unit 15 encrypts the content by using the content key, and records the encrypted content on the recording medium 20. Here, an encryption algorithm such as DES is used. In detail, the content encrypting unit 15 acquires the content key generated by the content key generating unit 12 and the content stored in the content storing unit 14. The content encrypting unit 15 divides the content into 64-bit blocks, and encrypts each block by using the content key. The content encrypting unit 15 then reserves the encrypted content area 24 in the recordable area of the recording medium 20, and records the encrypted content which is made up of the encrypted blocks to the encrypted content area 24.
  • The license information computing unit 16 has a computational mechanism for generating license information. The license information computing unit 16 acquires the media number stored in the media number area 21 of the recording medium 20, the encrypted content key generated by the content key encrypting unit 13, and the master key stored in the master key storing unit 11. The license information computing unit 16 concatenates the media number, the master key, and the encrypted content key into one bit string. The license information computing unit 16 takes this bit string as input, and performs a computation according to a hash function such as SHA-1 (Secure Hash Algorithm 1). As a result, the license information computing unit 16 obtains a hash value of 160 bits in length, and sets this hash value as license information. The license information computing unit 16 reserves the license information area 22 in the recordable area of the recording medium 20, and records the license information to the license information area 22.
  • The SHA-1 hash function is as follows.
  • The SHA-1 hash function is a hash function that is used for authentication, digital signatures, and the like. This hash function generates a 160-bit hash value from data of no more than 264 bits in length. Since the SHA-1 hash function involves an irreversible one-way function, it is computationally infeasible to recover the original data from the hash value. Also, it is computationally infeasible to generate data which is different from the original data but which hashes to the same value as the original data. This property can be utilized in the following manner. The sender sends data and a hash value generated from the data to the recipient. The recipient receives the data and the hash value, generates a hash value from the received data, and compares the generated hash value with the received hash value. This enables the recipient to detect whether or not the data has been tampered during communication.
  • Due to the property of the SHA-1 hash function, it is difficult to obtain the license information by using values other than the media number, encrypted content key, and master key which have been used by the license information computing unit 16 to generate the license information. In other words, the license information reflects all of the media number, encrypted content key, and master key that were used for generating the license information.
  • Accordingly, when the media number, encrypted content key, and master key which are reflected by the license information recorded in the license information area 22 are respectively the same as the media number recorded in the media number area 21, the encrypted content key recorded in the encrypted content key area 23, and the master key possessed by the recording device 10, the license information verifies that the data recorded on the recording medium 20 is authentic.
  • (Construction of the Reproduction Device 30)
  • The reproduction device 30 is constructed as follows.
  • The reproduction device 30 includes a master key storing unit 31, a content key decrypting unit 32, a content decrypting unit 33, a digital AV processing unit 34, a reference license information computing unit 35, a comparing unit 36, a first switch 37, a second switch 38, and an alarm 39.
  • The master key storing unit 31 is a memory in which a 56-bit master key has been stored in advance. This master key is the same as the master key stored in the master key storing unit 11 in the recording device 10.
  • The content key decrypting unit 32 decrypts the encrypted content key recorded on the recording medium 20, by using the master key. In detail, the content key decrypting unit 32 acquires the encrypted content key recorded in the encrypted content key area 23 and the master key stored in the master key storing unit 31, and decrypts the encrypted content key by using the master key to obtain the content key.
  • The content decrypting unit 33 decrypts the encrypted content recorded on the recording medium 20, by using the content key. The content decrypting unit 33 outputs the decrypted content to the digital AV processing unit 34. In detail, the content decrypting unit 33 acquires the content key decrypted by the content key decrypting unit 32 and the encrypted content recorded in the encrypted content area 24. The content decrypting unit 33 divides the encrypted content into 64-bit blocks, and decrypts each block by using the content key. The content decrypting unit 33 then outputs the content which is made up of the decrypted blocks, to the digital AV processing unit 34.
  • The digital AV processing unit 34 receives the content from the content decrypting unit 33, and converts the content to analog audio/video data. The digital AV processing unit 34 outputs the analog audio/video data to external devices such as a speaker and a display.
  • The first switch 37 is opened or closed under control of the comparing unit 36. When the first switch 37 is closed, the content key decrypting unit 32 is permitted to read the encrypted content key from the encrypted content key area 23. When the first switch 37 is opened, the content key decrypting unit 32 is inhibited from reading the encrypted content key from the encrypted content key area 23.
  • The second switch 38 is opened or closed under control of the comparing unit 36. When the second switch 38 is closed, power is supplied to the alarm 39. When the second switch 38 is opened, power is not supplied to the alarm 39.
  • The alarm 39 is a circuit that operates to produce a warning sound when supplied with power.
  • The reference license information computing unit 35 has a computational mechanism that performs the same computation as the license information computing unit 16, to compute reference license information. In detail, the reference license information computing unit 35 acquires the media number recorded in the media number area 21, the encrypted content key recorded in the encrypted content key area 23, and the master key stored in the master key storing unit 31. The reference license information computing unit 35 concatenates the media number, the master key, and the encrypted content key into one bit string. The order of concatenating these data is the same as the order used by the license information computing unit 16. The reference license information computing unit 35 takes this bit string as input, and performs a computation using a hash function such as SHA-1. As a result, the reference license information computing unit 35 obtains a hash value of 160 bits in length, and sets the hash value as reference license information.
  • The comparing unit 36 acquires the license information recorded in the license information area 22 and the reference license information generated by the reference license information computing unit 35, and compares the two values. If they match, the comparing unit 36 exercises control so that the encrypted content can be decrypted. On the other hand, if they do not match, the comparing unit 36 exercises control so that the decryption of the encrypted content is inhibited and the alarm 39 produces a warning sound.
  • In more detail, if the license information and the reference license information match, the comparing unit 36 closes the first switch 37 so that the content key decrypting unit 32 reads the encrypted content key from the encrypted content key area 23. As a result, the encrypted content key is decrypted, and the encrypted content is decrypted and reproduced.
  • If the license information and the reference license information do not match, the comparing unit 36 opens the first switch 37, and closes the second switch 38. Since the first switch 37 is opened, the content key decrypting unit 32 cannot read the encrypted content key from the encrypted content key area 23. Therefore, the encrypted content key is not decrypted, and so the encrypted content is neither decrypted nor reproduced. Also, since the second switch 38 is closed, power is supplied to the alarm 39 which accordingly produces a warning sound.
  • Thus, the reference license information computing unit 35 and the comparing unit 36 determine whether or not the media number recorded in the media number area 21, the encrypted content key recorded in the encrypted content key area 23, and the master key stored in the master key storing unit 31 are all reflected in the license information recorded in the license information area 22. If they are, the reference license information computing unit 35 and the comparing unit 36 exercise control so that the encrypted content is decrypted. Otherwise, the reference license information computing unit 35 and the comparing unit 36 exercise control so that the encrypted content is not decrypted and, instead, a warning sound is produced from the alarm 39.
  • Only when the media number, encrypted content key, and master key used for generating the reference license information are respectively the same as the media number, encrypted content key, and master key used for generating the license information, the reference license information and the license information will end up being the same. In other words, if any of the media number, encrypted content key, and master key used for generating the reference license information is different from the corresponding one of the media number, encrypted content key, and master key used for generating the license information, the reference license information will be different from the license information.
  • (Operation)
  • Operations of the above-constructed recording device 10 and reproduction device 30 are explained below.
  • FIG. 4 is a flowchart showing an operation of the recording device 10.
  • First, the content key generating unit 12 generates a content key (S201).
  • The content key encrypting unit 13 reads a master key from the master key storing unit 11 (S202).
  • The content key encrypting unit 13 encrypts the content key by using the master key (S203).
  • The content key encrypting unit 13 reserves the encrypted content key area 23 in the recordable area of the recording medium 20, and records the encrypted content key to the encrypted content key area 23 (S204).
  • The content encrypting unit 15 reads content from the content storing unit 14. The content encrypting unit 15 divides the content into blocks of 64 bits, and encrypts each block by using the content key (S205).
  • The content encrypting unit 15 reserves the encrypted content area 24 in the recordable area of the recording medium 20, and records the encrypted content to the encrypted content area 24 (S206).
  • The license information computing unit 16 reads a media number from the media number area 21 of the recording medium 20 (S207).
  • The license information computing unit 16 generates license information by a hash function, by using the read media number, the master key stored in the master key storing unit 11, and the encrypted content key generated by the content key encrypting unit 13 (S208).
  • The license information computing unit 16 reserves the license information area 22 in the recordable area of the recording medium 20, and records the license information to the license information area 22 (S209).
  • FIG. 5 is a flowchart showing an operation of the reproduction device 30.
  • The reference license information computing unit 35 reads a media number from the media number area 21 of the recording medium 20, and an encrypted content key from the encrypted content key area 23 of the recording medium 20. The comparing unit 36 reads license information from the license information area 22 of the recording medium 20 (S301).
  • The reference license information computing unit 35 reads a master key from the master key storing unit 31 (S302).
  • The reference license information computing unit 35 generates reference license information by a hash function, by using the media number, the encrypted content key, and the master key. The hash function used here is the same as the hash function used in step S208 (S303).
  • The comparing unit 36 compares the reference license information with the license information read from the recording medium 20 (S304).
  • If the license information and the reference license information match, steps S306-S308 are performed. Otherwise, step S309 is performed.
  • In more detail, if the license information and the reference license information match, the comparing unit 36 closes the first switch 37. As a result, the content key decrypting unit 32 reads the encrypted content key from the encrypted content key area 23, and decrypts the encrypted content key by using the master key stored in the master key storing unit 31 to obtain a content key (S306).
  • The content decrypting unit 33 reads encrypted content from the encrypted content area 24, and decrypts the encrypted content by using the content key to obtain content (S307).
  • The digital AV processing unit 34 reproduces the content as an audio/video signal, and outputs the audio/video signal to a speaker, a display, and the like (S308).
  • On the other hand, if the license information and the reference license information do not match, the comparing unit 36 opens the first switch 37, and closes the second switch 38. As a result, the content key decrypting unit 32 is inhibited form decrypting the encrypted content key, so that the encrypted content will be neither decrypted nor reproduced. Meanwhile, power is supplied to the alarm 39, which accordingly produces a warning sound and outputs the warning sound to a speaker or the like (S309).
  • (Conclusion)
  • According to the above construction of the copyright protection system 100, the reproduction device 30 does not reproduce a recording medium in any of the following Cases 1 to 3.
  • (Case 1) A media number used for generating license information which is recorded on a recording medium is different from a media number used for generating reference license information.
  • Suppose license information, an encrypted content key, and encrypted content which have been recorded on the recording medium 20 by the recording device 10 are copied to another recording medium. This being so, Case 1 applies when the reproduction device 30 tries to reproduce this recording medium, because a media number of this other recording medium is different from a media number of the recording medium 20.
  • (Case 2) An encrypted content key used for generating license information which is recorded on a recording medium is different from an encrypted content key used for generating reference license information.
  • Suppose an encrypted content key and encrypted content of another recording medium are copied to the encrypted content key area 23 and encrypted content area 24 of the recording medium 20 over an existing encrypted content key and encrypted content. This being so, Case 2 applies when the reproduction device 30 tries to reproduce the recording medium 20, because the encrypted content key copied from the other recording medium is usually different from the encrypted content key originally recorded on the recording medium 20. It is extremely rare that the copied encrypted content key and the original encrypted content key have the same value.
  • (Case 3) A master key used for generating license information which is recorded on a recording medium is different from a master key used for generating reference license information.
  • Suppose another recording device that does not have a master key possessed by the recording device 10 and reproduction device 30 records data on a recording medium. This being so, Case 3 applies when the reproduction device 30 tries to reproduce this recording medium. Since the master key is concealed from outside devices that do not belong to the copyright protection system 100, unless the master key is stolen, it is impossible for the outside devices to make a recording medium that can be reproduced by the reproduction device 30.
  • As described above, the reproduction device 30 reproduces only original recording media recorded by the recording device 10, and does not reproduce recording media made by unauthorized copying and the like. Thus, the copyright protection system 100 can keep content from being distributed by unauthorized copying and the like.
  • Second Embodiment
  • The following describes the second embodiment of the present invention.
  • The first embodiment has a construction in which the recording device 10 and the reproduction device 30 prestore the same master key that is necessary for encrypting and decrypting a content key and content. This being so, when there are a plurality of recording devices 10 and reproduction devices 30, each of these devices stores the same master key. In this construction, if one device is physically attacked, i.e., if one device is analyzed by an unauthorized party to reveal the master key stored in that device, not only the attacked device but also the rest of the devices become inoperative.
  • To overcome this problem, the second embodiment makes improvements to the copyright protection system 100 of the first embodiment, so that even when one recording device or reproduction device is physically attacked, the rest of the devices can be kept from becoming inoperative.
  • The following points are the main improvements in the second embodiment.
  • (1) A different device key is assigned to and stored in each of the plurality of recording devices and reproduction devices.
  • (2) A media key is processed and stored in the recording medium at the time of manufacturing. The media key is a key that is necessary for encrypting and decrypting a content key and content. Here, the media key is processed in such a way that the media key can be recovered from the processed media key only when a media key-acquirable device key is used and not when a media key-unacquirable device key is used (as will be described in detail later). The media key-acquirable device key is a device key assigned to a device that is not reported, at the time of manufacturing the recording medium, as having been physically attacked. The media key-unacquirable device key is a device key assigned to a device that is reported as having been physically attacked.
  • (3) A recording device tries to acquire the media key from the recording medium by using a device key held in the recording device. If the recording device has succeeded in acquiring the media key, the recording device performs encryption on a content key and content by using the media key. Otherwise, the recording device does not perform the encryption.
  • (4) Likewise, a reproduction device tries to acquire the media key from the recording medium by using a device key held in the reproduction device. If the reproduction device has succeeded in acquiring the media key, the reproduction device performs decryption on an encrypted content key and encrypted content recorded on the recording medium by using the media key. Otherwise, the reproduction device does not perform the decryption.
  • A construction and operation of such an improved copyright protection system are described below.
  • (Construction)
  • FIG. 6 is a block diagram showing a construction of a copyright protection system 200 to which the second embodiment of the present invention relates.
  • In FIG. 6, the copyright protection system 200 is roughly made up of a recording device 60 and a reproduction device 80. The recording device 60 records encrypted content on a recording medium 70. The reproduction device 80 decrypts the encrypted content recorded on the recording medium 70, and reproduces the decrypted content.
  • Note here that construction elements which are the same as those in the first embodiment shown in FIG. 3 have been given the same reference numerals. Accordingly, the following explanation will focus on the differences with the first embodiment.
  • (Recording Medium 70)
  • The recording medium 70 is an optical disk similar to the recording medium 20. The recording medium 70 has a media key data area 25, in addition to the same construction as the recording medium 20.
  • The media key data area 25 is a read-only area. Media key data is recorded in the media key data area 25 at the time of manufacturing the recording medium 70.
  • The media key data is a result of processing a media key as explained in the above point (2).
  • FIG. 7 shows one example of media key data recorded in the media key data area 25. In FIG. 7, the media key data is made up of 128 records of 8 bytes in length. Each record contains ciphertext data which is expressed as either E(Kdi,Km) or E(Kdi,0) (i being an integer from 1 to 128).
  • Km denotes the media key which is a 56-bit random value. Here, a plurality of recording media 70 have been divided into groups of at least one recording medium 70, and a unique media key has been assigned to each group. The media key takes a value other than 0, to distinguish it from 0 in E(Kdi,0).
  • Kdi (i being an integer from 1 to 128) denotes a 56-bit device key. There are 128 device keys Kd1, Kd2, . . . , Kd128, which are respectively assigned to and held in 128 devices (including recording devices 60 and reproduction devices 80) which have device numbers 1, 2, . . . , 128. The device numbers 1, 2, . . . , 128 have been respectively assigned to the 128 devices beforehand. The first to 128th records correspond to the device keys Kd1 to Kd128 respectively, and so correspond to the devices of the device numbers 1 to 128 respectively.
  • E( ) denotes an encryption algorithm such as DES. That is, E(Kdi,Km) denotes ciphertext obtained by encrypting the media key Km as plain text by using the device key Kdi as an encryption key, according to DES. For example, E(Kd2,Km) in the second record is ciphertext obtained by encrypting the media key Km by using a device key Kd2. Meanwhile, E(Kdi,0) denotes ciphertext obtained by encrypting the value 0 by using the device key Kdi. For example, E(Kd3,0) in the third record is ciphertext obtained by encrypting 0 by using a device key Kd3.
  • On the other hand, when E(Kdi,Km) is decrypted by using the device key Kdi, the outcome is the media key Km. For instance, when E(Kd2,Km) in the second record is decrypted by using the device key Kd2, the media key Km is obtained. Meanwhile, when E(Kdi,0) is decrypted by using the device key Kdi, the outcome is 0. For instance, when E(Kd3,0) in the third record is decrypted by using the device key Kd3, 0 is obtained.
  • Thus, by setting the contents of the records corresponding to the 128 device keys as either E(Kdi,Km) or E(Kdi,0), the 128 device keys can be distinguished between the device keys with which the media key can be acquired (media key-acquirable device keys) and the device keys with which the media key cannot be acquired (media key-unacquirable device keys).
  • At the time of manufacturing, a manufacturer of the recording medium 70 obtains information concerning devices which have been physically attacked, and classifies the device keys into the media key-acquirable type and the media key-unacquirable type according to the obtained information. The manufacturer then generates media key data in which the contents of a record corresponding to each media key-acquirable device key are set as E (Kdi,Km), whereas the contents of a record corresponding to each media key-unacquirable device key are set as E(Kdi,0). The manufacturer records the media key data in the media key data area 25 of the recording medium 70. In this way, the media key can be acquired only when a media key-acquirable device key is used, and cannot be acquired when a media key-unacquirable device key is used.
  • (Construction of the Recording Device 60)
  • The recording device 60 differs from the recording device 10 in that a device key storing unit 17, a media key computing unit 18, and a media key temporary storing unit 19 are included in place of the master key storing unit 11.
  • The device key storing unit 17 is a memory in which a device key assigned to the recording device 60 has been stored in advance. The recording device 60 holds the device key in secrecy from outside the recording device 60.
  • The media key computing unit 18 reads the device key from the device key storing unit 17, and ciphertext data of a record corresponding to a device number of the recording device 60 from the media key data area 25. The media key computing unit 18 decrypts the ciphertext data by using the read device key. Since the ciphertext data is either E(Kdi,Km) or E(Kdi,0), decrypting the ciphertext data by using the device key Kdi produces the outcome which is either the media key Km or the value 0. The media key computing unit 18 judges whether or not the outcome is 0. If the outcome is 0, the recording device 60 terminates subsequent processing, that is, processing such as encrypting a content key and content is aborted.
  • If the outcome is the media key Km, the media key computing unit 18 temporarily stores the media key Km in the media key temporary storing unit 19. Here, temporarily storing the media key Km means that the media key Km is held in the media key temporary storing unit 19 only until the media key Km has been used for encrypting a content key and as a result has become unnecessary. After this, the media key temporary storing unit 19 is initialized to erase the media key Km. By erasing the media key Km once it has become unnecessary, damage caused by physical attack to the recording device 60 is minimized.
  • The media key temporary storing unit 19 is a memory for temporarily storing the media key Km which is acquired by the media key computing unit 18.
  • The license information computing unit 16 and the content key encrypting unit 13 are similar to those in the first embodiment, but differ in that the media key Km held in the media key temporary storing unit 19 is used instead of the master key.
  • (Construction of the Reproduction Device 80)
  • The reproduction device 80 differs from the reproduction device 30 in that a device key storing unit 40, a media key computing unit 41, and a media key temporary storing unit 42 are included in place of the master key storing unit 31.
  • The device key storing unit 40 is a memory in which a device key assigned to the reproduction device 80 has been stored in advance. The reproduction device 80 holds the device key in secrecy from outside the reproduction device 80.
  • The media key computing unit 41 reads the device key from the device key storing unit 40, and ciphertext data of a record corresponding to a device number of the reproduction device 80 from the media key data area 25. The media key computing unit 41 decrypts the ciphertext data by using the device key. Since the ciphertext data is either E (Kdi,Km) or E (Kdi,0), decrypting the ciphertext data by using the device key Kdi produces the outcome which is either the media key Km or the value 0. The media key computing unit 41 judges whether or not the outcome is 0. If the outcome is 0, the reproduction device 80 terminates subsequent processing, that is, processing such as decrypting an encrypted content key and encrypted content is aborted.
  • If the outcome is the media key Km, the media key computing unit 41 temporarily stores the media key Km in the media key temporary storing unit 42. Temporarily storing the media key Km means that the media key Km is held in the media key temporary storing unit 42 only until the media key Km has been used for decrypting an encrypted content key and as a result has become unnecessary. After this, the media key temporary storing unit 42 is initialized to erase the media key Km. By erasing the media key Km once it has become unnecessary, damage caused by physical attack to the reproduction device 80 is minimized.
  • The media key temporary storing unit 42 is a memory for temporarily storing the media key Km which is obtained by the media key computing unit 41.
  • The reference license information computing unit 35 and the content key decrypting unit 32 are similar to those in the first embodiment, but differ in that the media key Km held in the media key temporary storing unit 42 is used instead of the master key.
  • (Operation)
  • Operations of the above constructed recording device 60 and reproduction device 80 are described below.
  • The recording device 60 operates as follows.
  • (1) The media key computing unit 18 reads a device key from the device key storing unit 17, and ciphertext data of a record corresponding to the recording device 60 from the media key data area 25.
  • (2) The media key computing unit 18 decrypts the ciphertext data by using the device key, and judges whether or not the outcome is 0.
  • (3) If the outcome is 0, the recording device 60 terminates the subsequent encryption processing.
  • (4) If the outcome is not 0, the media key computing unit 18 stores the outcome in the media key temporary storing unit 19 as a media key.
  • (5) Following this, the recording device 60 performs the operation shown in FIG. 4, with “the master key storing unit 11” and “the master key” in FIG. 4 and its explanation being changed respectively to “the media key temporary storing unit 19” and “the media key”.
  • (6) The recording device 60 initializes the media key temporary storing unit 19 to erase the media key.
  • On the other hand, the reproduction device 80 operates as follows.
  • (1) The media key computing unit 41 reads a device key from the device key storing unit 40, and ciphertext data of a record corresponding to the reproduction device 80 from the media key data area 25.
  • (2) The media key computing unit 41 decrypts the ciphertext data by using the device key, and judges whether or not the outcome is 0.
  • (3) If the outcome is 0, the reproduction device 80 terminates the subsequent decryption processing.
  • (4) If the outcome is not 0, the media key computing unit 41 stores the outcome in the media key temporary storing unit 42 as a media key.
  • (5) Following this, the reproduction device 80 performs the operation shown in FIG. 5, with “the master key storing unit 31” and “the master key” in FIG. 5 and its explanation being changed respectively to “the media key temporary storing unit 42” and “the media key”.
  • (6) The reproduction device 80 initializes the media key temporary storing unit 42 to erase the media key.
  • (Conclusion)
  • According to the above construction of the copyright protection system 200, ciphertext data of each record in media key data is set as either E(Kdi,Km) or E(Kdi,0), so as to allow a media key to be acquired only when a media key-acquirable device key is used and not when a media key-unacquirable device key is used.
  • Suppose one device was physically attacked by an unauthorized party and a device key of that device was revealed. Then, the manufacturer of the recording medium 70 generates media key data in which ciphertext data of a record corresponding to the attacked device is set as E(Kdi,0), and records the media key data on the recording medium 70. In so doing, even when the unauthorized party tries to acquire the media key by using the revealed device key, the media key cannot be acquired. Without the media key, it is impossible to decrypt an encrypted content key and encrypted content which have been generated by using the media key. Hence, unauthorized use of content can be blocked.
  • Also, the copyright protection system 200 controls which devices can perform encryption and decryption and which devices cannot, by setting the ciphertext data of each record in the media key data either as E(Kdi,Km) or E(Kdi,0).
  • Suppose a device key of one device was revealed. Then, the manufacturer of the recording medium 70 sets ciphertext data of a record corresponding to that device as E (Kdi, 0), with it being possible to make that device inoperative.
  • Furthermore, according to the above construction of the copyright protection system 200, a plurality of recording devices and reproduction devices having different device keys can use the same recording medium, unless their ciphertext data is E(Kdi,0). This adds to the portability of the recording medium.
  • In the above example, the recording device 60 and the reproduction device 80 are each constructed to terminate encryption or decryption processing if the outcome of decrypting ciphertext data using a device key is 0. However, instead of terminating the processing, the recording device 60 and the reproduction device 80 may each be constructed to perform the encryption or decryption using the value 0 as a key. An encrypted by content key and encrypted content which are generated using 0 as a key cannot be decrypted by using the media key Km. Likewise, an encrypted content key and encrypted content which are generated by using the media key Km cannot be decrypted by using 0 as a key. Hence, unauthorized use of content through the use of an attacked device can be prevented.
  • Also, although a unique device key is assigned to each device, a unique device key may instead be assigned to each group that is made up of more than one device. In this case, if one device is physically attacked, ciphertext data corresponding to a group to which the attacked device belongs is set as E(Kdi,0). As a result, all devices belonging to that group are rendered inoperative. On the other hand, devices belonging to the rest of the groups remain operative.
  • Third Embodiment
  • The following describes the third embodiment of the present invention.
  • In the first and second embodiments, the recording device and the reproduction device have different construction elements, that is, the recording device has the content key encrypting unit, whereas the reproduction device has the content key decrypting unit. In the third embodiment, the recording device and the reproduction device are constructed to have the same content key generating unit, thereby reducing manufacturing costs when compared with the case where the two devices have different construction elements.
  • (Construction)
  • FIG. 8 is a block diagram showing a construction of a copyright protection system 300 to which the third embodiment of the present invention relates.
  • In FIG. 8, the copyright protection system 300 is roughly made up of a recording device 110 and a reproduction device 130. The recording device 110 records encrypted content on a recording medium 120. The reproduction device 130 decrypts the encrypted content recorded on the recording medium 120, and reproduces the decrypted content.
  • Note here that construction elements which are the same as those in the first embodiment shown in FIG. 3 have been given the same reference numerals. Accordingly, the following explanation will focus on the differences with the first embodiment.
  • (Recording Medium 120)
  • The recording medium 120 differs from the recording medium 20 only in that a random number area 121 is provided instead of the encrypted content key area 23.
  • The random number area 121 is reserved in the recordable area of the recording medium 120 by the recording device 110, to record a random number. This random number is a source of a content key.
  • (Construction of the Recording Device 110)
  • The recording device 110 differs from the recording device 10 only in that a random number generating unit 111 and a content key generating unit 112 are included in place of the content key generating unit 12 and the content key encrypting unit 13.
  • The random number generating unit 111 generates a random number, and outputs the generated random number to the license information computing unit 16 and the content key generating unit 112. The random number generating unit 111 also reserves the random number area 121 in the recordable area of the recording medium 120, and records the random number in the random number area 121.
  • The content key generating unit 112 performs a computation according to the SHA-1 hash function or the like, by using the random number received from the random number generating unit 111 and a master key stored in the master key storing unit 11. As a result, the content key generating unit 112 generates a content key.
  • The content encrypting unit 15 encrypts content by using the content key generated by the content key generating unit 112, and records the encrypted content in the encrypted content area 24.
  • The license information computing unit 16 acquires a media number, the master key, and the random number generated by the random number generating unit 111, and concatenates these data into one bit string. The license information computing unit 16 takes this bit string as input, and performs a computation according to the SHA-1 hash function or the like to obtain a hash value. The license information computing unit 16 records the hash value in the license information area 22 as license information.
  • (Construction of the Reproduction Device 130)
  • The reproduction device 130 differs from the reproduction device 30 only in that a content key generating unit 131 is included in place of the content key decrypting unit 32.
  • The content key generating unit 131 is the same as the content key generating unit 112. The content key generating unit 131 performs the same computation as the content key generating unit 112 by using the random number recorded in the random number area 121 and a master key stored in the master key storing unit 31, to generate the content key.
  • The content decrypting unit 33 decrypts the encrypted content recorded in the encrypted content area 24, by using the content key generated by the content key generating unit 131.
  • The reference license information computing unit 35 acquires the media number, the master key, and the random number recorded in the random number area 121, and performs the same computation as the license information computing unit 16 to generate reference license information.
  • (Conclusion)
  • To manufacture a recording device and a reproduction device, a content key encrypting unit and a content key decrypting unit need to be produced in the case of the copyright protection system 100, whereas just two content key generating units need to be produced in the case of the copyright protection system 300. Thus, the copyright protection system 300 of the third embodiment can reduce manufacturing costs when compared with the copyright protection system 100 of the first embodiment.
  • Fourth Embodiment
  • The following describes the fourth embodiment of the present invention.
  • A copyright protection system of the fourth embodiment is a combination of the construction elements of the copyright protection systems 200 and 300 of the second and third embodiments.
  • (Construction)
  • FIG. 9 is a block diagram showing a construction of a copyright protection system 400 to which the fourth embodiment of the present invention relates.
  • In FIG. 9, the copyright protection system 400 is roughly made up of a recording device 160 and a reproduction device 180. The recording device 160 records encrypted content on a recording medium 170. The reproduction device 180 decrypts the encrypted content recorded on the recording medium 170, and reproduces the decrypted content.
  • Note here that construction elements which are the same as those in the second and third embodiments shown in FIGS. 6 and 8 have been given the same reference numerals.
  • (Recording Medium 170)
  • The recording medium 170 has a construction in which the media key data area 25 of the recording medium 70 has been added to the recording medium 120.
  • (Construction of the Recording Device 160)
  • The recording device 160 has a construction in which the master key storing unit 11 of the recording device 110 has been replaced with the device key storing unit 17, media key computing unit 18, and media key temporary storing unit 19 of the recording device 60.
  • (Construction of the Reproduction Device 180)
  • The reproduction device 180 has a construction in which the master key storing unit 31 of the reproduction device 130 has been replaced with the device key storing unit 40, media key computing unit 41, and media key temporary storing unit 42 of the reproduction device 80.
  • (Conclusion)
  • According to the above construction, the copyright protection system 400 has the advantages of both the copyright protection systems 200 and 300.
  • Modifications
  • The present invention has been described by way of the first to fourth embodiments. However, it should be understood that the present invention is not limited to the above. Example modifications of the present invention are given below.
  • (1) The above embodiments describe the case where the recording device records one set of encrypted content, one encrypted content key (or one random number), and one set of license information on the recording medium, but the present invention should not be limited thereto. For instance, the recording device may record a plurality of sets of encrypted content, a plurality of encrypted content keys, and a plurality of sets of license information, as shown in a recording medium 800 of FIG. 10.
  • In more detail, the recording device encrypts a plurality of sets of content A, B, and C by using content keys A, B, and C, respectively. The recording device then records the encrypted sets of content A, B, and C in an encrypted content area 840. The recording device also encrypts the content keys A, B, and C by using a master key, and records the encrypted content keys A, B, and C in an encrypted content key area 830. The recording device further generates license information A by using a media number, the master key, and the encrypted content key A, and records the license information A in a license information area 820. In a like manner, the recording device generates license information B and C by using the encrypted content keys B and C, respectively, and records the license information B and C in the license information area 820.
  • The reproduction device generates reference license information A by using the media number, the master key, and the encrypted content key A in the encrypted content key area 830, and compares the reference license information A with the license information A in the license information area 820. If they match, the reproduction device decrypts the encrypted content key A in the encrypted content key area 830 by using the master key. The reproduction device then decrypts the encrypted content A in the encrypted content area 840 by using the decrypted content key A, and reproduces the decrypted content A. The reproduction device performs the same processing on the encrypted content B and C.
  • (2) As an alternative, the recording device may record data as shown in a recording medium 900 of FIG. 11.
  • In more detail, the recording device generates the encrypted content A, B, and C and the encrypted content keys A, B, and C in the same way as the above (1), and records them in an encrypted content area 940 and an encrypted content key area 930. The recording device then generates license information by using the media number, the master key, and all of the encrypted content keys A, B, and C, and records the license information in a license information area 920.
  • The reproduction device generates reference license information by using the media number, the master key, and all of the encrypted content keys A, B, and C, and compares the reference license information with the license information in the license information area 920. If they match, the reproduction device decrypts the encrypted content keys A, B, and C by using the master key. The reproduction device then decrypts the encrypted content A, B, and C by using the decrypted content keys A, B, and C, respectively, and reproduces the decrypted content A, B, and C.
  • (3) Although the above embodiments describe the case where the recording medium is an optical disk, the recording medium may be a different type of recording medium such as a magnetic disk, a magneto-optical disk, or a memory card on which a media number has been recorded in an unrewritable state.
  • (4) Also, so long as the media number is recorded in an unrewritable state but can be read by a reading mechanism, the media number may be recorded in an area other than the unrewritable area of the recording medium.
  • (5) Although the above embodiments describe the case where the SHA-1 hash function is used for generating license information and the like, hash functions other than SHA-1 or operations other than hashing are also applicable. Also, encryption algorithms other than DES may be used. Furthermore, the bit length of each value is not limited to above.
  • (6) The above embodiments describe the case where license information and reference license information are generated using a master key, a media number, and information relating to decryption, but they may be generated using only the media number and the decryption-relating information without using the master key.
  • (7) The above embodiments describe the case where the comparing unit 36 controls each construction element by opening or closing the first switch 37 and the second switch 38. However, this can be modified so long as the digital AV processing unit 34 is allowed to reproduce content if and only if license information and reference license information match.
  • (8) The above embodiments describe the case where the alarm 39 produces a warning sound, but the alarm 39 may instead output data showing a warning message to a display.
  • (9) The present invention also applies to the methods corresponding to the operational procedures of the copyright protection systems of the first to fourth embodiments and the modifications (1) and (2).
  • (10) The operational procedures of the copyright protection systems of the first to fourth embodiments and the modifications (1) and (2) may be realized by computer programs that are executed by computers. Such computer programs may be distributed having been recorded onto a storage medium or by being transmitted via a communication path. Examples of such a storage medium include an IC card, an optical disk, a flexible disk, and a ROM.
  • (11) The construction elements described in the first to fourth embodiments and the modifications (1) to (10) may be freely combined.
  • Although the present invention has been fully described by way of examples with reference to the accompanying drawings, it is to be noted that various changes and modifications will be apparent to those skilled in the art.
  • Therefore, unless such changes and modifications depart from the scope of the present invention, they should be construed as being included therein.

Claims (18)

1. A copyright protection system comprising a recording device for recording encrypted content on a recording medium and a reproduction device for decrypting the encrypted content recorded on the recording medium, the recording medium having an unrewritable area in which a media number unique to the recording medium is recorded,
the recording device including:
a generating unit operable to acquire the media number from the recording medium, and generate license information by performing a specific operation using the media number and decryption key so that the license information reflects both the media number and the decryption key, the decryption key being necessary to decrypt the encrypted content;
a recording unit operable to record the license information, a decryption information generated by using the decryption key, and the encrypted content on the recording medium, and
the reproduction device including:
a judging unit operable to read the media number, the decryption information, and the license information from the recording medium, and judge whether the read license information can be obtained if the specific operation is performed using the read media number and the decryption key which can be obtained from the read decryption information;
a decrypting unit operable to read the encrypted content from the recording medium and decrypt the encrypted content using the decryption key obtained from the decryption information;
a reproduction unit operable to reproduce the decrypted content; and
a suppressing unit operable to control the unit of the reproduction device not to reproduce the content, if the judgment by the judging unit is in the negative.
2. The copyright protection system of claim 1, wherein
the decrypting unit includes a decryption key computing unit operable to perform a predetermined computation on the decryption information, to obtain decryption key, and
the decrypting unit decrypts the encrypted content using the decryption key.
3. The copyright protection system of claim 2, wherein
the recording device further includes:
a recording device possessing unit operable to possess a secret key, by either acquiring the secret key from outside or storing the secret key in advance; and
a decryption key encrypting unit operable to encrypt the decryption key using the secret key according to a secret key cipher, to generate the decryption information,
the reproduction device further includes a reproduction device possessing unit operable to possess the same secret key as the recording device possessing unit, by either acquiring the secret key from outside or storing the secret key in advance, and
the decryption key computing unit decrypts the decryption information using the secret key according to the secret key cipher, to obtain the decryption key.
4. The copyright protection system of claim 3, wherein
the generating unit performs the specific operation using the secret key in addition to the media number and the decryption key, and
the judging unit makes the judgment using the secret key in addition to the read media number and the decryption key.
5. The copyright protection system of claim 3, wherein
secret key information has been recorded in the unrewritable area of the recording medium, the secret key information being an encrypted secret key which can be correctly decrypted when a specific device key is used,
each of the recording device possessing unit and the reproduction device possessing unit includes:
a device key storing unit operable to store a device key unique to a device to which the device key storing unit belongs, in advance;
a secret key decrypting unit operable to decrypt the secret key information recorded on the recording medium using the device key in the device key storing unit; and
a secret key storing unit operable to store, if the secret key decrypting unit has succeeded in correctly decrypting the secret key information to acquire the secret key, the acquired secret key, and each of the recording device, and
the suppressing unit is operable to stop subsequent processing if the secret key decrypting unit has failed to correctly decrypt the secret key information.
6. The copyright protection system of claim 1, wherein
the judging unit includes:
a reference license information generating unit operable to perform the specific operation using the read media number and the decryption key, to generate reference license information; and
a comparing unit operable to (a) compare the reference license information with the read license information, (b) judge in the affirmative if the reference license information matches the read license information, and (c) judge in the negative if the reference license information does not match the read license information.
7. The copyright protection system of claim 1, wherein
the generating unit generates a set of license information for each of a plurality of sets of encrypted content, by performing the specific operation on the media number and a set of decryption key which corresponds to the set of encrypted content,
the recording unit records the plurality of sets of encrypted content, a plurality of sets of decryption information which are in a one-to-one correspondence with the plurality of sets of encrypted content, and a plurality of sets of license information which are generated by the generating unit and are in a one-to-one correspondence with the plurality of sets of encrypted content, on the recording medium in combination, and
the judging unit and the decrypting unit respectively perform the judgment and the decryption on each combination recorded on the recording medium.
8. The copyright protection system of claim 1, wherein
the generating unit generates a set of license information for a plurality of sets of encrypted content, by performing the specific operation on the media number and a plurality of sets of decryption key which are in a one-to-one correspondence with the plurality of sets of encrypted content.
9. The recording device for recording encrypted content on a recording medium, the recording medium having an unrewritable area in which a media number unique to the recording medium is recorded, comprising:
a generating unit operable to acquire the media number from the recording medium, and generate license information by performing a specific operation using the media number and decryption key so that the license information reflects both the media number and the decryption key, the decryption key being necessary to decrypt the encrypted content; and
a recording unit operable to record the license information, a decryption information generated by using the decryption key, and the encrypted content on the recording medium.
10. A reproduction device for decrypting encrypted content recorded on a recording medium, wherein the encrypted content, decryption information necessary to decrypt the encrypted content, and license information used for judging whether the encrypted content is permitted to be decrypted are recorded on the recording medium, and the recording medium has an unrewritable area in which a media number unique to the recording medium is recorded, comprising:
a judging unit operable to read the media number, the decryption information, and the license information from the recording medium, and judge whether the read license information can be obtained if a specific operation is performed using the read media number and the decryption key which can be obtained from the read decryption information;
a decrypting unit operable to read the encrypted content from the recording medium and decrypt the encrypted content using the decryption information;
a reproduction unit operable to reproduces the decrypted content; and
a suppressing unit operable to control the unit of the reproduction device not to reproduce the content, if the judgement by the judging unit is in the negative.
11. A copyright protection method for use in a copyright protection system including a recording device for recording encrypted content on a recording medium and a reproduction device for decrypting the encrypted content recorded on the recording medium, the recording medium having an unrewritable area in which a media number unique to the recording medium is recorded, comprising:
acquiring, by the recording device, the media number from the recording medium; generating license information by performing a specific operation using the media number and decryption key so that the license information reflects both the media number and the decryption key, the decryption key being necessary to decrypt the encrypted content;
recording, by the recording device; the license information, a decryption information generated by using the decryption key, and the encrypted content on the recording medium;
reading, by the reproduction device, the media number, the decryption information, and the license information from the recording medium;
judging, by the reproduction device, whether the read license information can be obtained if the specific operation is performed using the read media number and the decryption key;
reading, by the reproduction device, the encrypted content from the recording medium;
decrypting, by the reproduction device, the encrypted content using the decryption information;
reproducing the decrypted content; and
suppressing the processing by the reproduction device not to reproduce the content, if the judgment in the judging is in the negative.
12. A recording method for recording encrypted content on a recording medium, the recording medium having an unrewritable area in which a media number unique to the recording medium is recorded, comprising:
acquiring the media number from the recording medium;
generating license information by performing a specific operation using the media number and decryption key so that the license information reflects both the media number and the decryption key, the decryption key being necessary to decrypt the encrypted content; and
recording the license information, a decryption information generated by using the decryption key, and the encrypted content on the recording medium.
13. A reproduction method for decrypting encrypted content recorded on a recording medium, wherein the encrypted content, decryption information necessary to decrypt the encrypted content, and license information used for judging whether the encrypted content is permitted to be decrypted are recorded on the recording medium, and the recording medium has an unrewritable area in which a media number unique to the recording medium is recorded, comprising:
reading the media number, the decryption information, and the license information from the recording medium;
judging whether the read license information can be obtained if a specific operation is performed using the read media number and the decryption key which can be obtained from the read decryption information; and
reading the encrypted content from the recording medium;
decrypting the encrypted content using the decryption key obtained from the decryption information;
reproducing the decrypted content; and
suppressing the processing of the reproduction method not to reproduce the content, if the judgment in the judging is in the negative.
14. A recording program for use in a recording device for recording encrypted content on a recording medium, the recording medium having an unrewritable area in which a media number unique to the recording medium is recorded, the recording program having the recording device execute:
acquiring the media number from the recording medium;
generating license information by performing a specific operation using the media number and decryption key so that the license information reflects both the media number and the decryption key, the decryption key being necessary to decrypt the encrypted content; and
recording the license information, a decryption information generated by using the decryption key, and the encrypted content on the recording medium.
15. A reproduction program for use in a reproduction device for decrypting encrypted content recorded on a recording medium, wherein the encrypted content, decryption information necessary to decrypt the encrypted content, and license information used for judging whether the encrypted content is permitted to be decrypted are recorded on the recording medium, and the recording medium has an unrewritable area in which a media number unique to the recording medium is recorded, the decryption program having the reproduction device execute:
reading the media number, the decryption information, and the license information from the recording medium;
judging whether the read license information can be obtained if a specific operation is performed using the read media number and the decryption key which can be obtained from the read decryption information;
reading the encrypted content from the recording medium;
decrypting the encrypted content using the decryption key obtained from the decryption information;
reproducing the decrypted content; and
suppressing the processing of the reproduction program not to reproduce the content, if the judgment by the judging is in the negative.
16. A computer-readable storage medium storing a recording program for use in a recording device for recording encrypted content on a recording medium, the recording medium having an unrewritable area in which a media number unique to the recording medium is recorded, the recording program having the recording device execute:
acquiring the media number from the recording medium;
generating license information by performing a specific operation using the media number and decryption key so that the license information reflects both the media number and the decryption key, the decryption key being necessary to decrypt the encrypted content; and
recording the license information, a decryption information generated by using the decryption key, and the encrypted content on the recording medium.
17. A computer-readable storage medium storing a reproduction program for use in a reproduction device for decrypting encrypted content recorded on a recording medium, wherein the encrypted content, decryption information necessary to decrypt the encrypted content, and license information used for judging whether the encrypted content is permitted to be decrypted are recorded on the recording medium, and the recording medium has an unrewritable area in which a media number unique to the recording medium is recorded, the decryption program having the reproduction device execute:
reading the media number, the decryption information, and the license information from the recording medium;
judging whether the read license information can be obtained if a specific operation is performed using the read media number and the decryption key which can be obtained from the read decryption information;
reading the encrypted content from the recording medium;
decrypting the encrypted content using the decryption key obtained from the decryption information;
reproducing the decrypted content; and
suppressing the processing of the reproduction program not to reproduce the content, if the judgment by the judging is in the negative.
18. A recording medium comprising:
an unrewritable area in which a media number unique to the recording medium is recorded; and
a rewritable area in which (a) encrypted content, (b) decryption information necessary to decrypt the encrypted content, and (c) license information that is obtained by a specific operation using the media number and the decryption key and that reflects both the media number and the decryption key are recorded.
US11/503,180 2001-08-08 2006-08-14 Copyright protection system, recording device, and reproduction device Abandoned US20080044017A1 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US11/503,180 US20080044017A1 (en) 2001-08-08 2006-08-14 Copyright protection system, recording device, and reproduction device

Applications Claiming Priority (6)

Application Number Priority Date Filing Date Title
JP2001-240778 2001-08-08
JP2001240778 2001-08-08
JP2001-260932 2001-08-30
JP2001260932 2001-08-30
US10/213,154 US7555779B2 (en) 2001-08-08 2002-08-07 Copyright protection system, recording device, and reproduction device
US11/503,180 US20080044017A1 (en) 2001-08-08 2006-08-14 Copyright protection system, recording device, and reproduction device

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US10/213,154 Division US7555779B2 (en) 2001-08-08 2002-08-07 Copyright protection system, recording device, and reproduction device

Publications (1)

Publication Number Publication Date
US20080044017A1 true US20080044017A1 (en) 2008-02-21

Family

ID=26620187

Family Applications (2)

Application Number Title Priority Date Filing Date
US10/213,154 Expired - Lifetime US7555779B2 (en) 2001-08-08 2002-08-07 Copyright protection system, recording device, and reproduction device
US11/503,180 Abandoned US20080044017A1 (en) 2001-08-08 2006-08-14 Copyright protection system, recording device, and reproduction device

Family Applications Before (1)

Application Number Title Priority Date Filing Date
US10/213,154 Expired - Lifetime US7555779B2 (en) 2001-08-08 2002-08-07 Copyright protection system, recording device, and reproduction device

Country Status (5)

Country Link
US (2) US7555779B2 (en)
EP (2) EP1507261B1 (en)
KR (1) KR100484421B1 (en)
CN (3) CN1332391C (en)
DE (1) DE60202568T8 (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040213111A1 (en) * 2003-04-24 2004-10-28 Kim Byung Jin Method for managing copy protection information of recording medium
US20080072297A1 (en) * 2006-09-20 2008-03-20 Feitian Technologies Co., Ltd. Method for protecting software based on network
US20090132833A1 (en) * 2007-11-20 2009-05-21 Samsung Electronics Co., Ltd Storage device, terminal device using the storage device, and method thereof
US20100070416A1 (en) * 2008-09-18 2010-03-18 Microsoft Corporation Digital rights management license identification
US20110085661A1 (en) * 2009-10-14 2011-04-14 Hisashi Tsuji Content receiving terminal, content reproducing terminal, content write-out method, and program
US20110200224A1 (en) * 2008-10-14 2011-08-18 Koninklijke Philips Electronics N.V. Content item identifier
US20120328104A1 (en) * 2009-12-22 2012-12-27 Kozo Tagawa Input content data managing system and method of managing input content data
US20130290737A1 (en) * 2007-03-29 2013-10-31 Gary Stephen Shuster Method of distributing a decryption key in fixed-content data

Families Citing this family (56)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7136874B2 (en) 2002-10-16 2006-11-14 Microsoft Corporation Adaptive menu system for media players
US7043477B2 (en) 2002-10-16 2006-05-09 Microsoft Corporation Navigating media content via groups within a playlist
US7668842B2 (en) 2002-10-16 2010-02-23 Microsoft Corporation Playlist structure for large playlists
US7054888B2 (en) 2002-10-16 2006-05-30 Microsoft Corporation Optimizing media player memory during rendering
DE10310351A1 (en) * 2003-03-10 2004-09-23 Giesecke & Devrient Gmbh Loading of media data into a portable data carrier, e.g. a smart card, whereby data is transferred via a secure data transfer channel formed between a secure content server and the data carrier via an operating unit, e.g. a PC
KR20040092649A (en) * 2003-04-24 2004-11-04 엘지전자 주식회사 Method for managing a copy protection information of optical disc
KR100972831B1 (en) * 2003-04-24 2010-07-28 엘지전자 주식회사 Protectiog method of encrypted data and reprodecing apparatus therof
KR100974449B1 (en) * 2003-04-24 2010-08-10 엘지전자 주식회사 Method for managing a copy protection information of optical disc
JP4222110B2 (en) * 2003-05-28 2009-02-12 ソニー株式会社 Information recording medium, information processing apparatus and method
GB2404489A (en) 2003-07-31 2005-02-02 Sony Uk Ltd Access control for digital storage medium content
GB2404486A (en) * 2003-07-31 2005-02-02 Sony Uk Ltd Access control for digital storage medium content
GB2404487A (en) * 2003-07-31 2005-02-02 Sony Uk Ltd Access control for digital storage medium content
KR101148497B1 (en) * 2003-08-05 2012-05-21 파나소닉 주식회사 Copyright protection system
JP3931869B2 (en) * 2003-08-14 2007-06-20 ソニー株式会社 Information processing apparatus, information recording medium, information processing method, and computer program
WO2005020540A1 (en) * 2003-08-20 2005-03-03 Matsushita Electric Industrial Co., Ltd. Content reproduction system
US7644446B2 (en) * 2003-10-23 2010-01-05 Microsoft Corporation Encryption and data-protection for content on portable medium
KR101022465B1 (en) 2003-11-13 2011-03-15 삼성전자주식회사 Method of copying and decrypting encrypted digital data and apparatus therefor
JP4655470B2 (en) * 2003-11-18 2011-03-23 ソニー株式会社 Content data processing apparatus, content data processing method, content data management system, and content data management method
US20060005257A1 (en) * 2004-07-01 2006-01-05 Nakahara Tohru Encrypted contents recording medium and apparatus and method for reproducing encrypted contents
CN100476763C (en) * 2004-07-06 2009-04-08 松下电器产业株式会社 Information processing device and information processing method for the recording medium
CN1728262A (en) * 2004-07-29 2006-02-01 皇家飞利浦电子股份有限公司 Systme, device and method of providing encryption content via network and decryption to such content
JP4692003B2 (en) * 2005-02-10 2011-06-01 ソニー株式会社 Information processing apparatus, information processing method, and computer program
JP4701748B2 (en) * 2005-02-25 2011-06-15 ソニー株式会社 Information processing apparatus, information recording medium manufacturing apparatus, information recording medium and method, and computer program
US8176565B2 (en) * 2005-04-15 2012-05-08 Sony Corporation Information processing apparatus, information processing method, and computer program
US20060288215A1 (en) * 2005-06-15 2006-12-21 Shinichi Takemura Methods and apparatuses for utilizing application authorization data
WO2007105290A1 (en) 2006-03-13 2007-09-20 Fujitsu Limited Digital broadcast content move function
JP4920277B2 (en) * 2006-03-24 2012-04-18 株式会社東芝 Information processing device
KR20080067075A (en) * 2007-01-15 2008-07-18 주식회사 히타치엘지 데이터 스토리지 코리아 Method for recording and reproducing data encryption of optical disc
JP4327865B2 (en) * 2007-03-29 2009-09-09 株式会社東芝 Content processing apparatus, encryption processing method, and program
US8494166B2 (en) * 2007-05-01 2013-07-23 International Business Machines Corporation Use of indirect data keys for encrypted tape cartridges
US8656186B2 (en) * 2007-05-01 2014-02-18 International Business Machines Corporation Use of indirect data keys for encrypted tape cartridges
KR101316625B1 (en) * 2007-11-22 2013-10-18 삼성전자주식회사 System and method for restrictively recording contents using device key of content playback device
US8582954B2 (en) * 2007-12-10 2013-11-12 Intel Corporation System and method for automatically creating a media archive from content on a recording medium
US8135761B2 (en) 2007-12-10 2012-03-13 Realnetworks, Inc. System and method for automatically creating a media archive from content on a recording medium
US8396951B2 (en) * 2007-12-20 2013-03-12 Napo Enterprises, Llc Method and system for populating a content repository for an internet radio service based on a recommendation network
JP5065100B2 (en) * 2008-03-05 2012-10-31 京セラドキュメントソリューションズ株式会社 License management system and license management program
US9819489B2 (en) * 2008-05-14 2017-11-14 Sandisk Il, Ltd. Device for controlling access to user-selectable content
US20090288173A1 (en) * 2008-05-14 2009-11-19 Eitan Mardiks Method for controlling access to user-selectable content
US8555087B2 (en) 2008-06-19 2013-10-08 Intel Corporation Systems and methods for content playback and recording
EP2336940B1 (en) * 2009-12-21 2015-11-11 Giga-Byte Technology Co., Ltd. Method for password management and authentication
EP2336942A1 (en) * 2009-12-21 2011-06-22 Giga-Byte Technology Co., Ltd. Computer readable medium storing a program for password management and user authentication
US20130061048A1 (en) * 2010-03-11 2013-03-07 Hiroshi Suu Content delivery system, delivery server, and user terminal
JP5484168B2 (en) * 2010-04-14 2014-05-07 株式会社ソニー・コンピュータエンタテインメント Electronic content processing system, electronic content processing method, electronic content package and usage permission device
US20110270762A1 (en) * 2010-04-30 2011-11-03 Gsimedia Corporation Secure Data Transfer From a Vending Device to Portable Data Storage Devices
US20110271119A1 (en) * 2010-04-30 2011-11-03 Gsimedia Corporation Secure Data Storage and Transfer for Portable Data Storage Devices
US8949964B2 (en) * 2010-08-25 2015-02-03 Gary Stephen Shuster Security key entry using ancillary input device
KR101954215B1 (en) * 2011-07-12 2019-06-07 삼성전자주식회사 Method and apparatus for using non volatile storage device
CA2925640C (en) * 2013-09-30 2023-03-28 Cryptomill Inc. Method and system for secure data sharing
US9517952B2 (en) 2013-11-15 2016-12-13 General Electric Company Hydrophilic-oleophobic copolymer composition and uses thereof
WO2015079196A1 (en) * 2013-11-27 2015-06-04 British Telecommunications Public Limited Company Controlled storage device access
US20150242595A1 (en) * 2014-02-25 2015-08-27 Hui Lin Secure data storage and transfer for portable data storage devices
US20170054560A1 (en) * 2015-08-23 2017-02-23 Hui Lin Secure data storage and transfer for portable data storage devices
US10339323B2 (en) * 2015-09-15 2019-07-02 Google Llc Group license encryption and decryption
US11050552B2 (en) * 2017-05-03 2021-06-29 Infosys Limited System and method for hashing a data string using an image
CN113557513A (en) * 2019-03-21 2021-10-26 谷歌有限责任公司 Content encryption
TWI820242B (en) * 2019-10-29 2023-11-01 林暉 Structure and method of digital data memory card encryption

Citations (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4817140A (en) * 1986-11-05 1989-03-28 International Business Machines Corp. Software protection system using a single-key cryptosystem, a hardware-based authorization system and a secure coprocessor
US4991208A (en) * 1990-03-29 1991-02-05 Gte Laboratories Incorporated Video control system having session encryption key
US5392351A (en) * 1992-03-16 1995-02-21 Fujitsu Limited Electronic data protection system
US5881152A (en) * 1995-11-17 1999-03-09 Deutsche Telekom Ag Method and device for protecting stored data
US6081785A (en) * 1995-10-09 2000-06-27 Matsushita Electric Industrial Co., Ltd. Optical disk, optical recorder, optical reproducer, crytocommunication system and program license system
US6118873A (en) * 1998-04-24 2000-09-12 International Business Machines Corporation System for encrypting broadcast programs in the presence of compromised receiver devices
US6189146B1 (en) * 1998-03-18 2001-02-13 Microsoft Corporation System and method for software licensing
US6301663B1 (en) * 1997-11-20 2001-10-09 Kabushiki Kaisha Toshiba Copy protection apparatus and information recording medium used in this copy protection apparatus
US20020026424A1 (en) * 2000-08-31 2002-02-28 Matsushita Electric Industrial Co., Ltd. License issuing device/method and contents reproducing device/method
US6360320B2 (en) * 1997-04-23 2002-03-19 Sony Corporation Information processing apparatus, information processing method, information processing system and recording medium using an apparatus id and provided license key for authentication of each information to be processed
US6367019B1 (en) * 1999-03-26 2002-04-02 Liquid Audio, Inc. Copy security for portable music players
US20020114461A1 (en) * 2001-02-20 2002-08-22 Muneki Shimada Computer program copy management system
US6550011B1 (en) * 1998-08-05 2003-04-15 Hewlett Packard Development Company, L.P. Media content protection utilizing public key cryptography
US6748539B1 (en) * 2000-01-19 2004-06-08 International Business Machines Corporation System and method for securely checking in and checking out digitized content
US6834349B1 (en) * 1999-02-26 2004-12-21 Victor Company Of Japan, Ltd. Copyright protection system for data storage and transmission
US6865550B1 (en) * 2000-02-03 2005-03-08 Eastman Kodak Company System for secure distribution and playback of digital data

Family Cites Families (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3176030B2 (en) * 1996-01-08 2001-06-11 株式会社東芝 Copy control method and copy control device
US6144745A (en) * 1997-04-07 2000-11-07 Fujitsu Limited Method of and apparatus for retaining and verifying of data on recording medium
JP3722584B2 (en) 1997-04-09 2005-11-30 富士通株式会社 Reproduction permission method and recording medium
JP3625355B2 (en) * 1997-04-18 2005-03-02 株式会社東芝 External storage device, encryption unit device, decryption unit device, encryption system, decryption system, encryption method, and decryption method
JP3625354B2 (en) 1997-04-18 2005-03-02 株式会社東芝 Unit device, decryption unit device, encryption unit device, encryption processing system, and encryption method
EP0878796B1 (en) * 1997-05-13 2006-04-19 Kabushiki Kaisha Toshiba Information recording apparatus, information reproducing apparatus, and information distribution system
JPH11224461A (en) 1998-02-06 1999-08-17 Sony Corp Information processor, information method, providing medium and recording medium
EP0984346A1 (en) * 1998-09-02 2000-03-08 Hitachi Europe Limited Copy protection apparatus and method
JP4217316B2 (en) 1998-12-04 2009-01-28 キヤノン株式会社 Image processing apparatus and method, and computer-readable recording medium on which an image processing program is recorded
SG75189A1 (en) 1998-12-04 2000-09-19 Canon Kk Image processing apparatus method therefor and recording medium storing image processing program
JP2000260121A (en) * 1999-03-05 2000-09-22 Toshiba Corp Information reproducing device and information recording device
MY131509A (en) * 1999-03-15 2007-08-30 Sony Corp Data processing method, apparatus and system for encrypted- data transfer
DE60015269T2 (en) * 1999-03-15 2006-02-02 Koninklijke Philips Electronics N.V. A PROCESS AND SYSTEM TO PROVIDE COPY PROTECTION ON A STORAGE MEDIUM AND TO USE A STORAGE MEDIUM IN SUCH A SYSTEM
JP2001057021A (en) * 1999-08-12 2001-02-27 Ricoh Co Ltd Digital data recording and reproducing system
US7353541B1 (en) * 1999-09-07 2008-04-01 Sony Corporation Systems and methods for content distribution using one or more distribution keys
JP4296454B2 (en) * 1999-09-07 2009-07-15 ソニー株式会社 Recording / reproducing system, recording / reproducing apparatus, reproducing apparatus, data storage apparatus
US6631359B1 (en) * 1999-09-10 2003-10-07 Dphi Acquisitions, Inc. Writeable medium access control using a medium writeable area
US6850914B1 (en) * 1999-11-08 2005-02-01 Matsushita Electric Industrial Co., Ltd. Revocation information updating method, revocation informaton updating apparatus and storage medium
EP1348178A1 (en) * 2000-12-08 2003-10-01 Matsushita Electric Industrial Co., Ltd. Distribution device, terminal device, and program and method for use therein

Patent Citations (18)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4817140A (en) * 1986-11-05 1989-03-28 International Business Machines Corp. Software protection system using a single-key cryptosystem, a hardware-based authorization system and a secure coprocessor
US4991208A (en) * 1990-03-29 1991-02-05 Gte Laboratories Incorporated Video control system having session encryption key
US5392351A (en) * 1992-03-16 1995-02-21 Fujitsu Limited Electronic data protection system
US5555304A (en) * 1992-03-16 1996-09-10 Fujitsu Limited Storage medium for preventing an illegal use by a third party
US6081785A (en) * 1995-10-09 2000-06-27 Matsushita Electric Industrial Co., Ltd. Optical disk, optical recorder, optical reproducer, crytocommunication system and program license system
US5881152A (en) * 1995-11-17 1999-03-09 Deutsche Telekom Ag Method and device for protecting stored data
US6360320B2 (en) * 1997-04-23 2002-03-19 Sony Corporation Information processing apparatus, information processing method, information processing system and recording medium using an apparatus id and provided license key for authentication of each information to be processed
US6301663B1 (en) * 1997-11-20 2001-10-09 Kabushiki Kaisha Toshiba Copy protection apparatus and information recording medium used in this copy protection apparatus
US6189146B1 (en) * 1998-03-18 2001-02-13 Microsoft Corporation System and method for software licensing
US6118873A (en) * 1998-04-24 2000-09-12 International Business Machines Corporation System for encrypting broadcast programs in the presence of compromised receiver devices
US6832319B1 (en) * 1998-04-24 2004-12-14 International Business Machines Corporation Content guard system for copy protection of recordable media
US6550011B1 (en) * 1998-08-05 2003-04-15 Hewlett Packard Development Company, L.P. Media content protection utilizing public key cryptography
US6834349B1 (en) * 1999-02-26 2004-12-21 Victor Company Of Japan, Ltd. Copyright protection system for data storage and transmission
US6367019B1 (en) * 1999-03-26 2002-04-02 Liquid Audio, Inc. Copy security for portable music players
US6748539B1 (en) * 2000-01-19 2004-06-08 International Business Machines Corporation System and method for securely checking in and checking out digitized content
US6865550B1 (en) * 2000-02-03 2005-03-08 Eastman Kodak Company System for secure distribution and playback of digital data
US20020026424A1 (en) * 2000-08-31 2002-02-28 Matsushita Electric Industrial Co., Ltd. License issuing device/method and contents reproducing device/method
US20020114461A1 (en) * 2001-02-20 2002-08-22 Muneki Shimada Computer program copy management system

Cited By (13)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20040213111A1 (en) * 2003-04-24 2004-10-28 Kim Byung Jin Method for managing copy protection information of recording medium
US8321924B2 (en) * 2006-09-20 2012-11-27 Feitian Technologies Co., Ltd. Method for protecting software accessible over a network using a key device
US20080072297A1 (en) * 2006-09-20 2008-03-20 Feitian Technologies Co., Ltd. Method for protecting software based on network
US9081972B2 (en) * 2007-03-29 2015-07-14 Gary Stephen Shuster Method of distributing a decryption key in fixed-content data
US20130290737A1 (en) * 2007-03-29 2013-10-31 Gary Stephen Shuster Method of distributing a decryption key in fixed-content data
US20090132833A1 (en) * 2007-11-20 2009-05-21 Samsung Electronics Co., Ltd Storage device, terminal device using the storage device, and method thereof
US20100070416A1 (en) * 2008-09-18 2010-03-18 Microsoft Corporation Digital rights management license identification
US10453003B2 (en) * 2008-09-18 2019-10-22 Microsoft Technology Licensing, Llc Digital rights management license identification
US20110200224A1 (en) * 2008-10-14 2011-08-18 Koninklijke Philips Electronics N.V. Content item identifier
US8831272B2 (en) * 2008-10-14 2014-09-09 Koninklijke Philips N.V. Content item identifier
US20110085661A1 (en) * 2009-10-14 2011-04-14 Hisashi Tsuji Content receiving terminal, content reproducing terminal, content write-out method, and program
US20120328104A1 (en) * 2009-12-22 2012-12-27 Kozo Tagawa Input content data managing system and method of managing input content data
US8983074B2 (en) * 2009-12-22 2015-03-17 Quad, Inc. Input content data managing system and method of managing input content data

Also Published As

Publication number Publication date
DE60202568T8 (en) 2005-10-20
KR20030014638A (en) 2003-02-19
EP1507261B1 (en) 2016-07-20
CN1332391C (en) 2007-08-15
KR100484421B1 (en) 2005-04-22
CN1901067B (en) 2011-10-12
DE60202568D1 (en) 2005-02-17
EP1507261A2 (en) 2005-02-16
CN1591650A (en) 2005-03-09
US20030152222A1 (en) 2003-08-14
US7555779B2 (en) 2009-06-30
EP1288942A1 (en) 2003-03-05
CN1172244C (en) 2004-10-20
CN1901067A (en) 2007-01-24
EP1507261A3 (en) 2011-01-26
EP1288942B1 (en) 2005-01-12
CN1402138A (en) 2003-03-12
DE60202568T2 (en) 2005-06-02

Similar Documents

Publication Publication Date Title
US7555779B2 (en) Copyright protection system, recording device, and reproduction device
US20190042794A1 (en) Systems and methods for authenticating and protecting the integrity of data streams and other data
US6782190B1 (en) Copy protection apparatus and method
US7669052B2 (en) Authentication and encryption utilizing command identifiers
EP1855281B1 (en) Apparatus for writing data to a medium
US20020154779A1 (en) Data recording/reproducing device and saved data processing method, and program proving medium
US20060122946A1 (en) Method and system for securing content in media systems
US20040243814A1 (en) Digital work protection system, recording apparatus, reproduction apparatus, and recording medium
EP1061515A2 (en) Digital data recording device, digital data memory device, and digital data utilizing device for converting management information which contains restrictive information using a different key in each management information send/receive session
CA2361356A1 (en) Storage device authentication system
US20080016307A1 (en) Storage device and storing method
US20030221097A1 (en) Information input/output system, key management device, and user device
EP1120934B1 (en) Method and apparatus for key distribution using a key base
US7617402B2 (en) Copyright protection system, encryption device, decryption device and recording medium
US9092619B2 (en) Data processing apparatus
JP3837368B2 (en) Copyright protection system, recording device and decryption device
JP4638160B2 (en) Copyright protection system, recording device, playback device, and recording medium
JP2004014112A (en) Copyright protection system, recording equipment and decoding equipment
KR100209674B1 (en) Copy preventing method for dvd

Legal Events

Date Code Title Description
STCB Information on status: application discontinuation

Free format text: ABANDONED -- FAILURE TO RESPOND TO AN OFFICE ACTION