Information processing apparatus, information processing method and program

• US 20030051151A1
• Filed: 08/07/2002
• Published: 03/13/2003
• Est. Priority Date: 08/07/2001
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Asano, Tomoyuki, Muramatsu, Katsumi
• Application Number:
  US10/214,068
• Publication Number:
  US 20030051151A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00115 wherein the record carrier stores a unique medium identifier
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 20/00347 wherein the medium identifier is used as a key
• CPC Class Codes: G11B 20/00449 content scrambling system [CSS]
• CPC Class Codes: G11B 20/00507 wherein consecutive physical data units of the record carrier are encrypted with separate encryption keys, e.g. the key changes on a cluster or sector basis
• CPC Class Codes: G11B 20/00528 wherein each title is encrypted with a separate encryption key for each title, e.g. title key for movie, song or data file
• CPC Class Codes: G11B 20/00536 wherein encrypted content data is subjected to a further, iterated encryption, e.g. interwoven encryption
• CPC Class Codes: G11B 20/00673 wherein the erased or nullified data include a cryptographic key
• CPC Class Codes: G11B 20/0071 involving a purchase action
• CPC Class Codes: G11B 20/00768 wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 20/00775 wherein said copy control information is encoded in an encryption mode indicator [EMI]
• CPC Class Codes: G11B 20/00826 wherein a spoiler signal is added to degrade the signal quality
• CPC Class Codes: G11B 20/0084 wherein the usage restriction can be expressed as a specific time or date

Abstract

When contents are copied or transferred from a first information processing apparatus to a second information processing apparatus, the contents are stored onto a recording medium of the second information processing apparatus as they are without decryption and re-encryption. The first information processing apparatus also supplies a title-unique key to the second information processing apparatus to be used by the second information processing apparatus for generating a title key which is also stored on the recording medium. In a content reproduction process carried out by the second information processing apparatus, a title-unique key is generated from its own keys, such as master, media and LSI keys, in accordance with a title-unique-key generation sequence based on the stored title key, and is used for decrypting the contents. As a result, it is possible to provide a processing configuration for efficiently performing an operation to copy contents from one information processing apparatus to another and an operation to store distributed contents onto a recording medium of a recipient apparatus.

Claims

1. An information processing apparatus for carrying out a cryptographic process on information, comprising:

a cryptographic processing unit; and

a recording medium having encrypted data stored thereon;

said cryptographic processing unit being operable to (i) generate a second encryption key different from a first encryption key by carrying out processing on the first encryption key according to a reverse sequence of at least a portion of a predetermined key generation sequence, the first encryption key being input from an external source and being provided for the encrypted data, (ii) generate a decryption key for decrypting the encrypted data by carrying out processing in accordance with the predetermined key generation sequence on the second encryption key, and (iii) decrypt the encrypted data stored on said recording medium using the decryption key.

2. An information processing apparatus according to claim 1, wherein

the decryption key is generated by carrying out processing in accordance with the predetermined key generation sequence on the second encryption key and at least one of a key stored in said information processing apparatus and a key stored in said recording medium.

3. An information processing apparatus according to claim 1,

wherein the first encryption key is a title-unique key provided for the encrypted data,

the second encryption key is a title key obtainable by decrypting the title-unique key, and

the decryption key is generated by carrying out processing in accordance with the predetermined key generation sequence on the title key and at least one of a key stored in said information processing apparatus and a key stored in said recording medium.

4. An information processing apparatus according to claim 1, further comprising a storage unit operable to store node keys each unique to one of a plurality of nodes composing a hierarchical tree structure including leaves each associated with one of a plurality of information processing apparatus different from each other, and to store leaf keys each unique to one of the plurality of information processing apparatus,

said cryptographic processing unit being operable to decrypt an effective key block including node keys each encrypted using keys including at least one of the node keys and one of the leaf keys to obtain a resultant key, and to generate the decryption key by carrying out processing in accordance with the predetermined key generation sequence on the resultant key and the second encryption key.

5. An information processing apparatus according to claim 1,

wherein the encrypted data is pieces of block data which each include packets composing a transport stream, and

the decryption key is a block key for each of the pieces of block data.

6. An information processing apparatus according to claim 1,

wherein said cryptographic processing unit is further operable to authenticate a transmitting apparatus from which the encrypted data is received in an operation to receive the encrypted data, and accepts the encrypted data on condition that the transmitting apparatus is authenticated successfully.

7. An information processing apparatus according to claim 1, further comprising a storage unit operable to store node keys each unique to one of a plurality of nodes composing a hierarchical tree structure including leaves each associated with one of a plurality of information processing apparatus different from each other, and to store leaf keys each unique to one of the plurality of information processing apparatus,

said cryptographic processing unit being operable to decrypt an effective key block including node keys each encrypted using keys including at least one of the node keys and one of the leaf keys to obtain the first encryption key.

8. A method of performing a cryptographic process on information in an information processing apparatus, the method comprising:

providing a recording medium having encrypted data stored thereon;

generating a second encryption key different from a first encryption key by carrying out processing on the first encryption key according to a reverse sequence of at least a portion of a predetermined key generation sequence, the first encryption key being input from an external source and being provided for the encrypted data;

generating a decryption key for decrypting the encrypted data by carrying out processing in accordance with the predetermined key generation sequence on the second encryption key; and

decrypting the encrypted data stored on the recording medium using the decryption key.

9. An information processing method according to claim 8,

wherein the decryption key is generated by carrying out processing in accordance with the predetermined key generation sequence on the second encryption key and at least one of a key stored in the information processing apparatus and a key stored in the recording medium.

10. An information processing method according to claim 8,

wherein the first encryption key is a title-unique key provided for the encrypted data,

the second encryption key is a title key obtainable by decrypting the title-unique key, and

the decryption key is generated by carrying out processing in accordance with the predetermined key generation sequence on the title key and at least one of a key stored in the information processing apparatus and a key stored in the recording medium.

11. An information processing method according to claim 8, further comprising:

storing in the information processing apparatus node keys each unique to one of a plurality of nodes composing a hierarchical tree structure including leaves each associated with one of a plurality of information processing apparatus different from each other, and leaf keys each unique to one of the plurality of information processing apparatus; and

the step of generating the decryption key includes decrypting an effective key block including node keys each encrypted using keys including at least one of the node keys and one of the leaf keys to obtain a resultant key, and generating the decryption key by carrying out processing in accordance with the predetermined key generation sequence on the resultant key and the second encryption key.

12. An information processing method according to claim 8,

wherein the encrypted data is pieces of block data which each include packets composing a transport stream, and

the decryption key is a block key for each of the pieces of block data.

13. An information processing method according to claim 8, further comprising:

authenticating a transmitting apparatus from which the encrypted data is received in an operation to receive the encrypted data, and accepting the encrypted data on condition that the authenticating step is successful.

14. An information processing method according to claim 8, further comprising:

storing in the information processing apparatus node keys each unique to one of a plurality of nodes composing a hierarchical tree structure including leaves each associated with one of a plurality of information processing apparatus different from each other, and leaf keys each unique to one of the plurality of information processing apparatus; and

the step of generating the decryption key includes decrypting an effective key block including node keys each encrypted using keys including at least one of the node keys and one of the leaf keys to obtain the first encryption key.

15. A computer-readable medium recorded with a program to be executed in a computer system for carrying out a cryptographic process on information, the program comprising:

generating a second encryption key different from a first encryption key by carrying out processing on the first encryption key according to a reverse sequence of at least a portion of a predetermined key generation sequence, the first encryption key being input from an external source and being provided for encrypted data;

generating a decryption key for decrypting the encrypted data by carrying out processing in accordance with the predetermined key generation sequence on the second encryption key; and

decrypting the encrypted data using the decryption key.