Information processing apparatus

• US 20030159033A1
• Filed: 04/09/2003
• Published: 08/21/2003
• Est. Priority Date: 03/29/2001
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Ishiguro, Ryuji
• Application Number:
  US10/276,469
• Publication Number:
  US 20030159033A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying

Abstract

A license server offering a content decryption key assigns leaves of a key-managed hierarchical tree structure to clients, and generates a set of node keys as a device node key for transmission to each client together with a leaf ID and a private key of the client in question. When an intermediate node of the tree structure is deemed to be the top, all nodes subordinate to the top are established as nodes related to a category defined for the top node. In this setup, a manufacturer, a content provider, or like entity managing the top node assigned the category generates uniquely an enabling key block that defines the node in question as the top, and distributes the enabling key block to devices belonging to nodes subordinate to the top node. The scheme allows the managing entity to renew the key without affecting devices belonging to any other category.

Claims

1. An information processing apparatus for providing a device node key used to decrypt an enabling key block included in a content, said information processing apparatus comprising:

assigning means which, in a key-managed hierarchical tree structure having a content provision category assigned to a first node on a given level of the structure, assigns uniquely a second information processing apparatus to a leaf subordinate to said first node; and

providing means for providing said second information processing apparatus with said device node key corresponding to a path between said leaf assigned by said assigning means and said first node.

2. The information processing apparatus according to claim 1, wherein said providing means further provides said second information processing apparatus with leaf identification information for identifying said leaf, in addition to said device node key.

3. The information processing apparatus according to claim 2, further comprising receiving means for receiving from said second information processing apparatus a license request including both said leaf identification information and license identification information for identifying a license granting the use of said content;

and

transmitting means for transmitting said license which is added said leaf identification information included in said license request and which comprises a digital signature.

4. An information processing apparatus according to claim 1, wherein said providing means further provides said second information processing apparatus with a private key and a public key of said second information processing apparatus as well as a public key of said information processing apparatus, in addition to said device node key.

5. An information processing method for use with an information processing apparatus for providing a device node key used to decrypt an enabling key block included in a content, said information processing method comprising the steps of:

assigning uniquely a second information processing apparatus to a leaf subordinate to said first node in a key-managed hierarchical tree structure having a content provision category assigned to a first node on a given level of the structure; and

providing said second information processing apparatus with said device node key corresponding to a path between said leaf assigned in said assigning step and said first node.

6. A storage medium which stores a computer-readable program for use with an information processing apparatus for providing a device node key used to decrypt an enabling key block included in a content, the program comprising the steps of:

assigning uniquely a second information processing apparatus to a leaf subordinate to said first node in a key-managed hierarchical tree structure having a content provision category assigned to a first node on a given level of the structure; and

providing said second information processing apparatus with said device node key corresponding to a path between said leaf assigned in said assigning step and said first node.

7. A program executable by a computer for controlling an information processing apparatus for providing a device node key used to decrypt an enabling key block included in a content, said program causing said computer to carry out the steps of:

assigning uniquely a second information processing apparatus to a leaf subordinate to said first node in a key-managed hierarchical tree structure having a content provision category assigned to a first node on a given level of the structure; and

providing said second information processing apparatus with said device node key corresponding to a path between said leaf assigned in said assigning step and said first node.

8. An information processing apparatus for providing a license granting the use of a content, said information processing apparatus comprising:

receiving means for receiving from a second information processing apparatus leaf identification information for identifying in a key-managed hierarchical tree structure a leaf assigned to said second information processing apparatus; and

transmitting means which, if said leaf identification information received by said receiving means identifies a leaf subordinate to a first node on a given level of the structure, said first node being assigned a content provision category, then transmits said license including said leaf identification information to said second information processing apparatus.

9. An information processing method for use with an information processing apparatus for providing a license granting the use of a content, said information processing method comprising the steps of:

receiving from a second information processing apparatus leaf identification information for identifying in a key-managed hierarchical tree structure a leaf assigned to said second information processing apparatus; and

transmitting said license including said leaf identification information to said second information processing apparatus if said leaf identification information received in said receiving step identifies a leaf subordinate to a first node on a given level of the structure, said first node being assigned a content provision category.

10. A storage medium which stores a computer-readable program for use with an information processing apparatus for providing a license granting the use of a content, the program comprising the steps of:

receiving from a second information processing apparatus leaf identification information for identifying in a key-managed hierarchical tree structure a leaf assigned to said second information processing apparatus; and

transmitting said license including said leaf identification information to said second information processing apparatus if said leaf identification information received in said receiving step identifies a leaf subordinate to a first node on a given level of the structure, said first node being assigned a content provision category.

11. A program executable by a computer for controlling an information processing apparatus for providing a license granting the use of a content, said program causing said computer to carry out the steps of:

receiving from a second information processing apparatus leaf identification information for identifying in a key-managed hierarchical tree structure a leaf assigned to said second information processing apparatus; and

transmitting said license including said leaf identification information to said second information processing apparatus if said leaf identification information received in said receiving step identifies a leaf subordinate to a first node on a given level of the structure, said first node being assigned a content provision category.

12. An information processing apparatus for offering contents, comprising:

receiving means for receiving a content request including content identification information for identifying a content; and

transmitting means for transmitting an encrypted content including an enabling key block decryptable by use of a device node key corresponding to a path between a leaf subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category.

13. An information processing method for providing contents, comprising the steps of:

receiving a content request including content identification information for identifying a content; and

transmitting an encrypted content including an enabling key block decryptable by use of a device node key corresponding to a path between a leaf subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category.

14. A storage medium which stores a computer-readable program for use with an information processing apparatus for providing contents, the program comprising the steps of:

receiving a content request including content identification information for identifying a content; and

transmitting an encrypted content including an enabling key block decryptable by use of a device node key corresponding to a path between a leaf subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category.

15. A program executable by a computer for controlling an information processing apparatus for providing contents, said program causing said computer to carry out the steps of:

receiving a content request including content identification information for identifying a content; and

transmitting an encrypted content including an enabling key block decryptable by use of a device node key corresponding to a path between a leaf subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category.

16. An information processing apparatus for outputting contents, comprising:

storing means for storing a device node key corresponding to an extent between a leaf which is assigned to said information processing apparatus and which is subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category;

content acquiring means for acquiring an encrypted content including an enabling key block for associating said first node with a root key;

decrypting means for decrypting said encrypted content by decrypting said enabling key block included in said encrypted content acquired by said content acquiring means, through the use of said device node key stored in said storing means; and

outputting means for outputting the content decrypted by said decrypting means.

17. An information processing method for use with an information processing apparatus for outputting contents, said information processing method comprising the steps of:

storing a device node key corresponding to an extent between a leaf which is assigned to said information processing apparatus and which is subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category;

acquiring an encrypted content including an enabling key block for associating said first node with a root key;

decrypting said encrypted content by decrypting said enabling key block included in said encrypted content acquired in said content acquiring step, through the use of said device node key stored in said storing step; and

outputting the content decrypted in said decrypting step.

18. A storage medium which stores a computer-readable program for use with an information processing apparatus for outputting contents, the program comprising the steps of:

storing a device node key corresponding to an extent between a leaf which is assigned to said information processing apparatus and which is subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category;

acquiring an encrypted content including an enabling key block for associating said first node with a root key;

decrypting said encrypted content by decrypting said enabling key block included in said encrypted content acquired in said content acquiring step, through the use of said device node key stored in said storing step; and

outputting the content decrypted in said decrypting step.

19. A program executable by a computer for controlling an information processing apparatus for outputting contents, said program causing said computer to carry out the steps of:

storing a device node key corresponding to an extent between a leaf which is assigned to said information processing apparatus and which is subordinate to a first node on a given level of a key-managed hierarchical tree structure, and said first node which is assigned a content provision category;

acquiring an encrypted content including an enabling key block for associating said first node with a root key;

decrypting said encrypted content by decrypting said enabling key block included in said encrypted content acquired in said content acquiring step, through the use of said device node key stored in said storing step; and

outputting the content decrypted in said decrypting step.