Apparatus and method for recording/reproducing information

• US 20030159037A1
• Filed: 04/15/2003
• Published: 08/21/2003
• Est. Priority Date: 01/16/2001
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Oishi, tateo, Asano, Tomoyuki, Osawa, Yoshitomo, Taki, Ryuta
• Granted Patent: US 7,401,231 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00166 involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00253 wherein the key is stored on the record carrier
• CPC Class Codes: G11B 20/00731 involving a digital rights management system for enforcing a usage restriction
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0836 using tree structure or hierarchical structure
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method are realized which enables valid use of content by preventing unauthorized use of content which is caused by rewriting rights data. A structure is employed in which rights data including use-restriction information on content and DRM data including an encrypted content key are recorded in a digital data recording medium (media), and in which an integrity check value (ICV) for the DRM data can be stored in a recordable/playable area (protected area) by using only a dedicated IC. EKB distribution is used to execute the tree-structure key distribution to distribute keys for generating ICV-generation verifying keys. In this structure, unauthorized use of content by rewriting of the rights data is prevented.

Claims

1. An information recording device for executing data-recording processing to a recording medium, said information recording device comprising:

encryption-processing means which generates encrypted content by executing a process for encrypting content to be stored in the recording medium and which generates an integrity check value (ICV) for digital-rights-management (DRM) data on content including use-restriction information on content; and

a dedicated secret-information recording circuit which is used for a process for recording the integrity check value (ICV) on a physically protected area on the recording medium and which is not used for a process for recording the encrypted content.

2. An information recording device according to claim 1, wherein said digital-rights-management (DRM) data includes information on use of the content, an encrypted content key obtained by encrypting a content key serving as a content encryption key, and a content identifier (ID).

3. An information recording device according to claim 1, wherein the dedicated secret-information recording circuit has a structure in which a process for recording the integrity check value (ICV) in the physically protected area on the recording medium is executed by using signal processing different from the signal processing used for a method for recording the content.

4. An information recording device according to claim 1, wherein:

the dedicated secret-information recording circuit has a structure in which a process for recording the integrity check value (ICV) in the physically protected area on the recording medium is executed by using signal processing different from the signal processing used for a method for recording the content; and

the dedicated secret-information recording circuit has a structure which executes a process for recording secret information, which includes the integrity check value (ICV), in a recording area superimposed on a recording area on a recording medium for content corresponding to the secret information.

5. An information recording device according to claim 1, wherein the dedicated secret-information recording circuit has a structure which executes the process for recording the integrity check value (ICV) in the physically protected area on the recording medium when the physically protected area is formed separately from a recording area for the content.

6. An information recording device according to claim 1, wherein the dedicated secret-information recording circuit has a structure which executes the process of recording, in the physically protected area on the recording medium, both the integrity check value (ICV) for the digital-rights-management (DRM) data on the content, and an ICV key used for generating an ICV-generation verifying key for verifying the generation of the ICV.

7. An information recording device according to claim 1, wherein said encryption-processing means has a structure in which the process for generating the integrity check value (ICV) for the digital-rights-management (DRM) data is executed as a message-authentication-code (MAC) generating process in which DES encryption processing is used.

8. An information recording device according to claim 1, wherein:

said information recording device possesses, in a hierarchical tree structure having a plurality of different information recording devices serving as leaves, different key sets of node keys unique to nodes and leaf keys unique to the information recording devices; and

said encryption-processing means has a structure in which, by using an enabling key block (EKB) key acquired by decrypting an EKB which can be decrypted only by a selected information recording device included in the leaves in said hierarchical tree structure, a process for generating an ICV key used for generating the integrity check value (ICV) for the digital-rights-management (DRM) data is executed.

9. An information recording device according to claim 8, wherein said encryption-processing means has a structure in which, from a usable enabling key block (EKB) stored in one information recording device, and an enabling key block (EKB) stored in a recording medium for content storage, an EKB having a newer version is selected and an EKB key is acquired.

10. An information recording device according to claim 8, wherein said encryption-processing means has a structure in which, by using the EKB key acquired by the process of decrypting the enabling key block (EKB), encryption on a content key, serving as an encrypted key for the content, is executed.

11. An information recording device according to claim 1, wherein said encryption-processing means has a structure in which, in the process of recording the content in the recording medium, when an integrity check value (ICV) for digital-rights-management (DRM) data corresponding to the content is added, a process for verifying the ICV is executed, and on condition that it is verified that there is no falsification of the digital-rights-management (DRM) data, processing associated with the process of recording the content in the recording medium is executed.

12. An information recording device according to claim 1, wherein said encryption-processing means has a structure in which, in the process of recording the content in the recording medium, when the content is transmitted from another device, processing associated with the process of recording the content in the recording medium is executed on condition that mutual authentication with the device is established.

13. An information recording device according to claim 1, wherein said encryption-processing means has a structure in which, in the process of recording the content in the recording medium, when updating of the digital-rights-management (DRM) data is executed, an integrity check value (ICV) based on the updated digital-rights-management (DRM) data is generated, and in the recording medium, the integrity check value (ICV) based on the updated digital-rights-management (DRM) data is recorded.

14. An information recording device according to claim 13, wherein, in the case of the updated integrity check value (ICV), a process for overwriting the integrity check value (ICV) is executed before the updating.

15. An information recording device according to claim 13, wherein, in the case of the updated integrity check value (ICV), a process for recording to an area different from the recording area of the integrity check value (ICV) is executed before the updating.

16. An information playback device for executing data-playback processing from a recording medium, said information playback device comprising:

cryptosystem-processing means which executes a process for decrypting content stored in the recording medium and which executes verification of an integrity check value (ICV) for digital-rights-management data (DRM) on content including use-restriction information on content; and

a dedicated secret-information playback circuit which is used for a process for playing back the integrity check value (ICV) from a physically protected area on the recording medium and which is not used for a process for playing back the encrypted content.

17. An information playback device according to claim 16, wherein said digital-rights-management (DRM) data includes information on use of the content, an encrypted content key obtained by encrypting a content key serving as a content encryption key, and a content identifier (ID).

18. An information playback device according to claim 16, wherein the dedicated secret-information playback circuit has a structure in which a process for playing back the integrity check value (ICV) from the physically protected area on the recording medium is executed by using signal processing different from signal processing used for a method of playing back the content.

19. An information playback device according to claim 16, wherein:

the dedicated secret-information playback circuit has a structure in which a process for playing back the integrity check value (ICV) from the physically protected area on the recording medium is executed by using signal processing different from signal processing used for a method of playing back the content; and

the dedicated secret-information playback circuit has a structure which executes a process for playing back secret information, which includes the integrity check value (ICV), from a recording area superimposed on a recording area on a recording medium for content corresponding to the secret information.

20. An information playback device according to claim 16, wherein the dedicated secret-information playback circuit has a structure which executes the process for playing back the integrity check value (ICV) from the physically protected area on the recording medium when the physically protected area is formed separately from a recording area for the content.

21. An information playback device according to claim 16, wherein the dedicated secret-information playback circuit has a structure which executes the process of playing back the integrity checklvalue (ICV) for the digital-rights-management (DRM) data on the content and an ICV key used for generating an ICV-generation verifying key for verifying the generation of the ICV from the physically protected area on the recording medium.

22. An information playback device according to claim 16, wherein the verifying processing on the integrity check value (ICV) for the digital-rights-management (DRM) data is executed as processing in which a message authentication code (MAC) in which DES encryption processing is used for the played back digital-rights-management (DRM) and is compared with a recorded ICV.

23. An information playback device according to claim 16, wherein:

said information playback device possesses, in a hierarchical tree structure having a plurality of different information recording devices serving as leaves, different key sets of node keys unique to nodes and leaf keys unique to the information recording devices; and

said cryptosystem-processing means has a structure in which, by using an enabling key block (EKB) key acquired by decrypting an EKB which can be decrypted only by a selected information playback device included in the leaves in said hierarchical tree structure, a process for generating an ICV key used for generating the integrity check value (ICV) for the digital-rights-management (DRM) data is executed.

24. An information playback device according to claim 23, wherein said cryptosystem-processing means has a structure in which the EKB key is acquired by selecting an enabling key block (EKB) correlated with content stored in the recording medium storing the content.

25. An information playback device according to claim 23, wherein said cryptosystem-processing means has a structure in which decryption of the content key, serving as an encrypted key for the content, is executed by using the EKB key acquired by the process for decrypting the enabling key block (EKB).

26. An information playback device according to claim 16, wherein said cryptosystem-processing means has a structure in which, in the process for playing back the content from the recording medium, the verifying processing on the integrity check value (ICV) for the digital-rights-management (DRM) data corresponding to the content is executed, and on condition that it is verified that there is no falsification of the digital-rights-management (DRM) data, processing associated with the process of playing back the content from the recording medium is executed.

27. An information playback device according to claim 16, wherein said cryptosystem-processing means has a structure in which, in the process of playing back the content from the recording medium, when the content is transmitted from another device, processing associated with the process of transmitting the content in the recording medium is executed on condition that mutual authentication with the device is established.

28. An information playback device according to claim 16, wherein, in the process of playing back the content from the recording medium, when updating of the digital-rights-management (DRM) data is executed, said cryptosystem-processing means generates an integrity check value (ICV) based on the updated digital-rights-management (DRM) data, and records in the recording medium the integrity check value (ICV) based on the updated digital-rights-management (DRM) data.

29. An information playback device according to claim 28, wherein, in the case of the updated integrity check value (ICV), a process for overwriting the integrity check value (ICV) is executed before the updating.

30. An information playback device according to claim 28, wherein, in the case of the updated integrity check value (ICV), a process for recording to an area different from the recording area of the integrity check value (ICV) is executed before the updating.

31. An information recording medium on which content data capable of being played back is recorded, wherein an integrity check value (ICV) for digital-rights-management (DRM) data of content including use-restriction information on content is stored in a physically protected area on the recording medium.

32. An information recording medium according to claim 31, wherein said digital-rights-management (DRM) data includes information on use of the content, an encrypted content key obtained by encrypting a content key serving as a content encryption key, and a content identifier (ID).

33. An information recording medium according to claim 31, wherein said physically protected area has a structure based on a data recording area for which signal processing different from signal processing used for a method for recording the content is used.

34. An information recording medium according to claim 31, wherein said physically protected area is a data recording area for which signal processing different from signal processing used for a method for recording the content is used, and is an area superimposed on a recording area on a recording medium for the corresponding content.

35. An information recording medium according to claim 31, wherein said physically protected area is provided separately from a recording area for the content.

36. An information recording medium according to claim 31, wherein, in said physically protected area, both an integrity check value (ICV) for digital-rights-management (DRM) data on the content, and an ICV key used for generating an ICV-generation verifying key for verifying the generation of the ICV are stored.

37. An information recording method for executing data recording processing to a recording medium, said information recording method comprising:

an encryption-processing step which generates encrypted content by executing a process for encrypting content to be stored in the recording medium and which generates an integrity check value (ICV) for digital-rights-management (DRM) data on content including use-restriction information on content; and

a secret-information recording step which, by using a dedicated secret-information recording circuit, executes a process for recording the integrity check value (ICV) in a physically protected area on the recording medium.

38. An information recording method according to claim 37, wherein said digital-rights-management (DRM) data includes information on use of the content, an encrypted content key obtained by encrypting a content key serving as a content encryption key, and a content identifier (ID).

39. An information recording method according to claim 37, wherein, by using said dedicated secret-information recording circuit, signal processing different from signal processing used for a method for recording the content is used to execute a process for recording of the integrity check value (ICV) in the physically protected area on the recording medium.

40. An information recording method according to claim 37, wherein, in said secret-information recording step:

by using said dedicated secret-information recording circuit, signal processing different from signal processing used for a method for recording the content is used to execute a process for recording of the integrity check value (ICV) in the physically protected area on the recording medium; and

said dedicated secret-information recording circuit is used to execute a process for recording secret information including the integrity check value (ICV) in an area superimposed on a recording area on a recording medium for the corresponding content.

41. An information recording method according to claim 37, wherein, in said secret-information recording step, said dedicated secret-information recording circuit is used to execute a process for recording the integrity check value (ICV) in the physically protected area on the recording medium which is provided separately from a recording area for the content.

42. An information recording method according to claim 37, wherein, in said secret-information recording step, said dedicated secret-information recording circuit is used to execute a process for recording, in the physically protected area on the recording medium, both the integrity check value (ICV) for the digital-rights-management (DRM) data on the content, and an ICV key used for generating an ICV-generation verifying key for verifying the generation of the ICV.

43. An information recording method according to claim 37, wherein, in said encryption-processing step, the process for generating the integrity check value (ICV) for the digital-rights-management (DRM) data is executed as a message-authentication-code (MAC) generating process in which DES encryption processing is used.

44. An information recording method according to claim 37, wherein:

an information recording device possesses, in a hierarchical tree structure having a plurality of different information recording devices serving as leaves, different key sets of node keys unique to nodes and leaf keys unique to the information recording devices; and

in said encryption-processing step, by using an enabling key block (EKB) key acquired by decrypting an EKB which can be decrypted only by a selected information recording device included in the leaves in said hierarchical tree structure, a process for generating an ICV key used for generating the integrity check value (ICV) for the digital-rights-management (DRM) data is executed.

45. An information recording method according to claim 44, wherein said encryption-processing step further includes a step in which, from a usable enabling key block (EKB) stored in one information recording device, and an enabling key block (EKB) stored in a recording medium for content storage, an EKB having a newer version is selected and an EKB key is acquired.

46. An information recording method according to claim 44, wherein said encryption-processing step further includes a step in which, by using the EKB key acquired by the process of decrypting the enabling key block (EKB), encryption on a content key, serving as an encrypted key for the content, is executed.

47. An information recording method according to claim 37, wherein, in said encryption-processing step, in the process of recording the content in the recording medium, when an integrity check value (ICV) for digital-rights-management (DRM) data corresponding to the content is added, a process for verifying the ICV is executed, and on condition that it is verified that there is no falsification of the digital-rights-management (DRM) data, processing associated with the process of recording the content in the recording medium is executed.

48. An information recording method according to claim 37, wherein, in the process of recording the content in the recording medium, when the content is transmitted from another device, processing associated with the process of recording the content in the recording medium is executed on condition that mutual authentication with the device is established.

49. An information recording method according to claim 37, further comprising a step in which, in the process of recording the content in the recording medium, when updating of the digital-rights-management (DRM) data is executed, said encryption-processing means generates an integrity check value (ICV) based on the updated digital-rights-management (DRM) data, and records in the recording medium the integrity check value (ICV) based on the updated digital-rights-management (DRM) data.

50. An information recording method according to claim 49, wherein, in the case of the updated integrity check value (ICV), a process for overwriting the integrity check value (ICV) is executed before the updating.

51. An information recording method according to claim 49, wherein, in the case of the updated integrity check value (ICV), a process for recording to an area different from the recording area of the integrity check value (ICV) is executed before the updating.

52. An information playback method for executing data-playback processing from a recording medium, said information playback method comprising:

a cryptosystem-processing step which executes a process for decrypting content stored in the recording medium and which executes verification of an integrity check value (ICV) for digital-rights-management data (DRM) on content including use-restriction information on content; and

a secret information playback step which, by using a dedicated secret-information playback circuit, executes a process for playing back the integrity check value (ICV) from a physically protected area on the recording medium.

53. An information playback method according to claim 52, wherein said digital-rights-management (DRM) data includes information on use of the content, an encrypted content key obtained by encrypting a content key serving as a content encryption key, and a content identifier (ID).

54. An information playback method according to claim 52, wherein, by using said dedicated secret-information playback circuit, a process for playing back the integrity check value (ICV) from the physically protected area on the recording medium is executed by using signal processing different from signal processing used for a method for playing back the content.

55. An information playback method according to claim 52, wherein, in said secret information playback step:

by using the dedicated secret-information playback circuit, a process for playing back the integrity check value (ICV) from the physically protected area on the recording medium is executed by using signal processing different from signal processing used for a method of playing back the content; and

by using the dedicated secret-information playback circuit, a process for playing back the secret information, which includes the integrity check value (ICV), from a recording area superimposed on a recording area on a recording medium for the corresponding content is executed.

56. An information playback method according to claim 52, wherein, in said secret information playback step, the dedicated secret-information playback circuit is used to execute the process for playing back the integrity check value (ICV) from the physically protected area on the recording medium when the physically protected area is formed separately from a recording area for the content.

57. An information playback method according to claim 52, wherein, in said secret information playback step, the dedicated secret-information playback circuit is used to execute the process of playing back the integrity check value (ICV) for the digital-rights-management (DRM) data on the content and an ICV key used for generating an ICV-generation verifying key for verifying the generation of the ICV from the physically protected area on the recording medium.

58. An information playback method according to claim 52, wherein, in said cryptosystem-processing step, the verifying processing on the integrity check value (ICV) for the digital-rights-management (DRM) data is executed as processing in which a message authentication code (MAC) in which DES encryption processing is used for the played back digital-rights-management (DRM) and is compared with a recorded ICV.

59. An information playback method according to claim 52, wherein:

an information playback device possesses, in a hierarchical tree structure having a plurality of different information recording devices serving as leaves, different key sets of node keys unique to nodes and leaf keys unique to the information recording devices; and

in said cryptosystem-processing step, by using an enabling key block (EKB) key acquired by decrypting an EKB which can be decrypted only by a selected information playback device included in the leaves in said hierarchical tree structure, a process for generating an ICV key used for generating the integrity check value (ICV) for the digital-rights-management (DRM) data is executed.

60. An information playback method according to claim 59, wherein said cryptosystem-processing step further includes a step in which the EKB key is acquired by selecting an enabling key block (EKB) correlated with content stored in the recording medium storing the content.

61. An information playback method according to claim 59, wherein said cryptosystem-processing step further includes a step in which decryption of the content key, serving as an encrypted key for the content, is executed by using the EKB key acquired by the process for decrypting the enabling key block (EKB).

62. An information playback method according to claim 52, wherein, in said cryptosystem-processing step, in the process for playing back the content from the recording medium, the verifying processing on the integrity check value (ICV) for the digital-rights-management (DRM) data corresponding to the content is executed, and on condition that it is verified that there is no falsification of the digital-rights-management (DRM) data, processing associated with the process of playing back the content from the recording medium is executed.

63. An information playback method according to claim 52, wherein, in the process of playing back the content from the recording medium, when the content is transmitted from another device, processing associated with the process of transmitting the content in the recording medium is executed on condition that mutual authentication with the device is established.

64. An information playback method according to claim 52, further comprising a step in which, in the process of playing back the content from the recording medium, when updating of the digital-rights-management (DRM) data is executed, said encryption-processing means generates an integrity check value (ICV) based on the updated digital-rights-management (DRM) data, and records in the recording medium the integrity check value (ICV) based on the updated digital-rights-management (DRM) data.

65. An information playback method according to claim 64, wherein, in the case of the updated integrity check value (ICV), a process for overwriting the integrity check value (ICV) is executed before the updating.

66. An information playback method according to claim 64, wherein, in the case of the updated integrity check value (ICV), a process for recording to an area separate from the recording area of the integrity check value (ICV) is executed before the updating.

67. A program storage medium for providing a computer program for controlling a computer system to execute data recording processing to a recording medium,

said computer program comprising:

an encryption-processing step which generates encrypted content by executing a process for encrypting content to be stored in the recording medium and which generates an integrity check value (ICV) for digital-rights-management (DRM) data on content including use-restriction information on content; and

a secret-information recording step which, by using a dedicated secret-information recording circuit, executes a process for recording the integrity check value (ICV) in a physically protected area on the recording medium.

68. A program storage medium for providing a computer program for controlling a computer system to execute data playback processing from a recording medium,

said computer program comprising:

a cryptosystem-processing step which executes a process for decrypting content stored in the recording medium and which executes verification of an integrity check value (ICV) for digital-rights-management data (DRM) on content including use-restriction information on content; and

a secret information playback step which, by using a dedicated secret-information playback circuit, executes a process for playing back the integrity check value (ICV) from a physically protected area on the recording medium.