Data processing apparatus and data processing method

• US 20030233559A1
• Filed: 04/11/2003
• Published: 12/18/2003
• Est. Priority Date: 01/21/2000
• Status: Abandoned Application

• Current Assignee: Sony Computer Entertainment Incorporated (Sony Group Corp.)
• Original Assignee: Sony Computer Entertainment Incorporated (Sony Group Corp.), Sony Corporation (Sony Group Corp.)
• Inventors: Asano, Tomoyuki, Tanaka, Makoto, Ishibashi, Yoshihito, Akishita, Toru, Shirai, Taizo, Yoshimori, Masaharu
• Application Number:
  US10/412,771
• Publication Number:
  US 20030233559A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00123 the record carrier being identified by recognising some of its unique characteristics, e.g. a unique defect pattern serving as a physical signature of the record carrier
• CPC Class Codes: G11B 20/00173 wherein the origin of the content is checked, e.g. determining whether the content has originally been retrieved from a legal disc copy or another trusted source
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00224 wherein the key is obtained from a remote server
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 20/00492 wherein content or user data is encrypted
• CPC Class Codes: G11B 20/00507 wherein consecutive physical data units of the record carrier are encrypted with separate encryption keys, e.g. the key changes on a cluster or sector basis
• CPC Class Codes: G11B 20/00536 wherein encrypted content data is subjected to a further, iterated encryption, e.g. interwoven encryption
• CPC Class Codes: G11B 20/00557 wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
• CPC Class Codes: G11B 20/00739 wherein the usage restriction is associated with a specific geographical region
• CPC Class Codes: G11B 20/00753 wherein the usage restriction limits the number of copies that can be made, e.g. CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 20/00775 wherein said copy control information is encoded in an encryption mode indicator [EMI]
• CPC Class Codes: G11B 2020/00057 MPEG-1 or MPEG-2 audio layer III [MP3]
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0625 with splitting of the data block into left and right halves, e.g. Feistel based algorithms, DES, FEAL, IDEA or KASUMI
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/0897 : involving additional devices, e.g. trusted platform module [TPM], smartcard or USB
• CPC Class Codes: H04L 9/14 : using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3242 : involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04L 9/3247 : involving digital signatures
• CPC Class Codes: H04L 9/3273 : for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869

Abstract

A data processing system, recording device, data processing method and program providing medium are provided to execute authentication processing and content storing processing between apparatuses. Program localization is employed to restrict access to program content. A plurality of key blocks store key data for authentication processing. Key block designation information is set in a recorder/reproducer, which is configured for executing authentication processing with the recording device by designating a key block. The recorder/reproducer can set a key block for each product, model or the like. In addition, data stored according to a selected key block cannot be utilized in a recorder/reproducer in which a different key block is set. Furthermore, an encryption processing controlling section of a recording device executes control in accordance with a pre-defined setting sequence. Furthermore, an illegal instrument that has not completed the authentication processing can be prevented from utilizing program content.

Claims

1. A data record reproducing player that is capable of reproducing program content, said data record reproducing player comprising:

a recording device operable to record save data of said program content;

an encryption processing unit operable to execute an encryption process and a decryption process on said save data, said encryption processing unit employing a cryptographic key for executing said encryption process and said decryption process;

an input unit operable to enter a program localization on said save data, said program localization being maintained in a data management file; and

a control unit capable of accessing said data management file and operable to determine an encryption processing method and a decryption processing method for said save data,

wherein said encryption processing method is capable of using said cryptographic key and is determined according to said program localization, said encryption processing method being adapted for storing said save data in said recording device and,

said decryption processing method is determined according to said program localization and is adapted for reproducing said cryptographic key.

2. The data record reproducing player according to claim 1, wherein:

said program content includes an identifier;

said program localization is a program restriction that enables use of said save data depending on said identifier; and

said data management file is structured as a table for storing said program restriction depending upon said identifier; and

if said program restriction provides for restriction of said program content, said encryption processing unit executes said encryption processing method or said decryption processing method on said save data using a save data encryption key of said program content, said save data encryption key being based on at least one of an individual encryption key or individual information of said program content; and

if said program restriction provides for no restriction of said program content, said encryption processing unit executes said encryption processing method or said decryption processing method on said save data using at least one of a system-shared encryption key and a system save data encryption key, said system save data encryption key being based on said system-shared encryption key, and said system-shared encryption key being stored in said data record reproducing player.

3. The data record reproducing player according to claim 2, wherein:

said individual encryption key is a content key Kcon that is capable of being stored in a header portion of content data; and

said system-shared encryption key is a system signature key Ksys that is capable of being stored in a plurality of different data record reproducing players.

4. The data record reproducing player according to claim 1, further comprising:

identity information;

said program localization is a record reproducing player restriction that enables use of said save data depending on said identity information; and

said data management file is structured as a table for storing said record reproducing player restriction in correspondence with an identifier of said program content, and

if said record reproducing player restriction provides for restriction of a record reproducing player, said encryption processing unit executes said encryption processing method or said decryption processing method on said save data using a save data encryption key of said record reproducing player, said save data encryption key being based on at least one of an individual encryption key of said data record reproducing player and individual information, and

if said record reproducing player restriction provides for no restriction of said record reproducing player, said encryption processing unit executes said encryption processing method or said decryption processing method on said save data using at least one of a system-shared encryption key and a shared save data encryption key, said shared save data encryption key being based on said system-shared encryption key, and said system-shared encryption key being stored in said data record reproducing player.

5. The data record reproducing player according to claim 4, wherein:

said individual encryption key is an individual signature key Kdev that is capable of being stored in said data record reproducing player; and

said system-shared encryption key is a system signature key Ksys that is capable of being stored in a plurality of specific data record reproducing players.

6. The data record reproducing player according to claim 1, wherein:

said program content includes an identifier;

said program localization is a user restriction that enables use of said save data depending on a user'"'"'s identity; and

said data management file is structured as a table for storing said user restriction depending upon said identifier; and

if said user restriction provides for restriction of said user, said encryption processing unit executes said encryption processing method or said decryption processing method on said save data using a user save data encryption key, said user save data encryption key being based on a password received by said input unit, and

if said user restriction provides for no restriction of said user, said encryption processing unit executes said encryption processing method or said decryption processing method on said save data using at least one of a system-shared encryption key and a shared save data encryption key, said shared save data encryption key being based on said system-shared encryption key, and said system-shared encryption key being stored in said data record reproducing player.

7. The data record reproducing player according to claim 6, wherein said system-shared encryption key is a system signature key Ksys that is capable of being stored in a plurality of record reproducing players.

8. A save data processing method for use in a data record reproducing player that is capable of reproducing program content, said method comprising:

obtaining an input of a program localization;

determining an encryption processing mode for storing save data into a recording device according to said program localization;

selecting an encryption key according to said encryption processing mode; and

executing encryption processing on said save data using said encryption key.

9. The save data processing method according to claim 8, wherein:

said program content includes an identifier; and

said program localization is a program restriction that enables use of said save data depending on said identifier; and

if said program restriction provides for restriction of said program content, said encryption key is selected from one of an individual encryption key and a save data encryption key, said save data encryption key being based on at least one of said individual encryption key and individual information, and if said program restriction provides for no restriction of said program content, said encryption key is selected from one of a system-shared encryption key and a shared save data encryption key, said shared save data encryption key being based the system-shared encryption key, and said system-shared encryption key being stored in said data record reproducing player.

10. The save data processing method according to claim 8, wherein:

said data record reproducing player includes identity information;

said program localization is a record reproducing player restriction that enables use of said save data depending on said identity information; and

if said record reproducing player restriction provides for restriction of a record reproducing player, said encryption key is selected from one of an individual encryption key of said data record reproducing player, and an individual save data encryption key of said record reproducing player, said individual save data encryption key being based on at least one of said individual encryption key and individual information; and

if said record reproducing player restriction provides for no restriction of said record reproducing player, said encryption key is selected from one of a system-shared encryption key and a shared save data encryption key, said shared save data encryption key being based on said system-shared encryption key, and said system-shared encryption key being stored in said data record reproducing player.

11. The save data processing method according to claim 8, wherein:

said program localization is a user restriction that enables use of said save data depending on a user'"'"'s identity; and

if said user restriction provides for restriction of said user, said encryption key is selected from one of a password and an individual save data encryption key, said individual save data encryption key being based on said password; and

if said user restriction provides for no restriction of said user, said encryption key is selected from one of a system-shared encryption key and a shared save data encryption key, said shared save data encryption key being based on said system-shared encryption key, and said system-shared encryption key being stored in said data record reproducing player.

12. A save data processing method for use in a data record reproducing player that is capable of reproducing program content, said method comprising:

determining a decryption processing mode for reproducing save data according to a program localization, provided as a data management file, said save data being retrieved from a recording device;

selecting a decryption key according to said decryption processing mode; and

executing decryption processing on said save data using said decryption key.

13. The save data processing method according to claim 12, wherein:

said program content includes an identifier; and

said program localization is a program restriction that enables use of said save data depending on said identifier; and

if said program restriction provides for restriction of said program content, said decryption key is selected from an individual decryption key and a save data decryption key, said save data decryption key being based on at least one of said individual decryption key and individual information; and

if said program restriction provides for no restriction of said program content, said decryption key is selected from one of a system-shared decryption key and a shared save data decryption key, said shared save data decryption key being based on said system-shared decryption key, and said system-shared decryption key being stored in said data record reproducing player.

14. The save data processing method according to claim 12, wherein:

said data record reproducing player includes identity information; and

said program localization is a record reproducing player restriction that enables use of said save data depending on said identity information; and

if said record reproducing player restriction provides for restriction of a record reproducing player, said decryption key is selected from one of an individual decryption key of said data record reproducing player and an individual save data decryption key of said record reproducing player, said individual save data decryption key being based on at least one of said individual decryption key and individual information; and

if said record reproducing player restriction provides for no restriction of said record reproduction player, said decryption key is selected from one of a system-shared decryption key and a shared save data decryption key, said shared save data decryption key being based on said system-shared decryption key, and said system-shared decryption key being stored in said data record reproducing player.

15. The save data processing method according to claim 12, wherein:

said program localization is a user restriction that enables use of said save data depending on a user'"'"'s identity; and

if said user restriction provides for restriction of said user, said decryption key is selected from one of a password and an individual save data decryption key, said individual save data decryption key being based on said password; and

if said user restriction provides for no restriction of said user, said decryption key is selected from one of a system-shared decryption key and a shared save data decryption key, said shared save data decryption key being based on said system-shared decryption key, and said system-shared decryption key being stored in said data record reproducing player.

16. A recording medium recorded with a computer program for executing a save data process having certain actions to perform in a data record reproducing player, said data record reproducing player being capable of reproducing program content on a computer system, said actions comprising:

determining an encryption processing mode according to a program localization obtained from an input unit, said encryption processing mode being adapted for storing save data into a recording device;

selecting an encryption key according to said encryption processing mode; and

executing encryption processing on said save data using said encryption key.

17. A recording medium recorded with a computer program for executing a save data process having certain actions to perform in a data record reproducing player, said data record reproducing player being capable of reproducing program content on a computer system, said actions comprising:

determining a decryption processing mode according to a program localization stored in a data management file, said decryption processing mode being adapted to reproduce save data retrieved from a recording device;

selecting a decryption key according to said decryption processing mode; and

executing decryption processing on said data using said decryption key.

18. A data processing system, comprising:

a recording device having a data storing section for storing content data and a plurality of key blocks for storing key data applicable to authentication processing, said key data in each one of said plurality of key blocks being distinct to that key block; and

a recorder/reproducer operable to perform said authentication processing with said recording device, to designate a first key block out of said plurality of key blocks, and to execute said authentication processing with said recording device based on said key data stored in said first key block,

wherein transfer of said content data between said recorder/reproducer and said recording device is enabled when said authentication processing is successful.

19. The data processing system according to claim 18, wherein said key data in each of said plurality of key blocks includes an authentication key.

20. The data processing system according to claim 18, wherein:

said recorder/reproducer includes setting information in which one key block of said plurality of key blocks is capable of being applied to said authentication processing as a designated key block, said setting information being stored in a memory in said recorder/reproducer; and

when said authentication processing is performed between said recorder/reproducer and said recording device, said recorder/reproducer determines said designated key block based on said setting information.

21. The data processing system according to claim 20, wherein said setting information is different for each of a plurality of product units.

22. The data processing system according to claim 18, wherein:

said recorder/reproducer includes a memory for storing said key data; and

authentication of said key data stored in said memory is only established using said key data in a selected key block in said recording device.

23. The data processing system according to claim 18, further comprising:

a memory in said recorder/reproducer;

a master key Mkake stored in said recorder/reproducer memory; and

an authentication key Kake that is generated based on said master key Mkake, wherein authentication of said authentication key Kake is only established in said authentication processing using said key data in a selected key block in said recorder/reproducer.

24. The data processing system according to claim 23, further comprising:

a memory in said recording device;

a recording device identification information IDmem stored in said recording device; and

said recorder/reproducer is operable to generate said authentication key Kake by encryption processing of said recording device identification information IDmem based on said master key Mkake, and to perform said authentication processing with said selected key block of said recording device using said authentication key Kake;

wherein said authentication key Kake is a plurality of distinct authentication keys Kake each associated with one of said plurality of key blocks.

25. The data processing system according to claim 18, wherein:

said recorder/reproducer includes a data storage section for storing storage data; and

each key block of said recording device includes;

recording device identifier information containing specific information about said recording device,

an authentication key adapted for use in said authentication processing,

a random number generation key adapted for use in said authentication processing, and

a storing key adapted for use in encryption processing of said storage data.

26. The data processing system according to claim 25, wherein:

said storing key includes a plurality of distinct storing keys each stored in one of said plurality of key blocks, said plurality of distinct storing keys being capable of use in said encryption processing of said storage data; and

said recording device is operable to execute key exchange processing of said plurality of distinct storing keys, and, if a data utilization request is received by said recording device, said recording device is operable to output encryption data using a key that is different from said plurality of distinct storing keys.

27. The data processing system according to claim 18, wherein said recording device further includes an encryption processing section operable to select said first key block in accordance with key block designation information received from said recorder/reproducer, and to execute said authentication processing with said recorder/reproducer using said key data in said first key block.

28. The data processing system according to claim 27, wherein said encryption processing section of said recording device is operable to execute encryption processing using said key data in said first key block.

29. The data processing system according to claim 18, further comprising a plurality of designatable key blocks in said recording device, at least one of said designatable key blocks being configured as a commonly designatable key block that is designatable in recorder/reproducers other than said recorder/reproducer.

30. A recording device, comprising:

a data storage section for storing content data transferable to and from an external apparatus; and

a plurality of key blocks for storing key data, said key data being applicable to authentication processing between said recording device and said external apparatus, wherein said key data is operable to store information for each of said plurality of key blocks.

31. The recording device according to claim 30, wherein:

each of said plurality of key blocks includes a unique authentication key for use with said authentication processing; and

each unique authentication key is configured as said key data.

32. The recording device according to claim 30, further comprising:

a memory for storing recording device identification information IDmem; and

a distinct authentication key Kake for each of said plurality of key blocks, each of said distinct authentication keys Kake being stored in one of said plurality of key blocks.

33. The recording device according to claim 30, wherein each of said plurality of key blocks includes:

recording device identifier information containing specific information about said recording device;

an authentication key adapted for use in said authentication processing;

a random number generation key adapted for use in said authentication processing; and

a storing key adapted for use in encryption processing of storage data in said data storage section.

34. The recording device according to claim 33, wherein:

said storing key includes distinct key data that is different for each of said plurality of key blocks, said storing key being usable in said encryption processing; and

said recording device is operable to execute key exchange processing of said storing key, and, if a data utilization request is received by said recording device, said recording device is operable to output encryption data using a key that is different from said storing key.

35. The recording device according to claim 30, further including an encryption processing section operable to select a specific key block from said plurality of key blocks in accordance with key block designation information received from said external apparatus, and to execute said authentication processing using said key data in said specific key block.

36. The recording device according to claim 35, wherein said encryption processing section is operable to execute encryption processing using said key data in said specific key block.

37. A data processing method in a data processing system including a recorder/reproducer and a recording device operable to transmit encryption data to each other, said data processing method comprising:

designating in said recorder/reproducer a selected key block out of a plurality of key blocks held by said recording device; and

executing authentication processing between said recorder/reproducer and said recording device based on key data stored in said selected key block.

38. The data processing method according to claim 37, wherein each of said plurality of key blocks includes an authentication key for use in said authentication processing, and said authentication key of each of said plurality of key blocks is configured as distinct key data.

39. The data processing method according to claim 37, wherein said authentication processing step includes designating said selected key block based on setting information held in a memory in said recorder/reproducer.

40. The data processing method according to claim 37, further comprising:

storing a master key Mkake for a recording device authentication key in a memory in said recorder/reproducer; and

generating an authentication key Kake based on said master key Mkake for use in said authentication processing.

41. The data processing method according to claim 40, wherein:

said recording device includes a memory for storing recording device identification information IDmem and each of said plurality of key blocks stores said authentication key Kake, which is distinct for each key block,

said data processing method further including;

executing encryption processing of said recording device identification information IDmem based on said master key Mkake to generate said authentication key Kake.

42. The data processing method according to claim 37, wherein said selected key block is designated in accordance with key block designation information received from said recorder/reproducer.

43. The data processing method according to claim 37, further comprising:

executing encryption processing in said recording device using said key data in said selected key block, wherein said selected key block is selected in accordance with key block designation information received from said recorder/reproducer, and said encryption processing is executed during data storing processing and during data transfer processing of content data in a data storing section of said recording device.

44. The data processing method according to claim 37, wherein:

said recording device further includes a data storage section, and each of said plurality of key blocks of said recording device includes a storing key used in encryption processing of data stored in said data storage section;

said method further comprising;

executing key exchange processing of said storing key in said recording device; and

if a data utilization request that is encrypted by said storing key is received from outside said recording device, outputting said encryption data by a key different from said storing key to outside said recording device.

45. A recording medium recorded with a computer program for executing data processing in a data processing system including a recorder/reproducer and a recording device operable to transmit encryption data to each other, said data processing comprising:

designating in said recorder/reproducer a selected key block out of a plurality of key blocks held by said recording device; and

executing authentication processing between said recorder/reproducer and said recording device based on key data stored in said selected key block.

46. A data processing system operable to transmit encryption data, said data processing system comprising:

a first apparatus having a command identifier; and

a second apparatus having an encryption processing section that is capable of executing encryption processing on data transmitted to and from said first apparatus, said encryption processing section including a control section operable to receive said command identifier in accordance with a pre-defined setting sequence, to retrieve a command from a register, said command corresponding to said command identifier, and to have said command executed,

wherein, if said command identifier differs from said predefined setting sequence, said control section is operable to cancel execution of said command.

47. The data processing system according to claim 46, wherein:

said pre-defined setting sequence is a command number setting sequence in which numbers are sequentially incremented; and

said control section is operable to store a value of said command identifier received from said first apparatus in a memory, to determine coincidence of a new command identifier received from said first apparatus with said pre-defined setting sequence based on said received value stored in said memory and, if said new command identifier is different from said pre-defined setting sequence, to reset said command identifier stored in said memory without performing command processing corresponding to said new command identifier.

48. The data processing system according to claim 46, further comprising:

a command register within said second apparatus for storing said command in accordance with said pre-defined setting sequence;

an authentication processing command sequence for executing authentication processing between said first apparatus and said second apparatus;

an encryption processing command sequence for executing said encryption processing; and

a sequence set such that an authentication command identifier corresponding to said authentication processing command sequence is executed prior to a command sequence corresponding to said encryption processing command sequence.

49. The data processing system according to claim 48, wherein said encryption processing command sequence includes at least one of encryption key exchange processing for encryption data transferred from said first apparatus to said second apparatus and stored in a storage unit in said second apparatus, and encryption key exchange processing for said encryption data stored in said storage unit in said second apparatus and transferred from said second apparatus to said first apparatus.

50. The data processing system according to claim 48, wherein:

if authentication is established between said first apparatus and said second apparatus, said control section is operable to;

(i) set an authentication flag indicating that said authentication processing is finished,

(ii) execute command management control to enable execution of said encryption processing command sequence during setting of said authentication flag, and

(iii) reset said authentication flag when repeating said authentication processing command sequence.

51. The data processing system according to claim 49, wherein:

said control section is operable to manage an order of command execution based on said pre-defined setting sequence and said command identifier in said encryption key exchange processing; and

said control section does not accept command processing from an external apparatus, including said first apparatus during command execution relating to said encryption key exchange processing, when said command processing is different from said pre-defined setting sequence.

52. The data processing system according to claim 46, wherein:

said second apparatus is a storage device having a data storage section for storing said encryption data;

said first apparatus is a recorder/reproducer for storing data in said storage device, and for retrieving said data stored in said storage device to reproduce and execute said data; and

said recorder/reproducer includes an encryption processing section for executing said encryption processing of said transmission data with said storage device.

53. The data processing system according to claim 52, wherein:

said storage device includes a key block for storing an authentication key and a storing key, said authentication key being usable in authentication processing between said recorder/reproducer and said storage device, and said storing key being usable as an encryption key for said encryption data stored in said data storing section of said storage device; and

said control section is operable to receive a command identifier from said recorder/reproducer, to execute authentication processing using said authentication key in accordance with said pre-defined setting sequence, and, after completing said authentication processing, to execute said encryption processing of data accompanying key exchange processing using said storing key.

54. The data processing system according to claim 53, wherein:

said key block includes a plurality of key blocks each storing said authentication key and said storing key, said authentication key being different from said storing key; and

said recorder/reproducer is operable to notify said storage device of one key block as a designated key block out of said plurality of key blocks, said designated key block being used in said authentication processing and said encryption processing; and

said storage device is operable to execute said authentication processing using said authentication key stored in said designated key block and to execute said encryption processing of said data using said storing key in said designated key block.

55. A recording device, comprising:

a data storage section operable to store content data that is transferable to an external apparatus; and

an encryption processing section operable to execute encryption processing of transmission data with said external apparatus, said encryption processing section including a control section operable to receive a command identifier transferred from said external apparatus in accordance with a setting sequence, to retrieve a command from a register, said command corresponding to said command identifier, and to have said command executed;

wherein, if said command identifier differs from said setting sequence, said control section is operable to cancel processing of said command.

56. The recording device according to claim 55, wherein:

said control section further includes a command number setting sequence in which numbers are sequentially incremented as said setting sequence; and

said control section is further operable to store a received value of said command identifier in a memory, to determine coincidence of a new command identifier received from said external apparatus with said setting sequence based on said received value and, if it is determined that said new command identifier is different from said setting sequence, to reset said received value stored in said memory without performing command processing corresponding to said new command identifier.

57. The recording device according to claim 55, further comprising:

a command register for storing said command in accordance with said setting sequence;

an authentication processing command sequence for executing authentication processing between said external apparatus and said recording device;

an encryption processing command sequence for executing said encryption processing relating to transferred data between said external apparatus and said recording device; and

a sequence set such that said command identifier corresponding to said authentication processing command sequence is executed prior to a command sequence corresponding to said encryption processing command sequence.

58. The recording device according to claim 57, wherein said encryption processing command sequence includes at least one of encryption key exchange processing for encryption data transferred from said external apparatus to said recording device and stored in a storage unit in said recording device, and encryption key exchange processing for said encryption data stored in said storage unit and transferred from said recording device to said external apparatus.

59. The recording device according to claim 57, wherein said control section is operable to set an authentication flag, to execute command management control, and to reset said authentication flag when repeating said authentication processing command sequence, wherein,

if authentication is established between said external apparatus and said recording device, said authentication flag is set to indicate that said authentication processing is finished, and

said command management control enables execution of said encryption processing command sequence during setting of said authentication flag.

60. The recording device according to claim 58, wherein:

said control section is operable to manage an order of command execution based on said setting sequence and said command identifier in said encryption key exchange processing; and

said control section does not accept command processing from said external apparatus during said command execution relating to said encryption key exchange processing when said command processing is different from said setting sequence.

61. The recording device according to claim 56, further comprising:

a key block for storing an authentication key and a storing key, said authentication key being usable in authentication processing between said external apparatus and said recording device, and said storing key being usable as an encryption key for said data stored in said data storage section; and

said control section being operable to receive said command identifier from said external apparatus, to execute said authentication processing using said authentication key, and after completing said authentication processing, to execute said encryption processing of data accompanying key exchange processing using said storing key.

62. The recording device according to claim 61, wherein:

said key block includes a plurality of key blocks, each storing said authentication key and said storing key;

said external apparatus is operable to notify said recording device of one key block out of said plurality of key blocks, said one key block being a designated key block used in authentication processing and encryption processing of selected data; and

said recording device is operable to execute said authentication processing using said authentication key stored in said designated key block to execute said encryption processing using said storing key in said designated key block.

63. A data processing method in a data processing system having a first apparatus and a second apparatus operable to transmit encryption data to each other, said method comprising:

executing command processing control in said second apparatus for receiving a command identifier in accordance with a setting sequence, said command identifier being transferred from said first apparatus;

retrieving a command corresponding to said command identifier from a register;

processing said command; and

if said command identifier is different from said setting sequence, canceling said processing of said command.

64. The data processing method according to claim 63, wherein:

said setting sequence is a command number setting sequence in which numbers are sequentially incremented; and

said command processing control includes;

storing a receiving value of said command identifier in a memory;

determining coincidence of a new command identifier received from said first apparatus with said setting sequence based on said receiving value; and

if said new command identifier is different from said setting sequence, resetting said receiving value stored in said memory without performing command processing corresponding to said new command identifier.

65. The data processing method according to claim 63, wherein:

said command processing control includes;

executing an authentication processing command sequence for executing authentication processing between said first apparatus and said second apparatus, and

executing an encryption processing command sequence for executing encryption processing relating to transferred data between said first apparatus and said second apparatus; and

said setting sequence is a sequence for executing said authentication processing command sequence prior to said encryption processing command sequence.

66. The data processing method according to claim 65, wherein said encryption processing command sequence includes at least one of encryption key exchange processing for encryption data transferred from said first apparatus to said second apparatus and stored in a storage unit in said second apparatus, and encryption key exchange processing for said encryption data stored in said storage unit in said second apparatus and transferred from said second apparatus to said first apparatus.

67. The data processing method according to claim 65, further including:

if authentication is established between said first apparatus and said second apparatus, setting an authentication flag indicating that said authentication processing is finished; and

executing command management control during said command processing control to enable execution of said encryption processing command sequence when setting said authentication flag.

68. The data processing method according to claim 67, further including resetting said authentication flag when executing a new authentication processing command sequence.

69. The data processing method according to claim 66, wherein said command processing control includes:

during processing of a series of commands relating to said encryption key exchange processing, managing an order of command processing based on said setting sequence and said command identifier; and

not accepting command processing from an external apparatus when said command processing is different from said setting sequence.

70. A recording medium recorded with a computer program for executing data processing having certain actions in a data processing system that includes a first apparatus and a second apparatus operable to transmit encryption data to each other, said actions comprising:

receiving a command identifier that is transferred from said first apparatus to said second apparatus in accordance with a setting sequence;

retrieving a command corresponding to said command identifier from a register;

processing said command; and

if said command identifier is different from said setting sequence, canceling said processing of said command.