Transmission apparatus and receiving apparatus

• US 20040059911A1
• Filed: 07/16/2003
• Published: 03/25/2004
• Est. Priority Date: 07/19/2002
• Status: Active Grant

• Current Assignee: Godo Kaisha IP Bridge 1 (IP Bridge, Inc.)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Ueno, Takafumi
• Granted Patent: US 7,397,921 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: H04H 20/76 Wired systems
• CPC Class Codes: H04H 20/91 broadcasting computer programmes
• CPC Class Codes: H04H 60/14 Arrangements for conditional access to broadcast information or to broadcast-related services
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/84 Generation or processing of descriptive data, e.g. content descriptors systems specially adapted for using meta-information in broadcast systems H04H60/73
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

A transmission apparatus updates the encryption method in the event the encryption method is broken. The tool ID of a decryption tool for encrypted data is acquired, the presence of the tool is confirmed and the tool is then acquired and updated, and encrypted data is processed and transmitted based on rights information associated with the encrypted data.

Claims

1. A transmission apparatus comprising:

encryption means for encrypting data and producing first encrypted data;

program-specific information generating means for producing program-specific information containing a table denoting the correlation between first encrypted data and a program number of the first encrypted data;

tool list generating means for producing a tool list containing a tool ID indicating a decoding tool for decrypting the first encrypted data;

control graph generating means for producing a control graph indicating the instantiated location of the decoding tool in the receiving apparatus;

rights information generating means for producing rights information for the first encrypted data; and

multiplexing means for multiplexing the first encrypted data, program-specific information, tool list, control graph, and rights information.

6. A transmission apparatus as described in claim any of claims 1 to 5, wherein the multiplexing means multiplexes the decoding tool used for decryption.

7. A transmission apparatus as described in claim any of claims 1 to 6, wherein the multiplexing means multiplexes key information enabling decryption.

2. A transmission apparatus comprising:

encryption means for encrypting data and producing first encrypted data;

tool list generating means for producing a tool list containing a tool ID indicating a decoding tool for decrypting the first encrypted data;

control graph generating means for producing a control graph indicating the instantiated location of the decoding tool in the receiving apparatus;

rights information generating means for producing rights information for the first encrypted data; and

program-specific information generating means for producing program-specific information containing a table denoting the correlation between first encrypted data and a program number of the first encrypted data, the tool list, the control graph, and the rights information; and

multiplexing means for multiplexing the first encrypted data and the program-specific information.

3. A transmission apparatus comprising:

encryption means for encrypting data and producing first encrypted data;

tool list generating means for producing a tool list containing a tool ID indicating a decoding tool for decrypting the first encrypted data;

control graph generating means for producing a control graph indicating the instantiated location of the decoding tool in the receiving apparatus;

program-specific information generating means for producing program-specific information containing a table denoting the correlation between first encrypted data and a program number of the first encrypted data, the tool list, the control graph, and the rights information; and

rights information generating means for producing rights information for this data;

rights information transmission means for outputting the rights information; and

multiplexing means for multiplexing and outputting the first encrypted data and the program-specific information.

4. A transmission apparatus as described in claim 3, wherein the rights information transmission means relates the rights information to the data.

5. A transmission apparatus as described in claim 3, wherein the program-specific information generating means relates the rights information to the data.

8. A receiving apparatus comprising:

demultiplexing means for separating a multiplexed signal containing first encrypted data into at least the first encrypted data and program-specific information;

tool list demultiplexing means for separating a tool list having a tool ID indicating a decoding tool for decrypting the first encrypted data from the multiplexed signal;

control graph demultiplexing means for separating a control graph indicating the instantiated location of the decoding tool in the receiving apparatus from the multiplexed signal;

rights information demultiplexing means for demultiplexing rights information for the first encrypted data from the multiplexed signal;

first control means for acquiring a tool according to a tool ID acquired from the tool list, and instantiating the tool according to the control graph; and

first rights management means for processing the first encrypted data according to the rights information.

9. A receiving apparatus comprising:

demultiplexing means for separating a multiplexed signal containing first encrypted data into at least the first encrypted data and program-specific information;

tool list demultiplexing means for separating a tool list having a tool ID indicating a decoding tool for decrypting the first encrypted data from the multiplexed signal;

control graph demultiplexing means for separating a control graph indicating the instantiated location of the decoding tool in the receiving apparatus from the program-specific information;

rights information demultiplexing means for demultiplexing rights information for the first encrypted data from the program-specific information;

first control means for instantiating a tool with a tool ID acquired from the tool list according to the control graph; and

first rights management means for processing the first encrypted data according to the rights information.

10. A receiving apparatus comprising:

demultiplexing means for separating a multiplexed signal containing first encrypted data into at least the first encrypted data and program-specific information;

tool list demultiplexing means for separating a tool list having a tool ID indicating a decoding tool for decrypting the first encrypted data from the multiplexed signal;

control graph demultiplexing means for separating a control graph indicating the instantiated location of the decoding tool in the receiving apparatus from the program-specific information;

first control means for instantiating a tool with a tool ID acquired from the tool list according to the control graph;

rights information receiving means for receiving rights information for the first encrypted data; and

first rights management means for processing the first encrypted data according to the rights information.

11. A receiving apparatus as described in any of claims 8 to 10, further comprising:

temporary storage means for temporarily storing the received first encrypted data; and

reading means for reading the first encrypted data stored to the temporary storage means.

12. A receiving apparatus as described in claim 11, further comprising file management means for deleting from the temporary storage means the first encrypted data after the playback permit recorded in the rights information is expired.

13. A receiving apparatus as described in any of claims 8 to 12, wherein the rights management means sends status information denoting the processing state of the first encrypted data.

14. A receiving apparatus as described in any of claims 8 to 13, further comprising:

rights management means for separating the rights information into first rights information and second rights information;

multiplexing adjusting means for rewriting rights information in the multiplexed signal to second rights information, and outputting a revised multiplexed signal;

wherein the revised multiplexed signal is output to a second receiving apparatus according to a request signal from the second receiving apparatus.

15. A receiving apparatus as described in any of claims 8 to 13, further comprising:

rights management means for separating the rights information into first rights information and second rights information;

wherein the second rights information and multiplexed signal are output to a second receiving apparatus according to a request signal from the second receiving apparatus.

16. A receiving apparatus as described in any of claims 8 to 15, wherein the rights management means receives data indicating how the first encrypted data was processed by a second receiving apparatus, and sends status information describing processing by said receiving apparatus and the second receiving apparatus.

17. A receiving apparatus as described in any of claims 8 to 16, further comprising:

conversion means for converting the first encrypted data to second encrypted data; and

remultiplexing means for remultiplexing the second encrypted data with the second rights information.

18. A receiving apparatus as described in any of claims 8 to 17, wherein the first encrypted data is processed according to the first rights information.

19. A receiving apparatus as described in any of claims 8 to 18, further comprising:

file management means for deleting the first encrypted data from the temporary storage means after sending it to a second receiving apparatus.

20. A receiving apparatus as described in any of claims 8 to 19, further comprising:

video decoding means for extracting and decoding video data from the multiplexed signal.

21. A receiving apparatus as described in any of claims 8 to 19, further comprising:

audio decoding means for extracting and decoding audio data from the multiplexed signal.