Method for encrypting content, and method and apparatus for decrypting encrypted data

• US 20040076296A1
• Filed: 09/22/2003
• Published: 04/22/2004
• Est. Priority Date: 10/21/2002
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Terauchi, Toru
• Application Number:
  US10/664,863
• Publication Number:
  US 20040076296A1
• Time in Patent Office: Days
• US Class Current: 380/201
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4334 Recording operations recording of a television signal H04N5/76; arrangements for recording or accumulating broadcast information or broadcast-related information H04H60/27
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

In a method of decrypting encrypted data, which is encrypted, based on an encryption key, the encrypted content data and operational rule information are supplied to a discriminating part. The operational rule information includes title key and reproduction object inherent information. The title key is uniquely determined in accordance with the content data, and the reproduction object inherent information restricts a reproduction of content data and includes item information for restricting a terminal. The item information is acquired from terminal side, and a reproduction possibility of the encoded content data is judged based on the terminal-side item information and the operational rule information. In a decryption key generation portion, a decryption key is generated from the item information and the title key in accordance with the judgment. In a decryption portion, the encrypted content data is decrypted based on the decryption key information.

Claims

1. A terminal apparatus for decrypting encrypted data including content, comprising:

providing part configure to providing terminal-side item information;

a first memory part configured to receive and store operational rule information corresponding to a combination of title key and reproduction object inherent information, the title key being uniquely determined in accordance with the content, and the reproduction object inherent information restricting a reproduction object of content and including item information;

a second memory part configured to receive and store the encrypted content data encrypted based to on encryption key information generated from the title key and the reproduction object inherent information;

a decryption key generation unit configured to compare the item information with the terminal-side item information to judge a reproduction possibility of the encrypted content data, and generate a decryption key from the item information and the title key in accordance with the judgment, the item information being acquired from the operational rule information; and

a decryption unit configured to decrypt the content data based on the decryption key information.

2. The terminal apparatus according to claim 1, wherein the reproduction object inherent information includes any one of a limit item concerning the content, a restriction item restricting at least one of the terminal apparatus and an item inherent to a user.

3. The terminal apparatus according to claim 1, wherein the operational rule information contains a flag indicative of the operational rule information which is independent on the reproduction object inherent information.

4. A terminal for decrypting encrypted data including content, comprising:

providing part configure to provide terminal-side item information;

a first memory part configured to receive and store operational rule information corresponding to a combination of title key and encrypted keyword information, the title key being uniquely determined in accordance with the content, and the encrypted keyword information being encrypted based on reproduction object inherent information restricting a reproduction object of content and including item information;

a second memory part configured to receive and store the encrypted content data encrypted based to on encryption key information generated from the title key and the reproduction object inherent information;

a decryption key generation unit configured to compare the key word information with the terminal-side item information to judge a reproduction possibility of the encrypted content data, and generate a decryption key from the item information and the title key in accordance with the judgment, the key word information being acquired from the operational rule information; and

a decryption unit configured to decrypt the content data based on the decryption key information.

5. The terminal apparatus according to claim 4, wherein the reproduction object inherent information includes any one of a limit item concerning a reproduction content, a restriction item which restricts the terminal apparatus and an item inherent to a user.

6. The terminal apparatus according to claim 4, wherein the operational rule information includes a flag indicative of the operational rule information which is independent on the reproduction object inherent information.

7. An encryption apparatus for encrypting content data, comprising:

a receiving portion configured to receive terminal-side item information from the outside of the apparatus;

a first generation portion configured to acquire a title key which is uniquely determined in accordance with each content and the terminal-side item information and generates reproduction object inherent information which restricts a reproduction object of content;

a second generation portion configured to generate an encryption key information based on the title key and the reproduction object inherent information;

an encryption portion configured to encrypt the content data with utilizing the encryption key information to generate a encryption content file; and

an output portion configured to generate an operational rule information file including the title key, and the reproduction object inherent information and outputs the operational rule information file.

8. The terminal apparatus according to claim 7, wherein the reproduction object inherent information includes any one of a limit item concerning a reproduction content, a restriction item which restricts the terminal apparatus and an item inherent to a user.

9. An encryption apparatus according to claim 7, wherein a flag indicative of the encryption key information which is independent on the reproduction object inherent information is provided in the operational rule information file.

10. An encryption apparatus for encrypting content data, comprising:

a receiving portion configured to receive terminal-side item information from the outside of the apparatus;

a first generation portion configured to acquire a title key which is uniquely determined in accordance with each content and the terminal-side item information and generates reproduction object inherent information which restricts a reproduction object of content;

a second generation portion configured to generate encryption key information based on the title key and the reproduction object inherent information, and generates encrypted keyword information obtained by encrypting the encryption key information based on the reproduction object inherent information;

an encryption portion configured to encrypt the content data with utilizing the encryption key information to generate a encrypted content file; and

an output portion configured to generate an operational rule information file including the title key, and the encrypted keyword information.

11. The terminal apparatus according to claim 10, wherein the reproduction object inherent information includes any one of a limit item concerning a reproduction content, a restriction item which restricts the terminal apparatus and an item inherent to a user.

12. The encryption apparatus according to claim 10, wherein a flag indicative of the encryption key information which is independent on the reproduction object inherent information is provided in the operational rule information.

13. A method of decrypting encrypted data including content, comprising:

preparing terminal-side item information;

receiving and storing operational rule information corresponding to a combination of title key and reproduction object inherent information, the title key being uniquely determined in accordance with the content, and the reproduction object inherent information restricting a reproduction object of content and including item information;

receiving and storing the encrypted content data encrypted based to on encryption key information generated from the title key and the reproduction object inherent information;

comparing the item information with the terminal-side item information to judge a reproduction possibility of the encrypted content data, and generating a decryption key from the item information and the title key in accordance with the judgment, the item information being acquired from the operational rule information; and

decrypting the content data based on the decryption key information.

14. The method according to claim 13, wherein the reproduction object inherent information includes any one of a limit item concerning the content, a restriction item restricting at least one of the terminal and an item inherent to a user.

15. The method according to claim 13, wherein the operational rule information contains a flag indicative of the operational rule information which is independent on the reproduction object inherent information.

16. A method of decrypting encrypted data including content, comprising:

providing terminal-side item information;

receiving and storing operational rule information corresponding to a combination of title key and encrypted keyword information, the title key being uniquely determined in accordance with the content, and the encrypted keyword information being encrypted based on reproduction object inherent information restricting a reproduction object of content and including item information;

receiving and storing the encrypted content data encrypted based to on encryption key information generated from the title key and the reproduction object inherent information;

comparing the key word information with the terminal-side item information to judge a reproduction possibility of the encrypted content data, and generating a decryption key from the item information and the title key in accordance with the judgment, the key word information being acquired from the operational rule information; and

decrypting the content data based on the decryption key information.

17. The method according to claim 16, wherein the reproduction object inherent information includes any one of a limit item concerning a reproduction content, a restriction item which restricts the terminal apparatus and an item inherent to a user.

18. The method according to claim 16, wherein the operational rule information includes a flag indicative of the operational rule information which is independent on the reproduction object inherent information.

19. An encryption method of encrypting content data, comprising:

receiving terminal-side item information from the outside;

acquiring a title key which is uniquely determined in accordance with each content and the terminal-side item information and generating reproduction object inherent information which restricts a reproduction object of content;

generating an encryption key information based on the title key and the reproduction object inherent information;

encrypting the content data with utilizing the encryption key information to generate a encryption content file; and

generating a operational rule information file including the title key, and the reproduction object inherent information and outputs the operational rule information file.

20. The encryption method according to claim 19, wherein the reproduction object inherent information includes any one of a limit item concerning a reproduction content, a restriction item which restricts the terminal apparatus and an item inherent to a user.

21. The encryption method according to claim 19, wherein a flag indicative of the encryption key information which is independent on the reproduction object inherent information is provided in the operational rule information file.

22. An encryption method of encrypting content data, comprising:

receiving terminal-side item information from the outside;

acquiring a title key which is uniquely determined in accordance with each content and the terminal-side item information and generating reproduction object inherent information which restricts a reproduction object of content;

generating encryption key information based on the title key and the reproduction object inherent information, and generating encrypted keyword information obtained by encrypting the encryption key information based on the reproduction inherent information;

encrypting the content data with utilizing the encryption key information; and

generating an operational rule information file including the title key, and the encrypted keyword information and outputting the operational rule information file.

23. The encryption method according to claim 22, wherein the reproduction object inherent information includes any one of a limit item concerning a reproduction content, a restriction item which restricts the terminal apparatus and an item inherent to a user.

24. The encryption method according to claim 23, wherein a flag indicative of the encryption key information which is independent on the reproduction object inherent information is provided in the operational rule information file.