Content management system and information recording medium

• US 20040117309A1
• Filed: 09/12/2003
• Published: 06/17/2004
• Est. Priority Date: 07/09/2001
• Status: Abandoned Application

• Current Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Matsushita Electric Industrial Company Limited (Panasonic Holdings Corporation)
• Inventors: Inoue, Ryuji, Shimojima, Takashi, Sato, Mitsuhiro, Matsui, Shinichi, Noguchi, Naohiko
• Application Number:
  US10/471,615
• Publication Number:
  US 20040117309A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/4097 using mutual authentication between devices and transaction partners
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00297 the key being stored in a management area, e.g. the video manager [VMG] of a DVD
• CPC Class Codes: G11B 20/00528 wherein each title is encrypted with a separate encryption key for each title, e.g. title key for movie, song or data file
• CPC Class Codes: G11B 20/0071 involving a purchase action
• CPC Class Codes: G11B 20/00797 wherein the usage restriction limits the number of times a content can be reproduced, e.g. using playback counters
• CPC Class Codes: G11B 20/00804 wherein the usage restriction limits the number of users or devices that are allowed to access a given content
• CPC Class Codes: G11B 20/0084 wherein the usage restriction can be expressed as a specific time or date
• CPC Class Codes: G11B 20/00855 involving a step of exchanging information with a remote server
• CPC Class Codes: G11B 2220/60 Solid state media
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

The present invention is directed to a content management system in which content data recorded on a memory card (1) is used by a content use terminal (2). The memory card (1) has recorded, in a protected area of which reading from outside is restricted, protected information including use restriction information indicative of conditions for using encrypted content data, and key information. The content use terminal (2) performs mutual authentication with the memory card (1). Furthermore, the content user terminal (2) reads the protected information from the protected area only when mutual authentication succeeds. Then, based on the use restriction information included in the read protected information, it is decided whether or not the content data recorded on the memory card (1) is usable. Also, the management server (3) transmits use restriction update information to the content use terminal (2) so as to update the use restriction information.

Claims

1. (Amended) A content management system in which content data recorded on a portable-type recording medium is used by a content use terminal, comprising:

the content use terminal;

a recording medium removably inserted to the content use terminal; and

a management server communicable with the content use terminal,

the recording medium including;

a content data recording section which records encrypted content data;

a medium-side authenticating section which performs authentication with the content use terminal; and

a protected area which records therein protected information of which reading from outside is restricted, the protected information including use restriction information indicative of conditions for using the encrypted content data and key information for decoding the encrypted content data, and

the content use terminal including;

a terminal-side authenticating section which performs mutual authentication with the recording medium in cooperation with the medium-side authenticating section;

a protected information reading section which reads the protected information from the protected area of the recording medium only upon a success of the mutual authentication performed by the terminal-side authenticating section with the recording medium;

a use deciding section which decides, based on the use restriction information included in the protected information read by the protected information reading section, whether or not the content data recorded on the recording medium is usable;

a content decoding section which decodes, upon a decision made by the use deciding section that the content data recorded on the recording medium is usable, the content data encrypted and recorded on the recording medium by using the key information included in the protected information read by the protected information reading section; and

a content executing section which executes the content data decoded by the content decoding section, wherein

the management server transmits, to the content use terminal, use restriction update information for updating the use restriction information,

the terminal-side authenticating section performs mutual authentication with the recording medium upon a receipt of the use restriction update information from the management server, and

the content use terminal further includes;

an updating section which updates, in accordance with the use restriction information transmitted from the management server, the use restriction information recorded in the protected area of the recording medium only upon success of the mutual authentication performed by the terminal-side authenticating section with the recording medium;

a use restriction update information storage section which stores the use restriction update information transmitted from the management server; and

a use restriction information deciding section which makes a decision whether or not the protected information recorded on the recording medium includes use restriction information corresponding to the use restriction update information stored in the use restriction update information storage section, the decision being made only upon a success of the mutual authentication performed by the terminal-side authenticating section with the recording medium,

upon new insertion of a recording medium, the terminal-side authenticating section performs mutual authentication with the newly-inserted recording medium, and

upon a decision made by the use restriction information deciding section that the use restriction information corresponding to the use restriction update information stored in the use restriction update information storage section is included, the updating section updates the use restriction information recorded on the recording medium in accordance with the use restriction update information stored in the use restriction update information storage section.

2. The content management system according to claim 1 wherein

the content use terminal further includes a use requesting section which transmits, upon a decision by the use deciding section that the content data recorded on the recording medium is not usable, use request information indicative of a request for using the content data decided as not being usable,

upon a receipt of the use request information from the use requesting section of the content use terminal, the management server transmits, to the content use terminal, use restriction update information regarding the content data requested by the transmitted use request information, and

upon an update performed by the updating section of the use restriction information recorded on the protected area, the content decoding section decodes the content data regarding the updated use restriction information.

3. The content management system according to claim 2, wherein

the protected information further includes a content identifier for identifying the content data recorded on the recording medium,

the use requesting section transmits, to the management server, as a use request, use request information including the content identifier indicative of the content data requested by the use request, and

the management server transmits, to the content use terminal, the use restriction update information regarding the content data indicated by the content identifier transmitted from the use requesting section of the content use terminal.

4. The content management system according to claim 1, wherein

the use restriction update information is information indicative of conditions for using the content data, and

the updating section updates the use restriction information recorded on the protected area of the recording medium so that conditions indicated by the use restriction information are identical to the conditions indicated by the use restriction update information transmitted from the management server.

5. The content management system according to claim 1, wherein

the use restriction update information is information indicative of an amount of change in the use restriction information recorded on the recording medium between before and after the update, and

based on the amount of change indicated by the use restriction update information transmitted from the management server, the updating section updates the use restriction information recorded on the protected area of the recording medium.

7. (Amended) The content management system according to claim 1, wherein

the content use terminal further includes a discarding section which discards, upon an update by the updating section of the use restriction information, the use restriction update information corresponding to the updated use restriction information from the use restriction update information storage section.

8. (Amended) The content management system according to claim 7, wherein

the management server transmits, to the content use terminal, the use restriction update information together with updatable period information indicative of a period during which the use restriction information can be updated by the use restriction update information,

the use restriction update information storage section further stores the updatable period information transmitted from the management server,

the content use terminal further includes an update deciding section which decides, based on the updatable period information stored in the use restriction update information storage section, whether or not the use restriction information recorded on the recording medium is to be updated, upon a decision made by the use restriction information deciding section that the use restriction information corresponding to the use restriction update information stored in the use restriction update information storage section is included,

the updating section updates the use restriction information only upon a decision made by the updating decision section that the use restriction information is to be updated, and

upon a decision made by the update deciding section that the use restriction information is not to be updated, the discarding section discards the use restriction update information and the updatable period information corresponding to the use restriction information decided as being not to be updated from the use restriction update information storage section.

9. The content management system according to claim 1, wherein

the content use terminal further includes a retrieval requesting section which transmits retrieval request information indicative of a retrieval request for requesting a retrieval of the content data to the management server;

and

a recording section which records in the recording medium, only upon a success of the mutual authentication performed by the terminal-side authenticating section with the recording medium, information transmitted from the management server in response to the retrieval request information transmitted from the retrieval request,

the management server transmits, to the content use terminal, the encrypted content data indicated by the retrieval request information transmitted from the retrieval requesting Section of the content use terminal, the use restriction information regarding the content data, and the key information for decoding the content data, and

the recording section records at least the use restriction information and the key information of the information transmitted from the management server in the protected area.

10. The content management system according to claim 9, wherein

the protected area has further recorded therein a content identifier for identifying a content recorded on the recording medium,

the retrieval requesting section transmits information including the content identifier recorded on the recording medium as the retrieval request information at the time of retrieving the content data related to the content data recorded on the recording medium, and

the management server transmits, to the content use terminal, the encrypted content data which corresponds to content data indicated by a content identifier transmitted from the retrieval requesting section., the use restriction information regarding the content data, and the key information for decoding the content data.

11. The content management system according to claim 10, wherein

in addition to the content identifier, the retrieval requesting section transmits, to the management server, the use restriction information corresponding to the content data indicated by the content identifier, and

the management server changes details of the use restriction information to be transmitted to the content use terminal in accordance with details of the use restriction information transmitted from the retrieval requesting section.

12. The content management system according to claim 1, wherein

the use restriction information includes at least one of number of uses limit information indicative of the number of times the content data recorded on the recording medium can be used, time limit information indicative of a time during which the content data recorded on the recording medium can be used, and date/time limit information indicative of a date/time by which the content data recorded on the recording medium can be used.

6. (Deleted)

13. A portable-type information recording medium removably attached to a content use terminal using content data, comprising:

a content data recording section which records encrypted content data;

a medium-side authenticating section which performs authentication with the content use terminal as a part of a mutual authentication process performed with the content use terminal; and

a protected area which records protected information including a content identifier for identifying the content data, use restriction information indicative of conditions for using the encrypted content data, and key information for decoding the encrypted content data, the protected information of which reading from outside being restricted, wherein

the protected area can be read by the content use terminal only upon a success of the mutual authentication process performed with the content use terminal.

14. The information recording medium according to claim 13, therein

the use restriction information includes at least one of number-of-uses limit information indicative of the number of times the content data can be used, time limit information indicative of a time during which the content data can be used, and a date/time limit information indicative of date/time by which the content data can be used.