Information processing apparatus and method, and storage medium

• US 20050262321A1
• Filed: 02/18/2002
• Published: 11/24/2005
• Est. Priority Date: 02/26/2001
• Status: Abandoned Application

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Iino, Yoichiro
• Application Number:
  US10/469,127
• Publication Number:
  US 20050262321A1
• Time in Patent Office: Days
• US Class Current: 711/164
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06Q 20/00 Payment architectures, schemes or protocols apparatus for performing or posting payment transactions G07F7/08, G07F19/00; electronic cash registers G07G1/12
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/0084 wherein the usage restriction can be expressed as a specific time or date
• CPC Class Codes: G11B 20/00855 involving a step of exchanging information with a remote server
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8352 involving content or source identification data, e.g. Unique Material Identifier [UMID]
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

Digital information is protected by holding it on durable hardware. In a system that uses a hardware mechanism to move digital information without permitting reproduction, a record concerning a movement of the digital information, that is, a transfer history, is stored. When recovering the digital information, by analyzing the transfer history, it can be indicated at what time alteration of hardware reproduced the identification. By using a nested structure as the data structure of the transfer history, durability against falsification of the transfer history by a misuser during distribution is also realized while the number of calculations required for transfer history check in each transfer is set to a fixed value which does not depend on the number of transfers.

Claims

1. Canceled

2. Canceled

3. Canceled

4. Canceled

5. Canceled

6. An information processing apparatus, for performing inter-apparatus content exchange, comprising:

communication means for transmitting and/or receiving content and a transfer history of the content,

unique information holding means for holding apparatus-unique information;

authentication means for performing mutual authentication with a content-exchanging apparatus of another party;

content holding means for holding the content; and

transfer history management means for managing the transfer history of the content,

wherein;

in the content receiving mode, by confirming that the end record of the transfer history of the content includes apparatus-unique information SID on the content transmitting side, apparatus-unique information RID on the content receiving side, and a nonce TN generated by said transfer history management means, and/or that the electronic signature is a valid signature of the apparatus on the content transmitting side which corresponds to the transfer history, said transfer history management means checks the transfer history of the content, and examines whether or not unique information possessed by the content is consistent between the content transmitting and receiving sides; and

in a content transmitting mode, said transfer history management means adds, to the transfer history of the content, a new record including apparatus-unique information SID on the content transmitting side, apparatus-unique information RID on the content receiving side, a nonce TN generated by the content receiving side, and an electronic signature TSG for the entirety of the transfer history of the content.

7. An information processing apparatus according to claim 6 wherein, when succeeding in checking the end record of the transfer history of the content, said transfer history management means replaces the checked record with a record obtained by using a public key P_CA of a predetermined management center CA to encrypt the checked record.

8. An information processing apparatus according to claim 6, wherein said communication means receives content from the apparatus of the other party, which is successfully authenticated by said authentication means, after said transfer history management means confirms the transfer history.

9. An information processing apparatus for recovering content distributed with a transfer history among a plurality of apparatuses,

wherein:

the transfer history is formed by, when each apparatus transmits content, sequentially adding a new record including apparatus-unique information SID on a content transmitting side, apparatus-unique information RID on a content receiving side, a nonce TN generated by the content receiving side, and an electronic signature TSG for the entirety of the transfer history of the content; and

said information processing apparatus comprises;

communication means for receiving content and a transfer history; and

misuse detecting means for detecting misuse in the distribution process of the content by checking each record of the transfer history.

10. An information processing apparatus according to claim 9, wherein said misuse detecting means initiates detection of misuse in response to receiving content having the same content-unique information TID two or more times.

11. An information processing apparatus according to claim 9, wherein

said misuse detecting means verifies an electronic signature for each record which is included in the transfer history, and specifies, as a misuser, an apparatus on the content transmitting side which gives an inconsistent electronic signature.

12. An information processing apparatus according to claim 9, wherein, when an SID included in the start record of the transfer history does not represent indicates a predetermined content-issuing apparatus, said misuse detecting means specifies, as a misuser, an apparatus identified by the SID.

13. An information processing apparatus according to claim 9, wherein, in said misuse detecting means, when a content item having the same content-unique information is received two or more times, by comparing the transfer histories of the received content items, and searching for a branching record in which, although a transfer history, attached to content having the same content unique information TID, duly begins with the start record of apparatus-unique information SID on a content transmitting side, and has identical content records halfway, the transfer history begins to differ, an apparatus identified by apparatus-unique information SID on the content transmitting side in a record branching off is specified as a misuser.

14. An information processing apparatus according to claim 9, wherein, in said misuse detecting means:

when each record of the transfer history is encrypted by using a public key P_CA of a predetermined management center, the records included in the transfer history are decrypted by using a secret key S_CA of the management center CA and are checked in order from the latest record; and

when a record which cannot be duly decrypted or whose signature cannot be duly verified is detected, an apparatus receiving the record is specified as a misuser.

15. An information processing method for transferring content to another apparatus, comprising:

a step for performing mutual authentication with a content-transferred apparatus;

a step for updating a transfer history of the content;

a step for transmitting the transfer history of the content to the content-transferred apparatus; and

a step for transmitting the content to the content-transferred apparatus after performing the mutual authentication and confirming a transfer history from the content-transferred apparatus.

16. Canceled

17. Canceled

18. An information processing method for receiving content transferred from another apparatus, said information processing method comprising:

a step for performing mutual authentication with a content transferring apparatus;

a step for transmitting a nonce TN to the content transferring apparatus;

a step for receiving a transfer history of the content from the content transferring apparatus;

a step for checking the received transfer history and

a step for receiving the content from the content transferring apparatus,

wherein;

each record of the transfer history includes content-transferring-apparatus-unique information SID, content-transferred-apparatus-unique information RID, a nonce TN generated by a content-transferred apparatus, and an electronic signature TS by the content-transferred apparatus which corresponds to the entire transfer history of the content; and

in the step for checking the transfer history, by confirming that the end record of the transfer history of the content includes content transferring apparatus information SID, content-transferred-apparatus-unique information RID, a nonce TN generated by the method, and/or that an electronic signature TSG is a valid signature of the content transferring apparatus which corresponds to the transfer history, the transfer history of the content is checked, and it is examined whether or not unique information possessed by the content is consistent between content transmitting and receiving sides.

19. An information processing method according to claim 18, wherein, in the step for checking the transfer history, when succeeding in checking the end record of the transfer history of the content, the record is replaced with a record obtained by using a public key P_CA of a predetermined management center CA to encrypt the checked record.

20. An information processing method for recovering content distributed with a transfer history among a plurality of apparatuses,

wherein:

the transfer history is formed, when each apparatus transmits content, by sequentially adding a new record including content-transferring-apparatus-unique information SID, content-transferred-apparatus-unique information RID, a nonce TN generated by a content receiving side, and an electronic signature TSG for the entire transfer history of the content, and

said information processing method comprises;

a step for receiving content and a transfer history; and

a misuse detecting step for detecting misuse in the distribution process of content by verifying the transfer history in response to receiving content having the same content-unique information TID two or more times.

21. An information processing method according to claim 20, wherein, in the misuse detecting step, in response to receiving content having the content-unique information TID two or more times, detection of misuse is initiated.

22. An information processing method according to claim 20, wherein, in the misuse detecting step, by verifying the electronic signature of each record which is included in the transfer history, a content transferring apparatus having given an electronic signature is specified as a misuser.

23. An information processing method according to claim 20, wherein, in the misuse detecting step, when an SID included in the start record of the transfer history does not indicate a predetermined content-issuing apparatus, an apparatus identified by the SID is specified as a misuser.

24. An information processing method according to claim 20, wherein, in the misuse detecting step, when a content item having the same content-unique information TID is received two or more times, by comparing the transfer histories of the received content items, and searching for a branching record in which, although a transfer history, attached to content having the same content unique information TID, duly begins with the start record of content-transmitting-apparatus-unique information SID, and has identical content records halfway, the transfer history begins to differ, an apparatus identified by the content-transmitting-apparatus-unique information SID in a record branching off is specified as a misuser.

25. An information processing method according to claim 20, wherein, in the misuse detecting step:

when each record of the transfer history is encrypted by using a public key P_CA of a predetermined management center CA, the records included in the transfer history are decrypted by using a secret key S_CA of the management center CA and are checked in order from the latest record; and

when a record which cannot be duly decrypted or whose signature cannot be duly verified is detected, an apparatus receiving the record is specified as a misuser.

26. A storage medium physically storing, in a computer-readable form, computer software described so that processing for transferring content to another apparatus can be executed on a computer, the computer software comprising:

a step for performing mutual authentication with a content-transferred apparatus;

a step for updating a transfer history of the content by adding a new record including content-transferring-apparatus-unique information SID, content-transferred-apparatus-unique information RID, a nonce TN generated by a content receiving side, and an electronic signature TSG for the entire transfer history of the content;

a step for transmitting the transfer history of the content to the content-transferred apparatus; and

a step for transmitting the content to the content-transferred apparatus after performing the mutual authentication and confirming a transfer history from the content receiving apparatus.

27. A storage medium physically storing, in a computer-readable form, computer software described so that processing for receiving content transferred from another apparatus can be executed on a computer, said computer software comprising:

a step for performing mutual authentication with a content transferring apparatus;

a step for transmitting a nonce TN to a content-transferred apparatus;

a step for receiving, from the content transferring apparatus, a transfer history of content comprising content-transferring-apparatus-unique information SID, content-transferred-apparatus-unique information RID, a nonce TN generated by the content-transferred apparatus, and an electronic signature TSG by the content-transferred apparatus which corresponds to the entire transfer history of the content;

a step for checking the transfer history of the content by confirming that the end record of the transfer history includes content-transferring-apparatus-unique information SID, content-transferred-apparatus-unique information RID, and a nonce TN generated by the software, and/or that an electronic signature TSG is a valid signature of the content-transferred apparatus which corresponds to the transfer history; and

a step for receiving the content from content transferring apparatus.

28. A storage medium according to claim 27, wherein, in the step for checking the transfer history, when succeeding in checking the end record of the transfer history of the content, the record is replaced with a record obtained by using a public key P_CA of a predetermined management center CA to encrypt the checked record.

29. A storage medium physically storing, in a computer-readable form, computer software described so that processing for recovering content distributed with a transfer history among a plurality of apparatuses can be executed on a computer,

wherein:

the transfer history is formed, when each apparatus transmits content, by sequentially adding a new record including apparatus-unique information SID on a content transmitting side, apparatus-unique information RID on a content receiving side, a nonce TN generated by the content receiving side, and an electronic signature TSG for the entire transfer history of the content; and

the computer software comprises;

a step for receiving content and a transfer history; and

a misuse detecting step for detecting misuse in the distribution process of content by verifying the transfer history in response to receiving content having the same content-unique information TID two or more times.

30. A storage medium according to claim 29, wherein, in the misuse detecting step:

when each record of the transfer history is encrypted by using a public key P_CA of a predetermined management center CA, the records included in the transfer history are decrypted by using a secret key S_CA of the management center CA and are checked in order from the latest record; and

when a record which cannot be duly decrypted or whose signature cannot be duly verified is detected, an apparatus receiving the record is specified as a misuser.