Protection of data on media recording disks

• US 20060106724A1
• Filed: 11/25/2005
• Published: 05/18/2006
• Est. Priority Date: 01/22/1998
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: NDS Limited (Cisco Systems, Inc.)
• Inventors: Bar-On, Gershon
• Granted Patent: US 7,386,127 B2
• Time in Patent Office: Days
• US Class Current: 705/57
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2121 Chip on media, e.g. a disk or tape with a chip embedded in its case
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 20/00275 the key being stored on a chip attached to the record carrier
• CPC Class Codes: G11B 20/00876 wherein physical copy protection means are attached to the medium, e.g. holograms, sensors, or additional semiconductor circuitry
• CPC Class Codes: G11B 23/0042 with provision for auxiliary features sensing such features G11B17/00, G11B19/02
• CPC Class Codes: G11B 23/284 on the record carrier
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/42646 for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

This invention discloses a secure recording medium having at least one of audio, video and software content, comprising a plurality of media recording disks (DVD'"'"'s) with a disk security chip embedded in each the DVD, each the disk chip comprising a security key, wherein at least two of the DVD'"'"'s have different disk security keys. A method for protecting access to content recorded on a media recording disk (DVD) is also disclosed.

Claims

1-51. -51. (canceled)

52. A system for protecting access to content recorded on a media recording disk (DVD), the system comprising:

a disk security chip on the DVD, the disk security chip managing access to the content of the DVD, the disk security chip comprising a disk key not known to a disk manufacturer; and

a corresponding player security chip in a DVD player, the DVD player being operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip,

wherein the disk security chip is operative to send the DVD player the disk key after assuring that the DVD player is authentic.

53. The system according to claim 52 and wherein the contents of the DVD are encrypted with a content key.

54. The system according to claim 52 and wherein an authentication process is performed between the disk security chip and the player security chip.

55. The system according to claim 54 and wherein the authentication process comprises a mutual zero-knowledge interaction authentication process.

56. The system according to claim 52 and wherein the disk security chip, after assuring that the DVD player is authentic, sends the DVD player the disk key encrypted with the player key.

57. The system according to claim 52 and wherein the player security chip verifies legitimacy of the disk key as a function of a geometric property of the DVD.

58. The system according to claim 57 and wherein the DVD is a multi-layer DVD and the geometric property is an angle between layers of the DVD.

59. A system for protecting access to content recorded on a media recording disk (DVD), the system comprising:

a disk security chip disposed on the DVD, the disk security chip managing access to the content of the DVD; and

a corresponding player security chip disposed in a DVD player, the DVD player being operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip,

wherein the disk security chip is operative to send the DVD player the disk key after assuring that the DVD player is authentic.

60. The system according to claim 59 and wherein the contents of the DVD are encrypted with a content key.

61. The system according to claim 59 and wherein an authentication process is performed between the disk security chip and the player security chip.

62. The system according to claim 61 and wherein the authentication process comprises a mutual zero-knowledge interaction authentication process.

63. The system according to claim 59 and wherein the disk security chip, after assuring that the DVD player is authentic, sends the DVD player the disk key encrypted with the player key.

64. The system according to claim 59 and wherein the player security chip verifies legitimacy of the disk key as a function of a geometric property of the DVD.

65. The method according to claim 64 and wherein the DVD is a multi-layer DVD and the geometric property is an angle between layers of the DVD.

66. A system for protecting access to content recorded on a media recording disk (DVD), the system comprising:

means for managing access to the content of the DVD, the means for managing access comprising a disk key not known to a disk manufacturer; and

corresponding player security means comprised in a DVD player, the DVD player being operative to play the DVD, the player security means managing use of a data stream received from the DVD, the means for managing access being in wireless communication with the player security means; and

wherein the means for managing access, after assuring that the DVD player is authentic, sends the DVD player the disk key.

67. A system for protecting access to content recorded on a media recording disk (DVD), comprising:

means for managing access to the content of the DVD; and

corresponding player security means comprised in a DVD player, the DVD player being operative to play the DVD, the player security chip means managing use of a data stream received from the DVD, the means for managing access being in wireless communication with the player security means,

wherein the means for managing access, after assuring that the DVD player is authentic, sends the DVD player a disk key.

68. A method for protecting access to content recorded on a media recording disk (DVD), the method comprising:

providing a disk security chip on the DVD, the disk security chip managing access to the content of the DVD;

providing a corresponding player security chip in a DVD player which is operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip;

providing the disk security chip with a disk key;

the player security chip sending a random number R to the disk security chip, the random number R being different each time the DVD is played;

the disk security chip sending the player security chip an encrypted concatenation of a hash function of R, called h(R), and the content key, encrypted with the disk key;

the player security chip decrypting the concatenation, and computing h(R) and comparing with the h(R) sent by the disk security chip;

the player security chip verifying R to be correct, thereby certifying that the disk chip really knows the player key;

the player security chip obtaining the content key from the concatenation; and

the player security chip using the content key to decrypt control words that are located within entitlement control messages (ECMs) in the DVD.

69. The method according to claim 68 and wherein the disk key is not known to a disk manufacturer.

70. A system for protecting access to content recorded on a media recording disk (DVD), the system comprising:

a disk security chip on the DVD, the disk security chip managing access to the content of the DVD, the disk security chip comprising a disk key;

a corresponding player security chip in a DVD player which is operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip, the player security chip being operative to produce a random number R for sending from the player security chip to the disk security chip, the random number R being different each time the DVD is played,

wherein the disk security chip sends the player security chip an encrypted concatenation of a hash function of R, called h(R), and the content key, encrypted with the disk key, and the player security chip is operative to perform the following steps;

decrypt the concatenation, and compute h(R) and compare the computed h(R) with the h(R) sent by the disk security chip;

verify R to be correct, thereby certifying that the disk chip really knows the player key;

obtain the content key from the concatenation; and

use the content key to decrypt control words that are located within entitlement control messages (ECMs) in the DVD.

71. The system according to claim 70 and wherein the disk key is not known to a disk manufacturer.