INFORMATION PROCESSING APPARATUS, INFORMATION RECORDING MEDIUM, INFORMATION PROCESSING METHOD, AND COMPUTER PROGRAM

• US 20070194117A1
• Filed: 04/12/2006
• Published: 08/23/2007
• Est. Priority Date: 04/15/2005
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Takashima, Yoshikazu, Ueda, Kenjiro
• Granted Patent: US 7,770,795 B2
• Time in Patent Office: Days
• US Class Current: 235/454
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00362 the key being obtained from a media key block [MKB]
• CPC Class Codes: G11B 20/00492 wherein content or user data is encrypted
• CPC Class Codes: G11B 2020/10833 Copying or moving data from one record carrier to another
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network

Abstract

An information processing apparatus for recording information on an information recording medium is provided. The information processing apparatus includes a content cryptographic processor configured to generate encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content; a unit-key-file processor configured to generate a unit key file storing the unit key, and to encrypt the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of unit keys included in the unit key file; and a data recorder configured to record the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format.

Claims

1. An information processing apparatus for recording information on an information recording medium, the information processing apparatus comprising:

a content cryptographic processor configured to generate encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content;

a unit-key-file processor configured to generate a unit key file storing the unit key, and to encrypt the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with a change in constituent data of unit keys included in the unit key file; and

a data recorder configured to record the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format.

2. The information processing apparatus according to claim 1,

wherein the unit-key-file processor is configured to set a new seed having a new value in accordance with an increase in the number of unit keys included in an existing unit key file recorded on the information recording medium or deletion of a unit key from the existing unit key file, and to generate an updated unit key file that is encrypted using a new encryption key based on the new seed.

3. The information processing apparatus according to claim 1,

wherein the unit-key-file processor is configured to store in the unit key file a new unit key that is newly set in accordance with recording of a new content management unit on the information recording medium, to set a new seed having a new value in accordance with addition of the new unit key, and to generate an updated unit key file that is encrypted using a new encryption key based on the new seed.

4. The information processing apparatus according to claim 1,

wherein the unit-key-file processor is configured to delete from the unit key file a unit key associated with a content management unit that is to be moved or deleted in accordance with a move or deletion of the content management unit from the information recording medium, to set a new seed having a new value in accordance with the deletion of the unit key, and to generate an updated unit key file that is encrypted using a new encryption key based on the new seed.

5. The information processing apparatus according to claim 1,

wherein the unit-key-file processor is configured to encrypt the unit key file or the constituent data of the unit key file using an encryption key that is generated through encryption of the seed using a media key, the media key being obtained by processing of an encryption-key block using a device key stored in the information processing apparatus.

6. The information processing apparatus according to claim 1,

wherein the data recorder is configured to record the seed in a user control data area that serves as a control information storage area, the user control data area being set at a recording location different from a recording location of a user data area where the unit key file is stored.

7. The information processing apparatus according to claim 1,

wherein the data recorder is configured to write the unit key file according to a recording format in which an area for writing the unit key file is set using an error-correcting-code block as a unit for accessing data on the information recording medium.

8. The information processing apparatus according to claim 1,

wherein the data recorder is configured to change a writing location on the information recording medium in accordance with the number of times of writing of or the number of times of access to the unit key file when writing the unit key file.

9. The information processing apparatus according to claim 1,

wherein the data recorder is configured to change a writing location on the information recording medium in accordance with the number of times of writing of or the number of times of access to the unit key file when writing the unit key file, and to delete at least a part of data written to a location before changing the writing location.

10. The information processing apparatus according to claim 9, wherein the data deleted includes seed information.

11. The information processing apparatus according to claim 1, further comprising:

a drive that executes access to the information recording medium; and

a host that executes processing for accessing the information recording medium via the drive;

wherein the drive is configured to generate the seed, and

wherein the host is configured to generate an encryption key using the seed generated by the drive, and to generate a unit key file encrypted using the encryption key.

12. A host computer that executes processing for accessing an information recording medium via a drive that executes access to the information recording medium, the information recording medium being used to record thereon content encrypted using a unit key, the unit key being included in a unit key file and associated with a content management unit that serves as a unit for controlling usage of content, the host computer comprising:

a receiver configured to receive a seed generated by the drive in accordance with change in constituent data of the unit key file;

a media-key generator configured to generate a media key using a device key of the host;

a bind-key generator configured to generate a bind key by applying the seed received to the media key generated;

a unit-key generator configured to generate a unit key; and

an encrypted-unit-key generator configured to generate an encrypted unit key by encrypting the unit key using the bind key.

13. A drive that executes access to an information recording medium in response to a request from a host computer, the information recording medium being used to record thereon content encrypted using a unit key, the unit key being included in a unit key file and associated with a content management unit that serves as a unit for controlling usage of content, the drive comprising:

a generator configured to generate a seed in accordance with change in constituent data of the unit key file;

a transmitter configured to transmit the seed generated to the host computer; and

a recorder configured to receive the unit key file from the host computer and to record the unit key file on the information recording medium;

wherein the unit key file is a file generated by the host computer by generating a media key using a device key of the host computer, applying the seed received from the drive to the media key to generate a bind key, and encrypting the unit key using the bind key.

14. An information processing apparatus for playing back content recorded on an information recording medium, the information processing apparatus comprising:

a data obtaining unit configured to read data recorded on the information recording medium;

a unit-key-file processor configured to obtain a unit key from a unit key file recorded on the information processing apparatus, the unit key being associated with a content management unit that is defined as a unit for controlling usage of content; and

a content cryptographic processor configured to decrypt, using the unit key, encrypted content recorded on the information recording medium;

wherein the unit-key-file processor is configured to generate an encryption key using a seed obtained from the information recording medium, the seed serving as key-generation information, and to obtain the unit key by decrypting the unit key file or constituent data of the unit key file using the encryption key generated.

15. The information processing apparatus according to claim 14,

wherein the unit-key-file processor is configured to decrypt the unit key file or the constituent data of the unit key file using an encryption key generated by encrypting the seed using a media key, the media key being obtained through processing of an encryption-key block using a device key stored in the information processing apparatus.

16. The information processing apparatus according to claim 14,

wherein the data obtaining unit is configured to obtain the seed from a user control data area that serves as a control information storage area, the user control data area being set at a recording location different from a recording location of a user data area where the unit key file is stored.

17. The information processing apparatus according to claim 14, further comprising:

a drive that executes access to the information recording medium; and

a host that executes processing for accessing the information recording medium via the drive;

wherein the drive is configured to generate the seed, and

wherein the host is configured to generate an encryption key using the seed generated by the drive, and to obtain the unit key by decrypting the unit key file or the constituent data of the unit key file using the encryption key.

18. An information recording medium having stored thereon:

content management units including constituent data that is encrypted using unit keys associated with the content management units, the content management units being defined as units for controlling usage of content;

a unit key file storing the unit keys, the unit key file or constituent data of the unit key file being encrypted using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of the unit keys included in the unit key file; and

the seed.

19. The information recording medium according to claim 18,

wherein the seed is recorded in a user control data area that serves as a control information storage area, the user control data area being set at a recording location different from a recording location of a user data area where the unit key file is stored.

20. The information recording medium according to claim 18,

wherein an area for writing the unit key file is set using an error-correcting-code block as a unit for accessing data on the information recording medium.

21. An information processing method for recording information on an information recording medium, the information processing method comprising the steps of:

generating encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content;

generating a unit key file storing the unit key, and encrypting the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of unit keys included in the unit key file; and

recording the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format.

22. An information processing method for playing back content recorded on an information recording medium, the information processing method comprising the steps of:

reading data recorded on the information recording medium;

obtaining a unit key from a unit key file recorded on the information processing apparatus, the unit key being associated with a content management unit that is defined as a unit for controlling usage of content; and

decrypting, using the unit key, encrypted content recorded on the information recording medium;

wherein an encryption key is generated using a seed obtained from the information recording medium, the seed serving as key-generation information, and the unit key is obtained by decrypting the unit key file or constituent data of the unit key file using the encryption key generated.

23. A computer program for allowing a computer to execute a process of recording information on an information recording medium, the computer program comprising the steps of:

generating encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content;

generating a unit key file storing the unit key, and encrypting the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of unit keys included in the unit key file; and

recording the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format.

24. computer program for allowing a computer to execute a process of playing back content recorded on an information recording medium, the computer program comprising the steps of:

reading data recorded on the information recording medium;

obtaining a unit key from a unit key file recorded on the information processing apparatus, the unit key being associated with a content management unit that is defined as a unit for controlling usage of content; and

decrypting, using the unit key, encrypted content recorded on the information recording medium;

wherein an encryption key is generated using a seed obtained from the information recording medium, the seed serving as key-generation information, and the unit key is obtained by decrypting the unit key file or constituent data of the unit key file using the encryption key generated.