MANAGEMENT APPARATUS, INFORMATION PROCESSING APPARATUS, MANAGEMENT METHOD, AND INFORMATION PROCESSING METHOD

• US 20070288386A1
• Filed: 04/27/2007
• Published: 12/13/2007
• Est. Priority Date: 05/22/2006
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Nakamura, Atsushi, Nakamura, Mitsuhiro, Kawamoto, Yoji, Adachi, Seiichi, Futagami, Motomasa
• Granted Patent: US 8,396,805 B2
• Time in Patent Office: Days
• US Class Current: 705/58
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0833 involving conference or group key network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065

Abstract

A management apparatus includes a registering unit configured to issue a first key corresponding to a first service in response to a request for registration with the first service from a first information processing apparatus; a storage unit configured to store an apparatus ID of the first information processing apparatus, the first key, and a second key corresponding to a second service while associating the apparatus ID, the first key, and the second key with each other; and a composite license issuing unit configured to issue a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt the encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key.

Claims

1. A management apparatus to provide a license to use encrypted content to an information processing apparatus, the management apparatus comprising:

a registering unit configured to issue a first key corresponding to a first service in response to a request for registration with the first service from a first information processing apparatus;

a storage unit configured to store an apparatus ID of the first information processing apparatus, the first key, and a second key corresponding to a second service while associating the apparatus ID, the first key, and the second key with each other; and

a composite license issuing unit configured to issue a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt the encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key.

2. The management apparatus according to claim 1,

wherein the first key is a first user key that is given to a group of one or more first information processing apparatuses corresponding to the first service owned by the same user who is registered.

3. The management apparatus according to claim 2,

wherein the storage unit further stores a user ID of the user owning the first information processing apparatus while associating the user ID, and

wherein, if the registering unit receives a request for registration of an apparatus to a group of a specific user from a second information processing apparatus corresponding to the second service, the registering unit issues the second key that is stored in the storage unit while being associated with a user ID of the specific user.

4. The management apparatus according to claim 1,

wherein the first license further includes a usage condition of content encrypted with the first key, and

wherein the second license further includes a usage condition of content encrypted with the second key.

5. The management apparatus according to claim 1,

wherein, if the composite license issuing unit changes a usage condition of the first license included in the composite license, the composite license issuing unit also changes a usage condition of the second license in accordance with the change.

6. The management apparatus according to claim 1, further comprising:

a group license issuing unit configured to issue a group key and a group license, the group key being used to transfer encrypted content that is stored in the information processing apparatus and that is based on a specific service corresponding to the information processing apparatus to another information processing apparatus not corresponding to the specific service in response to a request from the information processing apparatus, and the group license including the group key encrypted so as to be decrypted in the information processing apparatus on the transferred side.

7. The management apparatus according to claim 6,

wherein the group key and the group license are issued in units of services corresponding to content.

8. An information processing apparatus comprising:

a storage unit configured to store a first key or a second key corresponding to a first service or a second service, the first and second keys being issued by a management apparatus, and a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key; and

a content using unit configured to decrypt the encrypted content with the content key included in the first license or the second license corresponding to the information processing apparatus among the first license and the second license included in the composite license stored in the storage unit and use the decrypted content.

9. The information processing apparatus according to claim 8, further comprising:

a usage control unit configured to determine whether the composite license stored in the storage unit includes the first license or the second license corresponding to the information processing apparatus.

10. The information processing apparatus according to claim 8,

wherein the storage unit further stores a group key and a group license, the group key being used to transfer content of a specific service stored in the storage unit to another information processing apparatus not corresponding to the specific service, and the group license including the group key encrypted so as to be decrypted in the information processing apparatus on the transferred side,

the information processing apparatus further comprising:

an encrypting unit configured to encrypt each piece of the content of the specific service with a predetermined content item key and encrypt the content item key with the group key; and

a transferring unit configured to transfer the encrypted content, the content item key, and the group license.

11. The information processing apparatus according to claim 10,

wherein the storage unit further stores the encrypted content transferred from another information processing apparatus, the content item key, and the group license,

the information processing apparatus further comprising:

a usage control unit configured to determine whether the content item key can be used on the basis of whether the group license includes the group key that can be decrypted with the first or second key owned by the information processing apparatus.

12. A management method for providing a license to use encrypted content to an information processing apparatus;

the management method comprising the steps of;

issuing a first key corresponding to a first service in accordance with a request for registration with the first service from a first information processing apparatus;

storing an apparatus ID of the first information processing apparatus, the first key, and a second key corresponding to a second service while associating the apparatus ID, the first key, and the second key with each other; and

issuing a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt the encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key.

13. An information processing method comprising the steps of:

storing, in a storage unit, a first key or a second key corresponding to a first service or a second service, the first and second keys being issued by a management apparatus, and a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key; and

decrypting the encrypted content with the content key included in the first license or the second license corresponding to the own information processing apparatus among the first license and the second license included in the composite license stored in the storage unit and using the decrypted content.

14. A management apparatus to provide a license to use encrypted content to an information processing apparatus, the management apparatus comprising:

registering means for issuing a first key corresponding to a first service in response to a request for registration with the first service from a first information processing apparatus;

storage means for storing an apparatus ID of the first information processing apparatus, the first key, and a second key corresponding to a second service while associating the apparatus ID, the first key, and the second key with each other; and

composite license issuing means for issuing a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt the encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key.

15. An information processing apparatus comprising:

storage means for storing a first key or a second key corresponding to a first service or a second service, the first and second keys being issued by a management apparatus, and a composite license including a first license and a second license, the first license including first encrypted data, which is a content key that is used to decrypt encrypted content and that is encrypted with the first key, and the second license including second encrypted data, which is the content key that is encrypted with the second key; and

content using means for decrypting the encrypted content with the content key included in the first license or the second license corresponding to the information processing apparatus among the first license and the second license included in the composite license stored in the storage means and using the decrypted content.