INFORMATION PROCESSING APPARATUS, DATA PROCESSING APPARATUS, AND METHODS THEREOF

• US 20080031446A1
• Filed: 07/27/2007
• Published: 02/07/2008
• Est. Priority Date: 08/04/2006
• Status: Active Grant

• Current Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Original Assignee: Canon Kabushiki Kaisha (Canon Inc.)
• Inventors: SUGA, Yuji
• Granted Patent: US 8,005,213 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00152 involving a password
• CPC Class Codes: G11B 20/00173 wherein the origin of the content is checked, e.g. determining whether the content has originally been retrieved from a legal disc copy or another trusted source
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00521 wherein each session of a multisession recording medium is encrypted with a separate encryption key
• CPC Class Codes: G11B 20/00528 wherein each title is encrypted with a separate encryption key for each title, e.g. title key for movie, song or data file
• CPC Class Codes: G11B 2220/61 wherein solid state memory is used for storing A/V content storing computer data in solid state memories G06F
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
• CPC Class Codes: H04N 5/77 between a recording apparatus and a television camera
• CPC Class Codes: H04N 5/782 on tape
• CPC Class Codes: H04N 5/85 on discs or drums
• CPC Class Codes: H04N 5/907 using static stores, e.g. storage tubes or semiconductor memories H04N5/91 takes precedence
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

An object of this invention is to protect the right of a content holder without any necessity of a special storage medium incorporating a copyright protecting mechanism when the content holder does not coincide with a content creator. Information for encryption key generation is input. An encryption key is generated from the information for encryption key generation. Encryption key verification data is acquired from a storage medium, and the validity of the generated encryption key is authenticated based on the verification data. Generated data is encrypted by using the encryption key whose validity is authenticated by the authentication. The encrypted data is stored in the storage medium.

Claims

1. A data processing apparatus comprising:

an input section, arranged to input information for encryption key generation;

a key generator, arranged to generate an encryption key from the information for encryption key generation;

an authenticator, arranged to acquire encryption key verification data from a storage medium and authenticate, based on the verification data, validity of the encryption key generated by said key generator;

a data generator, arranged to generate data to be stored in the storage medium;

an encryption section, arranged to encrypt the data generated by said data generator by using the encryption key whose validity is authenticated by said authenticator; and

a controller, arranged to store the data encrypted by said encryption section in the storage medium.

2. The apparatus according to claim 1, wherein the verification data is a message authentication code for the information for encryption key generation.

3. The apparatus according to claim 1, wherein the verification data is a message authentication code for the encryption key.

4. The apparatus according to claim 1, further comprising a secondary data generator arranged to generate secondary data of the data generated by said data generator,

wherein said controller stores the secondary data in the storage medium without encryption.

5. The apparatus according to claim 4, wherein said data generator generates image data, and said secondary data generator generates thumbnail image data.

6. The apparatus according to claim 1, further comprising a memory which stores secret information,

wherein said key generator generates the encryption key by combining the secret information and the information for encryption key generation.

7. The apparatus according to claim 1, further comprising a memory which stores secret information,

wherein said key generator generates the encryption key by concatenating the secret information and the information for encryption key generation and executing, for the concatenated information, a data conversion process using a one-way hash function.

8. The apparatus according to claim 1, wherein said key generator generates an encryption key which changes in every encryption by said encryption section.

9. The apparatus according to claim 1, further comprising a key destructor arranged to erase the encryption key used for encryption after encryption by said encryption section.

10. The apparatus according to claim 9, wherein said key destructor prevents reconstruction of the encryption key used by said encryption section in the past by updating the information for encryption key generation.

11. The apparatus according to claim 1, wherein said controller stores the data generated by said data generator in the storage medium without encryption if said authenticator has failed to authenticate the encryption key.

12. An information processing apparatus comprising:

a key generator, arranged to generate an encryption key to be used when an external device stores data in a storage medium;

a verification data generator, arranged to generate verification data to authenticate validity of the encryption key and store the verification data in the storage medium; and

a decryption section, arranged to decrypt the data stored in the storage medium by using the encryption key.

13. The apparatus according to claim 12, wherein the verification data is a message authentication code for the encryption key.

14. The apparatus according to claim 12, further comprising an input section arranged to input information for encryption key generation by said key generator.

15. The apparatus according to claim 12, wherein the verification data is a message authentication code for the information for encryption key generation.

16. The apparatus according to claim 12, further comprising an authenticator arranged to authenticate, based on the verification data, the validity of the encryption key generated by said key generator.

17. A method of processing data, the method comprising the steps of:

inputting information for encryption key generation;

generating an encryption key from the information for encryption key generation;

acquiring encryption key verification data from a storage medium and authenticating, based on the verification data, validity of the generated encryption key;

generating data to be stored in the storage medium;

encrypting the generated data by using the encryption key whose validity is authenticated in the authenticating step; and

storing the encrypted data in the storage medium.

18. A method of processing information, the method comprising the steps of:

generating an encryption key to be used when an external device stores data in a storage medium;

generating verification data to authenticate validity of the encryption key and storing the verification data in the storage medium; and

decrypting the data stored in the storage medium by using the encryption key.

19. A computer-executable program stored on a computer-readable storage medium comprising program code causing a computer to perform a data processing method, the method comprising the steps of:

inputting information for encryption key generation;

generating an encryption key from the information for encryption key generation;

acquiring encryption key verification data from a storage medium and authenticating, based on the verification data, validity of the generated encryption key;

generating data to be stored in the storage medium;

encrypting the generated data by using the encryption key whose validity is authenticated in the authenticating step; and

storing the encrypted data in the storage medium.

20. A computer-executable program stored on a computer-readable storage medium comprising program code causing a computer to perform a data processing method, the method comprising the steps of:

generating an encryption key to be used when an external device stores data in a storage medium;

generating verification data to authenticate validity of the encryption key and storing the verification data in the storage medium; and

decrypting the data stored in the storage medium by using the encryption key.

21. A computer-readable storage medium storing a computer-executable program causing a computer to perform an information processing method, the method comprising the steps of:

inputting information for encryption key generation;

generating an encryption key from the information for encryption key generation;

acquiring encryption key verification data from a storage medium and authenticating, based on the verification data, validity of the generated encryption key;

generating data to be stored in the storage medium;

encrypting the generated data by using the encryption key whose validity is authenticated in the authenticating step; and

storing the encrypted data in the storage medium.

22. A computer-readable storage medium storing a computer-executable program causing a computer to perform an information processing method, the method comprising the steps of:

generating an encryption key to be used when an external device stores data in a storage medium;

generating verification data to authenticate validity of the encryption key and storing the verification data in the storage medium; and

decrypting the data stored in the storage medium by using the encryption key.