Data transmitting system and method, drive unit, access method, data recording medium, recording medium producing apparatus and method

• US 20080072040A1
• Filed: 05/04/2007
• Published: 03/20/2008
• Est. Priority Date: 08/20/1999
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Asano, Tomoyuki, Osawa, Yoshitomo
• Granted Patent: US 7,739,495 B2
• Time in Patent Office: Days
• US Class Current: 713/158
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00876 wherein physical copy protection means are attached to the medium, e.g. holograms, sensors, or additional semiconductor circuitry

Abstract

A security module is provided in a data recording medium, data to be written to the data recording medium is encrypted with an content key different from one data to another, and the content key is safely stored in the security module. Also, the security module makes a mutual authentication using the public-key encryption technology with a drive unit to check that the counterpart is an authorized (licensed) unit, and then gives the content key to the counterpart, thereby preventing data from being leaked to any illegal (unlicensed) unit. Thus, it is possible to prevent copyrighted data such as movie, music, etc. from being copied illegally (against the wish of the copyrighter of the data).

Claims

1-137. -137. (canceled)

138. A storage apparatus for storing information retrieved by an information processing apparatus, the storage apparatus comprising:

a storage section for storing a first revoked unit list;

a receiving section for receiving a second revoked unit list from the information processing apparatus; and

a judging section for judging whether the information processing apparatus is revoked or not based on the first revoked unit list;

wherein if the information processing apparatus is revoked, the first revoked unit list is maintained, and if the information processing apparatus is not revoked, the first revoked unit list is replaced with the second revoked unit list.

139. The storage apparatus as set forth in claim 138, further comprising a receiving section for receiving ID information from the information processing apparatus.

140. The storage apparatus as set forth in claim 139, wherein the ID information includes a key for the information processing apparatus.

141. The storage apparatus as set forth in claim 140, wherein a digital certification includes the key.

142. The storage apparatus as set forth in claim 138, wherein the judging section judges whether the information processing apparatus is on the first revoked unit list.

143. The storage apparatus as set forth in claim 138, further comprising:

a comparing section for comparing the first revoked unit list with the second revoked unit list; and

a second judging section for judging which revoked unit list is newer.

144. The storage apparatus as set forth in claim 143, further comprising:

a transmitting section for transmitting the first revoked unit list to the information processing apparatus.

145. The storage apparatus as set forth in claim 143, wherein the second judging section compares the respective version information attached with each revoked unit list.

146. The storage apparatus as set forth in claim 138, further comprising:

a second receiving section for receiving a private key from the information processing apparatus;

a second storage section for storing a public key; and

a judging section for judging whether the private key and the public key correspond.

147. The storage apparatus as set forth in claim 146, wherein if the information processing apparatus is revoked or the private key does not relate to the public key, the first revoked unit list is maintained, and if the information processing apparatus is not revoked and the private key relates to the public key, the first revoked unit list is replaced with the second revoked unit list.

148. The storage apparatus as set forth in claim 147, wherein if the first revoked unit list is maintained and the information processing apparatus is not revoked, the first revoked unit list is transmitted to the information processing apparatus.

149. The storage apparatus as set forth in claim 138, wherein the storage section comprises:

a revoked unit list storage section for storing the first revoked unit list; and

a content storage section for storing content.

150. The storage apparatus as set forth in claim 149, wherein the revoked unit list storage section is more secure than the content storage section.

151. The storage apparatus according to claim 138, wherein the first revoked unit list indicates at least one information processing apparatus whose private key has been revealed.

152. The storage apparatus according to claim 138, wherein the storage apparatus and the information processing apparatus share a common private key.

153. An information processing apparatus for retrieving information from a storage apparatus, comprising:

a storage section for storing a second revoked unit list;

a receiving section for receiving a first revoked unit list from the storage apparatus; and

a judging section for judging whether the storage apparatus is revoked or not based on the second revoked unit list;

wherein if the storage apparatus is revoked, the second revoked unit list is maintained, and if the storage apparatus is not revoked, the second revoked unit list is replaced with the first revoked unit list.

154. The information processing apparatus as set forth in claim 153, further comprising a receiving section for receiving ID information from the storage apparatus.

155. The information processing apparatus as set forth in claim 154, wherein the ID information includes a key for the storage apparatus.

156. The information processing apparatus as set forth in claim 155, wherein a digital certification includes the key.

157. The information processing apparatus as set forth in claim 154, wherein the judging section judges whether the storage apparatus is on the second revoked unit list.

158. The information processing apparatus as set forth in claim 154, further comprising:

a comparing section for comparing the first revoked unit list with the second revoked unit list; and

a second judging section for judging which revoked unit list is newer.

159. The information processing apparatus as set forth in claim 158, further comprising a transmitting section for transmitting the second revoked unit list to the storage apparatus.

160. The information processing apparatus as set forth in claim 158, wherein the second judging section compares the respective version information attached with each revoked unit list.

161. The information processing apparatus as set forth in claim 153, further comprising:

a second receiving section for receiving a private key from the storage apparatus;

a second storage section for storing a public key; and

a judging section for judging whether the private key and the public key correspond.

162. The information processing apparatus as set forth in claim 161, wherein if the storage apparatus is revoked or the private key does not relate to the public key, the second revoked unit list is maintained, and if the storage apparatus is not revoked and the private key relates to the public key, the second revoked unit list is replaced with the first revoked unit list.

163. The information processing apparatus as set forth in claim 162 wherein if the second revoked unit list is maintained and the storage apparatus is not revoked, the second revoked unit list is transmitted to the storage apparatus.

164. The information processing apparatus as set forth in claim 153, wherein the storage section comprises:

a revoked unit list storage section for storing the second revoked unit list; and

a content storage section for storing content.

165. The information processing apparatus as set forth in claim 164, wherein the revoked unit list storage section is more secure than the content storage section.

166. The information processing apparatus as set forth in claim 153, further comprising a playing back section for playing back information retrieved from the storage apparatus.

167. The information processing apparatus according to claim 153, wherein the second revoked unit list indicates at least one storage apparatus whose private key has been revealed.

168. The storage apparatus according to claim 153, wherein the storage apparatus and the information processing apparatus share a common private key.

169. A system comprising an information processing apparatus and a storage apparatus, the information processing apparatus comprising:

a storage section for storing a second revoked unit list;

a receiving section for receiving a first revoked unit list from the storage apparatus; and

a judging section for judging whether the storage apparatus is revoked or not based on the second revoked unit list;

wherein if the storage apparatus is revoked, the second revoked unit list is maintained in the information processing apparatus, and if the storage apparatus is not revoked, the second revoked unit list is replaced with the first revoked unit list in the information processing apparatus; and

the storage apparatus comprising;

a storage section for storing the first revoked unit list;

a receiving section for receiving the second revoked unit list from the information processing apparatus; and

a judging section for judging whether the information processing apparatus is revoked or not based on the first revoked unit list;

wherein if the information processing apparatus is revoked, the first revoked unit list is maintained in the storage apparatus, and if the information processing apparatus is not revoked, the first revoked unit list is replaced with the second revoked unit list in the storage apparatus.

170. The system as set forth in claim 169, the information processing apparatus further comprising a receiving section for receiving ID information from the storage apparatus.

171. The system as set forth in claim 170, wherein the ID information is a key for the storage apparatus.

172. The system as set forth in claim 171, wherein a digital certification includes the key.

173. The system as set forth in claim 169, wherein the judging section for judging whether the storage apparatus is revoked judges whether the storage apparatus is on the second revoked unit list.

174. The system as set forth in claim 169, the information processing apparatus further comprising:

a comparing section for comparing the first revoked unit list with the second revoked unit list; and

a second judging section for judging which revoked unit list is newer.

175. The system as set forth in claim 174, the information processing apparatus further comprising a transmitting section for transmitting the second revoked unit list to the storage apparatus.

176. The system as set forth in claim 174, wherein the second judging section compares the respective version information attached with each revoked unit list.

177. The system as set forth in claim 169, the information processing apparatus further comprising:

a second receiving section for receiving a private key from the storage apparatus;

a second storage section for storing a public key; and

a judging section for judging whether the private key and the public key correspond.

178. The system as set forth in claim 177, wherein if the storage apparatus is revoked or the private key does not relate to the public key, the second revoked unit list is maintained, and if the storage apparatus is not revoked and the private key relates to the public key, the second revoked unit list is replaced with the first revoked unit list.

179. The system as set forth in claim 178, wherein if the second revoked unit list is maintained and the storage apparatus is not revoked, the second revoked unit list is transmitted to the storage apparatus.

180. The system as set forth in claim 169, wherein the storage section for storing the second revoked unit list comprises:

a revoked unit list storage section for storing the second revoked unit list; and

a content storage section for storing content.

181. The system as set forth in claim 180, wherein the revoked unit list storage section is more secure than the content storage section.

182. The system set forth in claim 169, the information processing apparatus further comprising a playing back section for playing back information retrieved from the storage apparatus.

183. The system according to claim 169, wherein the second revoked unit list indicates at least one storage apparatus whose private key has been revealed.

184. The system according to claim 169, wherein the storage apparatus and the information processing apparatus share a common private key.

185. A method for retrieving information from a storage apparatus, comprising:

storing a second revoked unit list;

receiving a first revoked unit list from the storage apparatus; and

judging whether the storage apparatus is revoked or not based on the second revoked unit list;

wherein if the storage apparatus is revoked, the second revoked unit list is maintained, and if the storage apparatus is not revoked, the second revoked unit list is replaced with the first revoked unit list.

186. The method as set forth in claim 185, further comprising receiving ID information from the storage apparatus.

187. The method as set forth in claim 186, wherein the ID information includes a key for the storage apparatus.

188. The method as set forth in claim 187, wherein a digital certification includes the key.

189. The method as set forth in claim 185, wherein judging whether the storage apparatus is revoked includes judging whether the storage apparatus is on the second revoked unit list.

190. The method as set forth in claim 185, further comprising:

comparing the first revoked unit list with the second revoked unit list; and

judging which revoked unit list is newer.

191. The method as set forth in claim 190, further comprising transmitting the second revoked unit list to the storage apparatus.

192. The method as set forth in claim 190, further comprising comparing the respective version information attached with each revoked unit list.

193. The method as set forth in claim 185, further comprising:

receiving a private key from the storage apparatus;

storing a public key; and

judging whether the private key and the public key correspond.

194. The method as set forth in claim 193, wherein if the storage apparatus is revoked or the private key does not relate to the public key, the second revoked unit list is maintained, and if the storage apparatus is not revoked and the private key relates to the public key, the second revoked unit list is replaced with the first revoked unit list.

195. The method as set forth in claim 194, wherein if the second revoked unit list is maintained and the storage apparatus is not revoked, the second revoked unit list is transmitted to the storage apparatus.

196. The method as set forth in claim 185, further comprising storing content.

197. The method as set forth in claim 196, wherein the revoked unit list is stored more securely than the content.

198. The method set forth in claim 185, further comprising playing back information retrieved from the storage apparatus.

199. The method according to claim 185, wherein second revoked unit list indicates at least one storage apparatus whose private key has been revealed.

200. The method according to claim 185, wherein the storage apparatus and the information processing apparatus share a common private key.