CONTENT PROTECTION APPARATUS, AND CONTENT UTILIZATION APPARATUS

• US 20100046749A1
• Filed: 08/14/2009
• Published: 02/25/2010
• Est. Priority Date: 08/22/2008
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: MIYAZAKI, Kunihiko, HATANO, Yasuo
• Application Number:
  US12/541,832
• Publication Number:
  US 20100046749A1
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

Content is divided into a plurality of partial contents. Next, each of the partial contents is encrypted using a browsing-control-use secret key. Also, an editing-control-use secret key and a partial-content validation key are generated, then generating the feature value for each of the partial content. Moreover, key-encrypted data is generated by encrypting the browsing-control-use secret key and the editing-control-use secret key corresponding to each of the browsable and editable partial contents, using the public key of a user. Finally, encrypted content is generated from the key-encrypted data, encrypted partial contents, and the partial-content validation key.

Claims

1. A content protection apparatus, performing:

a processing of dividing content into a plurality of partial contents;

a processing of generating an editing-control-use secret key and a partial-content validation key for each of the partial contents;

a processing of generating a feature value for each of the partial contents;

a processing of assigning the one or more editable partial contents to each authorization using access-control information and generating first key-encrypted data by encrypting data obtained by coupling the editing-control-use secret keys to each other, using a public keyin the asymmetric-key cryptography assigned to each authorization, the editing-control-use secret keys being generated for the one or more editable partial contents assigned to each authorization;

a processing of generating an integrity-guarantee-use digital signature for the content; and

a processing of generating first encrypted content which includes the content, the access-control information, the partial-content validation keys, the feature values, and the first key-encrypted data.

2. The content protection apparatus according to claim 1, further performing:

a processing of generating a secret key in the symmetric-key cryptography as a browsing-control-use secret key for each of the partial contents;

a processing of generating encrypted partial contents by encrypting the corresponding partial contents using the browsing-control-use secret keys generated;

a processing of assigning the one or more browsable partial contents to each authorization using access-control information, and further coupling the browsing-control-use secret keys to the data obtained by coupling the editing-control-use secret keys to each other, and generating second key-encrypted data by encrypting data obtained by the further coupling, using the public key, the browsing-control-use secret keys being generated for the one or more browsable partial contents assigned to each authorization; and

a processing of generating second encrypted content which includes the encrypted partial contents, the partial-content validation keys, the feature values, and the second key-encrypted data.

3. The content protection apparatus according to claim 1, wherein

the editing-control-use secret key and the partial-content validation key are a pair of a signing key and a validation key in the digital signature technology;

the feature value for each of the partial contents is a digital signature value which is generated from each of the partial contents using the signing key;

the integrity-guarantee-use digital signature is a digital signature value which is generated from the data obtained by coupling the access-control information, the partial-content validation keys, and the first key-encrypted data to each other, using the signing key in the digital signature technology.

4. The content protection apparatus according to claim 3, wherein

the feature value generated for each of the partial-content is an element of a finite group;

and

the processing of generating the feature value for each of the partial contents includes a processing of aggregating the feature values into a single value by multiplying the feature values generated for each of the partial-content by each other.

5. The content protection apparatus according to claim 1, wherein

the editing-control-use secret key and the partial-content validation key are a pair of a private key and a public key generated by the set-up processing of a Chameleon hash function;

the feature value for each of the partial contents is a hash value based on the Chameleon hash function;

the integrity-guarantee-use digital signature is a digital signature value which is generated for the data obtained by coupling the access-control information, the partial-content validation keys, the first key-encrypted data, and the feature values to each other, using a signing key out of a pair of the signing key and a validation key in the digital signature technology; and

the first encrypted content includes the content, the access-control information, the partial-content validation keys, the feature values, the first key-encrypted data, and a random number which is assigned to each of the partial contents.

6. A content utilization apparatus for browsing the first encrypted content according to claim 1, performing:

a processing of validating the first encrypted content using the integrity-guarantee-use digital signature; and

a processing of validating each of the partial contents using the partial-content validation key.

7. A content utilization apparatus for browsing the second encrypted content according to claim 2, performing:

a processing of validating the second encrypted content using the integrity-guarantee-use digital signature;

a processing of validating each of the partial contents using the partial-content validation key;

a processing of decrypting the encrypted second key-encrypted data using one or more private keys which are assigned to each authorization; and

a processing of decrypting the encrypted partial contents using the browsing-control-use secret keys obtained from the decryption result, and generating decrypted content from the decrypted partial contents.

8. A content utilization apparatus for browsing the first encrypted content according to claim 6, wherein

the processing of validating the first encrypted content using the integrity-guarantee-use digital signature includes a processing of validating the data obtained by coupling the access-control information, the partial-content validation keys, and the first key-encrypted data, using a validation key and the integrity-guarantee-use digital signature in the digital signature technology included in the first encrypted content;

and

the processing of validating each of the partial contents using the partial-content validation key includes a processing of validating each of the partial contents using the partial-content validation key and the feature value, taking advantage of the validation processing in the digital signature technology.

9. A content utilization apparatus for browsing the first encrypted content according to claim 6, wherein

the processing of validating the first encrypted content using the integrity-guarantee-use digital signature includes a processing of validating the data obtained by coupling the access-control information, the partial-content validation keys, the first key-encrypted data, and the feature values, using a validation key and the integrity-guarantee-use digital signature in the digital signature technology included in the first encrypted content;

and

the processing of validating each of the partial contents using the partial-content validation key includes a processing of generating a hash value for each of the partial contents based on the Chameleon hash function using the partial-content validation key, and validating as to whether or not the hash value coincides with the feature value.

10. A content utilization apparatus for editing the first encrypted content according to claim 6, wherein the apparatus performs:

a processing of generating after-editing feature values using after-editing partial contents and the editing-control-use secret keys; and

a processing of updating the first encrypted content by exchanging the original encrypted partial contents and feature values specified by editing-location specifying information with the after-editing partial contents and the after-editing feature values respectively.

11. A content utilization apparatus for editing the first encrypted content according to claim 6, wherein the apparatus performs:

a processing of generating after-editing feature values from after-editing partial contents using the editing-control-use secret keys; and

a processing of updating the first encrypted content by exchanging the original encrypted partial contents specified by editing-location specifying information and an aggregate feature values with the after-editing partial contents and the after-editing aggregate feature value respectively, the after-editing aggregate feature value being generated by multiplying the aggregate feature value by inverse elements of the feature values for the original partial contents and further by multiplying the multiplied aggregate feature value by the feature values of the after-editing partial contents.

12. A content utilization apparatus for editing the first encrypted content according to claim 6, wherein the apparatus performs:

a processing of generating after-editing random numbers from the partial contents specified by editing-position specifying information, random numbers assigned to the partial contents, after-editing partial contents, and the editing-control-use secret keys, taking advantage of an update processing of the Chameleon hash function; and

a processing of updating the first encrypted content by exchanging the original encrypted partial contents and random numbers specified by the editing-position specifying information with the after-editing partial contents and the after-editing random numbers respectively.