INFORMATION STORAGE DEVICE, INFORMATION PROCESSING SYSTEM, INFORMATION PROCESSING METHOD, AND PROGRAM

• US 20140351585A1
• Filed: 11/29/2012
• Published: 11/27/2014
• Est. Priority Date: 01/12/2012
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Hayashi, Takamichi, Kuno, Hiroshi, Yoshimura, Koji
• Granted Patent: US 9,767,298 B2
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/903 using variable electrical capacitive recording H04N5/91 takes precedence
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

There is provided a device and a method for preventing using of illegitimate content or manufacturing of the illegitimate media that uses illegitimate media. In a system that has an information storage device, a license management apparatus that generates a media key set (MKS) that is stored in the information storage device, and a content provision apparatus, at the time of manufacturing of the information storage device, the license management apparatus compares an MKS version that is set in the MKS that is stored in the information storage device, and an allowance minimum MKS version that is recorded in a controller of the information storage device, and thus records key information stored in the MKS, in a storage unit under the condition that it is confirmed that the MKS version is equal to or greater in value than the allowance minimum MKS version.

Claims

1. An information storage device comprising:

a storage unit in which key information is stored; and

a controller that executes processing which records the key information in the storage unit,

wherein the controller compares a key version that is set to correspond to the key information and an allowance minimum key version which is recorded, in advance, within the controller, and records the key information in the storage unit under the condition that it is confirmed that the key version is equal to or greater in value than the allowance minimum key version.

2. The information storage device according to claim 1,

wherein the key information is key information that is generated by a license management apparatus,

wherein the key version is version information that is set depending on the date and time of generation of the key information by the license management apparatus, and

wherein the allowance minimum key version is version information that is stored in the controller depending on the date and time of manufacture of the controller by an apparatus that manufactures the controller.

3. The information storage device according to claim 1,

wherein the key information includes a media public key and a media private key that are inherent to the information storage device.

4. The information storage device according to claim 1,

wherein the key information is a media key set (MKS) that includes a media public key and a media private key that are inherent to the information storage device, which is generated by a license management apparatus and an MKS version that is the key version that is set by the license management apparatus,

wherein the allowance minimum key version is an allowance minimum MKS version that is set by a controller manufacturing apparatus, and

wherein the controller executes processing that compares the MKS version that is recorded in the media key set (MKS) by inputting the media key set (MKS), and the allowance minimum MKS version, and records the media public key and the media private key in the storage unit under the condition that it is confirmed that the MKS version is equal to or greater in value than the allowance minimum MKS version.

5. The information storage device according to claim 4,

wherein the media key set (MKS) is data that is generated by the license management apparatus and that the license management apparatus sets a digital signature to be in, and

wherein the controller performs signature verification processing on the digital signature, executes verification of the presence of absence of falsification of the media key set (MKS), confirms with establishment of signature verification that there is no falsification of the media key set (MKS), and then executes the processing that compares the MKS version and the allowance minimum MKS version.

6. The information storage device according to claim 1,

wherein after processing that records the key information in the storage unit, the controller executes processing that generates and thus outputs a key binding log that includes an identifier of the key information and an identifier of the controller.

7. The information storage device according to claim 6,

wherein the controller generates the key binding log in which a falsification verification value is assigned to data including the identifier of the key information and the identifier of the controller.

8. An information processing system comprising:

an information storage device (media) that has a storage unit and a controller;

a license management apparatus that generates a media key set (MKS) which is an inherent key set that is stored in the information storage device;

a controller manufacturing apparatus that manufactures the controller that is stored in the information storage device; and

a media manufacturing apparatus that manufactures the information storage device,

wherein the license management apparatus sets an MKS version that depends on the date and time of the generation of the media key set (MKS), to be in the media key set (MKS), and provides the media key set (MKS) to the media manufacturing apparatus,

wherein the controller manufacturing apparatus stores an allowance minimum MKS version that depends on the date and time of the manufacture of the controller, in the controller and provides the controller to the media manufacturing apparatus; and

wherein at the time of manufacturing of the information device (media), the media manufacturing apparatus inserts the controller into the media, and executes processing that inputs the media key set (MKS) into the controller inside of the media, and under the condition that it is confirmed that the controller inside of the media executes processing that compares the MKS version that is recorded in the media key set (MKS) and the allowance minimum MKS version and the condition that it is confirmed that the MKS version is equal to or greater in value than the allowance minimum MKS version, the media manufacturing apparatus executes processing that records in the storage unit a media public key and a media private key that are included in the media key set (MKS).

9. The information processing system according to claim 8,

wherein after processing that records the media public key and the media private key in the storage unit, the controller generates and thus outputs a key binding log that includes an identifier of the MKS and an identifier of the controller, and

wherein the license management apparatus inputs the key binding log and thus retains the key binding log as management data.

10. An information processing method that is executed in an information storage device,

wherein the information storage device includes,

a storage unit in which key information is stored, and

a controller that executes processing which records the key information in the storage unit, and

wherein the controller compares a key version that is set to correspond to the key information and an allowance minimum key version which is recorded, in advance, within the controller, and records the key information in the storage unit under the condition that it is confirmed that the key version is equal to or greater in value than the allowance minimum key version.

11. A program for executing information processing in an information storage device,

wherein the information storage device includes a storage unit in which key information is stored, and a controller that executes processing which records the key information in the storage unit, and

wherein the program causes the controller to execute:

processing that compares a key version that is set to correspond to the key information and an allowance minimum key version which is recorded, in advance; and

processing that records the key information in the storage unit under the condition that it is confirmed that the key version is equal to or greater in value than the allowance minimum key version.