Device and method for preventing fraudulent copies of data containing encrypted copy-management information and recording medium

• US 6,343,281 B1
• Filed: 07/10/1998
• Issued: 01/29/2002
• Est. Priority Date: 07/11/1997
• Status: Expired due to Fees

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Kato, Takehisa
• Primary Examiner(s): Stamber, Eric W.
• Assistant Examiner(s): Retta, Yehdega
• Application Number:
  US09/114,301
• Time in Patent Office: 1,299 Days
• Field of Search: 380/4, 380/21, 380/25, 380/30, 380/201, 380/203, 380/277, 380/281, 380/284, 705/1, 705/51, 705/57, 705/71, 713/180, 713/165, 713/193
• US Class Current: 705/57
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00536 wherein encrypted content data is subjected to a further, iterated encryption, e.g. interwoven encryption
• CPC Class Codes: G11B 20/00768 wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 7/013 for discrete information, i.e. where each information unit is stored in a distinct discrete location , e.g. digital information formats within a data block or sector

Abstract

A device to be used with digital data copying apparatus for preventing fraudulent copies of a digital data is disclosed. The digital data includes an encrypted data main body and encrypted copy management information for controlling permission with regard to copying the data main body. A determining section determines if permission be granted for copying the digital data or not depending on if the copy management information satisfies predetermined requirements or not. A prohibition processing section prohibits any operation of effectively copying the digital data when the determining section determines that permission should not be granted for copying the digital data.

Claims

1. A device to be used with digital data copying apparatus for preventing fraudulent copies of a digital data;

said digital data containing an encrypted data main body, encrypted copy management information for controlling permission with regard to copying the data main body and key information for decrypting said data main body;

said device containing;

a determining section for determining if permission be granted for copying digital data or not based on if the copy management information satisfies predetermined requirements or not; and

a key altering section for altering said key information contained in said digital data when the determining section determines that permission should not be granted for copying said digital data; and

wherein said key information includes a plurality of different keys that are used in common to a plurality of recording mediums, and when the determining section determines a copy-prohibited state of the digital data, the key altering section alters the key information corresponding to the copy-prohibited digital data.

2. A device for preventing fraudulent copies of a digital data according to claim 1, wherein said encryption key for encrypting the data main body and said encryption key for encrypting the copy management information are identical relative to each other.

3. A device for preventing fraudulent copies of a digital data according to claim 1, wherein said copy management information includes generation management information indicating the number of generations existing between the original data and said copied digital data inclusive of the latter and numerical management information indicating the number of copies already made;

said determining section determines to prohibit no more copy from being made when said generation management information indicates a predetermined generation and said numerical management information indicates a predetermined number of copies.

4. A device for preventing fraudulent copies of a digital data according to claim 1, wherein said copy management information includes generation management information indicating the number of generations existing between the original data and said copied digital data inclusive of the latter and said determining section determines to prohibit no more copy from being made when said generation management information indicates a predetermined generation, said generation management information comprising data of three bits or more.

5. A method to be used with digital copying apparatus for preventing fraudulent copies of digital data;

said digital data containing an encrypted data main body, encrypted copy management information for controlling permission with regard to copying the data main body and key information for decrypting said data main body;

said method comprises steps of;

determining if permission for copying said digital data or not based on if the copy management information satisfies predetermined requirements or not; and

altering said key information contained in said digital data when the determining section determines that permission should not be granted for copying said digital data; and

wherein said key information includes a plurality of different keys that are used in common to a plurality of recording mediums, and when the determining section determines a copy-prohibited state of the digital data, the key altering section alters the key information corresponding to the copy-prohibited digital data.

6. A method to be used with digital data copying apparatus for preventing fraudulent copies of a digital data comprising the steps of:

adding to said digital data copy management information containing generation management information composed of a first number of bits with predetermined bit orders changed corresponding to operations of making a copy of said digital data to indicate the generation of said digital data as descendent of the original data, and numerical management information to indicate the number of copies made from the digital data;

prohibiting any operation of copying said digital data when said generation information indicates a predetermined generation and said numerical management information indicates a predetermined number of copies, and

wherein the number of generations for which a copying operation is permitted is controlled on the basis of the generation management information, and a copying information which represents the number of copying operations executable for each generation.

7. A device for preventing fraudulent copies of a digital data, said digital data including an encrypted data main body and encrypted copy management information for controlling permission with regard to copying the data main body, said device comprising:

a determining section for determining if permission be granted for copying said digital data or not based on if the copy management information satisfies predetermined requirements or not; and

a prohibition processing section for prohibiting any operation of effectively copying said digital data when the determining section determines that permission should not be granted for copying said digital data; and

wherein said copy management information includes generation management information composed of a first number of bits with predetermined bit orders changed corresponding to operations of making a copy of said digital data to indicate the number of generations existing between the original data and said copied digital data inclusive of the latter and said copied digital data inclusive of the latter and numerical management information indicating the number of copies already made; and

said determining section determines to prohibit no more copies from being made when said generation management information indicates a predetermined generation and said numerical management information indicates a predetermined number of copies; and

wherein the number of generations for which a copying operation is permitted is controlled on the basis of the generation management information, and a copying operation for digital data is managed on the basis of the numerical management information which represents the number of copying operations executable for each generation.

8. A device for preventing fraudulent copies of a digital data according to claim 7, wherein said encryption key for encrypting the data main body and said encryption key for encrypting the copy management information are identical relative to each other.

9. A device for preventing fraudulent copies of a digital data according to claim 7, wherein said copy management information includes generation management information indicating the number of generations existing between the original data and said copied digital data inclusive of the latter and said determining section determines to prohibit no more copy from being made when said generation management information indicates a predetermined generation, said generation management information comprising data of three bits or more.

10. A device for preventing fraudulent copies of a digital data according to claim 7, further comprising an encrypting means for encrypting said digital data or a decrypting means for decrypting said digital data, using a temporary key to be shared by said transmitter and said receiver as encryption key or decryption key, whichever appropriate, to transmit said digital data from the transmitter to the receiver.

11. A recording medium for storing data having a computer-readable data structure, comprising:

a determining section for determining if permission be granted for copying said digital data or not based on if the copy management information satisfies predetermined requirements or not; and

a prohibition processing section for prohibiting any operation of effectively copying said digital data when the determining section determines that permission should not be granted for copying said digital data; and

wherein said copy management information includes generation management information composed of a first number of bits with predetermined bit orders changed corresponding to operations of making a copy of said digital data to indicate the number of generations existing between the original data and said copied digital data inclusive of the latter and said copied digital data inclusive of the latter and numerical management information indicating the number of copies already made; and

said determining section determines to prohibit no more copies from being made when said generation management information indicates a predetermined generation and said numerical management information indicates a predetermined number of copies; and

wherein the number of generations for which a copying operation is permitted is controlled on the basis of the generation management information, and a copying operation for digital data is managed on the basis of the numerical management information which represents the number of copying operations executable for each generation.