Information processing apparatus and method, information management apparatus and method, and information providing medium

• US 6,574,611 B1
• Filed: 04/06/2000
• Issued: 06/03/2003
• Est. Priority Date: 04/09/1999
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Ishibashi, Yoshihito, Matsuyama, Shinako
• Primary Examiner(s): Trammell, James P.
• Assistant Examiner(s): Backer, Firmin
• Application Number:
  US09/544,070
• Time in Patent Office: 1,153 Days
• Field of Search: 705/57, 713/190, 713/187, 380/30, 380/202, 380/203, 369/32
• US Class Current: 705/57
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00094 involving measures which result in a restriction to authorised record carriers
• CPC Class Codes: G11B 20/00115 wherein the record carrier stores a unique medium identifier
• CPC Class Codes: G11B 20/00137 involving measures which result in a restriction to contents recorded on or reproduced from a record carrier to authorised users
• CPC Class Codes: G11B 20/00144 involving a user identifier, e.g. a unique customer ID
• CPC Class Codes: G11B 20/00166 involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software
• CPC Class Codes: G11B 20/00181 using a content identifier, e.g. an international standard recording code [ISRC] or a digital object identifier [DOI]
• CPC Class Codes: G11B 20/00188 involving measures which result in a restriction to authorised devices recording or reproducing contents to/from a record carrier
• CPC Class Codes: G11B 20/00195 using a device identifier associated with the player or recorder, e.g. serial numbers of playback apparatuses or MAC addresses
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00753 wherein the usage restriction limits the number of copies that can be made, e.g. CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 20/0084 wherein the usage restriction can be expressed as a specific time or date
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

An information processing apparatus managed by a management apparatus to decrypt encrypted information and use resultant decrypted information. An efficient scheme is implemented for registering users of the system.

Claims

1. An information processing apparatus managed by a management apparatus to decrypt encrypted information to use resultant decrypted information, comprising:

first sending means for sending a usage start signal indicative of start of use of said encrypted information to said management apparatus after predetermined registration application information including an identification of said information processing apparatus is supplied to said management apparatus;

second sending means for sending said identification to said management apparatus in correspondence with said usage start signal sent by said first sending means;

first storage means for receiving and storing said usage start signal supplied from said management apparatus through said first sending means, a predetermined key usable for decrypting said encrypted information only for a first period of time, said predetermined key corresponding to said identification supplied from said second sending means, and first upper limit information indicative of a predetermined upper limit amount of first charges;

second storage means for receiving and storing a predetermined key usable for decrypting said encrypted information only for a second period of time, said predetermined key corresponding to said registration application information supplied from said management apparatus, second upper limit information indicative of a predetermined upper limit amount of second charges, and a predetermined settlement identification;

third storage means for receiving and storing a predetermined registration condition supplied from said management apparatus; and

control means for controlling an operation of said information processing apparatus on the basis of said registration condition stored in said third storage means.

2. The information processing apparatus according to claim 1, further comprising:

third sending means for sending user general information to said management apparatus in correspondence with said usage start signal supplied from said first sending means;

wherein said first storage means further receives and stores a user identification supplied from said management apparatus.

3. The information processing apparatus according to claim 2, further comprising:

fourth sending means for sending a user identification to said management apparatus in correspondence with said usage start signal supplied from said first sending means.

4. An information processing method for an information processing apparatus managed by a management apparatus to decrypt encrypted information to use resultant decrypted information, said method comprising:

a first sending step of sending a usage start signal indicative of start of use of said encrypted information to said management apparatus after predetermined registration application information including an identification of said information processing apparatus is supplied to said management apparatus;

a second sending step of sending said identification to said management apparatus in correspondence with said usage start signal sent in the first sending step;

a first storage step of receiving and storing said usage start signal supplied from said management apparatus in the first sending step, a predetermined key usable for decrypting said encrypted information only for a first period of time, said predetermined key corresponding to said identification supplied in the second sending step, and first upper limit information indicative of a predetermined upper limit amount of first charges;

a second storage step of receiving and storing a predetermined key usable for decrypting said encrypted information only for a second period of time, said predetermined key corresponding to said registration application information supplied from said management apparatus, second upper limit information indicative of a predetermined upper limit amount of second charges, and a predetermined settlement identification;

a third storage step of receiving and storing a predetermined registration condition supplied from said management apparatus; and

a control step of controlling an operation of said information processing apparatus on the basis of said registration condition stored in the third storage step.

5. An information providing medium for providing a computer program for making an information processing apparatus managed by a management apparatus to decrypt encrypted information to use resultant decrypted information execute processing, said processing comprising:

a first sending step of sending a usage start signal indicative of start of use of said encrypted information to said management apparatus after predetermined registration application information including an identification of said information processing apparatus is supplied to said management apparatus;

a second sending step of sending said identification to said management apparatus in correspondence with said usage start signal sent in the first sending step;

a first storage step of receiving and storing said usage start signal supplied from said management apparatus in the first sending step, a predetermined key usable for decrypting said encrypted information only for a first period of time, said predetermined key corresponding to said identification supplied in the second sending step, and first upper limit information indicative of a predetermined upper limit amount of first charges;

a second storage step of receiving and storing a predetermined key usable for decrypting said encrypted information only for a second period of time, said predetermined key corresponding to said registration application information supplied from said management apparatus, second upper limit information indicative of a predetermined upper limit amount of second charges, and a predetermined settlement identification;

a third storage step of receiving and storing a predetermined registration condition supplied from said management apparatus; and

a control step of controlling an operation of said information processing apparatus on the basis of said registration condition stored in the third storage step.

6. A management apparatus for managing a predetermined apparatus that decrypts encrypted information to use resultant decrypted information, said management apparatus comprising:

first execution means for executing first registration confirmation processing on the basis of predetermined user general information supplied in correspondence with an identification of said predetermined apparatus;

first receiving means for receiving a predetermined usage start signal supplied from said predetermined apparatus;

second receiving means for receiving said identification of said predetermined apparatus supplied therefrom in correspondence with said usage start signal received by said first receiving means;

first sending means for sending a predetermined key usable only for a first period of time for decrypting said encrypted information, and first upper limit information indicative of an upper limit amount of first charges to said predetermined apparatus after said first receiving means receives said usage start signal and said second receiving means receives said identification of said predetermined apparatus;

first assignment means for assigning a predetermined settlement identification according to a result of said first registration confirmation processing executed by said first execution means;

registration means for registering, in correspondence to said result of said first registration confirmation processing executed by said first execution means, said settlement identification assigned by said first assignment means in correspondence with said identification of said predetermined apparatus received by said second receiving means;

second sending means for sending said registered settlement identification registered by said registration means, a predetermined key usable only for a second period of time for decrypting said encrypted information, and second upper limit information indicative of a predetermined upper limit amount of second charges to said predetermined apparatus; and

third sending means for generating and sending a registration condition of said predetermined apparatus on the basis of a result of said first registration confirmation processing executed by said first execution means.

7. The management apparatus according to claim 6, further comprising:

second execution means for executing second registration confirmation processing when said settlement identification is supplied;

wherein said second sending means sends said predetermined key usable only for said second period of time for decrypting said encrypted information and said second upper limit information to said predetermined apparatus in correspondence with a result of said second registration confirmation processing executed by said second execution means.

8. The management apparatus according to claim 6, further comprising:

in correspondence with said usage start signal, third receiving means for receiving user generation information supplied from said predetermined apparatus; and

second assignment means for assigning a user identification;

wherein said registration means registers said user identification assigned by said second assignment means and said user general information in correspondence with said identification of said predetermined apparatus received by said second receiving means and said first sending means sends said user identification registered by said registration means to said predetermined apparatus.

9. The management apparatus according to claim 8, further comprising:

fourth receiving means for receiving said user identification supplied from said predetermined apparatus in correspondence with said usage start signal; and

confirmation means for confirming whether said user identification received by said fourth receiving means has been registered by said registration means;

wherein said registration means, in corresponding to a result of confirmation by said confirmation means, registers said user identification received by said fourth receiving means and said user general information registered in correspondence with said user identification, in correspondence with said identification of said predetermined apparatus received by said second receiving means.

10. A managing method for a management apparatus for managing a predetermined apparatus that decrypts encrypted information to use resultant decrypted information, said managing method comprising:

a first execution step of executing first registration confirmation processing on the basis of predetermined user general information supplied in correspondence with an identification of said predetermined apparatus;

a first receiving step of receiving a predetermined usage start signal supplied from said predetermined apparatus;

a second receiving step of receiving said identification of said predetermined apparatus supplied therefrom in correspondence with said usage start signal received in the first receiving step;

a first sending step of sending a predetermined key usable only for a first period of time for decrypting said encrypted information, and first upper limit information indicative of an upper limit amount of first charges to said predetermined apparatus after in the first receiving step said usage start signal is received, and in the second receiving step said identification of said predetermined apparatus is received;

a first assignment step of assigning a predetermined settlement identification according to a result of said first registration confirmation processing executed in the first execution step;

a registration step of registering, in correspondence to said result of said first registration confirmation processing executed in the first execution step, said settlement identification assigned in the first assignment step in correspondence with said identification of said predetermined apparatus received in the second receiving step;

a second sending step of sending said registered settlement identification registered in said registration step, a predetermined key usable only for a second period of time for decrypting said encrypted information, and second upper limit information indicative of a predetermined upper limit amount of second charges to said predetermined apparatus; and

a third sending step of generating and sending a registration condition of said predetermined apparatus on the basis of a result of said first registration confirmation processing executed in the first execution step.

11. An information providing medium for providing a computer program for making a management apparatus for managing a predetermined apparatus for decrypting encrypted information and using resultant decrypted information execute processing, said processing comprising:

a first execution step of executing first registration confirmation processing on the basis of predetermined user general information supplied in correspondence with an identification of said predetermined apparatus;

a first receiving step of receiving a predetermined usage start signal supplied from said predetermined apparatus;

a second receiving step of receiving said identification of said predetermined apparatus supplied therefrom in correspondence with said usage start signal received in the first receiving step;

a first sending step of sending a predetermined key usable only for a first period of time for decrypting said encrypted information, and first upper limit information indicative of an upper limit amount of first charges to said predetermined apparatus after in the first receiving step said usage start signal is received, and in the second receiving step said identification of said predetermined apparatus is received;

a first assignment step of assigning a predetermined settlement identification according to a result of said first registration confirmation processing executed in the first execution step;

a registration step of registering, in correspondence to said result of said first registration confirmation processing executed in the first execution step, said settlement identification assigned in the first assignment step in correspondence with said identification of said predetermined apparatus received in the second receiving step;

a second sending step of sending said registered settlement identification registered in said registration step, a predetermined key usable only for a second period of time for decrypting said encrypted information, and second upper limit information indicative of a predetermined upper limit amount of second charges to said predetermined apparatus; and

a third sending step of generating and sending a registration condition of said predetermined apparatus on the basis of a result of said first registration confirmation processing executed in the first execution step.