Recorder

• US 7,158,641 B2
• Filed: 11/29/2000
• Issued: 01/02/2007
• Est. Priority Date: 11/30/1999
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited, Sanyo Electric Company Limited (Panasonic Holdings Corporation)
• Original Assignee: Fujitsu Limited, Sanyo Electric Company Limited (Panasonic Holdings Corporation)
• Inventors: Hasebe, Takayuki, Anazawa, Takeaki, Hioki, Toshiaki, Hatakeyama, Takahisa, Hori, Yoshihiro, Tonegawa, Tadaaki, Kanamori, Miwa, Kotani, Seigou
• Primary Examiner(s): SONG, HOSUK
• Application Number:
  US10/130,294
• Publication Number:
  US 20020184513A1
• Time in Patent Office: 2,225 Days
• Field of Search: 380/277, 380281-282, 380284-285, 380/44, 380/46, 713/189, 713/168, 713/171, 705/59
• US Class Current: 380/277
• CPC Class Codes: G06Q 20/325 using wireless networks
• CPC Class Codes: G06Q 20/341 Active cards, i.e. cards including their own processing means, e.g. including an IC or chip
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G06Q 20/40975 using encryption therefor
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: G07F 17/16 for devices exhibiting advertisements, announcements, pictures or the like
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Abstract

A memory card (110) decodes data delivered to a data bus (BS3) and extracts a session key (Ks1) sent from a server from the data. Based on the session key (Ks1), an encrypting section (1406) encrypts a public encryption key (KPm (1)) of the memory card (110) and delivers it to a server through the data bus (BS3). The memory card (110) receives data including a license key (Kc) and a license (ID) encrypted with the public encryption key (KPm (1)) different with memory card to memory card, decrypts the data, encrypted it again with uniquely given secret key (K(1)), and stores it in a memory (1415).

Claims

1. A recording device (110) for receiving and recording data encrypted with a first public encryption key (KPm(i)) predetermined with respect to the recording device, and used for decrypting encrypted content data, comprising:

a first key holding portion (1421) for holding a first private decryption key (Km(i)) being asymmetric to said first public encryption key and used for decrypting data encrypted with said first public encryption key;

a first decryption processing portion (1422) for receiving a license key encrypted with said first public encryption key, and decrypting the received data with said first private decryption key;

a second key holding portion (1450, 1451) for holding at least one secret unique key (K(i)) being unique to said recording device and being symmetric in a symmetric key cryptosystem;

a first encryption processing portion (1452) for receiving and encrypting said license key again with said secret unique key;

a recording portion for receiving and storing the output of said first encryption processing portion; and

a second decryption processing portion (1454) for decrypting said license key stored in said recording portion with said secret unique key.

2. The recording device according to claim 1, further comprising:

a third key holding portion (1402) for holding a second private decryption key (Kmc(n)) used for decrypting data encrypted with a second public encryption key (KPmc(n)) predetermined with respect to said recording device;

a third decryption processing portion (1404) for receiving a first symmetric key (Ks1) updated in response to every input/output of said license key and encrypted with said second public encryption key, and performing decryption with said second private decryption key;

a fourth key holding portion (1416) for holding said first public encryption key;

a session key generating portion (1418) for generating a second symmetric key (Ks2) in response to every input/output of said license key;

a second encryption processing portion (1406) for receiving and encrypting said first public encryption key and the output of said session key generating portion with said first symmetric key; and

a fourth decryption processing portion (1412) for decrypting with said second symmetric key the data encrypted with said first public encryption key and further encrypted with said second symmetric key, and applying the decrypted data to said first decryption processing portion.

3. The recording device according to claim 1, wherein

said first private decryption key is a private decryption key being unique to said recording device and being predetermined for said recording device.

4. The recording device according to claim 1, wherein

said second key holding portion holds a predetermined plural number of said secret unique keys capable of corresponding to said respective license key stored in said recording portion.

5. The recording device according to claim 1, further comprising:

a random number generating portion (1460) for producing said secret unique key from a random number, wherein

said second key holding portion (1451) holds a plurality of said secret unique keys produced corresponding to respective inputs of said license key in forms corresponding to said encrypted data.

6. The recording device according to claim 2, wherein

said session key generating portion further produces said secret unique key corresponding to every input of the data, and

said second key holding portion holds said plurality of produced secret unique keys in forms corresponding to said license key.

7. The recording device according to claim 2, further comprising:

an authentication data holding portion (1400) holding authentication data prepared by encrypting said predetermined second public encryption key corresponding to said recording device into a form allowing authentication with an authentication key (Kpma), and being capable of externally outputting said authentication data.

8. The recording device according to claim 2, further comprising:

an authentication data holding portion holding authentication data prepared by encrypting said predetermined second public encryption key corresponding to said recording device and data for authenticating said recording device into a form allowing authentication with an authentication key, and being capable of externally outputting said authentication data.

9. The recording device according to claim 2, wherein

said recording device accepts authentication data prepared by encrypting an externally applied third public encryption key into a form decodable with an authentication key in response to every output of said license key;

and

said recording device further comprises;

an authentication key holding portion for holding said authentication key,

an authentication processing portion (1420) for decrypting with said authentication key said authentication data prepared by encrypting said externally applied third public encryption key into a form decodable with said authentication key, and determining based on belonging data produced by the decryption processing whether said third public encryption key is to be accepted or not, and

a third encryption processing portion (1410) for encrypting the second symmetric key generated by said session key generating portion with said third public encryption key, and externally outputting the encrypted second symmetric key when said authentication processing portion accepts said third public encryption key.

10. The recording device according to claim 9, further comprising:

a third encryption processing portion (1424) for encrypting an externally applied fourth public encryption key (KPm(j)) encrypted together with said first symmetric key with said second symmetric key, wherein

said fourth decryption processing portion decrypts said first symmetric key and said fourth public encryption key encrypted with said second symmetric key,

said second decryption processing portion decrypts said license key stored in said recording portion;

said fourth encryption processing portion encrypts the output of said second decryption processing portion with said fourth public encryption key, and

said second encryption processing portion further encrypts the output of said fourth encryption processing portion with said first symmetric key, and outputting the encrypted output.

11. The recording device according to claim 1, wherein

said recording device receives and further records encrypted content data corresponding to said license key,

said recording portion includes:

a first recording portion for storing said license key encrypted by said first encryption processing portion, and

a second recording portion for storing said encrypted content data applied to said second recording portion as it is.

12. The recording device according to claim 11, wherein

said recording portion has a control information recording portion (1440) for receiving control information applied together with said license key after being encrypted with said first public encryption key, and relating to output of said license key, and for recording said control information decrypted by said first decryption processing portion;

and

said recording device further comprises a control portion for controlling output of said license key in response to an external request for output of said license key and in accordance with said control information recorded in said control information recording portion.

13. The recording device according to claim 1, wherein said recording portion is a memory card.

14. The recording device according to claim 9, wherein

said fourth decryption processing portion decrypts said first symmetric key decrypted with said second symmetric key,

said second decryption processing portion decrypts data stored in said recording portion, and

said second encryption processing portion encrypts the output of said second decryption processing portion with said first symmetric key, and outputting the encrypted output.