Method of, and apparatus for, recording/reproducing data to/from recording medium having copyright management data recorded therein

• US 7,231,520 B2
• Filed: 07/17/2001
• Issued: 06/12/2007
• Est. Priority Date: 07/17/2000
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Sako, Yoichiro, Inokuchi, Tatsuya, Toriyama, Mitsuru
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): KIM, JUNG W
• Application Number:
  US10/088,336
• Publication Number:
  US 20020157012A1
• Time in Patent Office: 2,156 Days
• Field of Search: 713/171, 713/193, 713/191
• US Class Current: 713/171
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2147 Locking files
• CPC Class Codes: G11B 19/04 Arrangements for preventing, inhibiting, or warning against double recording on the same blank or against other recording or reproducing malfunctions
• CPC Class Codes: G11B 19/12 by sensing distinguishing features of or on records, e.g. diameter end mark
• CPC Class Codes: G11B 19/122 involving the detection of an identification or authentication mark record carriers indicating unauthorised or prior use G11B23/28
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00094 involving measures which result in a restriction to authorised record carriers
• CPC Class Codes: G11B 20/00137 involving measures which result in a restriction to contents recorded on or reproduced from a record carrier to authorised users
• CPC Class Codes: G11B 20/00144 involving a user identifier, e.g. a unique customer ID
• CPC Class Codes: G11B 20/00173 wherein the origin of the content is checked, e.g. determining whether the content has originally been retrieved from a legal disc copy or another trusted source
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00478 wherein contents are decrypted and re-encrypted with a different key when being copied from/to a record carrier
• CPC Class Codes: G11B 20/00557 wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
• CPC Class Codes: G11B 20/10 Digital recording or reproducing

Abstract

A method of recording data from a recorder to a recording medium, where it is judged whether a terminal unit having user identification information recorded in memory therein is connected to the recorder. When the terminal unit is found connected, an encryption key is exchanged between the recorder and terminal unit, user identification information read from the memory of the terminal unit is encrypted with the exchanged encryption key, sent from the terminal unit to the recorder, and the encrypted user identification information is recorded to the recording medium.

Claims

1. A playback method for decrypting encrypted data read from a recording medium, comprising the steps of:

when a player is going to play back the recording medium containing user identification information, intended to identify a user, and data encrypted with the user identification information, causing the player to detect whether a terminal unit with a memory having the user identification information recorded therein along with the data is connected to the player;

when it is detected that the terminal unit is connected to the player, exchanging an encryption key between the player and the terminal unit;

encrypting the user identification information read from the memory of the terminal unit with the exchanged encryption key and sending it from the terminal unit to the player;

judging whether the user identification information sent from the terminal unit is coincident with the user identification information read from the recording medium; and

decrypting the encrypted data read from the recording medium when it is judged that the user identification information sent from the terminal unit is coincident with the user identification information read from the recording medium.

2. The method according to claim 1, wherein when it is judged that the user identification information sent from the terminal unit is not coincident with the user identification information read from the recording medium, output of data read from the recording medium is inhibited.

3. The method according to claim 1, wherein:

when it is detected that the terminal unit is connected to the player, the player authenticates the terminal unit; and

when the player has not successfully authenticated the terminal unit, output of data read from the recording medium is ceased.

4. The method according to claim 3, wherein when the player has not successfully authenticated the terminal unit, an error message is displayed.

5. The method according to claim 1, wherein when it is detected that the terminal unit is not connected to the recorder, a display is made to indicate that the terminal unit is not connected.

6. The method according to claim 1, wherein the user identification information stored in the memory of the terminal unit is set by the user.

7. The method according to claim 6, wherein the user identification information includes a user name.

8. The method according to claim 7, wherein the user identification information includes information unique to the terminal unit, having been set at the time of shipment from factory.

9. A method of playing back a recording medium, comprising:

when a player is going to play back a recording medium containing user identification information, intended to identify a user, and data having been encrypted with the user identification information and stored in the recording medium therewith, judging whether user identification information read from an information holder provided in the player to hold user identification information sent from a terminal, unit is coincident with user identification information read from the recording medium;

decrypting encrypted data read from the recording medium when the user identification information read from the information holder provided in the player is coincident with the user identification information read from the recording medium; and

exchanging an encryption key between the player and terminal unit when the terminal unit is connected to the player;

encrypting the user identification information read from the memory of the terminal unit with the exchanged encryption key; and

sending the encrypted user identification information from the terminal unit to the player.

10. A data transmitting method, comprising the steps of:

when an output unit to output data read from a recording medium having data recorded therein that includes user identification information intended to identify a user and data which has been encrypted with the user identification information is going to output data read from the recording medium, judging whether user identification information supplied from a terminal unit having the user identification information stored in memory of the terminal unit is coincident with the user identification information read from the recording medium; and

when it is judged that the user identification information supplied from the terminal unit is coincident with the user identification information read from the recording medium causing the output unit to send to a server, the user identification information showing the coincidence, wherein

the server sends to the output unit a reference number based on the received user identification information; and

the output unit buries the received reference number into the data read from the recording medium and sends the data to the server.

11. The method according to claim 10, wherein:

when it is judged that the user identification information supplied from the terminal unit is coincident with the user identification information read from the recording medium, an encryption key is exchanged between the output unit and the server; and

the user identification information showing the coincidence is encrypted with the exchanged encryption key and sent to the server.

12. The method according to claim 10, wherein when it is judged that the user identification information supplied from the terminal unit is not coincident with the user identification information read from the recording medium, data read from the recording medium will not be sent.

13. The method according to claim 10, wherein when it is judged that the user identification information supplied from the terminal unit is not coincident with the user identification information read from the recording medium, a display is made on a display unit of an output unit to prompt a user to select other data recorded in the recording medium.

14. The method according to claim 10, wherein data sent from the output unit is stored in a storage unit provided in the server.

15. The method according to claim 10, further comprising steps of:

detecting whether the terminal unit is connected;

judging when the terminal unit is connected and whether the user identification information sent from the terminal unit is coincident with the user identification information read from the recording medium; and

decrypting data read from the recording medium when the user identification information sent from the terminal unit is coincident with the user identification information read from the recording medium.

16. The method according to claim 15, wherein when the terminal unit is connected, an encryption key is exchanged between the output unit and the terminal unit, and the user identification information read from the memory of the terminal unit is encrypted with the exchanged encryption key and sent from the terminal unit to the output unit.

17. The method according to claim 15, wherein:

the output unit has an information holder to hold the user identification information sent from the terminal unit; and

when it is detected that the terminal unit is not connected, it is judged whether the user identification information read from the information holder is coincident with the user identification information read from the recording medium.

18. A method for controlling data recording, comprising the steps of:

upon request, sending data stored in a storage unit provided in a server, said data having at least buried therein user identification information intended to identify a user and having been encrypted with the user identification information, to a recorder;

causing the recorder to extract the user identification information from the received data;

judging whether the extracted user identification information is coincident with user identification information held in an information holder provided in the recorder; and

recording the received data to a recording medium when the extracted user identification information is coincident with the user identification information held in the information holder provided in the recorder;

wherein when it is judged that the user identification information extracted from the received data is not coincident with the user identification information held in the information holder in the player, it is judged whether user identification information in the received data is to be rewritten;

wherein when it is judged that the user identification information in the received data is not to be rewritten, the received data is recorded to the recording medium.

19. The method according to claim 18, wherein when it is judged that the user identification information in the received data is to be rewritten, the recorder acquires the user identification information from the server, decrypts the received data, re-encrypts the decrypted data with new user identification information and records it to the recording medium.

20. The method according to claim 19, wherein when it is judged that the user identification information in the received data is to be rewritten, the new user identification information is sent from the recorder to the server.

21. The method according to claim 19, wherein:

when it is judged that the user identification information in the received data is to be rewritten, the server judges whether the user identification information can be rewritten; and

when the user identification information can be rewritten, the recorder acquires the user identification information from the server.

22. The method according to claim 21, wherein the server judges, based on solvency of a grantee of the received data sent from the recorder, whether the user identification information can be rewritten.

23. The method according to claim 21, wherein when it is judged that the user identification information cannot be rewritten, the recorder records the received data to the recording medium.

24. The method according to claim 19, wherein user identification information is acquired from the received data;

the received data is decrypted with the user identification information acquired from the received data; and

when the data has not successfully been recorded to the recording medium, the recorder deletes the received data.

25. The method according to claim 23, wherein:

the received data decrypted with the new user identification information is re-encrypted; and

when the re-encrypted received data has not successfully been recorded to the recording medium, the recorder sends a failure-in-storage signal to the server.

26. The method according to claim 19, wherein:

the received data decrypted with the new user identification information is re-encrypted; and

when the re-encrypted received data has successfully been recorded to the recording medium, a grantee of the received data is charged for the data thus recorded.

27. The method according to claim 25, wherein:

the received data decrypted with the new user identification information is re-encrypted; and

when the re-encrypted received data has successfully been recorded to the recording medium, the recorder supplies the server with a success-in-storage signal and a grantee of the received data is charged based on the success-in-storage signal.

28. The method according to claim 19, wherein:

a reference signal is additionally buried in data to be stored into the storage unit provided in the server; and

when it is judged that user identification information in the received data is to be rewritten, the recorder sends the reference signal to the server and the server will operate based on the received reference signal.

29. A data transmitting/receiving method, comprising the steps of:

when a recorder/player outputs data read from a recording medium having recorded therein data having user identification information intended to identify a user and which has been encrypted with the user identification information, judging whether the user identification information supplied from a terminal unit with a memory having user identification information recorded therein is coincident with the user identification information read from the recording medium;

when it is judged that the user identification information supplied from the terminal unit is coincident with the user identification information read from the recording medium, causing the recorder/player to send to a server the user identification information showing the coincidence, wherein

the server sends to the recorder/player a reference number based on the received user identification information;

the recorder/player buries the received reference number into the data read from the recording medium, sends the data to the server and stores the data into a storage unit provided in the server; and

upon request, sending data stored in the storage unit provided in the server to the recorder/player, wherein

the recorder/player extracts the user identification information from the received data;

judging whether the extracted user identification information is coincident with the user identification information stored in the memory in the terminal unit; and

causing the recorder/player to record the received data to the recording medium when it is judged that the extracted user identification information is coincident with that stored in the memory of the terminal unit.

30. The method according to claim 29, wherein when it is judged that the user identification information supplied from the terminal unit is not coincident with the extracted user identification information read from the recording medium, ceasing reading of the data from the recording medium.

31. The method according to claim 29, wherein when it is judged that the extracted user identification information read from the recording medium is not coincident with the user identification information stored in the memory of the terminal unit, judging whether user identification information in the received data is to be rewritten.

32. The method according to claim 31, wherein when it is judged that the user identification information in the received data is not to be rewritten, the recorder/player records the received data to the recording medium.

33. The method according to claim 32, wherein when it is judged that the user identification information in the received data is to be rewritten, the recorder/player acquires user identification information in the data sent from the server, decrypts the data received from the server, re-encrypts the decrypted data received from the server with new user identification information and records the data to the recording medium.

34. The method according to claim 33, wherein:

when it is judged that the user identification information in the received data is to be rewritten, the server judges whether the user identification information can be rewritten; and

when the user identification information can be rewritten, the recorder/player acquires user identification information from the data sent from the server.

35. The method according to claim 34, wherein the server judges, based on solvency of a grantee of the data sent from the recorder/player, whether the user identification information can be rewritten.

36. The method according to claim 35, wherein when it is judged that the user identification information cannot be rewritten, the recorder/player records the received data to the recording medium.

37. The method according to claim 33, wherein user identification information is acquired from the received data;

the received data is decrypted with the user identification information acquired from the received data;

the decrypted received data is re-encrypted with new user identification information; and

when the received data has not successfully been recorded to the recording medium, the recorder/player deletes the received data that has not successfully been recorded.

38. The method according to claim 37, wherein:

the received data decrypted with the new user identification information is re-encrypted; and

when the re-encrypted received data has not successfully been recorded to the recording medium, the recorder/player sends a failure-in-storage signal to the server.

39. The method according to claim 33, wherein:

the received data decrypted with the new user identification information is re-encrypted; and

when the re-encrypted received data has successfully been recorded to the recording medium, a grantee of the received data is charged for the data thus recorded.

40. The method according to claim 39, wherein:

the received data decrypted with the new user identification information is re-encrypted; and

when the re-encrypted received data have successfully been recorded to the recording medium, the recorder supplies the server with a success-in-storage signal and the grantee of the received data is charged based on the success-in-storage signal.