Protection of data on media recording disks

• US 7,760,877 B2
• Filed: 10/26/2007
• Issued: 07/20/2010
• Est. Priority Date: 01/22/1998
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: NDS Limited (Cisco Systems, Inc.)
• Inventors: Bar-On, Gershon
• Primary Examiner(s): Hoffman; Brandon S
• Application Number:
  US11/978,086
• Publication Number:
  US 20080069355A1
• Time in Patent Office: 998 Days
• Field of Search: None
• US Class Current: 380/203
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2121 Chip on media, e.g. a disk or tape with a chip embedded in its case
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00246 wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
• CPC Class Codes: G11B 20/00275 the key being stored on a chip attached to the record carrier
• CPC Class Codes: G11B 20/00876 wherein physical copy protection means are attached to the medium, e.g. holograms, sensors, or additional semiconductor circuitry
• CPC Class Codes: G11B 23/0042 with provision for auxiliary features sensing such features G11B17/00, G11B19/02
• CPC Class Codes: G11B 23/284 on the record carrier
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/26606 for generating or managing entitlement messages, e.g. Entitlement Control Message [ECM] or Entitlement Management Message [EMM] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 21/26613 for generating or managing keys in general key distribution for secret or secure communication involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP] H04L9/083; network support of key management H04L63/06; key management for network security in communication control or processing H04W12/04
• CPC Class Codes: H04N 21/4147 PVR [Personal Video Recorder] H04N5/76 takes precedence ; arrangements for broadcast with accumulation-type receivers H04H20/40
• CPC Class Codes: H04N 21/418 External card to be used in combination with the client device, e.g. for conditional access
• CPC Class Codes: H04N 21/42646 for reading from or writing on a non-volatile solid state storage medium, e.g. DVD, CD-ROM
• CPC Class Codes: H04N 21/4367 Establishing a secure communication between the client and a peripheral device or smart card
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4623 Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message] arrangements for conditional access to broadcast information or to broadcast-related services H04H60/14
• CPC Class Codes: H04N 5/913 : for scrambling ; for copy protection
• CPC Class Codes: H04N 7/1675 : Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58

Abstract

This invention discloses a secure recording medium having at least one of audio, video and software content, comprising a plurality of media recording disks (DVD'"'"'s) with a disk security chip embedded in each the DVD, each the disk chip comprising a security key, wherein at least two of the DVD'"'"'s have different disk security keys.

A method for protecting access to content recorded on a media recording disk (DVD) is also disclosed.

Claims

1. A method for protecting access to content recorded on a media recording disk (DVD), the method comprising:

providing a disk security chip on the DVD, the disk security chip managing access to the content of the DVD;

providing a corresponding player security chip in a DVD player which is operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip;

providing the disk security chip with a disk key;

the player security chip sending a random number R to the disk security chip, the random number R being different each time the DVD is played;

the disk security chip sending the player security chip an encrypted concatenation of a hash function of R, called h(R), and the content key, encrypted with the disk key;

the player security chip decrypting the concatenation, and computing h(R) and comparing with the h(R) sent by the disk security chip;

the player security chip verifying R to be correct, thereby certifying that the disk chip really knows the player key;

the player security chip obtaining the content key from the concatenation; and

the player security chip using the content key to decrypt control words that are located within entitlement control messages (ECMs) in the DVD.

2. The method according to claim 1 and wherein the disk key is not known to a disk manufacturer.

3. A system for protecting access to content recorded on a media recording disk (DVD), the system comprising:

a disk security chip on the DVD, the disk security chip managing access to the content of the DVD, the disk security chip comprising a disk key;

a corresponding player security chip in a DVD player which is operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip, the player security chip being operative to produce a random number R for sending from the player security chip to the disk security chip, the random number R being different each time the DVD is played,

wherein the disk security chip sends the player security chip an encrypted concatenation of a hash function of R, called h(R), and the content key, encrypted with the disk key, and the player security chip is operative to perform the following steps;

decrypt the concatenation, and compute h(R) and compare the computed h(R) with the h(R) sent by the disk security chip;

verify R to be correct, thereby certifying that the disk chip really knows the player key;

obtain the content key from the concatenation; and

use the content key to decrypt control words that are located within entitlement control messages (ECMs) in the DVD.

4. The system according to claim 3 and wherein the disk key is not known to a disk manufacturer.

5. A system for protecting access to content recorded on a media recording disk (DVD), the system comprising:

means for providing a disk security chip on the DVD, the disk security chip managing access to the content of the DVD;

means for providing a corresponding player security chip in a DVD player which is operative to play the DVD, the player security chip managing use of a data stream received from the DVD, the disk security chip being in wireless communication with the player security chip;

means for providing the disk security chip with a disk key;

means for sending a random number R from the player security chip to the disk security chip, the random number R being different each time the DVD is played;

means for sending an encrypted concatenation of a hash function of R, called h(R), and the content key, encrypted with the disk key from the disk security chip to the player security chip;

means for decrypting the concatenation by the player security chip, and computing h(R) and comparing with the h(R) sent by the disk security chip;

means for verifying R to be correct at the player security chip, thereby certifying that the disk chip really knows the player key;

means for the obtaining, by the player security chip, the content key from the concatenation; and

means for using the content key at the player security chip to decrypt control words that are located within entitlement control messages (ECMs) in the DVD.