Backup management device, backup management method, computer program, recording medium, integrated circuit, and backup system

• US 7,991,155 B2
• Filed: 01/30/2006
• Issued: 08/02/2011
• Est. Priority Date: 01/31/2005
• Status: Expired due to Fees

• Current Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Original Assignee: Panasonic Corporation (Panasonic Holdings Corporation)
• Inventors: Nakano, Toshihisa, Ito, Yoshikatsu, Tsusaka, Yuko, Ohmori, Motoji, Harada, Shunji, Fujioka, Soichiro
• Primary Examiner(s): Davis; Zachary A
• Assistant Examiner(s): Shan; April Y
• Application Number:
  US11/795,958
• Publication Number:
  US 20080310628A1
• Time in Patent Office: 2,010 Days
• Field of Search: 380/201, 380/277, 380/44, 380/281, 713/189, 705/59, 360/60, 369/84, 369/85
• US Class Current: 380/201
• CPC Class Codes: G06F 11/1448 Management of the data involved in backup or backup restore
• CPC Class Codes: G06F 11/1451 by selection of backup contents
• CPC Class Codes: G06F 11/1456 Hardware arrangements for backup
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

To provide a backup management device that deletes a content so as to be restorable in the future while protecting a copyright of the content, in a case where there exists a backup of the content. In an HD recorder, a first information storage unit stores a content, a second information storage unit stores a backup of the content, a secure storage unit stores a hash value of the content. If receiving an instruction to delete the content so as to be restorable, a control unit deletes the content from the first information storage unit. When the content is played back, an encryption processing unit applies a calculation to the content to generate detection information, and the control unit compares the hash value with the detection information to judge whether the content has been tampered.

Claims

1. A backup system comprising:

a recording/playback device storing and playing back a content; and

a backup device managing a backup of the content and storing the backup of the content,

wherein the recording/playback device includes;

a storage hardware unit that stores the content;

a secure storage hardware unit that stores playback right information showing a right to play back the content only when the content is stored in the storage hardware unit;

an acquisition hardware unit that acquires an instruction to delete the content so as to be restorable; and

a deletion hardware unit that keeps, when the instruction to delete the content so as to be restorable is acquired, the playback right information stored in the secure storage hardware unit, that keeps the backup stored in the backup device, and that deletes the content from the recording/playback device,

wherein the backup includes;

an encrypted work generated by encrypting a digital work using an encryption key; and

an encrypted key generated by encrypting the encryption key using a specific key that is specific to the recording/playback device,

wherein the backup system further comprises a request device,

wherein the request device stores a secret key for decrypting the encryption key encrypted using a public key, and transmits a transfer request of the backup to the recording/playback device,

wherein the recording/playback device further includes;

a transfer request receiving hardware unit that receives the transfer request from the request device;

an encrypted key request hardware unit that transmits, when the transfer request is received, a transmission request of the encrypted key included in the backup to the backup device;

an encrypted key receiving hardware unit that receives the encrypted key, as a response to the transmission request, from the backup device;

a re-encrypted key generation hardware unit that stores beforehand the specific key and the public key, that decrypts the received encrypted key using the specific key to generate the encryption key, and that encrypts the generated encryption key using the public key to generate a re-encrypted key;

a transmission hardware unit that transmits, to the backup device, a rewriting request including the generated re-encrypted key and for instructing to rewrite the encrypted key included in the backup as the generated re-encrypted key; and

a playback right information deletion hardware unit that deletes the playback right information from the secure storage hardware unit, and

wherein the backup device includes;

an encrypted key request receiving hardware unit that receives the transmission request;

an encrypted key transmission hardware unit that transmits, when the transmission request is received, the encrypted key included in the backup to the recording/playback device;

a rewriting request receiving hardware unit that receives the rewriting request; and

a rewriting hardware unit that rewrites the encrypted key included in the backup as the re-encrypted key included in the received rewriting request.

2. The backup system of claim 1,

wherein the playback right information is used for judging whether the backup is permitted to be played back.

3. The backup system of claim 2,

wherein the playback right information is a hash value generated by applying a calculation using a one-way function to at least part of the content, and

wherein, when a value generated by applying the calculation to at least part of the content stored in the storage hardware unit matches the hash value, the content stored in the storage hardware unit is permitted to be played back.

4. The backup system of claim 3,

wherein the content includes:

the encryption key; and

the encrypted work generated by encrypting the digital work using the encryption key,

wherein the playback right information is a hash value generated by applying the calculation to the encryption key, and

wherein, when a value generated by applying the calculation to the encryption key included in the content stored in the storage hardware unit matches the hash value, the content stored in the storage hardware unit is permitted to be played back.

5. The backup system of claim 3,

wherein the content includes:

the encrypted work generated by encrypting the digital work using the encryption key; and

the encrypted key generated by encrypting the encryption key using the specific key that is specific to the recording/playback device,

wherein the playback right information is a hash value generated by applying the calculation to the encrypted key, and

wherein, when a value generated by applying the calculation to the encrypted key included in the content stored in the storage hardware unit matches the hash value, the content stored in the storage hardware unit is permitted to be played back.

6. The backup system of claim 3,

wherein the content includes:

the encrypted work generated by encrypting the digital work using the encryption key; and

the encrypted key generated by encrypting the encryption key using the specific key that is specific to the recording/playback device,

wherein the playback right information is a hash value generated by applying the calculation to at least part of the encrypted work, and

wherein, when a value generated by applying the calculation to at least part of the encrypted work included in the content stored in the storage hardware unit matches the hash value, the content stored in the storage hardware unit is permitted to be played back.

7. The backup system of claim 3,

wherein the content includes:

the encrypted work generated by encrypting the digital work using the encryption key; and

the encrypted key generated by encrypting the encryption key using the specific key that is specific to the recording/playback device,

wherein the playback right information is a hash value generated by applying the calculation to a combination of at least part of the encrypted work and the encrypted key, and

wherein, when a value generated by applying the calculation to the combination of at least part of the encrypted work and the encrypted key included in the content stored in the storage hardware unit matches the hash value, the content stored in the storage hardware unit is permitted to be played back.

8. The backup system of claim 2,

wherein the playback right information is a hash value generated by applying a calculation using a one-way function to the content, and

wherein, when a value generated by applying the calculation to the content stored in the storage hardware unit matches the hash value, the content stored in the storage hardware unit is permitted to be played back.

9. The backup system of claim 1,

wherein the acquisition hardware unit further acquires a restoration instruction to restore the content, and

wherein the recording/playback device further comprises

a restoration hardware unit that reads, when the restoration instruction is acquired, the backup from the backup device, and that writes the read backup to the storage hardware unit.

10. The backup system of claim 1,

wherein the acquisition hardware unit further acquires a deletion instruction to delete the content, and

wherein the recording/playback device further comprises

a complete deletion hardware unit that deletes, when the deletion instruction is acquired, the backup from the backup device and that deletes the playback right information from the secure storage hardware unit.

11. The backup system of claim 1,

wherein the acquisition hardware unit further acquires a move instruction to move the content to another device,

wherein the transmission hardware unit reads, when the move instruction is acquired, the backup from the backup device, and transmits the read backup to the other device, and

wherein the recording/playback device further comprises:

a complete deletion hardware unit that deletes the backup from the backup device, and deletes the playback right information from the secure storage hardware unit.

12. A backup system comprising:

a recording/playback device storing and playing back a content; and

a backup device managing a backup of the content and storing the backup of the content,

wherein the recording/playback device includes;

a storage hardware unit that stores the content;

a secure storage hardware unit that stores playback right information showing a right to play back the content only when the content is stored in the storage hardware unit;

an acquisition hardware unit that acquires an instruction to delete the content so as to be restorable; and

a deletion hardware unit that keeps, when the instruction to delete the content so as to be restorable is acquired, the playback right information stored in the secure storage hardware unit, that keeps the backup stored in the backup device, and that deletes the content from the recording/playback device,

wherein the content and the backup respectively include;

an encrypted work generated by encrypting a digital work using an encryption key; and

an encrypted key generated by encrypting the encryption key using a specific key that is specific to the recording/playback device,

wherein the backup system further comprises a request device,

wherein the request device includes;

a request key storage hardware unit that stores a request key that is specific to the request device;

a transfer request transmission hardware unit that transmits a transfer request of the backup to the recording/playback device;

an encryption key receiving hardware unit that securely receives the encryption key, as a response to the transfer request, from the recording/playback device; and

a key transmission hardware unit that reads, when the encryption key is received, the request key, that encrypts the encryption key using the read request key to generate a re-encrypted key, and that transmits the generated re-encrypted key to the backup device,

wherein the recording/playback device further includes;

a specific key storage hardware unit that stores the specific key;

a transfer request receiving hardware unit that receives the transfer request from the request device;

an encrypted key request hardware unit that transmits, when the transfer request is received, a transmission request of the encrypted key included in the backup to the backup device;

an encrypted key receiving hardware unit that receives the encrypted key, as a response to the transmission request, from the backup device;

an encryption key transmission hardware unit that reads, when the encrypted key is received, the specific key, that decrypts the received encrypted key using the specific key to generate the encryption key, and that transmits the generated encryption key to the request device; and

a playback right information deletion hardware unit that deletes the playback right information from the secure storage hardware unit, and

wherein the backup device includes;

an encrypted key request receiving hardware unit that receives the transmission request;

an encrypted key transmission hardware unit that transmits, when the transmission request is received, the encrypted key included in the backup to the recording/playback device,

a re-encrypted key receiving hardware unit that receives the re-encrypted key from the request device; and

a rewriting hardware unit that rewrites the encrypted key included in the backup as the re-encrypted key received from the request device.