Information processing device, system, and method, including hash value replacement processing and signature verification processing as part of encrypted content playback propriety determination processing

• US 8,908,860 B2
• Filed: 07/31/2012
• Issued: 12/09/2014
• Est. Priority Date: 09/05/2011
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Kobayashi, Yoshiyuki, Hayashi, Takamichi, Kuno, Hiroshi
• Primary Examiner(s): Zecher, Dede
• Assistant Examiner(s): Savenkov, Vadim
• Application Number:
  US13/562,788
• Publication Number:
  US 20130058477A1
• Time in Patent Office: 861 Days
• Field of Search: 380/28, 726 26- 33, 706 57- 59, 713/187, 713176-179, 713189-193, 386252-253, 386/255, 386257-260, 705 57- 59
• US Class Current: 380/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/72 in cryptographic circuits
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

An information processing device includes a data processing unit executing decryption and playing processing of an encrypted content, with the data processing unit executing content playback propriety determination processing by applying an encrypted content signature file set in response to a content to be played; with the encrypted content signature file including a content hash list group including a hash value, and signature data for data generated from a content encryption key and the content hash list group; and with the data processing unit executing, with the content playback propriety determination processing, hash value matching processing between a hash value calculated from a content to be played, and a hash value for matching included in the content hash list group, and signature data verification processing to which the signature has been applied to perform decryption and playing processing of the encrypted content with success of both processes as a condition.

Claims

1. An information processing device, comprising:

data processing circuitry configured to;

execute decryption and playing-processing of an encrypted content;

execute encrypted-content-playback-propriety-determination processing by applying an encrypted-content-signature file set for the encrypted content;

wherein the encrypted-content-signature file includes;

a content-hash-list-group including at least one first hash value based on configuration data of the encrypted content, and

signature data including data generated from a content-encryption-key and from the content-hash-list-group;

execute, as part of the encrypted-content-playback-propriety-determination processing,

hash-value-matching processing between at least one second hash value calculated from the configuration data, and the at least one first hash value included in the content-hash-list-group, and

signature-verification processing of the signature data in the encrypted-content-signature file; and

permit the decryption and playing-processing only if both of the hash-value-matching processing and the signature-verification processing are successful,

wherein the data processing circuitry is further configured to execute, as part of the encrypted content playback propriety determination processing,

hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.

2. The information processing device according to claim 1, wherein the at least one first hash value in the content-hash-list-group is based on configuration data of plain text content not subjected to encryption.

3. The information processing device according to claim 1, wherein the at least one first hash value in the content-hash-list-group is based on increments of content blocks by content data type.

4. The information processing device according to claim 1, wherein the at least one first hash value in the content-hash-list-group is based on increments of content blocks by content data including audio data, video data, or subtitle data, or a combination thereof.

5. The information processing device according to claim 1, wherein the at least one first hash value in the content-hash-list-group is based on increments of content blocks by content data including audio data, video data, or subtitle data, or a combination thereof, and is based on attribute information indicating position information of the content blocks.

6. The information processing device according to claim 1, wherein the content-hash-list-group includes at least one content-hash-list, the at least one content-hash-list including a plurality of the at least one first hash value corresponding to a plurality of content blocks corresponding to a plurality of different variations of data.

7. The information processing device according to claim 6, wherein the plurality of different variations of data include a plurality of video data taken from a plurality of different angles in a multi-angle content.

8. An information processing system, comprising:

a user device comprising first circuitry configured to execute content-playing-processing of an encrypted content;

a content-providing device comprising second circuitry configured to execute content-providing-processing to the user device; and

an encrypted-content-signature-issuing device comprising third circuitry configured to execute encrypted-content-signature-file-providing-processing to the content-providing device;

wherein the second circuitry of the content-providing device is further configured to;

transmit, to the encrypted-content-signature-issuing device, a content-hash-list-group including at least one first hash value based on the configuration data of the encrypted content, and

a content-encryption-key or at least one second hash value of the content-encryption-key;

wherein the third circuitry of the encrypted-content-signature-issuing device is further configured to;

generate, as a signature object, signature data with the content-hash-list-group and the hash at least one second hash value of the content-encryption-key, and

generate an encrypted-content-signature file including the generated signature data and the content-hash-list-group to transmit to the content-providing device;

wherein the second circuitry of the content-providing device is further configured to provide the encrypted content and the encrypted-content-signature file to the user device; and

wherein the first circuitry of the user device is further configured to;

execute hash-value-matching processing between at least one second hash value calculated from the configuration data, and the at least one first hash value included in the content-hash-list-group,

execute signature-verification processing of the signature data in the encrypted-content-signature file,

permit decryption and content-playing-processing if only both of the hash-value-matching processing and the signature-verification processing are successful,

execute hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

execute signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.

9. An information processing device, comprising:

data processing circuitry configured to;

generate configuration data of an encrypted-content-signature file to be applied to content-playback-propriety-determination processing of an encrypted content;

calculate at least one first hash value based on increments of content blocks by data type;

generate at least one content-hash-list including the calculated at least one first hash value, based on attribute information including position information of a content block serving as a hash-value-calculation-object;

generate a content-hash-list-group collected from a plurality of the at least one content-hash-list;

transmit the generated content-hash-list-group and a content-encryption-key or at least one second hash value of the content-encryption-key to an external signature issuing device;

obtain, from the external signature issuing device, an encrypted-content-signature file including the content-hash-list-group, and signature data including data generated based on the content encryption key and from the content-hash-list-group; and

provide the obtained encrypted-content-signature-file and the encrypted content to a user device,

wherein the encrypted content playback propriety determination processing includes;

hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.

10. The information processing device according to claim 9, wherein the at least one first hash value in the content-hash-list-group is based on configuration data of plain text content not subjected to encryption.

11. The information processing device according to claim 9, wherein the at least one first hash value in the content-hash-list-group is based on increments of content blocks by content data type.

12. The information processing device according to claim 9, wherein the at least one first hash value in the content-hash-list-group is based on increments of content blocks by content data including audio data, video data, or subtitle data, or a combination thereof.

13. The information processing device according to claim 9, wherein the at least one first hash value in the content-hash-list-group is based on increments of content blocks by content data including audio data, video data, or subtitle data, or a combination thereof, and is based on attribute information indicating position information of the content blocks.

14. The information processing device according to claim 9, wherein the content-hash-list-group includes at least one content-hash-list, the at least one content-hash-list including a plurality of the at least one first hash value corresponding to a plurality of content blocks corresponding to a plurality of different variations of data.

15. An information processing method executed at an information processing device comprising data processing circuitry configured to execute decryption and playing-processing of an encrypted content, the method comprising:

executing, using the data processing circuitry, encrypted-content-playback-propriety-determination processing by applying an encrypted-content-signature file set for the encrypted content;

wherein the encrypted-content-signature file includes;

a content-hash-list-group including at least one first hash value based on configuration data of the encrypted content, and

signature data including data generated from a content-encryption-key and from the content-hash-list-group;

executing, using the data processing circuitry, as part of the encrypted-content-playback-propriety-determination processing,

hash-value-matching processing between at least one second hash value calculated from the configuration data, and the at least one first hash value included in the content-hash-list-group, and

signature-verification processing of the signature data in the encrypted-content-signature file;

permitting, using the data processing circuitry, the decryption and playing-processing only if both of the hash-value-matching processing and the signature-verification processing are successful; and

executing, using the data processing circuitry, as part of the encrypted content playback propriety determination processing,

hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.

16. An information processing method executed at an information processing device comprising data processing circuitry configured to execute content-providing-processing as to a user device, the method comprising:

generating, using the data processing circuitry, configuration data of an encrypted-content-signature file to be applied to content-playback-propriety-determination processing of an encrypted content at the user device;

calculating, using the data processing circuitry, at least one first hash value based on increments of content blocks by data type;

generating, using the data processing circuitry, at least one content-hash-list including the calculated at least one first hash value, based on attribute information including position information of a content block serving as a hash-value-calculation-object;

generating, using the data processing circuitry, a content-hash-list-group collected from a plurality of the at least one content-hash-list;

transmitting, using the data processing circuitry, the generated content-hash-list-group and a content-encryption-key or at least one second hash value of the content-encryption-key to an external signature issuing device;

obtaining, using the data processing circuitry, from the external signature issuing device, an encrypted-content-signature file including the content-hash-list-group, and signature data including data generated based on the content encryption key and from the content-hash-list-group; and

providing, using the data processing circuitry, the obtained encrypted-content-signature-file and the encrypted content to the user device,

wherein the encrypted content playback propriety determination processing includes;

hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.

17. A non-transitory computer readable storage medium encoded with program instructions, which when executed, causes a computer to execute a method of executing decryption and playing-processing of an encrypted content, comprising:

executing, using data processing circuitry, encrypted-content-playback-propriety-determination processing by applying an encrypted-content-signature file set for the encrypted content;

wherein the encrypted-content-signature file includes;

a content-hash-list-group including at least one first hash value based on configuration data of the encrypted content, and

signature data including data generated from a content-encryption-key and from the content-hash-list-group;

executing, using the data processing circuitry, as part of the encrypted-content-playback-propriety-determination processing,

hash-value-matching processing between at least one second hash value calculated from the configuration data, and the at least one first hash value included in the content-hash-list-group, and

signature-verification processing of the signature data in the encrypted-content-signature file;

permitting, using the data processing circuitry, the decryption and playing-processing only if both of the hash-value-matching processing and the signature-verification processing are successful; and

executing, using the data processing circuitry, as part of the encrypted content playback propriety determination processing,

hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.

18. A non-transitory computer readable storage medium encoded with program instructions, which when executed, causes a computer to execute a method of content-providing-processing as to a user device, the method comprising:

generating, using data processing circuitry, configuration data of an encrypted-content-signature file to be applied to content-playback-propriety-determination processing of an encrypted content at the user device;

calculating, using the data processing circuitry, at least one first hash value based on increments of content blocks by data type;

generating, using the data processing circuitry, at least one content-hash-list including the calculated at least one first hash value, based on attribute information including position information of a content block serving as a hash-value-calculation-object;

generating, using the data processing circuitry, a content-hash-list-group collected from a plurality of the at least one content-hash-list;

transmitting, using the data processing circuitry, the generated content-hash-list-group and a content-encryption-key or at least one second hash value of the content-encryption-key to an external signature issuing device;

obtaining, using the data processing circuitry, from the external signature issuing device, an encrypted-content-signature file including the content-hash-list-group, and signature data including data generated based on the content encryption key and from the content-hash-list-group; and

providing, using the data processing circuitry, the obtained encrypted-content-signature-file and the encrypted content to the user device,

wherein the encrypted content playback propriety determination processing includes;

hash-value-replacement processing for replacing the at least one first hash value included in the content-hash-list-group with at least one second hash value calculated from the configuration data, and

signature-verification processing of the signature data in the encrypted content signature file by applying concatenated data of only the content hash list group subjected to the hash value replacement processing, and another hash value of the content-encryption-key.