Information storage device, information processing system, information processing method, and program

• US 9,767,298 B2
• Filed: 11/29/2012
• Issued: 09/19/2017
• Est. Priority Date: 01/12/2012
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Hayashi, Takamichi, Kuno, Hiroshi, Yoshimura, Koji
• Primary Examiner(s): LANIER, BENJAMIN E
• Application Number:
  US14/363,135
• Publication Number:
  US 20140351585A1
• Time in Patent Office: 1,755 Days
• Field of Search: None
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
• CPC Class Codes: H04L 9/3273 for mutual authentication network architectures or network communication protocols for achieving mutual authentication in a packet data network H04L63/0869
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 5/903 using variable electrical capacitive recording H04N5/91 takes precedence
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

There is provided a device and a method for preventing using of illegitimate content or manufacturing of the illegitimate media that uses illegitimate media. In a system that has an information storage device, a license management apparatus that generates a media key set (MKS) that is stored in the information storage device, and a content provision apparatus, at the time of manufacturing of the information storage device, the license management apparatus compares an MKS version that is set in the MKS that is stored in the information storage device, and an allowance minimum MKS version that is recorded in a controller of the information storage device, and thus records key information stored in the MKS, in a storage unit under the condition that it is confirmed that the MKS version is equal to or greater in value than the allowance minimum MKS version.

Claims

1. An information storage device, comprising:

an interface configured to receive a media key set (MKS) from a license management apparatus,

wherein the MKS is inherent to the information storage device;

a storage unit; and

a controller configured to;

determine a MKS version and key information based on the received MKS;

record the key information in the storage unit based on the MKS version that is equal to or greater in value than an allowance minimum key version,

wherein the allowance minimum key version is recorded in advance in the controller;

generate a media key binding log based on the key information; and

output the generated media key binding log to the license management apparatus.

2. The information storage device according to claim 1,

wherein the allowance minimum key version is based on a date and a time of manufacture of the controller.

3. The information storage device according to claim 1, wherein the key information includes a media public key and a media private key that are inherent to the information storage device.

4. The information storage device according to claim 1,

wherein the key information includes a media public key and a media private key that are inherent to the information storage device,

wherein the allowance minimum key version is based on a date of manufacture of the controller, and

wherein the controller is further configured to

record the media public key and the media private key in the storage unit based on the MKS version that is equal to or greater in value than the allowance minimum key version.

5. The information storage device according to claim 4,

wherein the controller is further configured to:

determine a digital signature of the license management apparatus from the received MKS;

verify the digital signature; and

determine absence of falsification of the received MKS based on the verification of the digital signature.

6. The information storage device according to claim 1, wherein the media key binding log includes a first identifier of the key information and a second identifier of the controller.

7. The information storage device according to claim 6, wherein the controller is further configured to generate the media key binding log in which a falsification verification value is assigned to data that includes the first identifier of the key information and the second identifier of the controller.

13. The information storage device according to claim 1,

wherein the media key binding log includes an identifier of the media key set (MKS-ID), a controller identifier, and a message authentication code (MAC).

8. An information processing system, comprising:

an information storage device that has a storage unit and a controller;

a license management apparatus, comprising;

a first central processing unit (CPU); and

a first memory coupled to the first CPU, wherein the first memory comprises first instructions for causing the first CPU to generate a media key set (MKS) which is an inherent key set stored in the information storage device;

a controller manufacturing apparatus, comprising;

a second central processing unit (CPU); and

a second memory coupled to the second CPU, wherein the second memory comprises second instructions for causing the second CPU to manufacture the controller stored in the information storage device; and

a media manufacturing apparatus comprising;

a third central processing unit (CPU); and

a third memory coupled to the third CPU, wherein the third memory comprises third instructions for causing the third CPU to manufacture the information storage device,

wherein the license management apparatus is configured to;

set an MKS version that depends on a date and a time of the generation of the MKS, to be in the MKS; and

provide the MKS to the media manufacturing apparatus,

wherein the controller manufacturing apparatus is configured to;

store an allowance minimum MKS version, that depends on a date and a time of the manufacture of the controller, in the controller; and

provide the controller to the media manufacturing apparatus, and

wherein the media manufacturing apparatus is configured to;

insert the controller into the media;

input the MKS into the controller;

compare the MKS version recorded in the MKS and the allowance minimum MKS version; and

based on the MKS version that is equal to or greater in value than the allowance minimum MKS version, record in the storage unit, a media public key and a media private key that are included in the MKS.

9. The information processing system according to claim 8,

wherein the controller is further configured to generate and output a key binding log that includes an identifier of the MKS and an identifier of the controller, and

wherein the license management apparatus is further configured to input the key binding log and retain the key binding log as management data.

10. An information processing method, comprising:

in an information storage device;

receiving, by an interface of the information storage device, a media key set (MKS) from a license management apparatus,

wherein the MKS is inherent to the information storage device;

determining, by a controller of the information storage device, a MKS version and key information based on the received MKS;

recording, by the controller of the information storage device, the key information in a storage unit of the information storage device based on the MKS version that is equal to or greater in value than an allowance minimum key version,

wherein the allowance minimum key version is recorded in advance in the controller;

generating, by the controller of the information storage device, a media key binding log based on the key information; and

outputting, by the controller of the information storage device, the generated media key binding log to the license management apparatus.

11. A non-transitory computer-readable storage medium having stored thereon, computer-executable instructions for causing a controller of an information storage device to execute operations, the operations comprising:

controlling an interface of the information storage device to receive a media key set (MKS) from a license management apparatus,

wherein the MKS is inherent to the information storage device;

determining a MKS version and key information based on the received MKS

recording the key information in a storage unit of the information storage device based on the MKS version that is equal to or greater in value than an allowance minimum key version,

wherein the allowance minimum key version is recorded in advance in the controller;

generating a media key binding log based on the key information; and

outputting the generated media key binding log to the license management apparatus.

12. An information storage device, comprising:

an interface configured to receive a media key set (MKS) from a license management apparatus,

wherein the MKS is inherent to the information storage device;

a storage unit; and

a controller configured to;

determine a MKS version, a media public key, and a media private key based on the received MKS,

wherein the media public key and the media private key are inherent to the information storage device;

record the media public key and the media private key in the storage unit based on the MKS version that is equal to or greater in value than an allowance minimum key version,

wherein the allowance minimum key version is recorded in advance in the controller and is based on a date of manufacture of the controller;

generate a media key binding log based on the media public key and the media private key; and

output the generated media key binding log to the license management apparatus.