Data delivery method and data delivery system

• US 20020106086A1
• Filed: 10/27/2001
• Published: 08/08/2002
• Est. Priority Date: 12/28/2000
• Status: Active Grant

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Yamashita, Masami, Kamiya, Shigeki
• Granted Patent: US 7,421,082 B2
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/631 Multimode Transmission, e.g. transmitting basic layers and enhancement layers of the content over different transmission paths or transmitting with different error corrections, different keys or with different transmission protocols
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection
• CPC Class Codes: H04N 7/162 Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/1675 Providing digital key or authorisation information for generation or regeneration of the scrambling sequence pseudo-random number generators in general G06F7/58
• CPC Class Codes: H04N 7/17345 Control of the passage of the selected programme

Abstract

A data delivery system highly resistant to misappropriation of data. A plurality of pieces of key information are generated on the basis of an encryption key specific to each digital data item to be delivered. The multiple pieces of key information are delivered over routes which differ from the routes used to deliver the digital data and which further differ from each other. Physically different media or transmission over a network at different times are used to transmit the different sets of key information separately.

Claims

1. A digital data delivery method for use in delivering digital data from an upstream system to a downstream system, said upstream system providing multipoint delivery of encrypted digital data to specific destinations, and said downstream system decrypting the delivered digital data, said method comprising the steps of:

encrypting digital data by said upstream system using an encryption key;

generating a plurality of pieces of key information on the basis of said encryption key, respective pieces of said key information being specific to each of said specific destinations;

delivering said respective pieces of key information to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other;

delivering the encrypted digital data;

restoring said encryption key by said downstream system using said respective pieces of key information delivered over said plurality of delivery routes; and

using the restored encryption key to decrypt the encrypted digital data.

2. A digital data delivery method for use in delivering digital data from an upstream system to a downstream system, said upstream system providing multipoint delivery of encrypted digital data to specific destinations, and said downstream system decrypting the delivered digital data, said method comprising the steps of:

encrypting digital data by said upstream system using an encryption key;

generating on the basis of said encryption key, sets of passkeys specific to said specific destinations;

delivering either a set of passkeys or passkey information, from which said passkeys may be reproduced, to a respective destination over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other;

delivering the encrypted digital data;

restoring said encryption key by said downstream system using either said set of passkeys or said passkey information delivered over said plurality of delivery routes; and

using the restored encryption key to decrypt the encrypted digital data.

3. A digital data delivery method for use in delivering digital data from an upstream system to a downstream system, said upstream system providing multipoint delivery of encrypted digital data to specific destinations, and said downstream system decrypting the delivered digital data, said method comprising the steps of:

encrypting digital data by said upstream system using an encryption key;

generating on the basis of said encryption key, a set of passkeys specific to each of said specific destinations;

generating a plurality of partial keys based on a portion of the passkeys in said set or a portion of passkey information from which said passkeys may be reproduced;

delivering either said plurality of partial keys or partial key information, from which said partial keys may be reproduced, and delivering the remaining passkeys not used to generate said partial keys or the remaining passkey information, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other;

delivering the encrypted digital data;

restoring said encryption key by using said downstream system using either said plurality of partial keys or said partial key information and using either said remaining passkeys or said remaining passkey information delivered over said plurality of delivery routes; and

using the restored encryption key to decrypt the encrypted digital data.

4. A digital data delivery method for use in delivering digital data from an upstream system to a downstream system, said upstream system providing multipoint delivery of encrypted digital data to specific destinations, and said downstream system decrypting the delivered digital data, said method comprising the steps of:

encrypting digital data by said upstream system using a first encryption key;

generating second encryption keys specific to respective destinations and/or to said digital data;

using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said second encryption key or second encryption key information from which said second encryption key may be reproduced, to respective destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other;

delivering the encrypted digital data;

restoring said first encryption key by said downstream system using the delivered second encryption key or second encryption key information to decrypt either the delivered encrypted first encryption key or the delivered encrypted first encryption key information; and

using the restored first encryption key to decrypt the encrypted digital data.

5. A digital data delivery method for use in delivering digital data from an upstream system to a downstream system, said upstream system providing multipoint delivery of encrypted digital data to specific destinations, and said downstream system decrypting the delivered digital data, said method comprising the steps of:

encrypting digital data by said upstream system using a first encryption key;

generating a second encryption key specific to each of said specific destinations and/or to said digital data;

using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

generating, on the basis of said second encryption key, a set of passkeys;

delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said set of passkeys or passkey information, from which said set of passkeys may be reproduced, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other;

delivering the encrypted digital data;

restoring said second encryption key by using either said set of passkeys or said passkey information delivered over said plurality of delivery routes so as to decrypt either said first encryption key or said first encryption key information and thereby restore said first encryption key; and

decrypting the encrypted digital data by use of the restored first encryption key.

6. A signal processing method for use with an upstream system providing multipoint delivery of encrypted digital data to specific destinations, said method comprising the steps of:

encrypting digital data by said upstream system using an encryption key;

generating a plurality of pieces of key information, on the basis of said encryption key, respective pieces of said key information being specific to each of said specific destinations;

delivering said respective pieces of key information to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

delivering the encrypted digital data.

7. A signal processing method for use with an upstream system providing multipoint delivery of encrypted digital data to specific destinations, said method comprising the steps of:

encrypting digital data by said upstream system using an encryption key;

generating on the basis of said encryption key, sets of passkeys specific to said specific destinations;

delivering either a set of passkeys or passkey information, from which said passkeys may be reproduced, to a respective destination over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

delivering the encrypted digital data.

8. A signal processing method for use with an upstream system providing multipoint delivery of encrypted digital data to specific destinations, said method comprising the steps of:

encrypting digital data by said upstream system using an encryption key;

generating on the basis of said encryption key, a set of passkeys specific to each of said specific destinations;

generating a plurality of partial keys based on a portion of the passkeys in said set or a portion of passkey information from which said passkeys may be reproduced;

delivering either said plurality of partial keys or partial key information, from which said partial keys may be reproduced, and delivering the remaining passkeys not used to generate said partial keys or the remaining passkey information, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

delivering the encrypted digital data.

9. A signal processing method for use with an upstream system providing multipoint delivery of encrypted digital data to specific destinations, said method comprising the steps of:

encrypting digital data by said upstream system using a first encryption key;

generating a second encryption key specific to respective specific destinations and/or to said digital data;

using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said second encryption key or second encryption key information from which said second encryption key may be reproduced, to respective destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

delivering the encrypted digital data.

10. A signal processing method for use with an upstream system providing multipoint delivery of encrypted digital data to specific destinations, said method comprising the steps of:

encrypting digital data by said upstream system using a first encryption key;

generating a second encryption key specific to each of said specific destinations and/or to said digital data;

using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

generating, on the basis of said second encryption key, a set of passkeys;

delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said set of passkeys or passkey information, from which said set of passkeys may be reproduced, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

delivering the encrypted digital data.

11. A digital data delivery system comprising an upstream system providing multipoint delivery of encrypted digital data to specific destinations and a downstream system decrypting the delivered digital data;

said upstream system including;

an encrypting element for encrypting digital data using an encryption key;

a key information generator for generating a plurality of pieces of key information on the basis of said encryption key, respective pieces of said key information being specific to each of said specific destinations;

a key information delivery element for delivering said respective pieces of key information to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from one another; and

a digital data delivery element for delivering the encrypted digital data;

and said downstream system including;

an encryption key restoring element for restoring said encryption key using respective pieces of key information delivered over said plurality of delivery routes; and

a decrypting element for decrypting the encrypted digital data by using the restored encryption key.

12. A digital data delivery system comprising an upstream system providing multipoint delivery of encrypted digital data to specific destinations and a downstream system decrypting the delivered digital data;

said upstream system including;

an encrypting element for encrypting digital data using an encryption key;

a key information generator for generating, on the basis of said encryption key, sets of passkeys specific to said specific destinations;

a key information delivery element for delivering either a set of passkeys or passkey information, from which said passkeys may be reproduced, to a respective destination over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data;

and said downstream system including;

an encryption key restoring element for restoring said encryption key using either said set of passkeys or said passkey information delivered over said plurality of delivery routes; and

a decrypting element for decrypting the encrypted digital data using the restored encryption key.

13. A digital data delivery system comprising an upstream system providing multipoint delivery of encrypted digital data to specific destinations and a downstream system decrypting the delivered digital data;

said upstream system including;

an encrypting element for encrypting digital data using an encryption key;

a first key information generator for generating, on the basis of said encryption key, a set of passkeys specific to each of said specific destinations;

a second key information generator for generating a plurality of partial keys based on a portion of the passkeys in said set or a portion of passkey information, from which said passkeys may be reproduced;

a key information delivery element for delivering either said plurality of partial keys or partial key information, from which said partial keys may be reproduced, and for delivering the remaining passkeys not used to generate said partial keys or the remaining passkey information, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data;

and said downstream system including;

an encryption key restoring element for restoring said encryption key using either said plurality of partial keys or said partial key information and using either said remaining passkeys or said remaining passkey information delivered over said plurality of delivery routes; and

a decrypting element for decrypting the encrypted digital data using the restored encryption key.

14. A digital data delivery system comprising an upstream system providing multipoint delivery of encrypted digital data to specific destinations and a downstream system decrypting the delivered digital data;

said upstream system including;

a first encrypting element for encrypting digital data using a first encryption key;

a key information generator for generating a second encryption key specific to respective specific destinations and/or to said digital data;

a second encrypting element for encrypting either said first encryption key or first encryption key information from which said first encryption key may be reproduced by using said second encryption key;

a key information delivery element for delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said second encryption key or second encryption key information from which said second encryption key may be reproduced, to respective destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data;

and said downstream system including;

an encryption key restoring element for restoring said first encryption key by using the delivered second encryption key or second encryption key information to decrypt either the delivered encrypted first encryption key or the delivered encrypted first encryption key information; and

a decrypting element for decrypting the encrypted digital data by using the restored first encryption key.

15. A digital data delivery system comprising an upstream system providing multipoint delivery of encrypted digital data to specific destinations and a downstream system decrypting the delivered digital data;

said upstream system including;

an encrypting element for encrypting digital data using a first encryption key;

an encryption key generator for generating a second encryption key specific to each of said specific destinations and/or to said digital data;

a first key information generator using said second encryption key for encrypting either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

a second key information generator using said second encryption key for generating a set of passkeys;

a key information delivery element for delivering either said encrypted first encryption key or said encrypted first encryption key information and for delivering either said set of passkeys or passkey information from which said set of passkeys may be reproduced, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data;

and said downstream system including;

an encryption key restoring element for restoring said second encryption using either said set of passkeys or said passkey information delivered over said plurality of delivery routes so as to decrypt either said first encryption key or said first encryption key information and thereby restore said first encryption key; and

a decrypting element for decrypting the encrypted digital data by use of the restored first encryption key.

16. An upstream system for providing multipoint delivery of encrypted digital data to specific destinations, comprising:

an encrypting element for encrypting digital data using an encryption key;

a key information generator for generating a plurality of pieces of key information, on the basis of said encryption key, respective pieces of said key information being specific to each of said specific destinations;

a key information delivery element for delivering said respective pieces of key information to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data.

17. An upstream system for providing multipoint delivery of encrypted digital data to specific destinations, comprising:

a key information generator for generating, on the basis of said encryption key, sets of passkeys specific to said specific destinations;

a key information delivery element for delivering either said set of passkeys or passkey information, from which said passkeys may be reproduced, to a respective destination over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data.

18. An upstream system for providing multipoint delivery of encrypted digital data to specific destinations, comprising:

an encrypting element for encrypting digital data using an encryption key;

a first generator for generating on the basis of said encryption key, a set of passkeys specific to each of said specific destinations;

a second generator for generating a plurality of partial keys based on a portion of the passkeys in said set or a portion of passkey information from which said passkeys may be reproduced;

a key information delivery element for delivering either said plurality of partial keys or partial key information, from which said partial keys may be reproduced, and delivering the remaining passkeys not used to generate said partial keys or the remaining passkey information, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data.

19. An upstream system for providing multipoint delivery of encrypted digital data to specific destinations, comprising:

a first encrypting element for encrypting digital data using a first encryption key;

a key generator for generating a second encryption key specific to respective specific destinations and/or to said digital data;

a second encrypting element using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

a key information delivery element for delivering either said encrypted first encryption key or said encrypted first encryption key information and for delivering either said second encryption key or second encryption key information from which said second encryption key may be reproduced, to respective destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data.

20. An upstream system for providing multipoint delivery of encrypted digital data to specific destinations, comprising:

a first encrypting element for encrypting digital data using a first encryption key;

a first generator for generating a second encryption key specific to each of said specific destinations and/or to said digital data;

a second encrypting element using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

a second generator for generating, on the basis of said second encryption key, a set of passkeys;

a key information delivery element for delivering either said encrypted first encryption key or said encrypted first encryption key information and for delivering either said set of passkeys or passkey information, from which said set of passkeys may be reproduced, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

a digital data delivery element for delivering the encrypted digital data.

21. A storage medium which stores a computer-readable program for controlling the steps of:

encrypting digital data using an encryption key;

generating a plurality of pieces of key information, on the basis of said encryption key, respective pieces of said key information being specific to each of specific destinations;

delivering said respective pieces of key information to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

performing multipoint delivery of the encrypted digital data to said specific destinations.

22. A storage medium which stores a computer-readable program for controlling the steps of:

encrypting digital data using an encryption key;

generating on the basis of said encryption key, sets of passkeys specific to specific destinations;

delivering either a set of passkeys or passkey information, from which said passkeys may be reproduced, to a respective destination over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

performing multipoint delivery of the encrypted digital data to said specific destinations.

23. A storage medium which stores a computer-readable program for controlling the steps of:

encrypting digital data using an encryption key;

generating on the basis of said encryption key, a set of passkeys specific to each of specific destinations;

generating a plurality of partial keys based on a portion of the passkeys in said set or a portion of passkey information from which said passkeys may be reproduced;

delivering either said plurality of partial keys or partial key information, from which said partial keys may be reproduced, and delivering the remaining passkeys not used to generate said partial keys or the remaining passkey information, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

performing multipoint delivery of the encrypted digital data to said specific destinations.

24. A storage medium which stores a computer-readable program for controlling the steps of:

encrypting digital data using a first encryption key;

generating a second encryption key specific to respective specific destinations and/or to said digital data;

using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said second encryption key or second encryption key information from which said second encryption key may be reproduced, to respective destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

performing multipoint delivery of the encrypted digital data to said specific destinations.

25. A storage medium which stores a computer-readable program for controlling the steps of:

encrypting digital data by said upstream system using a first encryption key;

generating a second encryption key specific to each of said specific destinations and/or to said digital data;

using said second encryption key to encrypt either said first encryption key or first encryption key information from which said first encryption key may be reproduced;

generating, on the basis of said second encryption key, a set of passkeys;

delivering either said encrypted first encryption key or said encrypted first encryption key information and delivering either said set of passkeys or passkey information, from which said set of passkeys may be reproduced, to each of said specific destinations over a plurality of delivery routes which differ from routes for delivering said digital data and which are further different from each other; and

performing multipoint delivery of the encrypted digital data to said specific destinations.