Method and device for data decryption, a method and device for device identification, a recording medium, a method of disk production, and a method and apparatus for disk recording

• US 5,883,958 A
• Filed: 03/26/1997
• Issued: 03/16/1999
• Est. Priority Date: 04/01/1996
• Status: Expired due to Term

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Osawa, Yoshitomo, Ishiguro, Ryuji
• Primary Examiner(s): HAYES, GAIL O
• Application Number:
  US08/823,176
• Time in Patent Office: 720 Days
• Field of Search: 380/4, 380/5, 380/9, 380/20, 380/23, 380/30, 380/21, 380/44
• US Class Current: 705/57
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00326 the key being embossed on the record carrier
• CPC Class Codes: G11B 20/00536 wherein encrypted content data is subjected to a further, iterated encryption, e.g. interwoven encryption
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04N 2005/91364 the video signal being scrambled
• CPC Class Codes: H04N 5/913 for scrambling ; for copy protection

Abstract

A video disk playback apparatus includes a disk driver which retrieves video data and a key data table from a digital video disk, and a decoder board which has its own ID. The disk driver receives the ID from the decoder board, verifies the ID, selects key data based on it, calculates a first datum from the selected key data, and sends the datum to the decoder board. The decoder board calculates a second datum from the key data and first datum, and returns the second datum to the disk driver. The disk driver verifies the second datum, produces an encryption key, encrypts the video data based on it, and feeds the encrypted video data to the decoder board. The decoder board calculates a decryption key from the first datum, decrypts the video data based on it, and decodes the decrypted video data for display.

Claims

1. A method of data decryption implemented by a second device which receives encrypted data which has been encrypted based on a prescribed encryption key S, which had been generated in a prescribed manner, and supplied by a first device, and decrypts the encrypted data by using the encryption key S, said method comprising the steps of:

receiving encrypted data which has been encrypted based on the encryption key S and supplied by said first device; and

decrypting the encrypted data by using the encryption key S, said encryption key S being generated by implementing;

a step conducted by one of said first and second devices of receiving identification data from other of said first and second devices, selecting public keys α and

p relevant to the identification data, calculating a first datum C from the selected public keys α and

p and a random number k1 based on formula C=(α

^k1 mod p), and supplying the first datum C to said other device;

a step conducted by said other device of calculating a second datum r from the public keys * and p and a random number k2, supplying the second datum r to said one device, and calculating the encryption key S from the first datum C and the random number k2; and

a step conducted by said one device of calculating the encryption key S from the second datum r supplied by said other device and the random number k1.

2. A data decryption method according to claim 1, wherein device identification is implemented between said first and second devices by implementing:

a step conducted by said other device of calculating a third datum d from the first datum C, the second datum r, the public key p, the random number k2 and a private key n, and supplying the resulting third datum d to said one device; and

a step conducted by said one device of comparing a value which is calculated from the second datum r and the third datum d supplied by said other device and a prescribed public key β

with a value which is calculated from the public keys α and

p and the first datum C.

3. A data decryption method according to claim 2, wherein said data comprises data encrypted based on an encryption key Q, and wherein said second device receives from said first device encrypted data, which has been encrypted based on the encryption key S, and encrypted encryption keys x and y which have been produced by decrypting the encryption key Q based on the public keys α

, β and

p, decrypts the encrypted data by using the encryption key S, decrypts the encrypted encryption keys x and y by using the private key n and the public key p thereby to produce the decrypted encryption key Q, and decrypts the data by using the decrypted encryption key Q.

4. A data decryption method according to claim 1, wherein said public keys α

and p are data retrieved from a recording medium.

5. A device for data decryption which receives encrypted data which has been encrypted based on a prescribed encryption key S, which had been generated in a prescribed manner, and supplied by a first device, and decrypts the encrypted data by using the encryption key S, said device comprising:

a receiver which receives encrypted data which has been encrypted based on the encryption key S and supplied by said first device; and

a first decrypter which decrypts the encrypted data by using the encryption key S, said encryption key S being generated by implementing;

a step conducted by one of said first device and said data decryption device of receiving identification data from other of said first device and said data decryption device, selecting public keys α and

p relevant to the identification data, calculating a first datum C from the selected public keys α and

p and a random number k1 based on formula C=(α

^k1 mod p), and supplying the first datum C to said other device;

a step conducted by said other device of calculating a second datum r from the public keys * and p and a random number k2, supplying the second datum r to said one device, and calculating the encryption key S from the first datum C and the random number k2; and

a step conducted by said one device of calculating the encryption key S from the second datum r supplied by said other device and the random number k1.

6. A data decryption device according to claim 5, wherein device identification is implemented between said first device and said data decryption device by implementing:

a step conducted by said other device of calculating a third datum d from the first datum C, the second datum r, the public key p, the random number k2 and a private key n, and supplying the resulting third datum d to said one device; and

a step conducted by said one device of comparing a value which is calculated from the second datum r and the third datum d supplied by said other device and a prescribed public key β

with a value which is calculated from the public keys α and

p and the first datum C.

7. A data decryption device according to claim 6, wherein said encrypted data comprises data encrypted based on an encryption key Q, and wherein said data decryption device comprises:

a receiver which receives from said first device encrypted data, which has been encrypted based on the encryption key S, and encrypted encryption keys x and y which have been produced by decrypting the encryption key Q based on the public keys α

, β and

p;

a first decrypter which decrypts the encrypted data by using the encryption key S;

a key decrypter which decrypts the encrypted encryption keys x and y based on the private key n and the public key p thereby to produce the decrypted encryption key Q; and

a second decrypter which decrypts the encrypted data by using the decrypted encryption key Q.

8. A data decryption device according to claim 5, wherein said public keys α

and p are data retrieved from a recording medium.

9. A method of device identification implemented by one for other of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which receives the encrypted data and decrypts the encrypted data by using the encryption key S, said method comprising:

a step conducted by one of said first device and said data decryption device of receiving identification data from other of said first device and said data decryption device, selecting public keys α and

p relevant to the identification data, calculating a first datum C from the selected public keys α and

p and a random number k1 based on formula C=(α

^k1 mod p), and supplying the first datum C to said other device;

a step conducted by said other device of calculating second data r and d from the public keys α and

p and a random number k2, supplying the second data r and d to said one device;

a step conducted by said one device of comparing a value which is calculated from the second data r and d supplied by said other device and a prescribed public key β

with a value which is calculated from the public keys α and

p and the first datum C.

10. A recording medium played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption keys, said recording medium having a record of data which is generated by implementing:

a step of producing a key table by making correspondence of public keys α and

p, which are used to calculate the encryption key S, to identification data which are used to identify said first device or said data decryption device; and

a step of recording said data and said key table.

11. A recording medium according to claim 10, wherein said key table includes a public key β

, which is used to identify said first device or said data decryption device, in correspondence to said identification data.

12. A recording medium according to claim 10, wherein said data comprises data encrypted based on an encryption key Q, and wherein said key table includes encryption keys x and y, which are produced by encrypting the encryption key Q based on the public keys α

, β and

p, in correspondence to said identification data.

13. A method of data recording for a recording medium which is played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said method comprising:

a step of producing a key table by making correspondence of public keys α and

p, which are used to calculate the encryption key S, to identification data which are used to identify said first device of said data decryption device; and

a step of recording said data and said key table.

14. An apparatus for data recording for a recording medium which is played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said apparatus comprising:

means of producing a key table by making correspondence of public keys α and

p, which are used to calculate the encryption key S, to identification data which are used to identify said first device or said data decryption device; and

means of recording said data and said key table.

15. A recording medium played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said recording medium having a record of data which is generated by implementing:

a step of producing a key table by making correspondence of a public key β

, which is used to identify said first device or said data decryption device, to identification data; and

a step of recording said data and said key table.

16. A method of data recording for a recording medium which is played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said method comprising:

a step of producing a key table by making correspondence of a public key β

, which is used to identify said first device or said data decryption device, to identification data; and

a step of recording said data and said key table.

17. A record apparatus for a recording medium which is played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said recording apparatus comprising:

means of producing a key table by making correspondence of a public key β

, which is used to identify said first device or said data decryption device, to identification data; and

means of recording said data and said key table.

18. A recording medium played with a playback apparatus which consists of a first device which encrypts data, which has been encrypted based on an encryption key Q, by using a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S and further decrypts the resulting data by using the encryption key Q, said recording medium having a record of data which is generated by implementing:

a step of encrypting data based on the encryption key Q thereby to produce encrypted data;

a step of producing a key table by making correspondence of encryption keys x and y, which are produced by encrypting the encryption key Q based on public keys α and

p which are used to calculate the encryption key S and a public key β

which is used to identify said first device or said data decryption device, to identification data which are used to identify said first device or said data decryption device; and

a step of recording the data encrypted based on the encryption key Q and said key table.

19. A method of data recording for a recording medium which is played with a playback apparatus which consists of a first device which encrypts data, which has been encrypted based on an encryption key Q, by using a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S and further decrypts the resulting data by using the encryption key Q, said method comprising:

a step of encrypting data based on the encryption key Q thereby to produce encrypted data;

a step of producing a key table by making correspondence of encryption keys x and y, which are produced by encrypting the encryption key Q based on public keys α and

p which are used to calculate the encryption key S and a public key β

which is used to identify said first device or said data decryption device, to identification data which are used to identify said first device or said data decryption device; and

a step of recording the data encrypted based on the encryption key Q and said key table.

20. A record apparatus for a recording medium which is played with a playback apparatus which consists of a first device which encrypts data, which has been encrypted based on an encryption key Q, by using a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S and further decrypts the resulting data by using the encryption key Q, said apparatus comprising:

an encrypter which encrypts data based on the encryption key Q thereby to produce encrypted data;

means of producing a key table by making correspondence of encryption keys x and y, which are produced by encrypting the encryption key Q based on public keys α and

p which are used to calculate the encryption key S and a public key β

which is used to identify said first device or said data decryption device, to identification data which are used to identify said first device or said data decryption device; and

means of recording the data encrypted based on the encryption key Q and said key table.

21. A method of producing a record disk which is played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said method comprising:

a step of producing a key table by making correspondence of public keys α and

p, which are used to calculate the encryption key S, to identification data which are used to identify said first device or said data decryption device;

a step of recording said data and said key table on a master disk; and

a step of producing a record disk from said master disk.

22. A method of producing a record disk which is played with a playback apparatus which consists of a first device which encrypts data based on a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S, said method comprising:

a step of producing a key table by making correspondence of a public key β

, which is used to identify said first device or said data decryption device, to identification data;

a step of recording said data and said key table on a master disk; and

a step of producing a record disk from said master disk.

23. A method of producing a record disk which is played with a playback apparatus which consists of a first device which encrypts data, which has been encrypted based on an encryption key Q, by using a prescribed encryption key S thereby to produce encrypted data and a data decryption device which decrypts the encrypted data supplied by said first device by using the encryption key S and further decrypts the resulting data by using the encryption key Q, said method comprising:

a step of encrypting data based on the encryption key Q thereby to produce encrypted data;

a step of producing a key table by making correspondence of encryption keys x and y, which are produced by encrypting the encryption key Q based on public keys * and p which are used to calculate the encryption key S and a public key β

which is used to identify said first device or said data decryption device, to identification data which are used to identify said first device or said data decryption device;

a step of recording the data encrypted based on the encryption key Q and said key table on a master disk; and

a step of producing a record disk from said master disk.