Information processing apparatus, information recording medium, information processing method, and computer program

• US 7,770,795 B2
• Filed: 04/12/2006
• Issued: 08/10/2010
• Est. Priority Date: 04/15/2005
• Status: Expired due to Fees

• Current Assignee: Sony Corporation (Sony Group Corp.)
• Original Assignee: Sony Corporation (Sony Group Corp.)
• Inventors: Takashima, Yoshikazu, Ueda, Kenjiro
• Primary Examiner(s): Labaze; Edwyn
• Application Number:
  US11/279,531
• Publication Number:
  US 20070194117A1
• Time in Patent Office: 1,581 Days
• Field of Search: 235/454, 235/375, 235/487, 235/494, 713/189, 713/193
• US Class Current: 235/454
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00362 the key being obtained from a media key block [MKB]
• CPC Class Codes: G11B 20/00492 wherein content or user data is encrypted
• CPC Class Codes: G11B 2020/10833 Copying or moving data from one record carrier to another
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/0869 involving random numbers or seeds
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04N 21/4408 involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network

Abstract

An information processing apparatus for recording information on an information recording medium is provided. The information processing apparatus includes a content cryptographic processor configured to generate encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content; a unit-key-file processor configured to generate a unit key file storing the unit key, and to encrypt the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of unit keys included in the unit key file; and a data recorder configured to record the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format.

Claims

1. An information processing apparatus for recording information on an information recording medium, the information processing apparatus comprising:

a content cryptographic processor configured to generate encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content;

a unit-key-file processor configured to;

(a) generate a unit key file storing the unit key; and

(b) encrypt the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with a change in constituent data of unit keys included in the unit key file; and

a data recorder configured to record the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format, wherein the data recorder is configured to;

(a) change a writing location on the information recording medium in accordance with the number of times of writing of or the number of times of access to the unit key file when writing the unit key file; and

(b) delete at least a part of data written to a location before changing the writing location.

2. The information processing apparatus according to claim 1, wherein the unit-key-file processor is configured to:

(a) set a new seed having a new value in accordance with an increase in the number of unit keys included in an existing unit key file recorded on the information recording medium or deletion of a unit key from the existing unit key file; and

(b) generate an updated unit key file that is encrypted using a new encryption key based on the new seed.

3. The information processing apparatus according to claim 1, wherein the unit-key-file processor is configured to:

(a) store in the unit key file a new unit key that is newly set in accordance with recording of a new content management unit on the information recording medium;

(b) set a new seed having a new value in accordance with addition of the new unit key; and

(c) generate an updated unit key file that is encrypted using a new encryption key based on the new seed.

4. The information processing apparatus according to claim 1, wherein the unit-key-file processor is configured to:

(a) delete from the unit key file a unit key associated with a content management unit that is to be moved or deleted in accordance with a move or deletion of the content management unit from the information recording medium;

(b) set a new seed having a new value in accordance with the deletion of the unit key; and

(c) generate an updated unit key file that is encrypted using a new encryption key based on the new seed.

5. The information processing apparatus according to claim 1, wherein the unit-key-file processor is configured to encrypt the unit key file or the constituent data of the unit key file using an encryption key that is generated through encryption of the seed using a media key, the media key being obtained by processing of an encryption-key block using a device key stored in the information processing apparatus.

6. The information processing apparatus according to claim 1, wherein the data recorder is configured to record the seed in a user control data area that serves as a control information storage area, the user control data area being set at a recording location different from a recording location of a user data area where the unit key file is stored.

7. The information processing apparatus according to claim 1, wherein the data recorder is configured to write the unit key file according to a recording format in which an area for writing the unit key file is set using an error-correcting-code block as a unit for accessing data on the information recording medium.

8. The information processing apparatus according to claim 1, wherein the data deleted includes seed information.

9. The information processing apparatus according to claim 1, further comprising:

a drive that executes access to the information recording medium; and

a host that executes processing for accessing the information recording medium via the drive, wherein;

(a) the drive is configured to generate the seed; and

(b) the host is configured to;

(i) generate an encryption key using the seed generated by the drive; and

(ii) generate a unit key file encrypted using the encryption key.

10. An information processing method for recording information on an information recording medium, the information processing method comprising:

generating encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content;

generating a unit key file storing the unit key;

encrypting the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of unit keys included in the unit key file; and

recording the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format, wherein a writing location on the information recording medium is changed in accordance with the number of times of writing of or the number of times of access to the unit key file when writing the unit key file, and wherein at least a part of data written to a location is deleted before changing the writing location.

11. A computer readable medium storing a computer program for allowing a computer to execute a process of recording information on an information recording medium, the computer program causing the computer to:

generate encrypted content by executing encryption using a unit key associated with a content management unit that serves as a unit for controlling usage of content;

generate a unit key file storing the unit key;

encrypt the unit key file or constituent data of the unit key file using an encryption key that is generated using a seed whose value is updated in accordance with change in constituent data of unit keys included in the unit key file; and

record the content management unit including the encrypted content as constituent data and the unit key file on the information recording medium according to a predetermined data recording format, wherein a writing location on the information recording medium is changed in accordance with the number of times of writing of or the number of times of access to the unit key file when writing the unit key file, and wherein at least a part of data written to a location is deleted before changing the writing location.