JP2001218185A - Device and system for transferring data and program recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve the problem that copyright protect is difficult by conventional PCI transfer. SOLUTION: This data tranfer device is provided with an enciphering means 24 provided with an input data analyzing means for analyzing input data based on prescribed reference, an enciphering object deciding means for deciding an object to be enciphered based on the result of analysis and an enciphering data generating means for enciphering the decided object and outputting it as enciphered data. The data transfer device is further provided with a transfer means 4 for transferring at least enciphered data to a transfer opposite party.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to, for example, a PCI (Peri) used in a personal computer.
ferral Component Intercon
The present invention relates to a data transfer device, a data transfer system, and a program recording medium for performing data transfer of the next (nect).

[0002]

2. Description of the Related Art The configuration and operation of a conventional data transfer system will be described below with reference to FIG. FIG. 10 is a block diagram showing a configuration of a conventional data transfer system.

In FIG. 10, reference numeral 200 denotes a conventional PCI card for receiving a digital television (DTV), and 201 denotes a personal computer. 1 is input data by a high frequency signal, 2 is a tuner, 3 is demodulation means for demodulating digital modulation, and 16 is an MPEG-2 system (IS
O / IEC13818-1) compliant TS (Transport Stream), 4 is PCI (Peripheral)
Transfer means for transferring the TS 16 via a Component Interconnect (bus) 11, a central processing means 5, a main storage means 6, a hard disk 7, a second bridge means 8, a first bridge means 9, and a first bridge means 10. A main bus connecting the first bridge means 9 and the second bridge means 8, and 12 is an AGP (Advanced Grade).
phis Port) bus, 13 a graphic card, 14 a display means, 15 a sound card, 17 an I
DE bus.

The input data 1 based on the high-frequency signal is selected by a tuner 2 for a program, demodulated digitally by a demodulator 3 and output as a TS 16.

The TS 16 is taken into the personal computer 201 by the transfer means 4 via the PCI bus 11, and taken into the main storage means 6 via the first bridge means 9, the main bus 10, and the second bridge means 8. The data is separated into digital compressed video data and digital compressed audio data by the central processing means 5.

[0006]

By the way, the digitally compressed video data is decoded, transferred to the graphic card 13 via the AGP bus 12 and displayed on the display means 14.
Is displayed with. The digital compressed audio data is decoded and transferred to the sound card 15 via the PCI bus 11.

However, the TS 16 is connected to the personal computer 2 via the PCI bus 11 which is a general-purpose bus.
01, the TS 16 is inserted into an expansion slot directly connected to the PCI bus 11 to read out the TS 16 from the PCI bus 11, for example, by inserting a TS 16 into the expansion slot directly connected to the PCI bus 11. However, there is a problem that it is difficult to maintain the copyright protection of the PCI bus 11 of the personal computer 201 for the purpose of illegal data acquisition by a personal computer user.

In view of the above problems, the present invention provides a data transfer apparatus, a data transfer system, and a program recording medium which are capable of performing, for example, copyright-protectable PCI transfer in DTV reception. The purpose is to do so.

[0009]

Means for Solving the Problems The first invention (claim 1)
Corresponding to input data analysis means for analyzing input data based on a predetermined criterion, encryption object determination means for determining an object to be encrypted based on the result of the analysis, and encrypting the determined object. A data transfer device comprising: an encrypted data generating unit that outputs encrypted data as encrypted data; and a transfer unit that transfers at least the encrypted data to a transfer partner.

According to a second aspect of the present invention (corresponding to claim 2), the input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, and the input data is based on the predetermined criterion. The analysis of the data is the analysis of the packet identifier, and the object to be encrypted based on the result of the analysis is a portion of the packet having the packet identifier based on the analyzed packet identifier, which does not include the packet identifier. A first aspect of the present invention is a data transfer device according to the present invention.

According to a third aspect of the present invention (corresponding to claim 3), the input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, and the signal is a program clock signal. The analysis of the input data based on the predetermined criterion is the analysis of the packet identifier, and the target to be encrypted based on the result of the analysis is a packet having the analyzed packet identifier. However, if it is analyzed that (1) the program clock signal is included, the packet is a portion that does not include the packet identifier or the program clock signal in the packet, and (2) it is analyzed that it does not include the program clock signal. In the first aspect of the present invention, the packet is a portion not including the packet identifier in the packet. It is a data transfer device.

According to a fourth aspect of the present invention (corresponding to claim 4), the packet has a data length of 188 bytes.
2 is a TS packet to be encrypted based on the result of the analysis. If the packet having the analyzed packet identifier is analyzed to include (1) a program clock signal, (2) When analyzed not to include the program clock signal, the portion is within 4 bytes from the beginning of the packet. Data transfer device.

According to a fifth aspect of the present invention (corresponding to claim 5), the input data includes video data and / or audio data. Device.

According to a sixth aspect of the present invention (corresponding to claim 6), a transfer header generating means for generating a transfer header, and a transfer header addition for adding the transfer header to the encrypted data to generate transfer data Means for transferring the transfer data to the transfer partner, wherein the transfer header has information on the data size of the transfer data and / or encryption mode information for indicating permission of copying. And / or a time stamp for indicating a time at which the input data is transferred, according to any one of the first to fifth data transfer apparatuses of the present invention.

According to a seventh aspect of the present invention (corresponding to claim 7), there is provided a transfer header generating apparatus for generating a transfer header having encryption mode information used for permitting a copy to be performed by the transfer partner. Means, transfer header adding means for adding the transfer header to the encrypted data to generate transfer data, and authentication means for authenticating the copy permission using the encryption mode information. And the transfer means transfers the transfer data to the transfer partner, according to any one of the first to fifth data transfer apparatuses of the present invention.

An eighth aspect of the present invention (corresponding to claim 8) is an input data analyzing means for analyzing input data based on a predetermined criterion, and an encryption means for determining an object to be encrypted based on the result of the analysis. Target determining means, encrypted data generating means for encrypting the determined target and outputting the data as encrypted data, and transfer means for transferring at least the encrypted data to a transfer partner. A data transfer device, a main storage unit for processing the encrypted data, and a central processing unit for managing the main storage unit, a computer comprising: A data transfer system comprising: a data transfer device; and a transfer bus connecting the computer.

According to a ninth aspect of the present invention (corresponding to claim 9), the input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed. The analysis of the data is the analysis of the packet identifier, and the object to be encrypted based on the result of the analysis is a portion of the packet having the packet identifier based on the analyzed packet identifier, which does not include the packet identifier. The data processing system according to an eighth aspect of the present invention, wherein the central processing means can separate the packet based on the transferred unencrypted packet identifier.

According to a tenth aspect of the present invention (corresponding to claim 10), the input data includes video data and / or audio data, and the separation of the packet includes the step of converting the encrypted video data into Said packet having
The ninth aspect of the present invention is the data transfer system according to the ninth aspect, wherein the packet having the encrypted audio data is separated.

The eleventh invention (corresponding to claim 11) provides:
The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, and the signal has a packet having a program clock signal, and the input data is based on the predetermined criterion. Is the analysis of the packet identifier, and wherein the central processing means can reproduce a system clock signal from the program clock signal according to any one of the eighth to tenth aspects of the present invention. It is a transfer system.

The twelfth invention (corresponding to claim 12) provides:
The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, and the signal has a packet having a program clock signal, and the input data is based on the predetermined criterion. Is the analysis of the packet identifier, and the object to be encrypted based on the result of the analysis is that if the packet having the analyzed packet identifier is analyzed (1) to include the program clock signal, A portion of the packet that does not include the packet identifier or the program clock signal, and (2) a portion of the packet that does not include the packet identifier when the analysis is performed without the program clock signal. Wherein the central processing unit calculates the program clock signal from the unencrypted program clock signal. A ninth or tenth data transfer system of the present invention which is characterized in that it is possible to reproduce the system clock signal.

A thirteenth aspect of the present invention (corresponding to claim 13) is:
The data transfer device includes: a transfer header generating unit configured to generate a transfer header having encryption mode information used for permitting a copy to be performed by the computer; and the transfer header having the encrypted transfer header. Transfer header adding means for generating transfer data by adding the transfer data to the data; and authentication means for authenticating the copy permission using the encryption mode information. The data transfer system according to any one of the eighth to twelfth aspects of the present invention, wherein the data is transferred to the transfer destination.

The fourteenth invention (corresponding to claim 14) is:
The data transfer device generates transfer data by generating a transfer header having a time stamp for indicating a time at which the input data is transferred, and adding the transfer header to the encrypted data to generate transfer data. Any one of the eighth to twelfth, wherein the central processing means has a reference clock for reproducing a system clock signal using the time stamp. Is a data transfer system according to the present invention.

The fifteenth invention (corresponding to claim 15) is:
The data transfer system according to any one of the eighth to fourteenth aspects, wherein the transfer bus is a PCI bus.

According to a sixteenth aspect of the present invention (corresponding to claim 16),
A program recording medium for recording a program and / or data for causing a computer to execute all or a part of the functions of all or part of any one of the first to fifteenth aspects of the present invention. A program recording medium that is readable.

[0025]

Embodiments of the present invention will be described below with reference to the drawings.

First, referring mainly to FIG.
The configuration of the data transfer system according to the present embodiment will be described. FIG. 1 is a block diagram showing a configuration of the data transfer system according to the embodiment of the present invention.

In FIG. 1, reference numeral 150 denotes a DTV receiving PC.
An I card 201 is a personal computer. 21 is a transfer header generating means, 22 is a transfer header, 2
3 is transfer header adding means, 24 is encryption means for encrypting a part or all of input data, 25 is transfer data,
6 is an authentication unit, 27 is a reference clock generation unit, and 28 is a reference clock.

Note that the DTV receiving PCI according to the present embodiment is
The card corresponds to the data transfer device of the present invention. Also,
Personal computer 201 of the present embodiment corresponds to the computer of the present invention.

The encryption means 24 is means for encrypting the input data according to the flowchart shown in FIG. FIG. 3 is a flow chart showing the processing procedure of the encryption means in the embodiment of the present invention, and corresponds to step 7 in FIG.
1 is a start, step 72 is an analysis of a TS header, step 73 is a determination as to whether or not it is a video PID, and 74 is a first encryption process which encrypts subsequent TS data without encrypting the first 4 bytes of the TS packet. Step 75 is a judgment as to whether or not it is an audio PID. Step 76 is a PCR
Is determined as to whether or not the PID is the PID of the second encryption.
The subsequent TS data is encrypted without encrypting the first 12 bytes of the S packet, and step 78 ends. As will be described later, the input data in the present embodiment is a TS of MPEG-2 having a data length of 188 bytes.
(Transport stream) packet (ISO / IE
C13818-1), and the above-described encryption is performed in units of 8 bytes.

It should be noted that the encryption means 24 of the present embodiment
This corresponds to a combination of the input data analysis unit, the encryption target determination unit, and the encrypted data generation unit of the present invention.

The transfer header generating means 21 is a means for generating and outputting a transfer header 50 (see FIG. 4) described later.

The transfer header adding means 23 adds a transfer header 50 (see FIG. 4) to the transfer content 51 (see FIG. 4) generated from the TS packet constituting the input data.
(See Reference).

The central processing means 5 is a means for performing authentication processing and decryption processing according to the flowcharts shown in FIGS. FIG. 6 is a flowchart showing the procedure of the authentication processing and the decryption processing in the embodiment of the present invention.
6, the authentication process executed by performing authentication between the first and second processes, Step 103 is the decryption process, and Step 104 is the end.

FIG. 7 is a flowchart showing in detail the procedure of the decoding process (step 103 in FIG. 6) according to the embodiment of the present invention.
1 is a demultiplexing process, 92 is whether or not it is a video PID, 93 is an encrypted digital video decoding process, 94
Is an audio PID determination, and 95 is an encrypted digital audio decryption process.

FIG. 8 is a flowchart showing in detail the procedure of the demultiplexing process (step 91 in FIG. 7) according to the embodiment of the present invention. Step 80 is a start, step 81 is a TS header analysis, and 82 Is a video PID determination, 83 is an encrypted digital video data output, step 84 is an audio PID determination, step 85 is an encrypted digital audio data output, and step 86 is a PCR PID. It is determined whether or not there is, step 87 is PCR extraction, 88 is generation of STC (system time clock), and step 89 is the end.

Note that the STC of the present embodiment corresponds to the system clock signal of the present invention.

FIG. 9 is a flowchart showing in detail the procedure of STC generation (step 88 in FIG. 8).

Next, the configuration of an MPEG-2 TS packet according to the present embodiment will be described with reference to FIG. FIG. 2 shows M in the embodiment of the present invention.
FIG. 3 is a schematic diagram illustrating a configuration of a PEG-2 TS packet.

In FIG. 2, reference numeral 41 denotes a synchronization byte in the first byte of the TS packet, 42 denotes a PID (that is, a packet identifier) which is located at the 12th to 24th bits from the beginning of the TS packet, 43 denotes an adaptation field, 44 is an optional field, 45
Is the PCR (Program Clock Reference) at the 49th to 92nd bits from the beginning of the TS packet,
6 is a payload. The PID 42 is 0x11
(Video), 0x12 (audio), 0x13 (PC
R) takes any value. The PCR 45 is optional, and the payload 46 is compressed data of video or audio. Further, in the present embodiment, the four bytes from the beginning of the TS packet, that is, the portion from the synchronization byte 41 to the cyclic counter in FIG. 2 is called a TS header, and the portion following the adaptation field 43 is called TS data.

The PCR 45 of this embodiment corresponds to the program clock signal of the present invention.

Next, the configuration of the transfer data in the present embodiment will be described with reference to FIGS. FIG. 4 is a schematic diagram showing a configuration of transfer data according to the embodiment of the present invention. FIG.
FIG. 5A is a schematic diagram showing the configuration of the transfer content 51 (see FIG. 4) when the TS packet is video or audio according to the embodiment of the present invention.
(B) is a schematic diagram showing a configuration of the transfer content 51 (see FIG. 4) when the TS packet includes a PCR.

In FIG. 4, reference numeral 50 denotes a transfer header having a data length of 4 bytes, reference numeral 51 denotes transfer content, and reference numeral 52 denotes a personal computer 201 (see FIG. 1).
Side is a synchronization signal (for example, 0xB8 (0x represents a hexadecimal number) or the like) used for detecting transfer data, and 53
Is the format of the transfer content 51 (eg, MPE
G-2 TS, DV (digital video camera format), etc.), and 54 is encryption mode information (copy prohibited, copy permitted once, copy prohibited any more, copy free, etc.). , 55 is a transfer content size indicating the size of the transfer content 51, 56 is a reserve (other data), and 57 is a time stamp.

The encryption mode information 54 is used to permit copying performed by the personal computer 201 (see FIG. 1), as will be described later. Also,
Although the size of the transfer content differs depending on the format 53, sending the size as the transfer content size 55 facilitates reception on the personal computer 201 (see FIG. 1) side. Time stamp 5
Numeral 7 is for reproducing the time of the TS 16 (see FIG. 1) on the personal computer 201 (see FIG. 1) side.
When using an asynchronous bus such as the PCI bus 11,
This is to prevent the time at which the input data 1 is received from deviating from the time at which the input data 1 is demodulated (for example, the time at which the TS 16 is input to the transfer means 4 is determined by the clock 33 of the PCI bus 11). Use the value counted at 3 MHz).

The transfer content size 55 of the present embodiment corresponds to the information on the data size of the transfer data of the present invention.

5A and 5B, the transfer content 51 (see FIG. 4) is obtained from an MPEG-2 TS packet having a data length of 188 bytes (the structure is shown in FIG. 2). 60 is the TS header, 6
1 corresponds to the TS data following it, area 62 is a first clear area, 63 is a first encryption area, 64 is a second clear area, and 65 is a second encryption area. More specifically, when the TS packet is video or audio, the transfer content 51 (see FIG. 4) in the transfer data 25 (see FIG. 1) encrypts four bytes from the beginning of the TS packet. In the case where the remaining 184 bytes are encrypted and the TS packet includes the PCR, the remaining 176 bytes are generated by encrypting the remaining 176 bytes without encrypting the first 12 bytes of the TS packet. .

The reason why the transfer content 51 (see FIG. 4) is generated by such encryption is as follows. That is, as shown in FIG.
Since it is in the 12th to 24th bits from the packet head, it is within 4 bytes from the TS packet head. Also,
Since the PCR is at the 49th to 92nd bits from the head of the TS packet, the PCR is within 12 bytes from the head of the TS packet. By the way, since the TS packet length is 188 bytes, if encryption is performed in units of 8 bytes, a 4-byte fraction processing is required. Therefore, if the portion to be cleared (not encrypted) is 4 bytes, the remaining portion is 1 byte.
84 bytes is a multiple of 8 bytes. Even if the portion to be cleared is 12 bytes, the remaining portion is a multiple of 8 bytes of 168 bytes, so that there is an advantage that the fraction processing is unnecessary.

The operation of the data transfer system according to the present embodiment having such a configuration will be described mainly with reference to FIG.

When the tuner 2 receives the input data 1 based on the high-frequency signal, the tuner 2 selects a program based on the fact that the program number in the present embodiment is 1, and the demodulation means 3 demodulates the digital modulation of the input data 1. do it,
The TS 16 is output to the encryption means 24.

The encrypting means 24 generates the transfer content 51 (see FIG. 4) by encrypting the TS 16.

Here, the operation of the encryption means 24 will be described in detail with reference to FIG.

In FIG. 3, the encryption means 24 analyzes the PID of the TS header 60 (see FIGS. 5A and 5B) at step 72 (an example of the operation performed by the input data analysis means of the present invention). .

(1) In step 73, the PID is video P
In the case of the ID (0x11), only the first four bytes of the TS data are not encrypted as shown in FIG. 5A (an example of the operation performed by the encryption target determining unit of the present invention), and the remaining 184 bytes are not encrypted. The bytes are encrypted (an example of the operation performed by the encrypted data generation unit of the present invention).

(2) In step 75, even if the PID is an audio PID (0x12), only the first 4 bytes of the TS packet are not encrypted, and the remaining 184 bytes are encrypted.

(3) In step 76, the PID is set to PCR
In the case of the PID (0x13), as shown in FIG. 5B, only the first 12 bytes of the TS packet are not encrypted, and the remaining 176 bytes are encrypted.

As described above in detail, by performing such processing, troublesome fraction processing becomes unnecessary.

The encryption means 24 (see FIG. 1) transfers the transfer content 51 (see FIG. 4) as described above.
Is generated and output to the transfer header adding means 23 (see FIG. 1). On the other hand, the transfer header generating means 21 (see FIG. 1)
The transfer header 50 (see FIG. 4) is generated and output to the transfer header adding means 23 (see FIG. 1).

The transfer header adding means 23 is provided with the encrypting means 2
In the transfer content 51 (see FIG. 4) output from
Transfer header 50 output from transfer header generating means 21
The transfer data 25 is generated by adding (see FIG. 4) and output to the transfer means 4.

The transfer means 4 inputs the transfer data 25 from the transfer header adding means 23 and notifies the authentication means 26 of the input.

The authentication means 26 outputs the notification from the transfer means 4 to the central processing means 5 of the personal computer 201 as the transfer partner.

Upon receiving the notification from the authentication means 26, the central processing means 5 performs authentication processing with the authentication means 26 (FIG. 6).
Step 102) is performed. The authentication means 26 participates in this authentication process (step 102 in FIG. 6) by using the encryption mode information 54 (see FIG. 4) of the transfer header 50 in the transfer data 25.

When the authentication means 26 determines that the authentication processing has been completed normally, it notifies the transfer means 4 of the fact. Upon receiving the notification, the transfer unit 4 starts outputting the transfer data 25.

The main storage 6 of the personal computer 201 stores the transfer data 25 output from the transfer
PCI bus 11, first bridge means 9, main bus 10,
It is taken in via the second bridge means 8.

Here, the operation of the central processing means 5 will be described in detail mainly with reference to FIGS.

The operation of the central processing means 5 is based on the authentication processing (FIG. 6).
In step 102) and the decoding process (step 1 in FIG. 6).
03), but the authentication process has already been described. In the following, the decoding process (step 1 in FIG. 6)
03) will be described in detail mainly with reference to FIGS. As described above, FIG. 7 shows the decoding process (step 10 in FIG. 6) according to the embodiment of the present invention.
FIG. 8 is a flowchart showing in detail the procedure of 3), and FIG. 8 is a flowchart showing in detail the procedure of the demultiplexing process (step 91 in FIG. 7) in the embodiment of the present invention.

The central processing means 5 multiplexes the transfer data 25 (see FIG. 1) fetched into the main storage means 6 (see FIG. 1) as one step in the decoding process (step 103 in FIG. 6). A separation process (step 91 in FIG. 7) is performed.

The demultiplexing process (step 91 in FIG. 7) will be described in detail with reference to FIG.

At step 81 (see FIG. 8), the central processing means 5 analyzes the PID of the TS header 60 (see FIGS. 5A and 5B).

(1) In step 82, the PID is video P
If it is an ID, in step 83, the encrypted digital video data is output.

(2) Even if the PID is an audio PID in step 84, encrypted digital audio data is output in step 84.

(3) In step 86, the PID is PCR4
If the PID is 5 (see FIG. 2), step 88
Then, the PCR 45 is compared with an STC counter, and the difference is added to a VCO (voltage controlled oscillator) via a low-pass filter (not shown) to generate an STC (system time clock).

Note that the P reproduced at step 88 in FIG.
Since the receiving time of the CR 45 is different from the transmitting time in the asynchronous transfer of the PCI bus 11, if the CR 45 is used as it is for the STC reproduction, a correct STC cannot be reproduced. When the time stamp 57 is used, the transmission time is accurately represented.
Play C. More specifically, step 11
ST starting from 00 and ending at step 1105
The details of the procedure for generating C are as follows. In FIG. 9, at step 1101, the time stamp 57 is read. In step 1102, the PCR 45 is read. In step 1103, the reference clock 28 generated by the reference clock generation unit 27 is read using the clock reference clock of the personal computer 201. Step 110
4, the STC is reproduced with reference to the reference clock 28 (that is, the time stamp 57 is counted by the PCI bus 1).
1 is performed at 33.3 MHz and the reference clock 2
8 is also known, the time at which the PCR 45 was received is determined from the comparison between the time stamp 57 and the reference clock 28, and the STC is set accordingly.) In this manner, the PCR 4 by the asynchronous transfer of the PCI bus 11
5, the correct STC can be reproduced.

As described above, when the encrypted transfer data 25 is composed of TS packets, the PID
Is not encrypted, it is not necessary to decrypt the code before the demultiplexing process (step 91 in FIG. 7) and perform encryption again after the demultiplexing process. Further, since the PCR 45 is not encrypted, the STC can be reproduced from the PCR without decrypting the encrypted transport stream.

When the central processing means 5 completes the multiplexing / demultiplexing processing (step 91 in FIG. 7) in this way, the transfer data 25 subjected to the multiplexing / demultiplexing processing as described above and having the STC added thereto is sent to the next processing unit. And decrypt as follows.

(1) In step 92 (see FIG. 7), PI
If D is a video PID, step 93 (FIG. 7)
), Decrypts the encrypted digital video data, performs decompression processing based on MPEG-2 video, and outputs digital video. In this case, using the STC generated in step 88 of FIG. 8, the PTS (Presentat) of the MPEG-2 video is used.
ion Time Stamp, display time stamp)
Synchronize by comparing with.

(2) In step 94 (see FIG. 7), the PI
If D is an audio PID, step 95
In FIG. 7 (see FIG. 7), the encrypted digital audio data is decrypted, decompressed according to MPEG-2 audio, and a digital video is output.
In this case, synchronization is established by comparison with the PTS of the MPEG-2 video using the STC generated in step 88 of FIG.

At step 96 (see FIG. 7), the decoding process for the transfer data 25 (see FIG. 1) (step 1 in FIG. 6)
03) ends completely.

The digital video output from the central processing means 5 (see FIG. 1) is supplied to the second bridge means 8 (see FIG. 1), the AGP bus 12 (see FIG. 1), and the graphic card 13 (see FIG. 1). 1), display means 14
(See FIG. 1). The digital audio is supplied to the second bridge means 8 (see FIG. 1), the main bus 10
(See FIG. 1), first bridge means 9 (see FIG. 1), P
Sound card 15 via CI bus 11 (see FIG. 1)
(See FIG. 1).

As described above, according to the present invention, for example, since the decryption and re-encryption processing in the demultiplexing processing in the personal computer are not required without lowering the copyright protection function, the demultiplexing processing is not performed. A data transfer device, a data transfer system, and a program recording medium that can simplify the above.

Further, according to the present invention, for example, a data transfer apparatus capable of simplifying STC reproduction processing because decoding and re-encryption processing in the demultiplexing processing inside the personal computer is unnecessary. A data transfer system and a program recording medium can be provided.

In the above-described embodiment, when a packet having a packet identifier is analyzed to include (1) PCR, the encryption target is 12 bytes from the beginning of the packet. (2) When it is analyzed that the packet does not include the PCR, the portion is within 4 bytes from the beginning of the packet. However, the present invention is not limited to this. For example, the packet identifier and / or program Only the clock signal may be used.

The program clock signal according to the present invention is not encrypted in the above embodiment, but is not limited to this, and may be encrypted. Even when the program clock signal in the present invention is encrypted, the reproduction of the system clock signal from the program clock signal may be performed in the same manner as in the above-described embodiment. However, in this case, the program clock signal is extracted after the encryption is decrypted.

In the above-described embodiment, the reproduction of the system clock signal in the present invention is performed using software. However, the present invention is not limited to this. For example, the reproduction may be performed using dedicated hardware. .

The data transfer device according to the present invention comprises:
In the above-described embodiment, the authentication unit is provided. However, the present invention is not limited to this, and the authentication unit may not be provided. Is also good.

The transfer bus in the present invention is a PCI bus in the above-described embodiment, but is not limited to this. For example, an AGP or USB (Universal) is used.
alSerial Bus).

Further, the time stamp in the present invention is:
In the above-described embodiment, the counting is performed using the clock 33.3 MHz of the PCI bus 11, but the present invention is not limited thereto, and the counting may be performed using another clock with sufficiently high accuracy.

The reference clock according to the present invention is read using the clock reference clock of the personal computer 201 in the above-described embodiment. However, the present invention is not limited to this. It may be performed by using.

As described above, the data transfer apparatus according to the present invention is, for example, a data transfer apparatus for transmitting continuously input data to a transfer partner via a transfer bus. Or encryption means for encrypting everything and outputting encrypted data, transfer header generation means for generating a transfer header including a synchronization signal and the format of the input data, and adding the transfer header to the encrypted data. Transfer header adding means for outputting transfer data to the transfer partner via the transfer bus, and transfer means for transmitting the transfer data to the transfer partner via the transfer bus. Data transfer device.

The data transfer device of the present invention is, for example, a data transfer device further comprising the transfer header generating means for generating the transfer header including the data size of the transfer data.

The data transfer apparatus of the present invention is, for example, a data transfer apparatus further including the transfer header generating means for generating the transfer header including encryption mode information indicating permission for copying.

Further, the data transfer apparatus of the present invention is provided with, for example, the selective encryption means for inputting packet multiplexed data obtained by multiplexing a program constituted by a packet having a packet identifier and not encrypting the packet identifier. Data transfer device.

Further, the data transfer apparatus of the present invention inputs, for example, a program constituted by a packet having a packet identifier and packet multiplexed data having a program clock signal of the program, and does not encrypt the program clock signal. A data transfer device including the selective encryption means.

Further, the data transfer apparatus of the present invention further encrypts, for example, 12 bytes from the beginning of the packet containing the program clock signal of the packet multiplexed data and 4 bytes from the beginning of the packet not containing the program clock signal. A data transfer device including the above-mentioned selective encryption means that does not encrypt bytes.

The data transfer device of the present invention is, for example, a data transfer device for transmitting the input data having at least one of digital video data and digital audio data.

The data transfer device of the present invention is, for example, a data transfer device provided with an authentication means for performing the authentication when the data transfer partner requires authentication.

The data transfer system according to the present invention is, for example, a data transfer system including the main memory, which is the transfer partner, a central processing unit for managing the main memory, and the transfer bus.

Further, the data transfer system of the present invention is, for example, a data transfer system further provided with packet separating means for separating the encrypted data from the transfer data for each packet without decrypting the encrypted data.

The data transfer system according to the present invention is, for example, a data transfer system for separating the encrypted data from the transfer data for each packet without decrypting the encrypted data and reproducing a system clock signal from the program clock signal. is there.

Further, the program recording medium of the present invention stores a program for causing a computer to execute all or a part of the functions of each component of the data transfer apparatus or data transfer system of the present invention. It is a program recording medium.

[0099]

As is apparent from the above description, the present invention provides a data transfer device, a data transfer system, and a program recording medium to which a copyright protection function can be added in DTV reception by a personal computer, for example. can do.

Further, the present invention provides a data transfer apparatus, a data transfer system, and a program recording medium capable of transmitting transfer content of a variable length according to a format included in a transfer header, in addition to the above effects. Can be.

Further, in addition to the above effects, the present invention provides a data transfer device, a data transfer system, and a program recording medium which can simplify the demultiplexing process without reducing the copyright protection function. Can be provided.

Further, in addition to the above effects, the present invention can provide, for example, a data transfer device, a data transfer system, and a program recording medium that can simplify STC reproduction processing.

In addition to the above effects, the present invention can reproduce the time of the input data on the receiving side even when the input data is transferred via an asynchronous bus such as a PCI bus. A data transfer device, a data transfer system, and a program recording medium can be provided.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a configuration of a data transfer system according to an embodiment of the present invention.

FIG. 2 shows the T of MPEG-2 according to an embodiment of the present invention.
Schematic diagram showing the structure of an S packet

FIG. 3 is a flowchart showing a processing procedure of an encryption unit in the embodiment of the present invention.

FIG. 4 is a schematic diagram showing a configuration of transfer data according to the embodiment of the present invention.

FIG. 5 is a schematic diagram showing the configuration of transfer content 51 when a TS packet is video or audio according to the embodiment of the present invention (FIG. 5A). FIG. 5 is a schematic diagram showing the configuration of the transfer content 51 in the case where
(B))

FIG. 6 is a flowchart showing a procedure of an authentication process and a decryption process according to the embodiment of the present invention.

FIG. 7 is a flowchart showing in detail a procedure of a decoding process (step 103 in FIG. 6) according to the embodiment of the present invention;

FIG. 8 is a flowchart showing in detail the procedure of the demultiplexing process (step 91 in FIG. 7) according to the embodiment of the present invention;

FIG. 9 shows STC generation according to the embodiment of the present invention (FIG. 8)
Is a flowchart showing the procedure of step 88) in detail.

FIG. 10 is a block diagram showing a configuration of a conventional data transfer system.

[Explanation of symbols]

 4 Transfer Means 21 Transfer Header Generation Means 22 Transfer Header 23 Transfer Header Addition Means 24 Encryption Means 25 Transfer Data

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04N 7/08 H04N 7/08 Z 7/081 F term (Reference) 5C025 AA28 AA29 BA25 BA28 BA30 DA01 DA10 5C053 FA13 GB06 GB10 GB11 GB38 JA07 JA21 JA26 KA24 LA07 LA11 5C063 AA20 AB03 AB07 AB09 AC01 AC05 AC10 CA11 CA20 CA34 CA36 CA40 DA07 DA13 DB09 5C064 CA14 CB01 CC02 CC04 5J104 AA07 BA06 CA02 KA02 NA00 PA00

Claims (16)

[Claims] 1. An input data analysis means for analyzing input data based on a predetermined criterion; an encryption object determination means for determining an object to be encrypted based on a result of the analysis; and encrypting the determined object. A data transfer device comprising: encrypted data generating means for generating encrypted data and outputting the encrypted data; and transfer means for transferring at least the encrypted data to a transfer partner. 2. The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, and the analysis of the input data based on the predetermined criterion is an analysis of the packet identifier. 2. The method according to claim 1, wherein an object to be encrypted based on a result of the analysis is a portion based on the analyzed packet identifier and not including the packet identifier among packets having the packet identifier. Data transfer device. 3. The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, wherein the signal includes a packet having a program clock signal, The analysis of the input data based on the criterion is the analysis of the packet identifier. The object to be encrypted based on the result of the analysis is that the packet having the analyzed packet identifier includes (1) a program clock signal. If the packet is analyzed, it is a portion that does not include the packet identifier or the program clock signal. (2) If it is analyzed that the packet does not include the program clock signal, the packet is included in the packet. 2. The data transfer device according to claim 1, wherein the portion does not include an identifier. 4. The packet is an MPEG-2 TS (Transport Stream) packet having a data length of 188 bytes, and an object to be encrypted based on the analysis result has the analyzed packet identifier. When the packet is analyzed to include (1) the program clock signal, the portion is located within 12 bytes from the beginning of the packet,
(2) The data transfer device according to claim 3, wherein when it is analyzed that the packet does not include the program clock signal, the data is a portion within 4 bytes from the beginning of the packet. 5. The data transfer device according to claim 1, wherein the input data includes video data and / or audio data. 6. A transfer header generating means for generating a transfer header, and a transfer header adding means for adding the transfer header to the encrypted data to generate transfer data, the transfer means comprising: The transfer data is transferred to the transfer partner, and the transfer header includes information on a data size of the transfer data and / or encryption mode information for indicating permission of copying and / or a time at which the input data is transferred. The data transfer device according to any one of claims 1 to 5, further comprising a time stamp for indicating. 7. A transfer header generating means for generating a transfer header having encryption mode information used for permitting a copy to be performed by the transfer partner, wherein the transfer header has the encrypted transfer header. Transfer header adding means for generating transfer data by adding to the data; and authentication means for authenticating the copy permission by using the encryption mode information. 6. The data transfer device according to claim 1, wherein the data is transferred to the transfer partner. 8. An input data analyzing means for analyzing input data based on a predetermined criterion, an encryption object determining means for determining an object to be encrypted based on a result of the analysis, and encrypting the determined object. Encrypted data generating means for outputting the encrypted data as encrypted data; anda transfer means for transferring at least the encrypted data to a transfer partner. A computer comprising: a main storage unit for performing processing of the data; a central processing unit for managing the main storage unit; and a transfer unit for connecting the data transfer device to the computer. A data transfer system, comprising: a bus; 9. The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, and the analysis of the input data based on the predetermined criterion is an analysis of the packet identifier. The target to be encrypted based on the result of the analysis is a portion that does not include the packet identifier among the packets having the packet identifier based on the analyzed packet identifier, and the central processing unit performs 9. The data transfer system according to claim 8, wherein the packet can be separated based on the incoming unencrypted packet identifier. 10. The input data comprises video data and / or audio data, wherein the packet separation comprises: the packet having the encrypted video data and the encrypted audio data. The data transfer system according to claim 9, wherein separation of the packet having data is performed. 11. The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, wherein the signal has a packet having a program clock signal, The analysis of the input data based on a criterion is the analysis of the packet identifier, and the central processing unit can reproduce a system clock signal from the program clock signal. A data transfer system according to claim 1. 12. The input data is packet multiplexed data in which a signal composed of a packet having a packet identifier is multiplexed, wherein the signal has a packet having a program clock signal, The analysis of the input data based on the criterion is the analysis of the packet identifier. The object to be encrypted based on the result of the analysis is that the packet having the analyzed packet identifier includes (1) a program clock signal. If the packet is analyzed, the packet does not include the packet identifier or the program clock signal. (2) If the packet is analyzed not to include the program clock signal, the packet is included in the packet. The central processing means does not include an identifier; The system clock signal can be reproduced from the clock signal.
Data transfer system as described. 13. The data transfer device, further comprising: transfer header generating means for generating a transfer header having encryption mode information used for permitting a copy to be performed by the computer; A transfer header adding unit that generates transfer data by adding to the encrypted data; and an authentication unit that authenticates the copy permission using the encryption mode information. 13. The data transfer system according to claim 8, wherein the transfer data is transferred to the transfer partner. 14. The data transfer device, wherein: a transfer header generating means for generating a transfer header having a time stamp for indicating a time at which the input data is transferred; and adding the transfer header to the encrypted data. 9. A transfer header adding unit for generating transfer data by using the time stamp, wherein the central processing unit has a reference clock for reproducing a system clock signal using the time stamp. 13. The data transfer system according to any one of items 1 to 12. 15. The data transfer system according to claim 8, wherein said transfer bus is a PCI bus. 16. A program recording medium for recording a program and / or data for causing a computer to execute all or a part of the functions of all or a part of the present invention according to any one of claims 1 to 15. A program recording medium readable by a computer.