JP2001313918A - Conditional access system, broadcasting equipment used by the same, receiver, and security module - Google Patents

Abstract

PROBLEM TO BE SOLVED: To realize subscriber's convenience by preventing illegality, such as distribution of a copy and enhancing degree of freedom of reproduction of a program recorded in a recording medium within specific regions, such as home. SOLUTION: Broadcasting equipment 1 includes recording control information showing refusal of group recording in an ECM in a program stream to transmit. A receiver 3 gives the ECM of the tuned-in program stream to an IC card 4, in the case where the group recording is demanded by a user. The IC card 4 judges propriety of the group recording from the ECM and information on an EMM acquired and stored in advance, and generates the encrypted EMM by using a common group key to a plurality of contracts to returns to the receiver 3 only in the case where the group recording is possible. When the EMM is returned from the IC card 4, the receiver 3 inserts the EMM in the tuned-in program stream to prepare the program stream for recording, and gives it to a VTR5 for the program recording.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a pay broadcasting system for performing pay broadcasting in broadcasting systems such as satellite broadcasting, terrestrial broadcasting and CATV (cable television), and a broadcasting system used in the pay broadcasting system. The present invention relates to a device, a receiving device, and a security module.

[0002]

2. Description of the Related Art When pay broadcasting is performed in a broadcasting system such as satellite broadcasting, terrestrial broadcasting, or CATV (cable television), an ID unique to the contract is provided for each contract.
It is common to issue an IC card in which an encryption key is registered as a security module. Then, only when this IC card is attached, the receiving apparatus receives pay broadcasting within the contract. That is, the broadcast signal is encrypted using a specific encryption key,
The decryption can be performed only by the receiving device to which the card is attached.

[0003] In some cases, a plurality of IC cards are issued to a single contractor. In this case, however, a fee corresponding to the number of issued IC cards is collected.
There is nothing but one contract for each card. That is, a contractor who owns a plurality of pay broadcast receiving apparatuses individually needs an IC card contracted for each of the receiving apparatuses.

In some cases, even a program broadcast by such a pay broadcast can be recorded on a recording medium such as a video tape and reproduced later.
In this case, in order to prevent unauthorized copying, a method of recording a broadcast signal in an encrypted state is generally used.

[0005] A broadcast signal is, for example, ISO / IEC1.
It is a transport stream in the format of the 3818-1 standard. The encryption key for the material data (video data, audio data, etc.) of the program included in the transport stream is changed periodically to prevent unauthorized reception. And to know the encryption key for the material data,
It is necessary to refer to individual information for each contract (hereinafter referred to as EMM). The EMM is multiplexed with the transport stream in a state where the EMM is encrypted with a unique encryption key (registered in the IC card) set for each contract.

The EMM is transmitted sequentially for each of a number of contracts. For this reason, the EMM is transmitted at a relatively long period for one contract. Therefore, on the receiving device side, information included in the incoming EMM is stored in an IC card and used. Then, the information in the IC card is updated in response to the arrival of a new EMM.

For this reason, during the recording period on the recording medium, E
In some cases, the MM does not arrive, and if the transport stream that does not include the EMM is directly recorded on the recording medium, the material data included in the transport stream cannot be decrypted.

[0008] Therefore, in the IC card, an EMM is generated using the stored information, and the EMM is encrypted using a unique encryption key set for each contract, and is provided to the receiving device side. The receiving device generates a transport stream for recording by inserting the EMM provided from the IC card into the received transport stream, and provides the transport stream for recording.

[0009] As described above, since the transport stream in which the EMM encrypted using the unique encryption key is recorded for each contract registered in the IC card is recorded, the device having the IC card used at the time of recording is recorded. Can only be played on. Therefore, even if an illegal copy is made, the number of devices that can be reproduced is limited to one, so that the illegal distribution of the copy is prevented.

However, a plurality of receiving devices and VTs
In the case where there is an R, the devices that can be reproduced as described above are limited, such as when a program recorded in a device in one room is reproduced in a device in another room, or when a plurality of devices are used for answering machine etc. And the exchange of the IC card must be performed, which is very inconvenient. Further, when an apparatus equipped with the IC card used at the time of recording is in use, even if another apparatus is not used, the apparatus cannot perform reproduction, which is very inconvenient.

[0011] In addition, while a recorded program is being reproduced using an IC card having a relatively high contract level among a plurality of IC cards in the home, a contract level cannot be received for a new program. However, there is a problem in that a relatively low IC card must be used, and there is a limitation on the reception of a new program.

[0012]

As described above, conventionally,
Programs recorded on recording media can be played back only on the device equipped with the security module used for recording, which significantly restricts the use of the device at home, etc., and greatly inconveniences subscribers Had become something.

The present invention has been made in view of such circumstances, and it is an object of the present invention to prevent improper operation such as distribution of a copy and to provide a recording medium within a specific range such as at home. Pay broadcasting system that can improve the degree of freedom of playback of programs recorded in
An object of the present invention is to provide a broadcasting device, a receiving device, and a security module used in the pay broadcasting system.

[0014]

In order to achieve the above object, the present invention has the following arrangement. That is, in the broadcasting device, a program obtained by multiplexing at least one series of material information indicating the material of a program, program information including control information on the program, and individual information including individual control information for each pay subscription contract. When a stream is transmitted by a stream transmission unit including, for example, a video / audio encoding circuit, a multiplexing circuit, a signal processing circuit, an error correction encoding circuit, and a modulation circuit, rejection of group recording with respect to a program stream transmitted by the stream transmission unit is prohibited. Is included in the program stream by, for example, the program information or the program guide information by the recording control information transmitting means realized by software processing of the broadcast device control unit.

In the receiving device, for example, individual information processing means realized by software processing of the receiving device control unit includes:
When individual information about a contract for the own device is multiplexed on the program stream transmitted from the broadcast device and arrived, the individual information is provided to a security module such as an IC card mounted on the own device. Then, in the security module, the predetermined control information included in the individual information provided from the receiving device to which the security module is attached is stored in a storage unit including, for example, a memory and an individual information storage control unit realized by software processing of a control circuit. To be stored.

In the receiving apparatus, for example, a program information processing means which is realized by software processing of a receiving apparatus control unit and also has a function as a recording control information processing means, for example,
When group recording of the program stream transmitted from the broadcast device and arriving on the predetermined recording medium is designated, the program information (including, for example, recording control information) multiplexed on the program stream is transmitted to the own device. To the security module attached to the security module. Then, in the security module, for example, the recordability determining unit realized by software processing of the control circuit includes control information included in the program information given from the receiving device of the mounting destination, control information stored by the storage unit. Based on the information and the recording control information given from the receiving device of the mounting destination, it is determined whether or not the group recording of the program stream arriving at the receiving device is possible, and it is determined here that the group recording is possible. Then, for example, the individual information generation means realized by software processing of the control circuit generates the individual information using the control information stored by the storage means. Further, in the security module, for example, an encryption unit realized by software processing of a control circuit converts the individual information generated by the individual information generation unit into a common predetermined contract including a plurality of contracts including a contract regarding the own device. Encrypt using an encryption key (group key).

In the receiving device, for example, a recording stream generating unit constituted by a control data inserting unit and a control data inserting control unit realized by software processing of the receiving unit control unit is encrypted by the encrypting unit. The individual information after the transmission is multiplexed with the arriving program stream transmitted from the broadcasting device to generate a recording program stream.

[0018] By adopting such means, it is possible to perform group recording according to the user's request only for programs for which group recording permission is indicated by the recording control information indicated in the program stream by the broadcasting device. Become. This group record is a record obtained by multiplexing the individual information generated by the security module and encrypted using a common predetermined encryption key for a plurality of contracts with the program stream transmitted from the broadcast apparatus and arrived. By recording a program stream.

[0019]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings.

In this embodiment, group recording is allowed under certain conditions. Group recording means that between a plurality of receiving devices that have been previously set as the same group as a group, allowing a program received by another receiving device and recorded on a recording medium to be reproduced by the other receiving device. Show.

FIG. 1 is a block diagram showing a main configuration of a pay broadcasting system and a main configuration of a broadcasting apparatus according to the present embodiment.

As shown in FIG. 1, the pay broadcasting system according to the present embodiment includes a broadcasting device 1, a broadcasting facility 2, and a receiving device 3 (3-
1 to 3-n), an IC card 4 (4-1 to 4-n), and a video tape recorder (VTR) 5 (5-1, 5-2).

The broadcast apparatus 1 generates a transport stream including, for example, the material data of the program, for example, in the format of the ISO / IEC13818-1 standard. This transport stream is, for example, a well-known satellite broadcasting infrastructure,
The broadcast is transmitted to each of the receiving devices 3 via a broadcast facility 2 including a terrestrial broadcast infrastructure, a CATV infrastructure, and the like.

The receiving apparatus 3 is equipped with an IC card 4 issued for each pay broadcast receiving contract. IC card 4
Permits the receiving device 3 to receive a program within a range corresponding to the registered contract content. The receiving device 3 reproduces only the program permitted by the IC card 4 on a television receiver (not shown) or generates a transport stream for recording and outputs the transport stream to the connected VTR 5.

The VTR 5 is connected to the receiving device 3 as necessary, and records a transport stream provided from the receiving device 3 on a video tape.

[0026] The receiving device 3 is adapted to meet the needs of the user.
Multiples are grouped under a contract with a broadcaster. In the example of this figure, the receiving device 3-1 and the receiving device 3-2 form a group G. Note that the group information is not set in the receiving device 3 itself, but by setting a common descrambling key for the group in the IC cards 4-1 and 4-2, these IC cards 4-1 and 4-2 are set. Receiving device equipped with, 4-2
3-1 and 3-2 are set in the same group.

The broadcasting device 1 has a video / audio encoding circuit 11, a multiplexing circuit (MUX circuit) 12, a signal processing circuit 13, an error correction coding circuit 14, a modulation circuit 15, and a broadcasting device control section 16. .

A plurality of material data such as video, audio and data constituting a program are supplied to a video / audio encoding circuit 11 and are respectively encoded by a predetermined compression encoding system. The encoded material data is supplied to the MUX circuit 12, respectively. On the other hand, the MUX circuit 12 is provided with various control data generated by the broadcast device control unit 16. These data are multiplexed by the MUX circuit 12 to generate a transport stream in the format of, for example, the ISO / IEC13818-1 standard.

The transport stream is scrambled as required by the signal processing circuit 13 in packet units, and then subjected to error correction encoding by an error correction encoding circuit 14. Note that packets that do not need to be scrambled are passed through the signal processing circuit 13.

The transport stream subjected to various necessary processes is modulated by a modulation circuit 15 for transmission on a predetermined transmission path, and is then provided to the broadcasting equipment 2 for broadcasting. Is done.

The broadcasting device control unit 16 is, for example, a CP.
U, ROM, RAM, etc.,
A process for comprehensively controlling each unit to realize the operation as a broadcasting device is realized by software processing. The control means included in the broadcast device control section 16 includes a recording control information transmitting means in addition to a well-known general control means such as a processing means for program broadcasting.

The recording control information transmitting means causes the program information (hereinafter referred to as ECM), which is one of the control data, to include recording control information indicating rejection of group recording for the program stream. Rejection of group recording is arbitrarily designated for each program by the broadcaster. The ECM describes various information such as viewing information and a descrambling key for each program, and is packetized and multiplexed in a transport stream.

FIG. 2 shows the receiving device 3 and the IC card 4 in FIG.
FIG. 3 is a block diagram showing a main configuration of a VTR 5 and a VTR 5;

As shown in this figure, the receiving apparatus 3 comprises a tuner demodulation circuit 21, an error correction circuit 22, a signal processing circuit 2
3. Separation circuit (DEMUX circuit) 24, video / audio decoding circuit 25, video / audio output circuit 26, mixing circuit 27, card control unit 28, connector 29, control data insertion unit 3.
0, a 1394 interface 31, a user interface (user I / F) 32, and a receiving device control unit 33. Then, a tuner demodulation circuit 21, an error correction circuit 22, a signal processing circuit 23, and a separation circuit (DEMUX circuit)
24, video / audio decoding circuit 25, video / audio output circuit 2
6, mixing circuit 27, card control unit 28, connector 29,
The control data insertion unit 30, the user interface (user I / F) 32, and the receiving device control unit 33 are connected to each other via a bus.

A broadcast wave signal generated by receiving a broadcast wave by an antenna (not shown) or the like is input from a terminal T 1 and supplied to a tuner demodulation circuit 21. This broadcast wave signal is demodulated by the tuner demodulation circuit 21 into a baseband transport stream. The demodulated transport stream is input to a signal processing circuit 23 after a predetermined error correction is performed by an error correction circuit 22.

[0036] In the signal processing circuit 23, the descrambling key indicated in the ECM included in the transport stream is set by the receiving device control unit 33. In the transport stream, descrambling of the scrambled packet is performed by the signal processing circuit 23.
It should be noted that a packet that has not been scrambled is passed through the signal processing circuit 23 without any processing.

The transport stream output from the signal processing circuit 23 is separated into components by a DEMUX circuit 24, and the material data of the transport stream is sent to a video / audio decoding circuit 25, and the control data is sent to the receiving device control unit 3.
3 respectively.

The material data is supplied to the video / audio decoding circuit 25.
Are supplied to the video / audio output circuit 26, and are appropriately combined to reproduce the program data. Further, the reproduced program data is converted into an analog program signal by the video / audio output circuit 26, and then output from the terminal T2 via the mixing circuit 27. For example, a television receiver (not shown) or the like is connected to the terminal T2, and program reproduction based on a program signal is performed by the television receiver or the like.

The mixing circuit 27 displays the menu on the OS
In order to perform D (On Screen Display), the video signal supplied from the receiving device control unit 33 is mixed with the program signal output from the video / audio output circuit 26.

The IC card 4 is mounted on the receiving device 3 by inserting the connector 41 provided on the IC card 4 into the connector 29. The connector 29 is connected to the card control unit 28, and the connector 41 is connected to a control circuit 42. Therefore, in the mounted state, the card control unit 2
By receiving and transmitting data between the control device 8 and the control circuit 42, access to the IC card 4 by the receiving device 3 is realized.

The card control unit 28 exchanges data with the control circuit 42 under the control of the receiving device control unit 33.

On the other hand, the VTR 5 is connected to the receiving device 3 by connecting the terminal T11 provided on the VTR 5 to the terminal T3 via the cable C. The terminals T3 and T11 are connected to 1394 interfaces 31, 51 provided in the receiving device 3 and the VTR 5, respectively. Therefore, in the connected state, data is transmitted and received between the receiving device 3 and the VTR 5 by data transfer between the 1394 interfaces 31 and 51 according to a procedure based on IEEE 1394.

An output signal line from the 1394 interface 31 to the inside of the receiving device 3 is directly connected to a data transfer line from the error correction circuit 22 to the signal processing circuit 23. Therefore, the data fetched from the VTR 5 by the 1394 interface 31 is supplied to the signal processing circuit 23. An input signal line from the inside of the receiving device 3 to the 1394 interface 31 is connected to a data transfer line from the error correction circuit 22 to the signal processing circuit 23 via the control data insertion unit 30. Therefore, the transport stream output from the error correction circuit 22 is
To the 1394 interface 31 via the
Output to R5.

The control data insertion unit 30 inserts the EMM provided by the reception device control unit 33 into a transport stream transmitted to the 1394 interface 31.

A signal from an operation panel or a remote controller (both not shown) is input to the user I / F 32 via a terminal T4, and the contents of the user's instruction are recognized. Then, the user I / F 32 notifies the receiving device control unit 33 of the recognized user instruction content.

The receiving device control unit 33 includes, for example, a CPU, an R
It has an OM, a RAM, and the like, and realizes, by software processing, processing for comprehensively controlling each unit in order to realize an operation as a receiving device. The control means of the receiving device control unit 33 includes, in addition to well-known general control means such as processing means for receiving a program,
It is provided with individual information processing means, program information processing means, and control data insertion control means.

Here, the individual information processing means gives the EMM separated by the DEMUX circuit 24 to the IC card 4 for security processing.

The program information processing means includes a DEMUX circuit 24
The ECM separated by the IC for security processing
Give to card 4.

When recording the transport stream by the VTR 5, the control data insertion control means
The control data insertion unit 3 inserts the EMM given from the C card 4 into a transport stream for recording.
Control 0.

The control circuit 42 of the IC card 4 includes:
The memory 43 is connected. In the memory 43, predetermined information included in individual information (hereinafter, referred to as EMM) such as an ID related to a contract, a descrambling key and an encryption key is registered, and predetermined information acquired in operation is stored. Used to When a group is set, an encryption key (hereinafter, referred to as a group key) assigned to the group is registered in addition to a unique encryption key (hereinafter, referred to as a unique key) for each contract. You.

The control circuit 42 includes, for example, a CPU, an RO,
M, a RAM, and the like, and performs a process for ensuring security related to reception of a pay broadcast in the receiving device 3. Various processing means for ensuring such security include individual information storage control means, recording permission / inhibition determination means, individual information generation means, and encryption in addition to well-known general means such as user authentication related to pay broadcast reception. Means.

Here, if the EMM newly received and given by the receiving device 3 is addressed to itself, the individual information storage control means stores the information registered in the memory 43 into the EM.
Update to predetermined information included in M.

The recording permission / non-permission determining means determines whether recording of the program stream arriving at the receiving device 3 and permission / prohibition of group recording are performed based on the recording control information included in the ECM and the information of the EMM stored in the memory 43. I do.

The individual information generating means uses the information stored in the memory 43 only when the recording permission / non-permission determining means determines that recording is possible.
Generate

Then, the encrypting means encrypts the EMM generated by the individual information generating means. However, the encryption means uses the unique key when the recording permission / inhibition determination means determines that the group recording is not possible and when the normal recording is requested, and determines whether the recording is possible in the group. If it is determined by the means and group recording is requested, a group key is used.

The VTR 5 has a 1394 interface 51
In addition, a recording / reproducing mechanism 52 and a control circuit 53 are provided.

The recording / reproducing mechanism section 52 includes, for example, a tape drive mechanism and a magnetic head, and is loaded with a video tape T as needed. Then, the recording / reproducing mechanism unit 52 records the transport stream provided via the 1394 interface 51 on the video tape T.

The control circuit 53 controls the 1394 interface 51 and the recording / reproducing mechanism 52 to realize the operation as a VTR.

Next, the operation of the pay broadcasting system configured as described above will be described.

First, when the viewing of a program is charged, the broadcast processing apparatus 1 scrambles the transport stream generated by the MUX circuit 12 by the signal processing circuit 13.

This scrambling is performed on a packet basis. The key used for scrambling is the first key ks. This first key ks is changed in a relatively short cycle.

The broadcasting device control unit 16 sets the first key k in use
s is shown in the ECM. Then, the broadcast device control unit 16
The CM is encrypted using the second key kw. The second key kw is changed at a longer cycle than the first key ks.

Further, the broadcasting device control section 16 indicates the second key kw in use in the EMM. And the broadcast device controller 16
Encrypts the EMM using each unique key kmi.

The EMM is information for individually notifying information on each contract for each contract. The broadcast device control unit 16 sequentially inserts the EMM for each contract into the transport stream.

The EMM originally consists of basic information I1 as shown in FIG. The basic information I1 includes subscriber identification information (subscriber ID) I11 and contract setting information I12. The subscriber identification information I11 indicates a unique identifier set for the contract to be covered by the EMM. The contract setting information I12 indicates the contents of the contract specified by the subscriber identification information I11. However, the contract setting information I12 can be omitted if there is no change in the contract information.

However, in this embodiment, the broadcasting device control unit 16
When a new grouping registration is requested by the contractor, the EMM for the contract to be grouped is
Is added as shown in FIG.

As shown in FIG. 3, the group setting information I2 includes a group identifier I21 and an encryption key I22. The group identifier I21 is an identifier determined to be unique to the group. The encryption key I22 indicates an encryption key that permits common use in a plurality of contracts included in the group specified by the group identifier I21, that is, a group key.

In the receiving device 3, the EMM included in the transport stream is extracted by the DEMUX circuit 24, and under the control of the receiving device control unit 33, the card control unit 28.
To the control circuit 42 of the IC card 4.

When receiving the EMM from the receiving device 3, the control circuit 42 determines whether or not the EMM is related to its own contract, that is, determines the validity of the EMM, and determines that the EMM is a valid EMM. If confirmed, this EM
The data stored in the memory 43 is updated with each data included in M. As a result, the newly assigned group identifier and group key are registered in the IC card 4 and can be used thereafter.

Similarly, an EMM indicating the same group identifier and group key is given to other contracts to be grouped as the same group G. Therefore, a common group identifier and group key are shared between a plurality of contracts, and grouping registration is performed.

On the other hand, when broadcasting a program, the broadcast device controller 16 creates an ECM for the program and inserts it into a transport stream.

The ECM originally consists of basic information I3 as shown in FIG. The basic information I3 includes viewing information I31 and a descrambling key I32. Viewing information I31
Includes information indicating program viewing conditions, fee information, and the like as necessary. The descrambling key I32 is a key for descrambling the transport stream.

However, in this embodiment, the broadcast device control unit 16
Adds recording control information I4 as shown in FIG. 4 to the ECM.

As shown in FIG. 4, the recording control information I4 includes recording permission / refusal information I41, group recording permission / refusal information I42, and recording permission group information I43. Recording permission information I4
1 indicates whether or not recording on a recording medium such as a video tape T is permitted. The group recording permission / prohibition information I42 indicates whether or not group recording is permitted. The recording-permitted group information I43 indicates a group identifier of a group for which group recording is permitted.

In the receiving apparatus 3, when a pay program is selected, the ECM included in the transport stream is selected.
Is extracted by the DEMUX circuit 24, and the receiving device control unit 33
Is provided to the control circuit 42 of the IC card 4 via the card control unit 28 under the control of.

When the ECM is supplied from the receiving device 3, the control circuit 42 adds the viewing information indicated in the ECM, the EMM
Is compared with the contract setting information stored in the memory 43 to determine whether or not the program is viewable under its own contract. Then, the control circuit 42 notifies the receiving device 3 of the determination result, and also gives the descrambling key to the receiving device 3 if the viewing is possible. Further, if recording control information is included in the ECM, the control circuit 42 also provides the recording control information to the receiving device 3 in a decrypted state.

In the receiving device 3, when it is notified from the IC card 4 that the content can be viewed, the receiving device control unit 33 sets the descramble key given with the notification in the signal processing circuit 23, and Causes the stream to be descrambled. As a result, viewing of the pay program becomes possible. Further, when the recording control information is given, the receiving device control unit 33 holds it in an internal memory. If the IC card 4 notifies the user that the viewing is impossible, the receiving device control unit 33 takes measures such as notifying the user as necessary.

In the present embodiment, the recording of the program is performed by recording the transport stream before descrambling. Therefore, even if the program can be viewed by the above operation, the program cannot be recorded as it is.

When a request for recording a program is transmitted from the user via the user I / F 32, the receiving device control unit 33 executes a recording control process as shown in FIG.

In the recording control processing, the receiving device control unit 33 first checks the recording control information stored in the internal memory (step ST1). That is, the receiving device control unit 33 determines whether recording of the currently selected program is permitted, whether or not group recording is possible, and further, if the charges for individual recording and group recording are different, Judge how much each fee is. Note that the personal record is a single receiving device 3 as in the related art.
This is a recording in a form in which the recorded content can be reproduced only by using.

Subsequently, the receiving device control section 33 creates an image as shown in FIG. 6, for example, which shows the result of the above-described determination, and outputs this through the mixing circuit 27 to display it on a television receiver or the like. Let it. The display format at this time may be a format in which the image is switched to the image of the program and displayed.
D may be used.

In the example of FIG. 6, each of the title of the program, recording conditions (here, a case where both personal recording and group recording are permitted) and a fee are shown. Buttons B1 and B for accepting a user's designation of whether to execute personal recording or group recording or to cancel (cancel) program recording
2, B3 are displayed.

In this state, the receiving device control unit 33
It waits for the user to input any of the buttons B1, B2, and B3, and checks the input (step ST3). That is, when the selection information indicating either the start of the personal record or the group record or the cancellation of the record is input from the user I / F 32, the receiving device control unit 33 is a correct input in accordance with the held information. Check whether or not.

If the input is correct, the receiving device controller 33 determines whether or not the request is a recording start request (step ST4). If not, that is, if the cancel is designated, Ends the current recording control process.

However, if the start of recording is requested, the receiving device control unit 33 drives the card control unit 28 and requests the IC card 4 to confirm the contract information (step ST5).

When receiving this request, the control circuit 42 of the IC card 4 checks whether or not a group identifier and a group key are set in the memory 43 if notified that the group recording is to be performed. When the group identifier and the group key are not set in the memory 43, the control circuit 42 sends a response notifying that the group recording is impossible, and the group identifier and the group key are set in the memory 43. In this case, a response notifying that group recording is possible is returned to the receiving device 3.

Then, the receiving device control unit 33
The response from the C card 4 is confirmed, and it is determined whether or not program recording as requested by the user can be performed (step ST).
6). Here, if the program recording as requested cannot be performed, the receiving device control unit 33 outputs an image for notifying the user to the effect via the mixing circuit 27 to display the image on a television receiver or the like. (Step ST7) Then, the current recording control process ends. FIG. 7 shows an example of an image displayed when grouping registration necessary for recording a program being selected is not made.

On the other hand, if the program recording as requested can be performed, the receiving device control unit 33 determines which of the personal recording and the group recording should be performed (step ST8). If personal recording is to be performed, an EMM for personal recording is generated (step ST9), and if group recording is to be performed, an EMM for group recording is generated (step ST10). Request.

When the generation of the recording EMM is requested in this way, the control circuit 42 of the IC card 4
An EMM is generated using the data stored in the EMM. Then, the EMM generated above is encrypted using the unique key when private recording is requested, and using the group key when private recording is requested. Then, the control circuit 42 gives the encrypted EMM to the receiving device 3.

Then, the receiving device control unit 33 supplies the EMM provided from the IC card 4 to the control data inserting unit 30 as described above, and transmits the NU of the transport stream.
It is inserted into the LL packet part (step ST11).
After that, the reception device control unit 33 ends the current recording control process.

The transport stream into which the EMM has been inserted by the control data insertion unit 30 is output from the terminal T3 in a state of being scrambled after the format is converted by the 1394 interface 31.

In the VTR 5, the transport stream output from the terminal T 3 of the receiving device 3 and transmitted via the cable C is taken in by the 1394 interface 51, and recorded on the video tape T by the recording / reproducing mechanism 52.

Thus, the transport stream in which the EMM generated by the IC card 4 is inserted is output to the VTR 5, and this transport stream is recorded on the video tape T.

On the other hand, the operation for viewing the program based on the transport stream recorded on the video tape T is as follows.

First, the transport stream recorded on the video tape T is read out by the recording / reproducing mechanism unit 52, and is transmitted to the receiving device 3 via the 1394 interface 51.
Through the cable C.

In the receiving apparatus 3, the VTR 5
The given transport stream is 1394
The data is captured by the interface 31 and supplied to the signal processing circuit 23 as it is. The program reproduction based on the transport stream provided from the VTR 5 is performed in the same manner as in the broadcast reception, but the EMM used at this time is generated by the IC card 4 at the time of recording.

Assuming that the EMM is encrypted using the unique key, the decryption is performed only by the IC card 4 attached to the receiving device 3 that received the transport stream at the time of recording the program. Therefore, only when the same IC card 4 used at the time of recording the program is mounted on the receiving device 3, the receiving device 3 can acquire the descrambling key and can reproduce the program.

On the other hand, if the EMM is encrypted using the group key, the decryption is performed by the IC card 4 attached to the receiving device 3 that received the transport stream when the program was recorded. Only cards registered as grouping in the same group. Therefore, even when an IC card 4 different from the one used at the time of recording a program is attached to the receiving device 3, grouping registration is performed as the same group that the attached IC card 4 used at the time of recording the program. The program can be reproduced only when the program has been reproduced.

As described above, according to the present embodiment, a plurality of I
Register a common group key for C card 4,
At the time of group recording, an EMM encrypted using a group key is inserted into a transport stream to be recorded. Therefore, the reproduction of the program based on the transport stream recorded in the group can be performed by any of the receiving apparatuses 3 equipped with a plurality of IC cards 4 in which a common group key is registered. As a result, the viewing can be performed using the receiving device 3 different from the one in which the program was recorded without exchanging the IC card 4, and the user's convenience is greatly improved. That is, for example, if a plurality of receiving devices 3 exist in a certain home, the contract recorded for each of the receiving devices 3 is registered in a group so that a program recorded in one room can be viewed in another room. It becomes possible, and the degree of freedom of the user's viewing mode is increased.

Further, in the present embodiment, even if the content is recorded in a group, the viewing range is limited to the range in which the same grouping registration has been performed. Security is maintained.

Further, according to the present embodiment, the group record can be effectively used only in the contract for which the grouping registration has been performed, so that the broadcaster can collect the value by disabling the grouping registration.

Further, according to the present embodiment, in order to notify recording control information I4 from broadcast device 1 to receiving device 3, E is used.
Since the CM is used, during the broadcast of the program, the recording control information I4 is frequently notified on the order of several hundred ms to several seconds. Therefore, the receiving device 3 can immediately acquire the recording control information I4 at any timing during the broadcast of a program, and when program recording is required, it is possible to determine in real time whether or not group recording is possible.

The present invention is not limited to the above embodiment. For example, in the above embodiment, the recording control information I4 is included in the ECM and the broadcast device 1 notifies the receiving device 3 of the ECM.
rmation Table) and SDT (Service Definition Tabl)
The information may be included in control information constituting a program guide such as e). FIG. 8 is a diagram showing a state in which recording control information I4 is included in the EIT. In this figure, reference numeral I5
The program control element information, which is the basic information of the EIT, is added to the record control information I4.
Is included.

If the recording control information I4 is included in the program guide information as described above, it is possible to determine whether or not group recording is possible before the broadcast of the program starts. For example, when the timer recording is reserved, the recording method is selected. It is possible to do.

However, in this case, since the recording EMM is given from the IC card 4 before the broadcast of the program starts, the receiving device 3 stores and retains the EMM until the program is actually broadcast. deep. Alternatively, the recording request from the user is held in the receiving device 3 until the start of the program broadcast,
The broadcast device 1 may request the IC card 4 for the EMM at the time of starting the broadcast or immediately before the start of the broadcast.

The program guide information such as EIT is not real-time, but is information that can be obtained in all time zones.
Since the CM is information that can be acquired in real time in a short cycle during the broadcast of the program, the recording control information I4 is notified in both of these control information, so that the CM can be used at any time from the time of reservation to the time of broadcast of the program. Smooth recording control can be performed.

The recording control information I4 includes ECM, EI
Existing control information other than T and SDT may be included, or dedicated control data for notifying the recording control information I4 may be set and transmitted as an appropriate packet. .

In the above embodiment, the receiving device 3 outputs the transport stream for recording to the separate VTR 5 and causes the VTR 5 to perform recording on the video tape T. It may be built in the device 3.

In the above embodiment, the video tape T is exemplified as a recording medium for recording a program.
The type of recording medium such as a DVD may be arbitrary.

In addition, various modifications can be made without departing from the spirit of the present invention.

[0111]

According to the present invention, group recording can be performed according to the user's request only for a program for which group recording permission is indicated by recording control information indicated in a program stream in a broadcasting device. And a group record is generated by the security module and multiplexed with the individual program information transmitted from the broadcasting device and multiplexed using the predetermined encryption key common to a plurality of contracts and arriving at the program stream. It is realized by recording a program stream for recording, so that fraud such as distribution of copies is prevented, and the degree of freedom of playback of programs recorded on recording media within a specific range such as at home Can be improved and the convenience of the subscriber can be improved.

[Brief description of the drawings]

FIG. 1 is a block diagram showing a main configuration of a pay broadcasting system and a main configuration of a broadcasting device according to an embodiment of the present invention.

FIG. 2 shows a receiving device 3, an IC card 4, and a VT in FIG.
FIG. 4 is a block diagram showing a configuration of a main part of R5.

FIG. 3 is a diagram schematically showing a data structure of an EMM used in an embodiment of the present invention.

FIG. 4 is a diagram schematically showing a data structure of an ECM used in an embodiment of the present invention.

FIG. 5 is a flowchart showing a processing procedure at the time of recording control processing by the receiving device control unit 33 shown in FIG. 1;

FIG. 6 is a diagram showing an example of a display image for presenting information on program recording to a user.

FIG. 7 is a view showing an example of a display image for notifying a user that group recording cannot be performed;

FIG. 8 is a diagram showing an example in which recording control information is included in an EIT.

[Explanation of symbols]

DESCRIPTION OF SYMBOLS 1 ... Broadcasting apparatus, 3 ... Receiving apparatus, 4 ... IC card, 11 ...
Video / audio encoding circuit, 12: multiplexing circuit (MUX circuit), 13: signal processing circuit, 14: error correction coding circuit, 15: modulation circuit, 16: broadcast device control unit, 30: control data insertion unit, 33 ... Receiver control unit, 42: control circuit, 43: memory, T: video tape.

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (reference) H04N 5/44 H04N 5/44 Z H04L 9/00 601C 7/025 H04N 7/08 A 7/03 7/035 F term (Ref.) EE03 HH35 JJ71 KK56 KK62 LL03 LL07 LL09

Claims (6)

[Claims] 1. A broadcasting device, a receiving device, and a security module, provided in the broadcasting device, at least one series of material information indicating a material of a program, program information including control information on the program, and each pay subscription contract A stream transmitting means for transmitting a program stream obtained by multiplexing individual information including individual control information for each of the groups; and a group recording for the program stream in the program stream transmitted by the stream transmitting means provided in the broadcasting device. Recording control information transmitting means for including recording control information indicating rejection of the program, provided in the receiving device, and individual information about a contract relating to the own device is multiplexed on the program stream transmitted from the broadcasting device and arriving. In this case, the individual information is given to the security module attached to the own device. Individual information processing means, provided in the security module, storage means for storing predetermined control information included in individual information given from the receiving device of the mounting destination, provided in the receiving device, When group recording of the program stream transmitted from the broadcast device and arrived on a predetermined recording medium is designated, the program information multiplexed on the program stream is transmitted to the security module mounted on the own device. A program information processing means provided in the receiving apparatus, and when a group recording of the program stream transmitted from the broadcasting apparatus and arrived on a predetermined recording medium is designated, the program stream is included in the program stream. Recording control information processing means for providing the recording control information to the security module mounted on its own device; Security information, the control information included in the program information given from the receiving device at the mounting destination, the control information stored by the storage means, and the recording control information given from the receiving device at the mounting destination. Recording permission / non-permission determining means for determining whether or not group recording of a program stream arriving at the receiving device is possible, and provided in the security module, and the recording permission / non-permission determining means determines that group recording is possible. Then, individual information generating means for generating individual information using the control information stored by the storage means, and the individual information provided in the security module and generated by the individual information generating means, Encryption means for encrypting a plurality of contracts including a predetermined encryption key using a common predetermined encryption key; Recording stream generating means provided in a receiving device and multiplexing the individual information encrypted by the encrypting means with the program stream transmitted from the broadcasting device and arriving to generate a recording program stream; A pay broadcast system comprising: 2. The recording control information transmitting means includes the recording control information in the program information, and the program information processing means also functions as the recording control information processing means. Pay broadcasting system described in. 3. The stream transmitting means transmits a program stream obtained by multiplexing predetermined program guide information for guiding future broadcast contents in addition to the material information, the program information, and the individual information. If the recording of the program stream transmitted from the broadcast device and arrived on a predetermined recording medium is specified, the program guide information included in the program stream is provided in the receiving device. Program guide information processing means for providing the program guide information to the security module mounted on the own device, wherein the recording control information transmitting means includes the recording control information in the program guide information, and the program guide information 2. The pay broadcasting system according to claim 1, wherein a processing unit also functions as said recording control information processing unit. 4. A broadcasting device constituting a pay broadcasting system together with the receiving device and the security module according to claim 1, wherein at least one series of material information indicating a material of the program, and program information including control information on the program. A stream transmitting means for transmitting a program stream obtained by multiplexing individual information including individual control information for each pay subscription contract; and a group record for the program stream in the program stream transmitted by the stream transmitting means. A broadcast apparatus comprising: recording control information transmitting means for including recording control information indicating rejection. 5. A receiving device that constitutes a pay broadcasting system together with the broadcasting device and the security module according to claim 1, wherein individual information about a contract concerning the own device is provided in the program stream transmitted from the broadcasting device and arriving. When information is multiplexed, individual information processing means for providing the individual information to the security module mounted on the own device, and a group of the program stream transmitted from the broadcast device and arriving on a predetermined recording medium A program information processing means for providing the program information multiplexed to the program stream to the security module mounted on the own device when recording is designated; and the program stream transmitted from the broadcast device and arriving. When group recording to a specified recording medium is specified, the program stream Recording control information processing means for providing the recording control information included in the security module to the security module attached to the own device, and the individual information encrypted by the encryption means of the security module. A receiving apparatus comprising: a recording stream generating unit that multiplexes the program stream transmitted from a broadcasting apparatus and arrives to generate a recording program stream. 6. A security module that constitutes a pay broadcasting system together with the broadcasting device and the receiving device according to claim 1, wherein predetermined control information included in individual information given from the receiving device to which the broadcasting device and the receiving device are attached is provided. Storage means for storing, and when group recording of the program stream transmitted from the broadcast device and arrived on a predetermined recording medium is designated, the recording control information included in the program stream is automatically stored. Recording control information processing means to be provided to the security module mounted on the device; control information included in the program information provided from the receiving device at the mounting destination; control information stored by the storage means; A group record of a program stream arriving at the receiving device based on the recording control information given from the receiving device. Recording permission / non-permission determining means for determining whether recording is possible, and individual information for generating individual information using control information stored by the storage means if the recording permission / non-permission determining means determines that group recording is possible. Generating means, and encrypting means for encrypting the individual information generated by the individual information generating means for a plurality of contracts including a contract relating to the own device using a common predetermined encryption key. Features security module.