JP2006180473A - Transmitting apparatus and receiving apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a protection means for enabling a receiving apparatus to securely receive data transmitted by a transmitting apparatus. <P>SOLUTION: The transmitting apparatus comprises: an encrypting means for encrypting at least one of digital audio information and digital video information to generate encrypted digital A/V information; a tool generating means for generating a tool required for decrypting the encrypted digital A/V information; a tool identifying information generating means for generating tool identifying information used for identifying the tool; a selecting means for selecting a predetermined tool from a plurality of tools; a transmission control means for instructing the tool identifying information generating means to generate the tool identifying information and for instructing the selecting means to select the predetermined tool; and a transmitting means for transmitting the encrypted digital A/V information, the tool identifying information and the tool. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an apparatus for safely transmitting and receiving a signal including digitized video information and audio information.

  FIG. 9 shows a conventional example. FIG. 9 is a block diagram showing a transmission apparatus 502 and a reception apparatus 503 in the conventional example. In FIG. 9, a transmission apparatus 502 includes a video encoding unit 10 compliant with MPEG-2 video (ISO / IEC 13818-2), and an audio encoding unit 15 compliant with MPEG-2 audio (ISO / IEC 13818-3). Is provided. The receiving device 503 includes a video decoding unit 106 and an audio decoding unit 111.

  In FIG. 9, in the conventional transmission apparatus 502, the input digital video signal 9 is compressed and encoded in accordance with MPEG-2 video by the video encoding means 10 and output as a video bitstream 11. The input digital audio signal 14 is compression encoded by the audio encoding means 15 and output as an audio bit stream 16.

  In the conventional receiving apparatus 503, the video bit stream 11 is decompressed by the video decoding means 106 and output as the digital video signal 107. The audio bit stream 16 is decompressed by the audio decoding means 111 and output as a digital audio signal 112.

  However, in the above conventional example, the video bitstream or the like is not encrypted and protected, and can be easily stolen by an unauthorized receiving device. Further, even if encryption is performed, no countermeasure is taken against illegal decryption of the encryption method itself. That is, there is a problem that there is no means for preventing unauthorized reception of data transmitted by the transmission device.

  In view of the above problems, an object of the present invention is to provide a protection unit that allows a receiving device to safely receive data transmitted by a transmitting device.

  The above-described problem is solved by the following transmission device. In other words, encryption means for encrypting at least one of digital audio information and digital video information to generate encrypted digital AV information, and tool generation for generating a tool necessary for decrypting the encrypted digital AV information Means for generating tool identification information for identifying the tool, selection means for selecting a predetermined tool from a plurality of tools, and an instruction for generating tool identification information for the tool identification information generating means And a transmission control unit that issues an instruction for selecting a predetermined tool to the selection unit, and a transmission unit that transmits the encrypted digital AV information, the tool identification information, and the tool.

  Moreover, you may further provide the tool list information production | generation means which produces | generates the tool list information which has the said tool identification information. In this case, the transmission control unit issues an instruction to generate tool list information to the tool list information generation unit instead of an instruction to generate tool identification information to the tool identification information generation unit. Further, the transmission means can further transmit the tool list information.

  The tool may include a mutual authentication tool. Further, the tool may include a key management tool.

  The identification information may indicate a manufacturer of the receiving device. Furthermore, the identification information may indicate a sender. Alternatively, the identification information may indicate the manufacturer of the DRM module.

  Furthermore, the transmission means may further transmit a DRM module container including the tool identification information, an update availability flag indicating tool update, and a module version number. Further, the transmission means may further transmit an ID indicating a right description method associated with the DRM.

  Moreover, you may further provide the invalid tool information production | generation means which shows the tool which is invalid. In this case, the transmission control unit instructs the invalid tool generation unit to generate an invalid tool list.

  Moreover, you may further provide the granulation information production | generation means which produces | generates the granulation information showing the grade which a tool occupies for the whole control tool.

  In addition, the transmission control means may issue an instruction to transmit information about the tool that is held.

  Moreover, you may further provide the receiving means which receives the request information regarding a tool and encryption digital AV information from a receiver. In this case, the transmission control means issues an instruction to select the tool based on the request information.

  The transmission control unit may add the invalid tool information to the tool list information based on information on the invalid tool received through the receiving unit.

  Moreover, the said subject is solved by the following receivers. That is, a means for receiving encrypted digital AV information and tool identification information in which at least one of digital audio information and digital video information is encrypted, and a tool necessary for decrypting the encrypted digital AV information are provided. A tool identification information separating means for separating tool identification information to be identified; a means for receiving and incorporating a tool specified by the tool identification information; a decrypting means for decrypting the encrypted digital AV information; Means for extracting digital audio information and digital video information from the encrypted digital AV information using the tool, instructing the tool identification information separating means to separate the tool identification information, and incorporating the means To the above decoding means And a reception control means for instructing the decoding of the encrypted digital AV information.

  Further, instead of the tool identification information separating means, a tool list information separating means for decoding the received tool list information and extracting the tool identification information may be provided. In this case, the receiving means receives encrypted digital AV information and tool list information in which at least one of digital audio information and digital video information is encrypted, and the reception control means receives the tool list separation. The means can be instructed to extract the tool identification information.

  The receiving means can further receive a DRM module container including the tool identification information, an update availability flag indicating tool update, and a module version number.

  Further, the DRM module may be received based on the tool identification information indicating the manufacturer of the DRM module, and the encrypted digital AV information may be decrypted by the received DRM module.

  Furthermore, a tool may be received based on tool identification information indicating a manufacturer of the receiving device, and the encrypted digital AV information may be decrypted based on the received tool.

  Further, the rights identification information indicating the rights description method accompanying the DRM may be received, and the encrypted digital AV information may be decrypted based on the received rights identification information.

  Further, the tool may control a decoding means for decoding the AV information incorporated therein.

  Further, it may further comprise an incorporation prohibiting means for prohibiting the incorporation of the tool into the incorporating means into the incorporating means. In this case, when the tool is an invalid tool described in the tool list information, the reception control unit can inhibit the incorporation prohibiting unit from incorporating.

  Moreover, you may further provide the transmission means which requests | requires a new tool with respect to a transmission apparatus.

  In addition, the reception control unit may issue an instruction to transmit information on the tool and the encryption / decryption tool held to the transmission apparatus.

  Moreover, you may further have a transmission means to tell the manufacturer of a receiver with respect to a transmitter.

  Furthermore, a transmission means for transmitting request information regarding the tool and the encrypted digital AV information to the transmission apparatus may be further provided.

  As is apparent from the above description, the transmission apparatus according to the present invention can download tool protection information for decrypting encryption together with encrypted data to the reception apparatus, so that the tool can be updated. Therefore, it is possible to provide the convenience that the latest protection method can always be provided.

  In addition to the above effects, the transmitting apparatus according to the present invention has an advantage that tool list information can be easily used as a table.

  In addition to the above effects, the transmission apparatus according to the present invention has an advantage that an invalid tool can be shown.

  In addition, the transmission apparatus according to the present invention can show granulation information, and thus has an advantage of reducing confusion in system construction.

  Further, the receiving apparatus shown in the present invention has an advantage that the tool can be updated by, for example, downloading, and the latest protection method can always be provided.

  In addition to the above effects, the receiving apparatus shown in the present invention has an advantage that the entire tool information can be obtained from the tool list information.

  In addition to the above effects, the receiving device according to the present invention has an advantage that an invalid tool can be prevented from being incorporated in the receiving device.

  In addition to the above-described effects, the receiving apparatus shown in the present invention can obtain the granulation information of the tool and construct an optimum system.

  Hereinafter, a transmission device and a reception device according to an embodiment of the present invention will be described with reference to FIGS. In the drawings, substantially the same members are denoted by the same reference numerals.

(Embodiment 1)
FIG. 1 is a block diagram showing a configuration of a transmission apparatus according to Embodiment 1. In FIG. In FIG. 1, the transmission device 23 includes a tool identification information generation unit 1 that generates tool identification information 2, a first tool generation unit 3 that generates a first tool 4, and a second tool 6 that generates a second tool 6. The tool generation means 5, the selection means 7 for switching and outputting the first tool 4 and the second tool 6, the encryption means 12, the multiplexed transmission means 17, the first transmission control means 19, the reception means 21, A video encoding unit 10 compliant with MPEG-2 video (ISO / IEC13818-2) and an audio encoding unit 15 compliant with MPEG-2 audio (ISO / IEC13818-3) are provided.

  In FIG. 1, an input digital video signal 9 is compressed and encoded into a video bit stream 11 compliant with MPEG-2 by a video encoding means 10, encrypted by an encryption means 12, and output as an encrypted video bit stream 13. The The input digital audio signal 14 is compression encoded into MPEG-2 audio by the audio encoding means 15 and output as an audio bit stream 16.

  The transmission device 23 sends the encrypted video bit stream 13 and the audio bit stream 16 to the reception device. In this case, mutual authentication, key exchange, and the like are performed between the transmission device 23 and the reception device side, and a tool required by the reception device is provided. The tool in this case is the entire control tool required for mutual authentication with the receiving apparatus, key management, and decryption. Regarding the decryption, there are cases where both the decryption means (cipher) for decrypting the encrypted video bitstream 13 in decryption and its control means are included, or only the control means. Here, it is assumed that decryption means for decrypting the encrypted video bitstream is built in the receiving apparatus, and considers the case where the control means is transmitted from the transmitting apparatus to the receiving apparatus.

  The first tool generation means 3 outputs a first tool 4 including a control tool for the mutual authentication, key management, and AES decryption. Similarly, the second tool generation means 5 outputs a second tool 6 including a control tool for mutual authentication and decryption of the key management triple DES.

  Here, it is assumed that the input information 20 is given from the receiving device. Since the receiving device includes a decryption cipher for performing AES decryption but does not have the control means, a control tool as the control means is provided as the transmission device 23. The case where the request is made will be described.

  The reception means 21 receives the input information 20 and supplies the first transmission control means 19 with reception information 22 for requesting a tool including control software for AES. The first transmission control means 19 instructs the selection means 7 to select the first tool 4. As a result, the tool 8 becomes the first tool 4.

  Further, the first transmission control unit 19 instructs the tool identification information generation unit 1 to generate an ID for identifying that the tool 8 is the first tool 4 as the tool identification information. In Table 1 below, since the first tool 4 is selected as the tool 8, the tool identification information is 0x00000000. Table 1 also describes an ID indicating the manufacturer of the receiving device. Table 1 shows that the first tool is company A and the second tool is company B. Here, the manufacturer is the manufacturer of the receiving device. However, even if the same DRM tool is originally used, if the receiving device is different, the same tool is downloaded depending on the difference in the application programming interface (API) of the receiving device. Since this is not possible, the manufacturer of the receiver is described. In this respect, if the difference between the receiving devices is included, it may be paraphrased as a DRM module manufacturer. Furthermore, the provider that transmits data may provide services for a specific receiving device. In this case, the authentication, the key, and the like are different.

  The first transmission control unit 19 multiplexes the encrypted video bit stream 13, the audio bit stream 16, the tool 8, and the tool identification information 2 into the MPEG-2 transport stream with respect to the multiplexing transmission unit 17. Instruct. As a result, the tool identification information 2 and the tool 8 are set as program specification information (Program Specific Information), the encrypted video bit stream 13 and the audio bit stream 16 are multiplexed as elementary streams, and a multiplexed bit stream 18 is output. .

  In the first embodiment, the case where the video bit stream is encrypted is described. However, when the audio bit stream is encrypted, or the signal obtained by multiplexing the video bit stream and the audio bit stream is encrypted. It is the same.

  Further, the tool may handle not only the entire control tool including the authentication tool, the key management tool, and the decryption control tool, but also the individual authentication tool, the key management tool, the decryption control tool, and the like separately. The manufacturer ID may be a DRM module.

  Also, the tool 8, the encrypted video bit stream 13, the audio bit stream 16, and the tool identification information 2 are multiplexed and sent in the same bit stream, but the tool 8 and the tool identification information 2 may be sent separately. Needless to say.

  As described above, the present invention can download the tool protection information for decrypting the encrypted data together with the encrypted data to the receiving device, so that the tool can be updated, and the latest protection method is always used. Can be provided.

(Embodiment 2)
The second embodiment is similar to the first embodiment, but differs in that information relating to the tool is sent to the receiving apparatus as tool list information that is tabulated. FIG. 2 is a block diagram showing a configuration of transmitting apparatus 23a according to the second embodiment. In FIG. 2, the transmission device 23 a includes a second transmission control unit 26 instead of the first transmission control unit and a tool list for generating tool list information, as compared with the transmission device according to the first embodiment. The difference is that an information generating means 24 is further provided.

  The second transmission control unit 26 instructs the tool list information generation unit 24 to generate the tool list information 25 by converting the contents of Table 1 into a table. As a result, the receiving apparatus can know all the tools by looking at the tool list information 25.

Other operations are the same as those in the first embodiment of the present invention.
As described above, according to the present invention, the encrypted data can be downloaded to the receiving device, so that the tool can be updated, the latest protection method can be always provided, and the tool list information can be updated. There is an advantage that it can be easily used as a table.

(Embodiment 3)
The third embodiment is a transmission apparatus similar to the second embodiment, but the third embodiment is different in that invalid tool information is described in the tool list information. FIG. 3 is a block diagram showing a configuration of transmitting apparatus 23b according to Embodiment 3. This transmission device 23b is different from the transmission device according to the second embodiment in that it includes a third transmission control unit 29 instead of the second transmission control unit and further includes an invalid tool information generation unit 27. To do.

  In FIG. 3, the receiving means 21 receives the input information 20 and supplies the third transmission control means 29 with the received information 22 including that the second tool has failed in terms of bugs and reliability. The third transmission control unit 29 issues an instruction to the invalid tool information generation unit 27 to generate invalid tool information 28 notifying that the second tool is invalid, and sends it to the tool list information generation unit 24.

  The tool list information generating unit 24 outputs tool list information 25 including invalid tool information 28. In the tool list information, the invalid tool information 28 may be represented by an invalid flag as shown in Table 2 below, for example. As a result, it is possible to notify the counterpart receiving device that the transmitting device 23b transmits that the second tool is an invalid tool.

  Although Table 2 shows that the second tool of Company B is invalid, it goes without saying that Company B itself can be invalidated.

  In the third embodiment of the present invention, the invalid tool information is included in the tool list information, but it may be sent independently, or may be combined with the first embodiment of the present invention.

  As described above, according to the present invention, encrypted data can be downloaded to a receiving device, so that the tool can be updated, and the latest protection method can always be provided. There is an advantage that it can be used simply as a table and an invalid tool can be shown.

(Embodiment 4)
The fourth embodiment is a transmission device similar to the second embodiment, but the fourth embodiment is different in that it can send the granulation information of the tool. FIG. 4 is a block diagram showing a configuration of transmitting apparatus 23c according to the fourth embodiment. Compared with the transmission apparatus according to the third embodiment, the transmission apparatus 23c includes a fourth transmission control means 32 instead of the third transmission control means, and a third tool instead of the second tool generation means. The difference is that a tool generation means 33 is provided. Moreover, it is different in that it further includes granulation information generating means 30 for generating granulation information 31 indicating the degree of the tool 8 occupying the entire control tool.

  In the transmission / reception system, there are cases in which individual control tools are shown as the tool 8 or the entire control tool including the authentication tool, the key management tool, and the like is mixed. In such a case, it is possible to construct a system without confusion by clearly indicating whether the tool represents the entire control tool or represents each element. Therefore, the granulation information 31 is provided as an index indicating whether the tool 8 represents the entire control tool or an individual control tool.

  In FIG. 4, the fourth transmission control unit 32 instructs the granulation information generation unit 30 to generate the granulation information 31.

  In the granulation information 31 shown in Table 3, since the first tool 4 is the entire control tool including the authentication tool, the key management tool, etc., the granulation level is set to 0. On the other hand, since the third tool 34 is only a control tool for AES decryption, the granularity level is set to 1.

  Here, the case where they are mixed has been described, but the effect of reducing the disruption of the system construction can be exhibited even if the granulation information is sent when they are not mixed.

  As described above, according to the present invention, the encrypted data can be downloaded to the receiving device, so that the tool can be updated and the latest protection method can always be provided. In addition, the tool list information can be easily used as a table, and the granulation information of the tool can be shown, so that confusion in system construction can be reduced.

(Embodiment 5)
The fifth embodiment is a transmission device similar to the first to fourth embodiments, but has a different form of expression. Table 4 below shows the DRM management information multiplexed in the program specification information. If the DRM management information is 01, it indicates that it is a DRM module container, and if it is 02, it indicates that it is a rights container. In other words, each element included in the overall tool described in the first to fourth embodiments is described separately for the DRM module and the DRM right.

  Table 5 shows DRM module information as a tool multiplexed with the program specification information. The DRM module information means the entire control tool including an authentication tool, a key management tool, and a decryption control tool. The manufacturer ID shown in Table 5 is included as part of the DRM module shown in Table 5.

  The length is the container length. The manufacturer ID is an ID indicating the manufacturer of the DRM module or the receiving device. The flag is a concept similar to the granulation information shown in the fourth embodiment, but is further simplified to indicate whether the tool is updated by 1/0. That is, in the fourth embodiment, the tool to be updated is changed depending on the degree of granulation, but here it is determined whether or not to update the tool based on the flag. The manufacturer ID is an ID for identifying a DRM module that differs depending on the manufacturer of the receiving device or the receiving device. The module version number is the number of the DRM module, but is a concept similar to that of the manufacturer of the receiving device, but the module version number is used for distinction in response to the fact that the DRM module differs depending on the receiving device specifications. It is described. The DRM module is the main body of the DRM module.

  Table 6 below shows DRM rights container information as a tool multiplexed with the program specification information. The length is the container length. The right ID is an ID indicating a right description method. The description language indicates an expression language such as XML or binary. The right data is the content of the right. Here, the right data need not be sent simultaneously as shown in Table 4, and may be sent separately. For example, if the terminal side already holds it, or if it is described in the URL, only the right ID needs to be sent.

  As described above, according to the present invention, the encrypted data can be downloaded to the receiving device, so that the tool can be updated and the latest protection method can always be provided. In addition, an optimum system can be constructed based on whether the tool is updated, version information, rights information, and the like.

(Embodiment 6)
FIG. 5 is a block diagram showing a configuration of receiving apparatus 100 according to Embodiment 6 of the present invention. The receiving apparatus 100 includes a receiving and demultiplexing unit 102, a decoding unit 104, a video decoding unit 106 that decompresses a compressed video bitstream, a control tool incorporating unit 109, a tool identification information separating unit 113, and a first reception control. Means 115, transmission means 116, video decoding means 106 for decompressing the compressed video bitstream 105, and audio decoding means 111. The decryption means 104 is constituted by a decryptor (cipher) that decrypts AES. The control tool incorporating means 109 is constituted by a writable memory or the like. In this case, the control tool 108 is composed of soft air.

  In FIG. 5, an input multiplexed bit stream 101 is added to reception and demultiplexing means 102. The reception and demultiplexing means 102 demultiplexes the multiplexed bit stream 101 into an encrypted video bit stream 103, an audio bit stream 110, and tool identification information.

  Here, it is assumed that the tool identification information follows Table 7. That is, if the tool identification information is 0x00000000, it means the first tool, and if it is 0x00000001, it means the second tool. Table 7 also describes an ID indicating the manufacturer of the receiving device. Table 7 shows that the first tool is company A and the second tool is company B.

  The tool identification information separation unit 113 extracts 0x000000000000 representing the first tool as the tool identification information 114 and supplies it to the first reception control unit 115.

  The control tool 108 is software in the case of the present embodiment, and is written in the control tool incorporating means 109 configured by a writable memory.

  The first reception control unit 115 sequentially reads software codes from the control tool incorporation unit 109 and controls the decoding unit 104. As a result, the encrypted video bitstream 103 is decrypted, output as a compressed video bitstream 105, decompressed by the video decoding means 106, and output as a digital video signal 107.

  The first reception control unit 115 outputs, for example, the manufacturer information of the reception device and the built-in decryption tool information as the information 117 of the reception device 100 through the transmission unit 116, and the tool needs to be updated. First, an update request is made to the transmission device. As a result, it is possible to update a necessary tool in the receiving apparatus 100.

  In addition, the tool may handle not only the overall control tool including the authentication tool, the key management tool, and the decryption control tool, but also the individual authentication tool, the key management tool, and the decryption control tool.

  Further, the demultiplexing means 102 separates the tool 8 from the encrypted video bitstream 13, the audio bitstream 16, and the tool identification information from the same bitstream. Needless to say, it may be.

  As described above, according to the sixth embodiment of the present invention, there is an advantage that the tool can be updated by, for example, downloading, and the latest protection method can always be provided.

(Embodiment 7)
FIG. 6 is a block diagram showing a configuration of receiving apparatus 100a according to Embodiment 7 of the present invention. In FIG. 6, compared with the receiving apparatus according to the sixth embodiment, receiving apparatus 100a includes second receiving control means 120 instead of the first receiving control means, and further replaces the tool identification information separating means. The difference is that tool list information separating means 118 for separating the tool list information 119 is provided.

  In FIG. 6, an input multiplexed bit stream 101 is added to reception and demultiplexing means 102. The reception and demultiplexing means 102 demultiplexes the encrypted video bitstream 103, the audio bitstream 110, and the tool list information from the multiplexed bitstream 101.

  Here, the tool list information is obtained by converting Table 4 into a table format. The tool list information separating unit 118 extracts 0x000000000000 representing the first tool as the tool list information 119 and supplies it to the first reception control unit 120.

  In the case of the present embodiment, the control tool 108 is software, and is written in the control tool incorporating means 109 configured by a writable memory or the like.

  The second reception control means 120 sequentially reads the software code from the control tool incorporation means 109 and controls the decoding means 104. As a result, the encrypted video bitstream 103 is decrypted and output as a compressed video bitstream 105, further decompressed by the video decryption means 106, and output as a digital video signal 107.

  The second reception control unit 120 outputs the information 117 of the reception device 100a through the transmission unit 116, and requests update of the transmission device when the tool needs to be updated. This makes it possible to update the tool required by the receiving device 100a.

  As described above, according to the sixth embodiment of the present invention, the tool can be updated by, for example, downloading, and the tool can be updated based on the tool list information in addition to being always equipped with the latest protection method. There is an advantage that the entire information can be obtained.

(Embodiment 8)
FIG. 7 is a block diagram showing a configuration of receiving apparatus 100b according to Embodiment 8 of the present invention. In FIG. 7, the receiving device 100b includes a third receiving control unit 123 instead of the second receiving control unit, and further includes an incorporation prohibiting unit 122, as compared with the receiving device according to the seventh embodiment. Is different.

  In FIG. 7, an input multiplexed bit stream 101 is added to reception and demultiplexing means 102. The reception and demultiplexing means 102 demultiplexes the encrypted video bitstream 103, the audio bitstream 110, and the tool list information from the multiplexed bitstream 101.

  Here, the tool list information separating unit 118 transmits the invalid tool information 121 for separating the tool list information shown in Table 8 and informing that the first tool is invalid to the third reception control unit 123.

  The third reception control unit 123 prohibits the incorporation prohibiting unit 122 from incorporating the first control tool 108 into the control tool incorporating unit 109. As a result, the first tool, which is regarded as an invalid tool, is not incorporated into the control tool incorporation means 109, so that the encrypted video bitstream 103 is not decrypted. Further, the information 117 of the receiving device 100b is output through the transmitting unit 116, and when the tool needs to be updated, an update request is made to the transmitting device. As a result, it is possible to update the tool required by the receiving apparatus 100b.

  As described above, in the eighth embodiment of the present invention, the tool can be updated by, for example, downloading, and in addition to being able to always have the latest protection method, the invalid tool is incorporated in the receiving apparatus 100b. There is an advantage that it can be prevented.

(Embodiment 9)
FIG. 8 is a block diagram showing a configuration of receiving apparatus 100c according to Embodiment 9 of the present invention. In FIG. 8, this receiving apparatus 100 c includes fourth receiving control means 126 instead of the second receiving control means, and further separates the granulation information 125 as compared with the receiving apparatus according to the seventh embodiment. The difference is that a granulation information separation unit 124 is provided.

  In FIG. 8, an input multiplexed bit stream 101 is added to the receiving and demultiplexing means 102. The reception and demultiplexing means 102 demultiplexes the encrypted video bitstream 103, the audio bitstream 110, and the tool list information from the multiplexed bitstream 101.

  Here, the tool list information assumes that Table 7 is in a table format. The tool list information separating unit 118 extracts 0x000000000000 representing the first tool as the tool list information 119 and supplies it to the fourth reception control unit 126. The fourth reception control unit 126 instructs the granulation information separation unit 124 to separate the granulation information 125. The granulation information separation unit 124 separates the granulation information 125 according to the instruction.

  In the granulation information 125 shown in Table 9, since the first tool is the entire control tool including the authentication tool, the key management tool, etc., the granulation level is 0, and the third tool is the control for AES decryption. Since there is only a tool, the granulation level is 1. Since it is the first tool here, the software that is the control tool 108 including the entire control tool such as the authentication tool and the key management tool is written in the control tool incorporating means 109 configured by a writable memory or the like.

  The fourth reception control unit 126 sequentially reads the software code from the control tool incorporating unit 109 and controls the decoding unit 104. As a result, the encrypted video bitstream 103 is decrypted, output as a compressed video bitstream 105, decompressed by the video decoding means 106, and output as a digital video signal 107.

  The fourth reception control unit 126 outputs the information 117 of the reception device 100c to the transmission device through the transmission unit 116.

  Although a case where a plurality of tools coexist has been described here, the effect of reducing the disruption of the system construction can be exhibited even if the granulation information is sent when the tools are not mixed.

  As described above, according to the present invention, encrypted data can be downloaded to a receiving device, so that the tool can be updated, and the latest protection method can always be provided. It is possible to construct an optimal system by obtaining information.

(Embodiment 10)
The tenth embodiment is a receiving apparatus similar to the sixth to ninth embodiments, but has a different expression form. Table 10 below shows the DRM management information multiplexed with the program specification information. If the DRM management information is 01, it indicates a DRM module container, and 02 indicates that it is a rights container. Table 10 shows the DRM management information multiplexed in the program specification information. If the DRM management information is 01, it indicates a DRM module container, and 02 indicates that it is a rights container. That is, each element included in the entire tool described in the sixth to ninth embodiments is described separately for the DRM module and the DRM right.

  Table 11 below shows DRM module information as a tool multiplexed with the program specification information. The DRM module information means the entire control tool including an authentication tool, a key management tool, and a decryption control tool.

  The length is the container length. The manufacturer ID is an ID indicating the manufacturer of the DRM module or the receiving device. The flag is set to 1 if update is possible and 0 if it is not possible. The manufacturer ID is an ID for identifying the manufacturer of the DRM module or receiving device shown in Table 11. The module version number is a DRM module number. The DRM module is the main body of the DRM module.

  Table 12 below shows DRM rights container information as a tool multiplexed with the program specification information. The length is the container length. The right ID is an ID indicating a right description method. The description language indicates an expression language such as XML or binary. Rights data is the content of rights. Here, the right data may be sent separately. For example, when the terminal side already holds the right data or when it is described in the URL, the right information may be received from the URL based on the right ID.

  As described above, according to the present invention, encrypted data can be downloaded to the receiving device, so that the tool can be updated, and the latest protection method can always be provided. It is possible to construct an optimum system based on version information, right information, and the like.

  As described above, the present invention has been described in detail with reference to the preferred embodiments. However, the present invention is not limited to these embodiments, and many of them are within the technical scope of the present invention described in the following claims. It will be apparent to those skilled in the art that other preferred variations and modifications are possible.

It is a figure which shows schematic structure of the transmitter in Embodiment 1 of this invention. It is a figure which shows schematic structure of the transmitter in Embodiment 2 of this invention. It is a figure which shows schematic structure of the transmitter in Embodiment 3 of this invention. It is a figure which shows schematic structure of the transmitter in Embodiment 4 of this invention. It is a figure which shows schematic structure of the receiver in Embodiment 5 of this invention. It is a figure which shows schematic structure of the receiver in Embodiment 6 of this invention. It is a figure which shows schematic structure of the receiver in Embodiment 7 of this invention. It is a figure which shows schematic structure of the receiver in Embodiment 8 of this invention. It is a figure which shows the conventional schematic structure.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Tool identification information production | generation means 3 1st tool production | generation means 5 2nd tool production | generation means 7 Selection means 10 Video encoding means 12 Encryption means 15 Audio encoding means 17 Multiplexing transmission means 19, 26, 29, 32 Transmission Control means 21 Receiving means 23, 23a, 23b, 23c Transmitting device 24 Tool list information generating means 27 Invalid tool information generating means 30 Granularization information generating means 100, 100a, 100b, 100c Receiving device 102 Reception and demultiplexing means 104 Decoding Means 106 Video decoding means 109 Control tool incorporation means 111 Audio decoding means 113 Tool identification information generation means 115, 120, 123, 126 Reception control means 116 Transmission means 118 Tool list information separation means 122 Installation prohibition means 124 Granulation information separation means

Claims (26)

Encryption means for encrypting at least one of digital audio information and digital video information to generate encrypted digital AV information;
Tool generation means for generating a tool necessary for decrypting the encrypted digital AV information;
Tool identification information generating means for generating tool identification information for identifying the tool;
A selection means for selecting a predetermined tool from a plurality of tools;
A transmission control unit that issues an instruction to generate tool identification information to the tool identification information generation unit and an instruction to select a predetermined tool to the selection unit;
A transmission apparatus comprising: transmission means for transmitting the encrypted digital AV information, the tool identification information, and the tool. Tool list information generating means for generating tool list information having the tool identification information;
The transmission control means issues an instruction to generate tool list information to the tool list information generation means instead of an instruction to generate tool identification information to the tool identification information generation means,
The transmission device according to claim 1, wherein the transmission unit further transmits the tool list information.   The transmitting device according to claim 1, wherein the tool includes a mutual authentication tool.   The transmission device according to claim 1, wherein the tool includes a key management tool.   The transmission device according to claim 1, wherein the tool identification information indicates a manufacturer of the reception device.   The transmission device according to claim 1, wherein the tool identification information indicates a sender.   The transmission device according to claim 1, wherein the tool identification information indicates a manufacturer of the DRM module.   The transmission device according to claim 1, wherein the transmission unit further transmits a DRM module container including the tool identification information, an update availability flag indicating tool update, and a module version number.   The transmission apparatus according to claim 1, wherein the transmission unit further transmits an ID indicating a right description method associated with the DRM. It further comprises invalid tool information generating means for generating invalid tool information indicating a tool that is invalid,
The transmission apparatus according to claim 1, wherein the transmission control unit instructs the invalid tool information generation unit to generate invalid tool information.   The transmission apparatus according to claim 1, further comprising granulation information generation means for generating granulation information representing a degree of the tool occupying the entire control tool.   The transmission apparatus according to claim 1, wherein the transmission control unit issues an instruction to transmit information on the tool that the transmission control unit has. Receiving means for receiving request information about the tool and encryption information from the receiving device;
The transmission apparatus according to claim 1, wherein the transmission control unit issues an instruction to select the tool based on the request information.   The transmission device according to claim 13, wherein the transmission control unit adds the invalid tool information to the tool list information based on information on the invalid tool received through the reception unit. Means for receiving encrypted digital AV information and tool identification information in which at least one of digital audio information and digital video information is encrypted;
Tool identification information separating means for separating tool identification information for identifying a tool necessary for decrypting the encrypted digital AV information;
Means for receiving and incorporating the tool specified by the tool identification information;
Decryption means for decrypting the encrypted digital AV information;
Means for extracting digital audio information and digital video information from the encrypted digital AV information using the decryption means and the tool;
Reception for instructing the tool identification information separation means to separate the tool identification information, instructing the incorporation means to incorporate, and instructing the decryption means to decrypt the encrypted digital AV information And a receiving device. In place of the tool identification information separating means, the tool list information separating means for decoding the received tool list information and extracting the tool identification information,
The receiving means receives encrypted digital AV information and tool list information in which at least one of digital audio information and digital video information is encrypted,
The receiving apparatus according to claim 15, wherein the reception control unit instructs the tool list separation unit to extract the tool identification information.   The receiving apparatus according to claim 15, wherein the receiving unit further receives a DRM module container including the tool identification information, an update enable / disable flag indicating whether the tool can be updated, and a module version number.   The receiving apparatus according to claim 15, wherein the receiving apparatus receives a DRM module based on tool identification information indicating a manufacturer of the DRM module, and decrypts the encrypted digital AV information by the received DRM module.   The receiving apparatus according to claim 15, wherein the receiving apparatus receives a tool based on tool identification information indicating a manufacturer of the receiving apparatus, and decrypts the encrypted digital AV information based on the received tool.   16. The receiving apparatus according to claim 15, wherein the receiving apparatus receives rights identifying information indicating a rights description method associated with the DRM, and decrypts the encrypted digital AV information based on the received rights identifying information.   16. The receiving apparatus according to claim 15, wherein the tool controls a decrypting means for decrypting the encrypted digital AV information incorporated therein. An installation prohibition means for prohibiting the incorporation of the tool into the installation means;
16. The receiving apparatus according to claim 15, wherein the reception control means prohibits the incorporation prohibiting means from being incorporated when the tool is an invalid tool described in the tool list information.   The receiving apparatus according to claim 15, further comprising transmitting means for requesting a new tool from the transmitting apparatus.   The receiving apparatus according to claim 15, wherein the reception control unit issues an instruction to transmit information related to the owned tool and the encryption / decryption tool to the transmitting apparatus.   The receiving apparatus according to claim 15, further comprising a transmitting unit that communicates a manufacturer of the receiving apparatus to the transmitting apparatus. The receiving apparatus according to claim 15, further comprising a transmitting unit that transmits request information regarding the tool and the encryption information to the transmitting apparatus.

Images