JP2010257475A - Method and apparatus for accessing stored digital program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To allow program data to be descrambled without the problem of termination of key period in future to be viewable. <P>SOLUTION: A method for deriving past keys by using a one-way function to relate an ordered sequence of keys to each other is provided. In another embodiment, future access keys are provided by creating a plurality of entitlement control messages, each entitlement control message including an access key for a given time period. In another embodiment, future access keys are provided by creating an entitlement control message having a plurality of access keys corresponding to a plurality of time periods. In another embodiment, an entitlement history is tracked by creating an entitlement management message having an entitlement time history field that includes information about whether a user includes entitlement to view content recorded during a past time period. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The present invention relates to a program viewing unit such as a set top box for use in entertainment systems. In particular, the present invention relates to a method and apparatus for scrambling program data so that the program data can be descrambled and viewed without future key expiration issues.

  Digital communication systems are rapidly becoming popular in place of analog communication systems. Digital television will be available to all viewers in the United States by 2002 and will be completely replaced by 2006. High-definition television (HDTV) broadcasting has begun in many cities with restrictions. Similarly, with the explosive spread of the Internet and the World Wide Web, downloadable audiovisual files including, for example, MP3 format audio files and other content have become widespread.

  At the same time, with the rapid transition to such a digital communication system, digital recording devices have greatly evolved. As an example of a digital recording device that produces copies without producing intergenerational degradation known in high-quality recording and analog technology (ie, gradual degradation of data quality due to repeated copying) Versatile disk (hereinafter referred to as DVD) recorder, digital VHS video tape recorder (hereinafter referred to as D-VHS VTR), CD-ROM recorder (for example, CD-R and CD-RW), MP3 recording device In addition, a recording device using a hard disk is known. With the widespread use of digital communication systems and digital recording devices, for example, content providers such as video and music producers need to devise materials that should be protected by copyright etc. so that they are not freely copied without proper permission.

  In response to this, some copy protection is applied to, for example, terrestrial broadcasting stations, cable broadcasting stations, direct broadcast satellite (hereinafter referred to as DBS) operators, and companies that operate Internet sites that provide downloadable contents. There is a growing demand for action. Such copy protection methods include the 5C group (5C represents Sony, Hitachi, Toshiba, Matsushita and Intel) of the Data Hiding Sub Group (hereinafter referred to as DHSG) and the data transmission discussion. It has been proposed by a group (Data Transmission Discussion Group: hereinafter referred to as DTDG). These are the industry committee sub-groups of the Copy Protection Technical Working Group (CPTWG). CPTWG is a representative body of content providers and computer and consumer electronics manufacturers.

  DTDG digital transmission copy protection (hereinafter referred to as DTCP) is copyright-protected digital content transmitted between digital devices connected via a digital transmission medium such as an IEEE1394 serial bus. The purpose is to protect. This approach uses symmetric key cryptographic techniques for each device to encode compatible device components. Thereby, before transmitting digital content, it is possible to perform an authentication process for determining whether or not the digital devices are compatible with each other. The digital content itself is transmitted after being encoded so that the content cannot be understood when the content is illegally copied.

  One method of content encoding proposed by DHSG is based on digital watermark technology. The focus of DHSG's proposal is copy protection of digital movie and video content, particularly applied to DVD devices, but this approach is copy protection of any digital content distributed electronically via digital broadcast or digital network. It can also be applied to. Watermarks that cannot be viewed by the user are marked on the supplied content, and it is not possible to know in detail how the content is encoded by this watermark, thus removing the watermark without compromising the content Or it is very difficult to change. In DHSG, three main detection and control situations to which this technology is applied are defined. These are playback, recording, and copy generation controls. With this digital watermark technology, the content provider at least makes the content “copy never”, “copy once” or “copy free”. Can be specified. “No copy” is used to mark that copying of digital content is not permitted, “Copy free” indicates that the content may be copied freely, and this information You may mark with the information of. This is different from unmarked material. “Copying only once” indicates that copying of digital content is permitted only once. When a copy is created, the original “copy only once” content and the newly copied content are marked with “no more copy”. Of course, the reproduction or reproduction of such digital content may be limited by other types of copy management commands such as a specific time, period, or the number of times of reproduction or viewing.

  Thus, even today, digital devices such as set-top boxes, digital televisions, digital audio players, and similar digital devices are subject to conditional access (hereinafter referred to as CA), that is, real-time viewing ( Limitations and conditions for recording and playback of such digital content, beyond the conventional functions only for descrambling content in CA-clear format for real-time viewing and / or listening It has a function to include. Currently, the act of copying the scrambled content for later descrambling and viewing can be done by giving the digital device the appropriate permission or key by the service / content provider.

  For example, terrestrial broadcast stations, cable broadcast stations, and DBS operators adjust program data to be distributed to viewers by encoding the program data using various key delivery methods. In these common key distribution methods, the content in the program data is scrambled using a key and a control word. In this method, the content in the program data may be scrambled using a control word that is periodically changed during the broadcast period. The control word is incorporated into entitlement control messages in the program data, and is scrambled using a key inserted in the entitlement management messages of the program data. In order to descramble the content, it is necessary to retrieve the key and descramble the control word using this key. Subsequently, the control word is used for content descrambling.

  The viewer is permitted to record program data in which the content is scrambled and to descramble and display the content later. For example, a program viewing device such as a set-top box may be designed to descramble the content in the recorded program data, create a descrambling record, and report it to the service provider. As a result, the service provider can monitor the use of the program data by the viewer and charge the viewer for a service usage fee. Program viewing device has key management to support special fee collection methods with pay-per-view, pay-per-play, pay-per-time or other features A function may be provided.

  The problem with the current key distribution method is that the service provider periodically changes the key used for the scramble control word. For this reason, the program viewing apparatus descrambles the content in the program data only when the current key supplied from the service provider is the same as the key used in the scramble control word in the recorded program data. Can not do it. After the validity period of the key used to scramble the control word in the recorded program data has expired, the program viewing device cannot descramble the content.

DISCLOSURE OF THE INVENTION In an embodiment of the present invention, a plurality of keys are associated with each other in a predetermined order using a one-way function. In another embodiment of the invention, future access keys are provided by generating a plurality of rights control messages, each containing an access key corresponding to a predetermined period. In another embodiment of the present invention, a future access key is provided by generating a rights control message including a plurality of access keys corresponding to a plurality of periods.

  In another embodiment of the present invention, generating a rights management message including a temporal history field relating to rights including information relating to whether or not the user has the right to view content recorded in a past period. To monitor the history of rights.

  In another embodiment of the present invention, the recorded digital program is determined by determining whether the program is old and determining whether the user has the right to view the old program. Authenticate access. If the user does not have rights, the user is asked if he wants to watch the old program, and if the user wants to access the old program, he can The options are displayed.

FIG. 1 is a block diagram showing a configuration of an entertainment system to which the present invention is applied. FIG. 2 is a block diagram showing a configuration of a program viewing apparatus to which the present invention is applied. FIG. 3 is a block diagram showing a configuration of a conditional access device to which the present invention is applied. FIG. 4 is a diagram showing a specific example of the storage capacity necessary for storing the key. FIG. 5A is a diagram illustrating a specific example of a method for calculating a past key using a current key. FIG. 5B is a flowchart showing a procedure for calculating a past key using the current key. FIG. 5C is a diagram illustrating a specific example of a method for calculating a past key using a current key. FIG. 6A is a specific example of the right control message, and FIG. 6B is a diagram illustrating a specific example of the right control message including the future key. FIG. 6B is a specific example of the right control message, and FIG. 6B is a diagram illustrating a specific example of the right control message including the future key. FIG. 6C is a diagram illustrating a specific example of a right control message including a future key. FIG. 6D is a diagram illustrating a specific example of a right control message including a future key. FIG. 6E is a diagram illustrating a specific example of a right control message including a future key. FIG. 6F is a diagram illustrating a specific example of a right control message including a future key. FIG. 7 is an example of an error message used when generating the right control message. FIG. 7A is a flowchart showing a procedure for generating a rights control message including a future key. FIG. 7B is a flowchart showing a procedure for generating a right control message including a future key. FIG. 8A is a diagram illustrating a specific example of a rights management message including a rights history. FIG. 8B is a diagram illustrating a specific example of a rights management message including a rights history. FIG. 8C is a diagram illustrating a specific example of a rights management message including a rights history. FIG. 9A shows a display for obtaining the right to access a recorded digital program. FIG. 9B shows a display for obtaining the right to access a recorded digital program. FIG. 9C shows a display for obtaining the right to access a recorded digital program. FIG. 9D shows a display for obtaining the right to access a recorded digital program. FIG. 10 is a flowchart showing processing for determining whether or not the user has the right to view a program distributed in the past period. FIG. 11 is a flowchart showing a process for giving a user the right to view the contents of a program distributed in the past period.

  FIG. 1 is a block diagram showing a configuration of an entertainment system 100 shown as a specific example of a copy management method according to the present invention. The entertainment system 100 comprises a digital device 110 that receives a bitstream containing program data from one or more service providers. Such services or content providers include terrestrial broadcast stations, cable broadcast management operators, direct broadcast satellite (DBS) operators, content providers that can be downloaded via the Internet, and other similar content and A service provider is included. The program data includes system information, a rights control message, a rights management message, contents, and other data, which will be described later in detail. System information includes information about program name, broadcast time, source, search and decoding methods, and how, when, how to play, transmit, and / or record program data to digital receivers and other devices. A copy management command that provides information indicating whether or not to perform is included. These copy management commands are sent along with entitlement control messages (hereinafter referred to as ECM), which is usually used by a conditional accessor to coordinate access to a particular channel or service. . Entitlement management messages (hereinafter referred to as EMM) are used to give privileges to the digital receiver 111 such as a right and a descramble key. A decryption key is usually a code required to restore scrambled data and can be used as a proof of rights. Also, the content in the program data stream may include audio data and video data, which may or may not be scrambled (clear format).

  The digital device 110 includes a digital receiver 111. The digital receiver 111 processes a supplied bit stream, extracts program data from the bit stream, and converts the program data into a viewable format. The program data extracted here is supplied to the decoder 112 and subjected to further processing such as processing for separating system information from content, decoding processing, and decompression processing. The digital receiver 111 further regulates access to program data by other components in the entertainment system 100, and descrambled content (hereinafter referred to as descrambling content) according to the present invention. And a function of simultaneously transmitting program data having scrambled content (hereinafter referred to as scrambled content).

In one embodiment of the invention, the digital device 110 is a digital television set, the digital receiver 111 is a set-top box integrated with the television set, and the decoder 112 is a motion picture expert group. (Motion Picture Experts Group: hereinafter referred to as MPEG). In this specific example, a display device (not shown) of the digital television set is integrated with the digital device 110. Alternatively, the digital device 110 may include only the digital receiver 111 and / or the decoder 112, and the display device may be provided outside the digital device 110. As an example of such a configuration, the digital device 110 may be an integrated receiver / decoder (hereinafter referred to as an IRD) that outputs an NTSC, PAL, or Y _p B _p R signal. . These specific examples are all within the scope of the present invention.

  The digital device 110 may be connected to other components in the entertainment system 100 via the transmission medium 120. The transmission medium 120 is used for transmission / reception of data including control information and program data between the digital device 110 and other components in the entertainment system 100. Note that the entertainment system 100 shown in FIG. 1 is an example, and other analog and / or digital devices may be added to or replaced with the components described below to configure the entertainment system.

  The entertainment system 100 shown in FIG. 1 includes an audio device 130 connected to a transmission medium 120. The audio device 130 includes a speaker device and a compact disc player, a Sony mini disc (registered trademark) player, or other magneto-optical disc recording / reproducing device used for reproducing and / or recording audio data. The entertainment system 100 also includes a digital video tape recorder (hereinafter referred to as a digital VTR) 140 such as a D-VHS video tape recorder connected to the digital device 110 and other components via a transmission medium 120. As is well known, the digital VTR 140 has a function of recording audio and video signals in an analog or digital format and transmitting / receiving data, and is received by the digital device 110 and transmitted via the transmission medium 120 according to the present invention. It is also used for recording program data supplied to the digital VTR 140.

  The entertainment system 100 further includes a hard disk recording device 150 connected to the digital device 110 and other components via a transmission medium 120. The hard disk recording device 150 may be a personal computer system or may be a stand-alone hard disk recording device. The hard disk recording device 150 has a function of recording audio and video signals in analog and digital formats and transmitting / receiving data. Other hard disk recording devices may be used. In accordance with the present invention, the hard disk recording device 150 is used to record the program data received by the digital device 110 and supplied to the hard disk recording device 150 via the transmission medium 120, similar to the digital VTR 140.

  Display device 160 may be a high-definition television display device, a monitor device, or another device capable of processing digital video signals. When the digital device 110 is a stand-alone set top box, the display device 160 may be a digital television set.

  Further, the control device 170 may be connected to the transmission medium 120. The control device 170 coordinates and controls the operation of each component device of the entertainment system 100 and controls other electronic devices that are remotely connected to the control device 170.

  FIG. 2 is a diagram showing a configuration example of the digital receiver 111 having a copy management function based on the present invention. The digital receiver 111 includes a central processing unit (hereinafter referred to as a CPU) 210. The CPU 210 controls the entire operation of the digital receiver 111 and broadcasts or transmits a selected channel. To determine the frequency. This information is provided to the tuner 220, which selects the appropriate terrestrial, cable, satellite broadcast frequency or Internet website that receives the input digital bitstream containing the program data. The CPU 210 supports a graphical user interface (hereinafter, referred to as GUI) such as an electronic programming guide (hereinafter, referred to as EPG). The EPG guides the user through various channels and program options, which allows the user to select a desired channel or program for viewing and recording. The GUI may be displayed on a display device of the digital device 110 (for example, when the digital device 110 is a digital television set, etc.), and the display device 160 (for example, the digital device 110 is a stand-alone set top box). ) May be displayed.

  When tuner 220 selects the appropriate frequency, it amplifies the input digital bit stream and provides the output bit stream to demodulator 230. The demodulator 230 demodulates the bit stream supplied from the tuner 220 and reproduces the transmitted original program data. Of course, the type of demodulation processing executed by the demodulator 230 is determined based on the type of modulation processing and transmission used in the transmission processing. For example, in the case of Internet cable transmission using a cable modem, the demodulator 230 performs quadrature amplitude demodulation (hereinafter referred to as QAD), and in the case of satellite broadcasting, a quadrature phase shift (quadrature phase shift). key: hereinafter referred to as QPSK) Demodulation processing is required. In the case of terrestrial broadcasting, a vestigial side band (hereinafter referred to as VSD) demodulation process is often required. The present invention does not limit the type of transmission and modulation / demodulation scheme, and schemes other than those described above are also within the scope of the present invention. The demodulator 230 performs error correction processing on the received bitstream in addition to demodulation processing.

  The demodulated bit stream is supplied to the conditional accessor 240. (A portion of the unencrypted demodulated bitstream may bypass the conditional accessor 240 and be fed directly to the demultiplexer 250, as shown by the dashed line in FIG. May not require a decryption process and / or may not require the conditional accessor 240.) The conditional accessor 240, along with the descrambling process described below, may include key management and decryption. Execute the process.

  Normally, the CPU 210 determines that the content in the program data in the digital bitstream is scrambled and supplies the program data to the conditional access device 240. At this time, the CPU 210 supplies packet identifier (hereinafter referred to as PID) information to the conditional access device 240. The PID information informs the conditional accessor 240 where in the program data the ECM is detected. Alternatively, the CPU 210 may receive the ECM and supply the received ECM to the conditional access device 240. Alternatively, the conditional access device 240 may be provided with a demultiplexing function so that the position of the ECM can be directly detected from the bitstream itself. As described above, the ECM is a message for adjusting the user's access to a specific channel or service and determining the access rights that the digital receiver 111 should have in order to grant access. The ECM can also be used to distribute a decryption key or descrambling key, or information indicating how to obtain a key used to descramble scrambled content (eg, Algorithm). The conditional accessor 240 can descramble the content included in the program data using such information relating to the key or key acquisition. Alternatively, the conditional accessor 240 may supply a key to the demultiplexer 250, and the demultiplexer 250 may perform descrambling.

  The conditional access device 240 is shown as an integrated type or an embedded type, and in either case, descrambling and decryption processing are performed inside the digital receiver 111, but the conditional access device 240 is separated. However, it may be provided outside the digital receiver 111. The external conditional access device 240 provided externally descrambles the program data content and decrypts the key, for example, as in the National Renewable Security System (hereinafter referred to as NRSS). In the separated conditional access device 240, the program data content is descrambled in the digital receiver 111, and the key decryption process is executed externally by a smart card or the like, for example. Any of these methods are within the scope of the present invention.

  When the conditional accessor 240 descrambles the program data content, the program data is supplied to the demultiplexer 250. The demultiplexer 250 separates system information from the content in the program data. In an embodiment of the present invention, the demultiplexer 250 parses program data to detect PIDs associated with system information, audio information, and video information, and supplies the system information to the CPU 210 for audio information. And the video information is supplied to the decoder 112. In an embodiment of the present invention, a digital interface 260 is connected to the conditional accessor 240. As will be described later, this digital interface 260 allows the digital receiver 111 to communicate with other digital components within the entertainment system 100.

  The CPU 210, the tuner 220, the demodulator 230, the conditional accessor 240, the demultiplexer 250, and the digital interface 260 may be implemented using any known technique and any circuit. In one embodiment of the present invention, CPU 210, tuner 220, demodulator 230, demultiplexer 250, and digital interface 260 are housed in a single housing, and conditional accessor 240 is external (as described above). Provided in the NRSS conditional accessor. In the NRSS, the conditional access device 240 may be compliant with the Personal Computer Memory Card International Association (PCMCIA) standard, or may be realized by a smart card.

  FIG. 3 is a block diagram showing a configuration example of the conditional access device 240 of the copy management system according to the present invention. Conditional accessor 240 includes a processor 330 that receives the demodulated program data from demodulator 230 and reads PID information that identifies where in the program data ECM can be detected. As described above, this PID may be supplied from the CPU 210 or may be detected directly from the bitstream by the conditional accessor 240 itself.

  In one embodiment of the invention, the processor 330 processes the ECM and derives a key for descrambling the content. Next, the processor 330 supplies the program data and the key to the descrambler 340 via a signal line, a pin, or a set of pins 335 (hereinafter simply referred to as a signal line 335). The descrambler 340 receives a key and program data via the signal line 335, and descrambles or decrypts the program data with the key. The descrambler 340 transmits the program data having the descrambled content via a signal line, a pin, or a set of pins 346 (hereinafter simply referred to as a signal line 346), followed by a decoder. The video based on the program data is displayed and viewed by the user.

  The descrambler 340 supplies program data having the descrambled content to a re-scrambler 350 via a signal line, a pin, or a set of pins 345 (hereinafter simply referred to as a signal line 345). . The re-scrambler 350 receives the program data and executes processing such as re-scrambles the descrambled content of the program data. In this re-scramble process, an algorithm similar to the algorithm used in the descrambling process can be used. For example, DES can be used for both descrambling and re-scramble processing.

(In FIG. 3, the processor 330, the descrambler 340, and the re-scrambler 350 are shown as separate elements for explanation, but these elements may be integrated into one device. Alternatively, it may be realized by a known circuit or technique.)
The re-scrambler 350 re-scrambles the content using one of a plurality of methods. For example, in one specific example of the copy management system according to the present invention, the re-scrambler 350 may re-scramble the content using the ECM transmitted as the original bit stream and received by the digital receiver 111. Instead, an independent re-scrambling key separated from the ECM is transmitted in the original bitstream so that the re-scrambler 350 extracts it from the program data received from the descrambler 340. It may be. In another specific example of the copy management system according to the present invention, the re-scrambler 350 has a capability of performing an encryption process or an encoding process, and uses a local key unique to the digital receiver 111. The content may be re-scrambled. Such a key cannot be transmitted using ECM, but can be supplied to re-scrambler 350 using EMM. Alternatively, an unchangeable key created when the re-scrambler 350 is manufactured may be used.

  In further embodiments of the present invention, a control word may be used in addition to the key. In such an embodiment, the control word is first scrambled with the key and then inserted into the bit stream of program data before transmission. In this method, in order to descramble the content in the program data, the conditional accessor 240 first detects the key (using any of the methods described above) and then controls using the detected key. Descramble the word. The descrambled control word is used for content descrambling. This method allows the control word (and hence access rights) to be changed periodically without having to change the local key, so that especially when the local key is used (ie provided in the digital receiver 111). ), It is possible to increase flexibility in transmission and improve safety. In this way, the re-scrambler 350 can scramble the content using one of a plurality of methods. The re-scrambler 350 may re-scramble the control word using the original control word and key that have been transmitted. Alternatively, the re-scrambler 350 may use a local control word and key unique to the digital receiver 111. It will be apparent to those skilled in the art that the methods described above can be used alone or in combination, and these and similar methods are all within the scope of the invention.

  When the content is re-scrambled, the program data including the re-scrambled content is output via a signal line, a pin, or a set of pins 355 (hereinafter simply referred to as a signal line 355). In one embodiment of the invention, the re-scrambled program data is output via a digital interface 260 as shown in FIG. The digital interface 260 encodes the program data together with a copy management command indicating that the program data is “free to copy”. The digital interface 260 controls an interface between component devices (shown in FIG. 1) connected to the transmission medium 120, determines which component device has the right to decode the encoded program data, and determines the right. A key is supplied to the component device having the, and the encoded program data is decoded. In one embodiment of the entertainment system 100, the digital interface 260 performs an authentication process, determines which device has the right to decode the encoded program data, uses DTDG's DTCP encoding, and over an IEEE 1394 transmission medium. The program data to be transmitted is encoded. It should be noted that other encoding methods may be used without departing from the spirit and scope of the present invention.

  In this manner, the signal line 346 supplies the descrambled content to the demultiplexer 250 and displays the content on a display device integrated with or directly connected to the digital device 110, while the signal line 355. Outputs the re-scrambled content and supplies and records the re-scrambled content to one or more components connected to the transmission medium 120 via the transmission medium 120. According to 240, the user can descramble and view the program data, and can simultaneously record the scrambled program data. Note that in this example, the re-scrambled stream output via signal line 355 must be descrambled with an appropriate key and / or control word before being viewed, and thus the condition Since the content provider has to be processed by the accessor 240, the content provider can determine whether the user can copy the content, if so, when it can be copied, or view the content again If so, it is possible to arbitrarily specify when it can be viewed.

  The user can record the scrambled digital content in the scrambled format. There are several reasons for performing such processing. For example, if the “copy not allowed” attribute is marked and a time shift is desired, recording of the descrambled program content is not permitted by the provider. Alternatively, the entire digital transmission stream including a plurality of programs can be recorded, and only one of these programs can be descrambled so that it can be viewed only once. When playing back scrambled content, the unviewed portion of the stream can be accessed by descrambling and viewing the unviewed portion of the content. In addition, by recording the scrambled content locally, pay-per-view, pay-per-time, delayed impulse pay-per-view (IPPV) The key management for special fee collection, such as the re-purchase of “non-copyable” movies and personal scramble processing to increase security, can be controlled to a higher degree.

  Information used to descramble the content is provided by the key. This key information may be encrypted. The key is supplied to the conditional accessor 240 by EMM or ECM along with the information necessary to decrypt the key. When the EMM or ECM is modified, the key information is also changed and cannot be used. For example, the key information may be changed periodically such as every month according to the customer's payment cycle.

  Changing the key over time creates problems with key storage. It is necessary to store the key for the old period, otherwise access to the scrambled content of the program recorded using this key will be denied. Of course, by storing the old key, the key information corresponding to the old period can be stored. In order to descramble content recorded in two different periods, it may be necessary to store two keys. In addition, some conditional access schemes may have a unique key for each service. In the method of requesting an independent key for each service, if it is desired to reproduce all programs recorded on the tape-like recording medium, a large number of keys must be stored. As shown in FIG. 4, the amount of data to be stored increases according to the number of keys corresponding to different periods and different services.

  FIG. 5A is a diagram illustrating a specific example of a method for calculating a past key in order to reduce the amount of data necessary for storing the key. The keys are related by a one way function. The preceding key is a hash function (hash) of the current key. If the conditional accessor 240 has information about the current key, the conditional accessor 240 can calculate the preceding key corresponding to the preceding period. However, since the key is associated in only one direction, a key corresponding to a future period cannot be calculated or derived from the current key. In this example, the direction in which the key is associated is from the current key to the preceding key. Thus, the conditional accessor 240 can hash and calculate the preceding key based on the current key and descramble the previously stored scrambled program.

  In this example, all possible keys can be calculated retroactively. For example, if the key is changed every month for 10 years, it is necessary to call the one-way function 120 times (12 times every year × 10 years). The key used first is calculated last. In one specific example, such a hash algorithm is executed 1000 times, so that even if one key is used every month, keys of at least 80 years or more can be generated.

  FIG. 5B is a flowchart illustrating one specific example of a method for generating and using these keys. In step 505, the previous key is generated. In step 510, the immediately preceding key and the one-way function are used to generate the previous key. The previous key can be calculated from the immediately preceding key and the one-way function, but the immediately preceding key cannot be calculated from the previous key. This process is repeated multiple times in step 515 to generate a series of keys. The preceding key in this series of keys is related to the succeeding key by a one-way function, so that the preceding key can be calculated from the predetermined key and the one-way function. The following key cannot be calculated from the direction function. In step 520, a predetermined period is assigned to each key in the order from the first key to the last key in the series. Each key is used to descramble the content received during the allotted period. In step 523, the content of the program is scrambled and distributed to the user for a predetermined period using the key corresponding to that period. In step 525, the key and one-way function are provided to the conditional accessor 240. In step 530, the content is descrambled using this key to access the content recorded on the network or in the storage device. In step 535, the preceding key corresponding to the preceding period is calculated using the key and the one-way function. In step 540, the preceding key is used to descramble the content for the preceding period.

  Examples of hash algorithms that can be used to generate a key include a secure hash algorithm (hereinafter referred to as SHA) and media digest 5 (hereinafter referred to as MD5). Further, a secure hash function may be generated using a digital encryption standard (hereinafter referred to as DES). FIG. 5C shows an example of a hash function using DES.

  6B to 6E are diagrams illustrating specific examples of recording future access keys. FIG. 6A is a diagram showing a normal rights control message. The key used to descramble the content is encrypted under the current group or service key 640 sent in ECM 610. The scrambled content can be recorded. However, the key validity period may disappear after a certain period. When the user tries to view the scrambled and recorded content later, the conditional access device 240 cannot reproduce the content if the validity period of the key has expired. In this way, payments to service providers are forced.

  FIG. 6B is a diagram illustrating a specific example of an ECM including a field for encrypting a group or service key to be distributed in the future. In this specific example, a plurality of ECMs are generated and recorded together with the content. Each ECM 660 has keys 680, 681, 682, and 683 corresponding to a predetermined period. In FIG. 6B, time X indicates the current key period, and time X-1 indicates the next key period. If the user is allowed to view the content throughout the year, and if the key is changed monthly, twelve different ECMs are generated and included in the data stream and recorded with the content. Thus, the user can record the content and has the right to access and view the content for one year.

  FIG. 7A is a flowchart illustrating a specific example of a method for generating the ECM illustrated in FIG. 6B. In step 710, one or more keys are generated. In step 720, a predetermined period is assigned to each key. Here, the period may be a past period, a current period, or a future period. In step 730, a plurality of ECMs are generated. Each ECM corresponds to a predetermined period. In step 740, keys assigned for a predetermined period are placed in the ECM corresponding to the predetermined period. In step 750, a plurality of ECMs are recorded along with the contents of the program. In step 760, the content of the program is descrambled in a predetermined period using the key extracted from the ECM corresponding to the period.

  6C and 6D are diagrams showing other specific examples of the ECM. Here, one ECM 674 is generated, and the ECM 674 includes a plurality of keys corresponding to a plurality of periods. In FIG. 6C, each encrypted key 680, 681, 682, 683 corresponds to, for example, a monthly period. In FIG. 6D, the ECM 675 has key information encrypted under a plurality of keys. Key 684 is the current group or service key. Key 685 and key 686 are time keys. They are not generated based on the same period as a group or service key, but are used to retrieve stored content after the nearest period or periods have expired. A vintage key is used to unlock all materials from a specific group or service after a specific length of time, eg 2 or 3 years. Used for. This can reduce the number of fields for encrypted key information, thus shortening the ECM and reducing the bandwidth.

  FIG. 6E is a diagram showing a specific example of another format of ECM675. This format uses a simple coverage key 687, which does not change until a security issue arises, i.e. it is broken, or changes for a very long period, e.g. yearly The key is not. The ECM access request 631 includes all information necessary for reproducing the program. In this format, the ECM signature 650 is used to confirm that there is no changed access condition. This method is effective in the case of public key cryptography or the like in which the key used for decryption or authentication verification is different from the key used for message encryption or signature. Even if a conditional access element is fully analyzed and its effectiveness is lost, not all conditional access elements are necessarily broken. The public key scheme needs to be broken as well. In encryption with a public key, a key field including other data can be encrypted with a signature, so that a simple coverage key need not be used.

  FIG. 7B is a flowchart illustrating a procedure of processing for generating one ECM with a plurality of keys. In step 765, a plurality of keys are generated. In step 770, each key is assigned one or more time periods. Each period may be a past period, a current period, or a future period. In step 780, a plurality of keys are placed in the rights control message. In step 785, the content of the program is recorded with a rights control message. In a predetermined period, the program content is scrambled. In step 790, the scrambled content is delivered to the user via the conditional accessor 240 along with the ECM. In step 797, the content is descrambled using an appropriate key corresponding to a predetermined period extracted from the ECM.

  The present invention also monitors temporal rights. For example, assume that a new user subscribes to the current service and gains the right to view content delivered during the current billing period. However, this user does not have the right to view past services. Therefore, if the service provider desires to prevent viewing of previously recorded content unless the user pays a predetermined fee, the service provider needs to monitor the history of the user's rights. . Information regarding whether or not the subscriber has the right to view the service or package can be distributed in a rights management message along with other rights information, as shown in FIG. 8A. The ECM 810 stores information regarding the rights that the user currently has in the field 830 and has a temporal history 840 regarding the rights of the user.

  FIG. 8B is a diagram showing a specific example of the rights management message 850. The rights management message 850 includes a field 870 for monitoring the rights history of the user. A temporal history of rights can be distributed along with keys and rights information. Each bit in field 870 indicating the temporal history of rights represents whether the user has the right to subscribe or view the service in one or more discrete time periods. For example, the first bit shown in FIG. 8B indicates whether or not the user has the right to access content recorded 24 months ago. When this bit is in the first state, for example, 0, even if the user has key information corresponding to this period, the user cannot view the content recorded during this period. This method can reduce the memory capacity required to store temporal history information related to rights. For example, when each bit represents one month, in addition to the header 860, information corresponding to two years may be only 24 bits, that is, 3 bytes.

  FIG. 8C is a diagram showing a rights management message 880 which is a modified example. The information 872 regarding the temporal history of rights has a plurality of fields, and each field corresponds to a plurality of periods. For example, the first bit 890 indicates whether or not the user has the access right in any period of 5 months, and thus the memory necessary for storing the history information of the right The capacity can be further reduced.

  FIG. 10 is a flowchart illustrating a specific example of a method for monitoring a temporal history related to a user's rights. In step 1010, the user acquires rights for one or more time periods so that the user can view the content of the program distributed during the one or more time periods. In step 1020, information regarding the period for which the rights were acquired is recorded. In step 1030, a rights management message is generated that includes a user rights temporal history field, in which information about the period for which the user has rights is stored. In step 1040, the user can select a program that was delivered or transmitted in a previous period and recorded. In step 1050, the period during which this program is recorded is compared with the temporal history information regarding the right in the rights management message to determine whether the user has the right to view the program distributed during this period. The If it is determined in step 1060 that the user has the right to view the program delivered during this period, the user can select and view this program. On the other hand, if it is determined in step 1070 that the user does not have the right to view the program distributed during this period, the user's access is denied and the user cannot view the program.

  A specific example of an authentication procedure for accessing a recorded digital program will be described with reference to FIGS. 9A to 9D. The user may have the right to view content recorded in the past. In other words, access to past contents may be a service provided to the user. For example, the server or recorder records all programs broadcast in a day. When the user returns home from work, the user accesses the server to view the recorded content. The universal time is incremented and the recorded content is determined to be “old” content. When the content is old, the content is recorded on a recording medium such as a tape-shaped recording medium. Subsequently, the content in which the secondary conditional access element is recorded is processed.

  When the content is old, as shown in FIGS. 9A to 9C, guidance is displayed on the screen so that the user can be authenticated and pay a fee for viewing the content. FIG. 9A is a screen showing that the user does not have the right to view the content. The user acquires the right to view old content, for example, by answering questions. FIG. 9B shows that the user does not have the right to view the program, in which case the user obtains the right by paying a fee to view the program. The user can also obtain the right to view the program by subscribing during the period when the program content is broadcast or distributed to the viewer. FIG. 9C is a diagram showing a screen for giving the user an access right by subscribing to a period including a program that the user wants to view among a plurality of periods.

  FIG. 9D is a diagram illustrating a specific example of a screen for displaying a history regarding rights to the user. Table 910 includes a plurality of time periods 920 and a list 930 of services or content. Periods are represented as rows, for example, and services are represented as columns, for example. By checking this table, the user can easily know whether or not he / she has the right to view the content broadcast or distributed during a predetermined period. For example, the box 940 in Table 910 is in the first state, and the user has the right to view content delivered via the Disney channel from July to December 2000. Not done. If the user wishes to view the content of this service distributed during this period, the user can access the recorded program by distributing past rights to the user. That is, the user can pay a fee for filling the field shown in FIG. 9D. By such processing, it is possible to selectively view a program recorded in the past.

  FIG. 11 is a flowchart showing a processing procedure for obtaining a right to view content recorded or distributed in the past period. If the user does not have the right to view a program recorded or distributed in the past period, a message is displayed in step 1110 indicating that the user does not have the right to view the program. In step 1120, a message is displayed asking whether the user wishes to acquire the right to view the program. In step 1130, if the user inputs a positive response to the set-top box using, for example, a computer input device, a plurality of options for payment of fees are displayed. The user pays a fee for viewing a program recorded or distributed in the past period by selecting one of a plurality of options for payment of this fee, whereby the user has the right to view the program. obtain.

Claims (48)

In a key calculation method for calculating at least one key among a plurality of keys used for descrambling scrambled data,
Receiving scrambled data in a conditional access device; and
Receiving at least one key of the plurality of keys and a one-way function for associating the plurality of keys with each other in a predetermined order in the conditional access device;
Calculating at least one additional key based on the received key and a one-way function;
In the conditional access device, a step of descrambling the received scrambled data using the calculated key.   The key calculation method according to claim 1, wherein the predetermined order of the keys starts from the first key and ends at the last key.   2. The key calculation method according to claim 1, wherein a preceding key in the predetermined order can be calculated based on the one-way function and the predetermined key in the predetermined order.   2. The key calculation method according to claim 1, wherein a subsequent key in the predetermined order cannot be calculated based on the one-way function and the predetermined key in the predetermined order.   4. The key calculation method according to claim 3, wherein the calculated preceding key includes from the first key to a predetermined key.   5. The key calculation method according to claim 4, wherein the subsequent key that cannot be calculated includes all keys from the key subsequent to the predetermined key to the last key. In an access key providing method for providing an access key used for descrambling scrambled data,
Defining multiple time periods;
Generating a rights control message corresponding to each of the periods;
Generating at least one access key corresponding to each of the periods, and including each access key in the predetermined period in a rights control message corresponding to the predetermined period;
Recording a right control message including the corresponding access key together with the scrambled data.   8. The access key providing method according to claim 7, wherein at least one of the plurality of periods is a future period. In an access key providing method for providing an access key for descrambling scrambled data,
Defining multiple time periods;
Generating one rights control message;
Generating an access key corresponding to each period, and including the access key in the rights control message;
Recording the right control message together with the scrambled data.   10. The access key providing method according to claim 9, wherein the at least one access key is a vintage key corresponding to a past period.   10. The access key providing method according to claim 9, wherein at least one of the access keys corresponds to an arbitrary period selected from a group consisting of a current period and a future period.   10. The access key providing method according to claim 9, wherein the at least one access key is a simple coverage key corresponding to a past period, a current period, and a future period. In the rights history monitoring method for monitoring rights history,
Granting the conditional access device at least one right to descramble the scrambled data;
Recording the granted rights in a rights history field in a rights management message in the conditional access device;
Requesting the descrambled recorded scrambled data by the conditional access device;
Comparing the recorded scrambled data rights request with the rights acquired in the rights history field;
A rights history monitoring method comprising the step of descrambling the scrambled data when at least one of the acquired rights matches a rights request for the recorded scrambled data. Determining that none of the acquired rights match the rights requirements of the recorded scrambled data;
14. The right history monitoring method according to claim 13, further comprising a step of inquiring of a user whether or not the user desires to obtain a right to descramble the recorded scrambled data.   15. The right history monitoring method according to claim 14, further comprising a step of displaying one or more conditions for acquiring a right to descramble the scrambled data.   16. The right history monitoring method according to claim 15, wherein at least one of the conditions is payment of a fee for acquiring a right to descramble the scrambled data. In a descrambling method for descrambling scrambled data,
Receiving scrambled data in a conditional access device; and
In the conditional access device, receiving a plurality of rights control messages each corresponding to a predetermined period and including an access key associated with the predetermined period;
A descrambling method comprising: descrambling the scrambled data using one of the received access keys in the conditional access device. In a descrambling method for descrambling scrambled data,
Receiving scrambled data in a conditional access device; and
Receiving a rights control message including a plurality of access keys each associated with a predetermined period in the conditional access device;
A descrambling method comprising: descrambling the scrambled data using one of the access keys from the received right control message in the conditional access device. In a key calculation device for calculating at least one key among a plurality of keys used for descrambling scrambled data,
The conditional access device receives scrambled data, and the conditional access device associates at least one key among the plurality of keys with each other in a predetermined order. A receiver for receiving the function,
Connected to the receiver and calculates at least one additional key based on the received key and a one-way function, and the conditional access device uses the calculated key to scramble the received A key calculation device comprising a processor for descrambling the received data.   20. The key calculation apparatus according to claim 19, wherein the predetermined order of the keys starts from the first key and ends at the last key.   The key calculation apparatus according to claim 19, wherein the processor calculates a preceding key in the predetermined order based on the one-way function and the predetermined key in the predetermined order.   The key calculation apparatus according to claim 19, wherein a succeeding key in the predetermined order cannot be calculated based on the one-way function and the predetermined key in the predetermined order.   The key calculation apparatus according to claim 22, wherein the calculated preceding key includes from the first key to a predetermined key.   23. The key calculating apparatus according to claim 22, wherein the subsequent key that cannot be calculated includes all keys from the key subsequent to the predetermined key to the last key. In an access key providing apparatus for providing an access key used for descrambling scrambled data,
A plurality of periods are defined, a right control message corresponding to each period is generated, at least one access key corresponding to each period is generated, and each access key is defined in a right control message corresponding to a predetermined period. A processor included in the predetermined period;
An access key providing apparatus, connected to the processor, comprising a memory for recording a right control message including the corresponding access key together with the scrambled data.   26. The access key providing apparatus according to claim 25, wherein at least one of the plurality of periods is a future period. In an access key providing apparatus that provides an access key for descrambling scrambled data,
A processor that defines a plurality of periods, generates one right control message, generates an access key corresponding to each period, and includes the access key in the right control message;
An access key providing apparatus comprising: a memory that receives the right control message from the processor together with the scrambled data and stores the received right control message.   28. The access key providing apparatus according to claim 27, wherein the at least one access key is a vintage key corresponding to a past period.   28. The access key providing apparatus according to claim 27, wherein at least one of the access keys corresponds to an arbitrary period selected from a group consisting of a current period and a future period.   28. The access key providing apparatus according to claim 27, wherein the at least one access key is a simple coverage key corresponding to a past period, a current period, and a future period. In a rights history monitoring device that monitors rights history,
A right granting device that gives the conditional access device at least one right to descramble the scrambled data;
A recording device for recording the given right in a rights history field in a rights management message in the conditional access device;
A requesting device that requests the descrambled recorded scrambled data by the conditional access device;
A comparison device for comparing the rights requirement of the recorded scrambled data with the rights acquired in the rights history field;
A right history monitoring device comprising: a descrambling device that descrambles the scrambled data when at least one of the acquired rights matches a right requirement of the recorded scrambled data. Determining means for determining that none of the acquired rights match the rights requirement of the recorded scrambled data;
32. The right history monitoring apparatus according to claim 31, further comprising: a display device that inquires of a user whether or not the user desires to acquire the right to descramble the recorded scrambled data.   33. The right history monitoring apparatus according to claim 32, wherein the display device displays one or more conditions for acquiring a right to descramble the scrambled data.   32. The right history monitoring apparatus according to claim 31, wherein at least one of the conditions is payment of a fee for acquiring a right to descramble the scrambled data. In a descrambling device that descrambles scrambled data,
In a conditional access device, a receiver that receives scrambled data and a plurality of rights control messages that each correspond to a predetermined period and includes an access key associated with the predetermined period;
A descrambling device comprising: a processor for descrambling the scrambled data using one of the received access keys. In a descrambling device that descrambles scrambled data,
In a conditional access device, a receiver that receives scrambled data and a rights control message that includes a plurality of access keys each associated with a predetermined period of time;
A descrambling device comprising: a processor for descrambling the scrambled data using one of access keys from the received right control message. In a key calculation device for calculating at least one key among a plurality of keys used for descrambling scrambled data,
Receiving means for receiving scrambled data in a conditional access device;
In the conditional access device, receiving means for receiving at least one key of the plurality of keys and a one-way function that correlates the plurality of keys in a predetermined order;
Calculation means for calculating at least one additional key based on the received key and the one-way function;
In the conditional access device, a key calculation device comprising: descrambling means for descrambling the received scrambled data using the calculated key. In an access key providing apparatus for providing an access key used for descrambling scrambled data,
A definition means for defining multiple time periods;
A right control message generating means for generating a right control message corresponding to each period;
Access key generation means for generating at least one access key corresponding to each period and including the access key in the predetermined period in the right control message corresponding to the predetermined period;
An access key providing apparatus comprising recording means for recording a right control message including the corresponding access key together with the scrambled data. In an access key providing apparatus that provides an access key for descrambling scrambled data,
A definition means for defining multiple time periods;
A right control message generating means for generating one right control message;
An access key generating means for generating an access key corresponding to each period and including the access key in the right control message;
An access key providing apparatus comprising recording means for recording the right control message together with the scrambled data. In a rights history monitoring device that monitors rights history,
A right granting means for giving the conditional access device at least one right to descramble the scrambled data;
Recording means for recording the given right in a rights history field in a rights management message in the conditional access device;
Request means for requesting descrambling the scrambled data recorded by the conditional access device;
A comparison means for comparing the rights requirement of the recorded scrambled data with the rights acquired in the rights history field;
A right history monitoring apparatus comprising: descrambling means for descrambling the scrambled data when at least one of the acquired rights matches a right request of the recorded scrambled data. In a descrambling device that descrambles scrambled data,
In the conditional access device, receiving means for receiving scrambled data and a plurality of rights control messages each corresponding to a predetermined period and including an access key associated with the predetermined period;
2. A descrambling device comprising: a descrambling means for descrambling the scrambled data using one of the received access keys. In a descrambling device that descrambles scrambled data,
A data receiving means for receiving scrambled data in the conditional access device;
In the conditional access device, a right control message receiving means for receiving a right control message including a plurality of access keys each associated with a predetermined period;
2. A descrambling device comprising: a descrambling means for descrambling the scrambled data using one of access keys from the received right control message. Receiving scrambled data in a conditional access device; and
Receiving at least one key of the plurality of keys and a one-way function for associating the plurality of keys with each other in a predetermined order in the conditional access device;
Calculating at least one additional key based on the received key and a one-way function;
A step of descrambling the received scrambled data using the calculated key in the conditional access device, and a plurality of keys used for descrambling the scrambled data. A computer readable medium including executable instructions that cause a processing system to execute a key calculation method for calculating at least one key. Defining multiple time periods;
Generating a rights control message corresponding to each of the periods;
Generating at least one access key corresponding to each of the periods, and including each access key in the predetermined period in a rights control message corresponding to the predetermined period;
A processing system for providing an access key for providing an access key used for descrambling the scrambled data, the method including a step of recording a right control message including the corresponding access key together with the scrambled data A computer readable medium containing executable instructions for execution by the computer. Defining multiple time periods;
Generating one rights control message;
Generating an access key corresponding to each period, and including the access key in the rights control message;
A computer comprising executable instructions for causing a processing system to execute an access key providing method for providing an access key for descrambling the scrambled data. A readable medium. Granting the conditional access device at least one right to descramble the scrambled data;
Recording the granted rights in a rights history field in a rights management message in the conditional access device;
Requesting the descrambled recorded scrambled data by the conditional access device;
Comparing the recorded scrambled data rights request with the rights acquired in the rights history field;
Rights history monitoring for monitoring rights history comprising: descrambling the scrambled data when at least one of the acquired rights matches a rights requirement of the recorded scrambled data A computer readable medium containing executable instructions that cause a processing system to perform the method. Receiving scrambled data in a conditional access device; and
In the conditional access device, receiving a plurality of rights control messages each corresponding to a predetermined period and including an access key associated with the predetermined period;
And executing a descrambling method for descrambling the scrambled data in the processing system, the method comprising the step of descrambling the scrambled data using one of the received access keys. A computer readable medium containing executable instructions to be executed. Receiving scrambled data in a conditional access device; and
Receiving a rights control message including a plurality of access keys each associated with a predetermined period in the conditional access device;
A descrambling method for descrambling the scrambled data using the one of the access keys from the received right control message and descrambling the scrambled data in the conditional access device; A computer-readable medium containing executable instructions that cause a processing system to execute.

Images