JP2011097383A - Content receiver apparatus - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To solve the problem that the time period of using content in a medium cannot be managed using an export license even when the copy right protection of the medium, which is an export destination, has a function to manage the time period of using content. <P>SOLUTION: A content receiver comprises an accepting unit for accepting the designation of a recording medium to which content is to be outputted, a license information acquiring unit for acquiring output license information describing the output requirements of the content, and an output unit for outputting the content to the designated recording medium. The output license information includes usage-time-limit information indicating the time limit of using the content in an output destination. The output unit acquires the usage-time-limit information from the output license information for the content, and sets the acquired usage-time-limit information to a management information storing area of the designated recording medium. <P>COPYRIGHT: (C)2011,JPO&INPIT

Description

  The technical field relates to a copyright management function of a content receiving apparatus when using a service for distributing music or video content via the Internet, digital broadcasting, or the like.

  In recent years, content distribution services that distribute various digital contents such as music and video via the Internet and digital broadcasting have been commercialized and accumulated in home receivers from the viewpoint of both copyright protection and user convenience. The importance of a content copyright management function that restricts the number of times digital content is played, movement of content, and copying (dubbing) to an external storage medium such as a DVD-RAM or an SD card is increasing.

  If there is no limit on the number of copies, the external storage medium on which the content is recorded can be created without limitation, and the rights of the copyright holder are not protected. On the other hand, there is a need to copy to an external storage medium from the viewpoint of convenience when a user who has purchased content uses content purchased in a car or outdoors within the range of personal use. In addition, when the storage in the receiver is broken due to the failure to back up, all the purchased content disappears.

  For example, a music distribution system that protects the copyright of Patent Document 1 is a server that distributes music contents and pays a fee, a user terminal that a user accesses to the server and performs a procedure such as purchasing content, and a reproduction of purchased music. It consists of a dedicated player. The user accesses the server from the user terminal via the network, and purchases digital music data (AV content) and a copy coupon that can copy the music data multiple times.

  The music data and the copy coupon ticket are once downloaded from the server to the user terminal, and further, the copy coupon ticket is stored from the user terminal to the dedicated player. Music data is also copied from the user terminal to the dedicated player. At that time, the copy ticket is subtracted and the copy history in the dedicated player is updated. The copy history of the dedicated player is notified to the server when the dedicated player is connected to the user terminal and the user terminal is connected to the server. This mechanism realizes a copyable and copyright protection system.

  In Patent Document 2, a receiving terminal that purchases digital content from a content distribution server, downloads it, plays it back, and exports it, divides the license attached to the digital content into a playback license and an export license. Management and playback licenses can be duplicated within a predetermined range, and export licenses are not allowed to be duplicated within a predetermined range and can only be moved, thereby enabling strict export control regardless of the number of export processes. An enabling content use system is disclosed.

JP 2000-99010 A JP 2006-309589 A

  Even if the recorder has a function of performing copyright management, and the recorder has a function of performing copying with the number of times of copy control to another external storage medium capable of managing copyrights, the recorder does not use another medium. It is a mechanism that cannot copy the content with the copy limit number of times, and can only move one of the content copied as ten different contents that cannot be copied to another medium.

  However, from the standpoint of user convenience, if you purchase 10 export license contents and download them to the TV hard disk, you can copy the contents to dubbing 10 (9 copies + 1 move possible). There are many cases where it is desired to use a copy with a right to a recorder and further copy from the recorder to another medium such as an SD card.

  Further, even when the copyright protection of the export destination medium has a function of managing the content usage period, the content usage period on the medium cannot be managed using the export license.

  When exporting the content, if the export destination device or media can manage the number of copies, the user can specify the number of copies that can be given to the content to be exported, and the export license for the specified number of copies that can be made Content receiving apparatus, wherein the content data is exported together with the export license information for the designated number of times according to the copyright management method of the export destination.

  Alternatively, the content receiving apparatus may be a receiving unit that accepts designation of a recording medium that outputs content, a license information obtaining unit that obtains output license information describing an output condition of the content, and the content is designated. An output unit that outputs to the storage medium, and the output license information includes usage time limit information indicating a usage time limit of the content at an output destination, and the output unit outputs the content for the content. The expiration date information is acquired from the output license information, and the acquired expiration date information is set in a management information storage area of the designated storage medium.

  When exporting content from a receiver, information for managing copyright on the export destination medium can be set.

  For example, the user's convenience can be improved by exporting the export license as the permitted number of copies while retaining the copyright holder's rights by the permitted number of copies.

  For example, when exporting to a medium with a usage period condition, based on the metadata, the user can explicitly check the usage period of the content and use it.

It is a figure which shows an example of the system configuration | structure of the service server which provides a content delivery service via a network-compatible household appliance and a network. It is a figure which shows the example of the system configuration | structure of an IP television which is an example of a receiver, and the flow of content data. It is a structural example of a content guide metafile. It is an example of a structure of a reproduction | regeneration control metafile. It is an example of a data structure of a reproduction license and an export license. It is an example of a processing flow of a content export function with the number of copies. It is an example of the content list display screen of a receiver. It is an example of the content detail display screen of a receiver. It is an example of the export destination designation screen of a receiver. It is an example of the export condition confirmation screen of a receiver. It is an example of the export destination designation screen of a receiver. It is an example of the export condition confirmation screen of a receiver. It is a data description example of a license holding buffer. It is an example of the figure which shows the flow of the content data in a receiver. It is an example of the hardware constitutions of an export destination removable medium. It is an example of the export process to a removable medium. It is a structural example of a content guide metafile. It is an example of a data structure of a reproduction license and an export license. It is an example of a processing flow of a content export function with the number of copies. It is an example of the content detail display screen of a receiver. It is an example of the export condition confirmation screen of a receiver. It is an example of the export condition confirmation screen of a receiver. It is an example of the recording mode change screen of the export of a receiver. It is an example of the flow which displays an export condition confirmation screen.

  Copyright management in the distribution service system has the following model. First, the content that the user wishes to distribute is downloaded from the service provider's distribution server in the form of an encrypted content file to a receiver such as a TV, AV recorder, or PC equipped with an AV player function at the user's home. Accumulated. Then, the user separately obtains a viewing license composed of a content key obtained by encrypting the downloaded content and usage condition information such as a time when the content can be viewed from the copyright management server, and uses the content key to encrypt the content. Is decoded and reproduced and viewed on an AV player.

  The contents stored in the receiver by downloading are output to copy or move to a removable medium such as a DVD-RAM or SD card, or output to an external interface such as a network (hereinafter referred to as export). In this case, an export license composed of usage condition information such as a content key and a medium that may be dubbed is acquired and copied or moved to an external storage medium.

  The period of content viewing and the number of exports, which are defined as licenses, vary depending on the purchase conditions of the content. The user can play, transfer, copy, external IF output, etc. according to the conditions described in the license. The content will be used within the applicable restrictions.

  The number of exports, that is, the number of times that can be copied or moved, corresponds to the total number of applicable contents that the user can have, and contents with N export licenses are downloaded from the content distribution server to a storage medium via the network. In this case, N-1 copies and one movement can be performed from the storage medium to another storage medium. The acquisition timing of the license information used for the export is when the export is performed, and one export license is consumed when a part of the content can be viewed on the export destination medium or device.

  Therefore, when exporting content purchased by a user in a content distribution service, it is essential that one content copy and one export license consumption process be performed as a set, and the license management of the service provider Even in the copyright management server that performs the management, the export license is assumed to be consumed one by one.

  For this reason, for example, even if 10 contents with an export license are purchased and downloaded from a server to a TV capable of managing the copyright of the user, if the TV can be connected to only one recorder, As ten different non-copyable contents, it was only possible to copy 9 times and move once.

  In other words, even if the recorder has a function of performing copyright management, and even if it has a function of performing copying with the number of times of copy control to another external storage medium capable of managing copyright, This is a mechanism that cannot be copied to another medium, and can only move one of the contents copied as ten different non-copyable contents to another medium.

  However, from the standpoint of user convenience, if you purchase 10 content with an export license and download it to the TV hard disk, the content will be dubbed 10 (9 copies + 1 move possible). There are many cases where it is desired to use a copy with a right to a recorder and further copy from the recorder to another medium such as an SD card.

FIG. 1 is a diagram illustrating an example of a device configuration of a content distribution service system.
A receiver 3, which is a user terminal that uses the content distribution service, connects to the content distribution server 1 and the copyright management server 2 that are operated by the provider providing the service via the content distribution network 4. The receiver 3 downloads the desired content by performing a content purchase procedure, and reproduces or dubbes the content within the scope permitted by the copyright attached to the content.

  The content distribution server 1 includes a Web server function that provides a portal site serving as a user interface for performing various procedures when a user uses the content download service, and AV content stored in the form of a data file. A file server function that transfers IP data packets in response to requests from users, and stores and distributes download control metafiles that describe control information required when a user downloads video content data to a receiver. It is a server with functions.

  The copyright management server 2 is a server that works with the content distribution server 1 to generate, manage, and issue licenses for each content.

  The receiver 3 is a user client terminal equipped with a function for using the content distribution service, and is a television set, a recorder, a personal computer, or the like that is connected to a network and has a recording function. In this embodiment, the receiver 3 has a data transmission / reception function via the IP network. Also, a network with a drive for reading and writing removable media such as removable hard disk iVDR (Information Versatile Disk for Removable usage), optical disc BD / DVD (Blu-ray Disc / Digital Versatile Disk), SD card (Secure Digital Memory Card), etc. It is a compatible digital TV.

  The content distribution network 4 is an Internet protocol communication network implemented using any of various conventional network physical layers (including optical, wired, or wireless networks), and includes data packets such as routers, switches, and hubs. Communication control devices 41 to 44 for accurately delivering the message from the transmission source to the transmission destination are also included.

  In the example of FIG. 1, a server or a home network is connected to the content distribution dedicated network by a switch or router, and a receiver or the like is connected to the home network, but the server and the receiver can communicate with each other using the IP protocol. Any communication network can be used.

  The network-compatible storage device 5 is a large-capacity storage device that can transmit and receive data between the receiver 3 and the home network. In this example, the network-compatible storage device 5 is a NAS (Network Attached Storage) that has a function of transmitting and receiving digital media via the network according to the DLNA standard. Suppose there is.

  FIG. 2 shows a network hardware configuration diagram of the receiver 3 for the network. The receiver 3 includes an IP communication port 22 for transmitting and receiving IP (Internet Protocol) data packets in addition to an antenna and a digital tuner for receiving broadcast radio waves, and includes TCP (Transmission Control Protocol), UDP (User Datagram Protocol), Various IP communication protocols such as DHCP (Dynamic Host Configuration Protocol), DNS (domain name server), and HTTP (Hyper Text Transfer Protocol) can be processed.

  In addition, applications such as DLNA functions and HTTP browsers are installed. Using the HTTP browser, the website of the content distribution server 1 existing in the content distribution network 4 outside the home is accessed, and content streaming and downloading are performed. It is possible to use the service and play back the content downloaded by using the service on another home device having the DLNA function, or conversely move the content of the other home device to the own device.

  In the receiver 3, the CPU 20 executes various processes by executing programs such as an authentication processing program, a content acquisition processing program, a content management program, an export processing program, and a license information acquisition program stored in the ROM 24. . Furthermore, it has a real-time clock 28, can always hold the real time, can be referred to from the program, and has a timer function that causes the CPU 20 to execute the program at a set date and time. Each program may be configured as an integrated circuit, and may be configured by independent hardware as an authentication processing unit, a content acquisition processing unit, a content management unit, an export processing unit, a license information acquisition unit, and the like.

The receiver 3 includes a large-capacity hard disk (HDD) 16 and can read and write a large number of content data.
In order to simplify the description below, each process realized by the CPU 20 executing various programs will be described mainly with each processing unit realized by the program. When each processing unit is realized by hardware, each processing unit mainly performs each process.

  As shown as a data flow in FIG. 2, the stream data control unit 15 stores the content data file received as an IP packet and the broadcast recording data file received as a broadcast wave in the HDD 16. Thereafter, the stream data control unit 15 writes the data from the iVDR / DVD / BD / SD interface drive 29 (removable media drive 29) to the removable medium 31 such as iVDR, BD / DVD, or SD card in response to a request from the user, or Export such as uploading from the IP communication interface 22 (IP port 22) to the network compatible storage device 5 via the home network is performed. The receiver 3 includes a recording control unit 32 that controls the removable media drive 29 when processing such as writing to and reading from the removable media 31 is performed. A removable medium (portable medium) is sometimes called a recording medium. The recording control unit 32 is sometimes called an output unit 32.

  Since this television has a descrambler 12 and a demultiplexer 13 that perform data conversion so that decoding processing similar to broadcast waves can be performed and then send it to the decoder 14, this network-compatible television is also distributed over the IP network. The content can be played and viewed without distinction.

The procedure for using the content download service using the receiver 3 is, for example, as follows.
First, the user accesses the Web server function of the content distribution server 1 using the Web browser of the receiver 3. The authentication processing unit of the receiver 3 authenticates the ID of the receiver (or user) with the content distribution server 1. After successful authentication, the download service website page on the content distribution server 1 is acquired. The content acquisition processing unit of the receiver 3 uses the Web page to perform purchase processing for a purchase package of content that the user desires to download.

  In the purchase process, first, the content distribution server 1 sends the ID of the corresponding purchase package (content) and the ID of the receiver (or user) to the customer-managed charging server for charging. When charging is completed, the content, the reproduction control metafile, and the content guide metafile are transferred from the content distribution server 1 to the receiver 3. The content acquisition processing unit of the receiver 3 receives the transferred information and stores it in the HDD 16.

The content guide metafile and the reproduction control metafile stored in the HDD 16 together with the content are necessary when using the downloaded content.
FIG. 3 is a configuration example of the content guide metafile.

  The content guide metafile 100 is necessary for navigation when using content, such as displaying the list of content downloaded and stored in the receiver and allowing the user to specify the content to be played when using the downloaded content. A data file that aggregates information.

  The content guide metafile includes content metadata 101 (content information 101) describing content information, series metadata 102 (series information 102) describing series information, and package metadata 103 (package information 103) describing package information. License metadata 104 (license information 104) describing license information.

  The content metadata 101 is display information such as content title / outline text, thumbnail images, etc., and attribute information such as genre, and is used for displaying and controlling program information in units of content.

The series metadata 102 is a series of titles and outlines of a series composed of a plurality of contents, display information such as thumbnail images, and attribute information such as a genre, and is used for displaying and controlling information in series units.
The package metadata 103 includes attribute information such as a package type (single item purchase, one-year unlimited viewing) and a charge, which is a unit of charge at the time of content purchase, and is used for displaying and controlling the information.

  The license metadata 104 includes display information indicating usage rights associated with the contents, that is, usage conditions regarding copyrights, and control information for acquiring the usage rights from the copyright management server, and is used for displaying and controlling the information. . Used together with the content metadata 101 to display information in units of content. When a plurality of usage rights are attached to one content, a plurality of rights information is used by using a plurality of metadata for displaying one content. Will be displayed.

  Copyright management of this system is realized by license information distributed to the receiver by the copyright management server. In the present system, the license information is data necessary to allow the use of the content only when the usage rights are indicated and the usage conditions are satisfied. Specifically, it is a content key obtained by encrypting the content and usage condition information data for using the content. The license information exists in units of content, and when the license acquisition unit of the receiver uses the content, the license management server uses the data of the license acquisition information 220 to request acquisition from the copyright management server. Distributed to.

Note that since this system provides two types of content usage, playback and export, there are two types of license information: playback license information and export license information.
In the license metadata 104, for example, when both an export license and a reproduction license are attached to a certain content, two pieces of right information are indicated as indicated by 141 to 149 in FIG.

The license acquired from the copyright management server 2 is uniquely identified by the license IDs 141 and 146, and whether it is an export license or a reproduction license is identified by the license types 142 and 147.
The license usage period 143,148 indicates the period during which the license can be acquired from the copyright management server 2.

The export license has information such as the export media identification 144, the number of exports allowed 145, and the playback license includes information such as the playback viewing limit 149.
The export medium identification 144 designates a medium that can be exported, and the export possible number 145 designates the number of times that the medium can be exported to the medium designated by the export medium identification 144.

FIG. 4 is a configuration example of the playback control metafile.
The playback control metafile 200 is an XML document that describes data used when content is actually played back or exported after user navigation by the content guide metafile.
The playback control metafile is used to access the copyright management server to decrypt the content-specific attribute information 210, which is the AV stream information of the content necessary for content playback, and to decrypt the encrypted content. 2 XML documents of license acquisition information 220 necessary for acquiring the content key and the like.

  The content unique attribute information 210 includes the file name and reference destination of the content main body file, the time length of the content, information for distinguishing whether or not the content is encrypted, the video encoding method, the resolution, scanning, aspect ratio, etc. Provides attribute information of audio signals such as attribute information and stereo / mono / multi-channel distinction.

  Content license acquisition information 220 includes copyright management server address information as a license acquisition destination of the target content, copyright management method type information, a license ID indicating the type of copyright protection range attached to the content, a copyright management server Provides information such as the value of the element to be signed for server authentication between the client and the receiver that is the client, and the public key certificate necessary for signature verification.

  FIG. 5 is a data configuration example of a reproduction license and an export license distributed from the copyright management server to the receiver for the content shown in FIG. 3 in the present system. The playback license includes a content key obtained by encrypting the content, information on the period during which the content can be viewed, copy prohibition, permission conditions, etc., and the export license indicates a content key and exportable media (DVD, memory card, etc.) or output IF. (Including output to IP network using DTCP-IP protocol).

  Since an export license consumes one license in one export, N export licenses are attached to content that can be exported N times.

FIG. 6 is an example of a flowchart showing the processing of the content management unit and the export processing unit that execute the export with the number of times that can be copied in the receiver 3 of this system.
In order to use the downloaded content, the user first instructs the receiver 3 to browse the available content downloaded by operating the remote control button. The remote control I / F 21 of the receiver 3 receives a browsing instruction from the user (step 1000).

  Upon receiving the content search browsing instruction, the content management unit of the receiver reads the content guide metadata 100 of each content stored in the hard disk 16 of the receiver together with the downloaded content, and selects the content to be used as shown in FIG. Is displayed on the display device 18 (step 1001).

  The user selects content to be used from the list presented on the screen of FIG. 7, and the content management unit accepts content selection via the remote control I / F 21 (step 1002). The content management unit of the receiver 3 reads out more detailed information from the information of the content guide metadata 100 of the content, and selects the thumbnail of the selected content and the program summary, the playback time, the license related information, the usage start time limit as shown in FIG. Detailed information such as is displayed (step 1003).

  The detailed information includes the number of exports read from the 145 column of the content guide metadata 100 in FIG. The user confirms whether or not the detailed detailed information can be exported (remaining number of exports), and if the content can be exported, the user operates the export button with the remote controller to instruct execution (step 1004).

  Upon receiving an export execution instruction, the export processing unit of the receiver 3 displays an export destination selection screen as shown in FIG. 9 (step 1005), and the contents to be exported when the export destination media type is selected and exported to the user. The number of times that copying can be performed is specified, and export execution is instructed (step 1006).

  The export processing unit uses the media format conversion function of the receiver 3 among the media that can be used as the export right described in the 144 column of the content guide metafile as the media type as the export destination candidate on the export destination selection screen. Are selected and displayed as candidate destinations. In addition, when the export destination medium has a rule that does not permit export, the export processing unit masks the input while the default 0 is displayed in the copy number designation column accompanying the content.

  Note that the number of copies attached to the content to be exported means the number of times when the content can be copied several times to another medium on the copied medium.

  However, in this example, the number of copies attached to the export content is designated by the number of dubbing. The so-called “dubbing 10” is defined as the right of “9 copies + 1 move”. The dubbing number is a numerical value representing the number of copying times + 1. Therefore, the number of times that the exported content can be copied is dubbing number -1.

  The upper limit of the number of exports accompanying the content, that is, the number of copies that can be copied, is determined as the number of export licenses managed by the copyright management server when downloaded. Of course, it is impossible to export as copyable content. If the content that can be exported N times is exported as a content that can be copied M (<N) times, the remaining number of exports of the approximate content of the receiver is M times that accompany the export destination content, and the content itself is the export destination. N-M-1 times minus one time consumed to copy to.

  In this example, the number of dubbing is specified because if the user designates the attached rights of the content to be exported as the number of copies, the export license is consumed one more than the number specified by the user, which is likely to cause distrust. This is because “dubbing 10” “can only move after 9 copies” as a rights concept after export.

  In the screen of FIG. 9, when the user instructs execution of dubbing 7, that is, content that can be copied 6 times at the export destination to the external device via the network for the remaining copy count of 10 times, As shown in FIG. 10, the export processing unit 3 displays a confirmation screen in which the remaining number of exports is 3 (10-6-1), and prompts the user to reconfirm export execution (step 1007).

  Further, as shown in FIG. 11, when the number of copies attached to the content is 10 times, that is, when export execution to a recording medium such as iVDR is instructed with all export rights attached, the export processing unit of the receiver 3 receives the receiver. The content of 3 is then made unexportable. The export reconfirmation screen in this case is as shown in FIG.

When the user instructs export execution on the reconfirmation screen, the export processing unit of the receiver 3 starts copying or moving content.
First, the export processing unit reads and analyzes the reproduction control metafile of the corresponding content in the HDD 16 in order to obtain an export license from the copyright management server prior to the export.

  Then, the export processing unit confirms that the license ID described in column 146 of the content guide metafile is described in column 224 of the playback control metafile (step 1008), and further manages the copyright management in the receiver. Whether or not an export license that has been acquired from the server and has not been executed for export is held is checked in the description of the export license holding buffer (step 1009).

  FIG. 13 is a configuration file of the export license holding buffer of the receiver stored in the HDD 16. One export license is distributed from the copyright management server for one acquisition request access from the receiver 3 as a client. The copyright management server extinguishes the rights of one export license (for one export) when the distribution processing of the export license is completed. The export processing unit of the receiver reduces the remaining number of exports (rights) of the corresponding content by one when one export process as a receiver is completed for one license distributed from the copyright management server. I do.

  Therefore, after the receiver acquires the export license from the copyright management server, if the actual export process is not performed for some reason, the executable export right is held in the receiver. The export license holding buffer is a record of the export license held in the receiver, and is a list of the license ID, the data of the export license 320, and the number of held licenses.

  The export processing unit accesses the copyright management server to acquire the export license when the export license is not held, or when the export license is not held in the required number. First, signature verification of the server URI is performed based on the certificate and signature information of the reproduction control metafile so as not to be guided to an unauthorized copyright management server. Only when the signature verification is successful, the license is distributed from the copyright management server (step 1010).

  Specifically, the authentication processing unit of the receiver 3 completes the mutual authentication with the license copyright management server 2, shares a key for encrypting the license request / delivery message, and acquires the license to be acquired. A message including the specified license ID is transmitted. The copyright management server determines whether or not the receiver 3 has a right to acquire the corresponding license, and transmits the license if it is determined that the receiver 3 has the right. When the license transmission / reception is completed successfully, the authentication processing unit of the receiver 3 disconnects the authentication encryption communication path established with the server.

  When acquiring the license, the export processing unit of the receiver 3 holds the acquired export license in the export license holding buffer (step 1011). If an export license with a license ID has already been acquired, the number held in the description column is increased by one. In the case of a license that is not yet held, a description of the license is added to the buffer, and the number held is 1. The export processing unit repeats the license acquisition process until the number of licenses necessary for the export to be executed can be acquired.

In the case of export in which content is copied six times to another device via the network as in the example of FIG. 9, since seven export licenses are required, the above is repeated seven times.
When the required number of licenses has been acquired, the export processing unit performs an export process. First, the export processing unit confirms whether the content is encrypted content or non-encrypted content in column 212 of the reproduction control metafile (step 1012). In the case of non-encrypted content, the process proceeds directly to writing to the medium or outputting to the network.

  In the case of encrypted content, the export processing unit decrypts the content data using the content encryption key described in column 322 of the export license (step 1013). Then, according to the export destination, conversion of necessary content format and rate, encryption and copyright management data are given, and external output or media writing is performed (step 1014).

  In the case where the export output process of the receiver 3 is a write process to a removable medium in which the interface drive 29 for accessing the receiver such as the iVDR 31 or SD 31 of this example is attached, for example, a configuration as shown in FIG. The iVDR disk is mounted on the receiver, and writing is performed according to the procedure shown in FIG. The iVDR in FIG. 15 is connected to the receiver 3 via a Serial Advanced Technology Attachment (SATA) interface (iVDR connector 58, SATA interface 51). The recording control unit 32 of the receiver 3 reads and writes removable media using the interface drive 29.

  Removable media are not limited to iVDR, but may be media that can record copyrights such as BD discs, SD cards, flash memory, SSD (Solid State Drive), magnetic discs, magneto-optical discs, etc. In this case, the interface shown in FIG. 15 is an interface corresponding to each medium.

  The recording control unit 32 authenticates the iVDR disk set in the drive and confirms that the iVDR has a tamper-resistant area (security unit 56, security memory 57) (step 2000). The recording control unit 32 confirms whether or not there is a free capacity for copying content in the storage medium (security memory 57) and the normal storage medium (HDD 55) in the tamper-resistant area.

  In the iVDR copyright management system, a secure tamper-resistant area (security unit 56, security memory 57) that requires special command processing for reading and writing that cannot be directly accessed by the user, and normal access that the user can normally access as a normal memory And a data area (HDD 55).

  Copyright content management information such as copy count information, generation count information, and an encryption key for decrypting encrypted data, which is necessary when using content that is copyright-managed in iVDR, is a tamper-resistant area. By storing in the memory 57, it is protected so that it cannot be tampered with. In addition, the copyrighted content that is entrusted with encryption is actually stored in the HDD 55, which is a normal data area, and the non-encrypted content of free content can be read and written by the same method as a general HDD.

FIG. 16 shows an example of export processing to a removable medium. It is the detail of step 1014 of the flow of FIG.
If there is a free space necessary for writing the export content in both the tamper-resistant area (security memory 57) and the normal storage medium (HDD 55), the recording control unit 32 manages the management information on the copyright-protected content in the security memory 57. As a storage area, an area for storing the actual video content data is secured in the HDD 55 (step 2001).

  The recording control unit 32 then manages the copyright content management information for the iVDR copyright management system of the export content, that is, the start address of the area of the HDD 55 reserved as an area for storing the actual video content data, and the content. The iVDR 31 copyright protection method encryption key and content copy management information such as the copy count and generation count of content used to encrypt and store the content are generated and written and stored in the reserved copyright protected content management information storage area. (Step 2002).

  At this time, the number of copies that can be attached to the exported content is converted into a format according to the format of the copy count information used in the iVDR copy number management function by the export processing unit, thereby making it one of the copyright management information of the content. And stored in the iVDR.

  In the example of FIG. 11, the export processing unit obtains copyable number information indicating that the content has the right to copy 9 times + move once, and uses this for the copy count management function of iVDR. Convert to a format according to the information format. Thereafter, the recording management unit 32 writes and saves this copy count information in the copyright protected content management information storage area of the iVDR.

Thereafter, the export processing unit decrypts the encrypted data of the video content read from the HDD 16 with the encryption key of the export license stored in the export license holding buffer 400 (step 2003). The recording control unit 32 performs encryption with an encryption key depending on the copyright protection method of the iVDR 31 that stores the decrypted content as one of the management data of the corresponding content in the tamper resistant area, and stores the content data storage location Is written in the address area (step 2004).
Thus, the export content can be copied to the iVDR 31 that is the export destination as content data in accordance with the iVDR copyright management method.

  If the export output processing of the receiver is not a writing to another medium or device as described above, but the transmission processing from the communication port, copyright protected content data transmission / reception depending on the type of the communication path with the communicating partner device Pre-processing for is required.

  For example, in the case of an export output in which export content data is sent out as an IP packet from an IP port in order to transfer video content to the IP network compatible storage device 5 via the IP network managed by the router 44 in this example, reception is performed. The authentication processing unit of the machine 3 supports both common mechanisms for safely transmitting and receiving copyright management data between the receiver 3 and the IP network compatible storage device 5 via the IP network. Authentication processing that proves to the above is performed as preprocessing.

  At the time of the pre-processing authentication, the stream data control unit 15 exchanges encryption keys depending on the network copyright protection method for encrypting / decrypting the export content data to be sent on the IP network. When the authentication is successful, the export processing unit of the receiver 3 copyrights the content including information indicating the number of times that the copy can be made, that is, information indicating that the content has the right to move after 6 copies in the example of FIG. Get management information. Also, the video content data read from the HDD 16 and decrypted with the encryption key of the export license is acquired. The export processing unit converts the content data and copyright management information into IP packet data that has been encrypted using the encryption key determined at the time of authentication, and sends the IP packet data to the network from the IP communication IF 22. With these processes, an export output process is executed.

  The external device at the export destination that has received the transmitted IP packet data decrypts the received communication packet data using the encryption key determined at the time of the pre-processing authentication, and then stores the copyright of the device in its own storage medium. It will be converted into a format that conforms to the rights protection method and encrypted.

  Note that the copyright management method for devices and media that store video content varies from medium to medium, and the copyright management method for the same medium may be revised and modified, and the export execution procedure is limited to the above method only. Is not to be done.

  When the export is successful, the export processing unit deletes the license information held in the export license holding buffer, and adds the numerical value recorded in the export guide number 145 column of the content guide metafile to the exported content. Subtraction is updated by the possible number +1 (one copy for export) (steps 1015 and 1016). For example, in the case of the export shown in FIGS. 9 and 10, since the number of copies that can be added to the content is 6, the value that was 10 before the export is updated to 3 by 10-6-1 in the column 145 of exports. .

  In addition, as shown in the example of the reconfirmation screen in FIG. 12, when it is desired to avoid losing the number of licenses currently owned by the user, or to perform export with more copy times than the current number of licenses. Alternatively, the export process may be temporarily interrupted, and the process may proceed to a process of accessing the content distribution server 1 and purchasing additional content licenses (step 1017).

In the above example, the content once purchased is stored in the HDD 16 and then exported. However, when the content is downloaded from the content distribution server 1, the export may be performed at the same time.
In the case of the download direct export described above, the operation of displaying a list of available contents in step 1001 is performed by accessing the content distribution server 1 to obtain an HTML document of a list of downloadable contents and displaying it in a browser. The selection screen is provided to the user.

  In step 1003, when the download export content is designated, the content guide metafile 100 and the reproduction control metafile 200 of the content are acquired from the content distribution server 1, and the screen of FIG. 8 is displayed. Further, in the download direct export, the flow of data to be exported is as shown in FIG. 14, and the receiver 3 has a form like a content license conversion apparatus.

As described above, it is possible to move the export license as the number of times that the export content can be copied while retaining the rights of the copyright holder by limiting the number of times that the copy can be made.
In the present embodiment, the export processing unit performs the export processing and the recording control unit 32 performs writing to the removable medium. However, the export processing unit may also perform the processing of the recording control unit 32. Good. Further, the recording control unit 32 may also perform processing of the export processing unit.

If the copyright protection of the export destination media has a function to manage the content usage period, describe the content usage period in the export license and set the usage period as the export destination copyright protection information. Thus, even when the media is taken out and the content is viewed on another device, the usage period can be managed according to the copyright protection function of the media.
That is, even when the exported media is inserted into another device and the content is played back on the device, the content whose usage period has passed can be disabled.

When performing export with such a usage period, referring to the usage period described in the metadata accompanying the content as the export condition on the user interface of the receiver, and presenting the usage period information, It is desirable to have the export executed.
The usage period information of the content downloaded to the storage media is standardized and defined as metadata for the viewing period on the main unit, but the usage period information on the export destination media is not specified, so separately for each type of media It is necessary to specify and distribute.

  On the other hand, as a general operation, the viewing time limit on the main unit and the usage period of the export destination media are often the same, but in such cases, the metadata to be distributed for each type of media is duplicated. However, waste occurs, transmission efficiency deteriorates, and an area for storing metadata is increased.

  In the present embodiment, when content is exported, the usage period information of the export destination in the license management metadata acquired along with the content is referred to, the usage period is notified to the user, and then the export is performed. By providing the means for executing, it is possible to use after confirming the usage conditions of the export destination medium to the user.

  In addition, when the usage period information of the export destination is operated in accordance with the viewing time limit on the download terminal main body, information that clearly indicates the match is provided in the license management metadata or the license, and the terminal stores the information. If they match, the usage period information described in the playback license for viewing on the main unit is referred to, and the usage period is notified to the user at the time of export.

The configuration of FIGS. 1 and 2 is the same as that of the first embodiment.
FIG. 17 is a configuration example of a content guide metafile.
In the license metadata 104, for example, when an export license and a reproduction license are both attached to a certain content, the license information of the export licenses 141 to 145 and 150 to 153 in FIG. 17 and the license information of the reproduction licenses 146 to 149 are distributed. Is done. Also, the components having the same reference numerals as those in FIG. 3 are the same as those in FIG.

The license acquired from the copyright management server 2 is uniquely identified by the license IDs 141 and 146, and whether it is an export license or a reproduction license is identified by the license types 142 and 147.
The license usage period 143,148 indicates the period during which the license can be acquired from the copyright management server 2.

The export license has information such as an export medium identification 144, the number of exports 145, a viewing time limit information flag 150, a main body viewing period matching flag 151, an output destination viewing period 152, and a transcode flag 153. The reproduction license has information such as a reproduction / viewing expiration date 149.
The export medium identification 144 designates a medium that can be exported, and the export possible number 145 designates the number of times that the medium can be exported to the medium designated by the export medium identification 144.

The viewing period information flag 150 is information indicating whether or not to perform with a viewing period at the time of export. When the viewing period is included, the period information is designated as the output viewing period 152.
The main body viewing period match flag 151 indicates whether or not to operate the viewing period on the export destination medium to match the output destination viewing period 152 of the playback license. When this flag is “match” It is not necessary to describe the viewing period information in the output destination viewing period 152, and if the playback license replayable period 149 is described, the period information can be used as the viewing period at the time of export.

  When operating to match the usage period of the main unit viewing and the usage period of the export destination media, the metadata for main unit viewing is shared and used as the metadata at the time of export, reducing the capacity of the metadata it can. In the example of FIG. 17, the value “2010.1.1 1:00” is included in the output destination viewing period. However, when the main body viewing period match flag 151 is “matching”, the viewing period is set in the output destination viewing period 152. There is no need to describe information, and the value may be blank.

  It should be noted that the description format of the output destination viewing period 152 and the playback / viewable deadline 149 is an absolute date and time, such as A year B month C day D hour E minute F second to G year H month I day J hour K minute L second. Or when specifying relative to the base immediately after export, such as M hours N minutes O seconds after export, in combination with both, G year H month I day J hour K minute A description method such as up to L seconds is allowed.

The configuration of FIG. 4 is the same as that of the first embodiment.
FIG. 18 is a data configuration example of the reproduction license 310 and the export license 320 distributed from the copyright management server to the receiver of the content of FIG. 17 in the present system. The playback license 310 includes a content encryption key 311 and period information (use start date / time and use end date / time) 312 in which the content can be viewed, signal output describing copy prohibition and permission conditions for digital output and analog output of video and audio. Restriction / copy control information 313 is included.

  Export license 320 includes content encryption key 321 and export destination media identification 322 including information on exportable media (DVD, memory card, etc.) or output IF (output to IP network using DTCP-IP protocol), It includes usage condition information 323 for the specified media.

  The use condition information 323 for the designated medium has information 331 to 334. The copyright protection flag 331 is information that specifies whether to protect the copyright of the content to be exported. The main body viewing period match flag 332 is information indicating that when the export content is copyright-protected, the viewing period on the export destination medium is matched with the main body playback viewing period. The output destination viewing period information 333 is information for designating the viewing period for each medium when the viewing period on the export destination medium does not match the viewing period of the main body playback. The transcode flag 333 is information indicating whether transcoding such as codec conversion may be performed at the time of export.

  The main body viewing period coincidence flag 332 is information used for the same purpose as the main body viewing period coincidence flag 151 of the license information 104. When presenting the viewing period on the export destination medium to the user before the export, the export processing unit refers to the main body viewing period match flag 151 to present the playback / viewable deadline 149 or sets the output destination viewing period 152. Judge whether to present. In this case, the determination may be made using the value of the main body viewing period matching flag 332 instead of the main body viewing period matching flag 151.

  When the front main body viewing period match flag 151 is referred to, the receiver 3 only needs to refer to the content guide metafile 100 and present it to the user, so that the processing is simplified. On the other hand, when referring to the body viewing period match flag 332, it is necessary to refer to the license 300 as well. However, since the content guide metafile 100 is required to be versatile, the XML schema must be officially disclosed, and the specification revision must be strictly performed. Therefore, it takes time and effort to add special element attribute information. On the other hand, since it is not necessary to add information such as the main body viewing period match flag 147 unique to the present embodiment, the present embodiment can be implemented without changing the existing metafile format.

  Since an export license consumes one license in one export, N export licenses are attached to content that can be exported N times.

FIG. 19 is an example of a flowchart showing processing of the content management unit and the export processing unit that execute the export with viewing period of the receiver 3 of the present system.
In order to use the downloaded content, the user first instructs the receiver 3 to browse the available content downloaded by operating the remote control button. The remote control I / F 21 of the receiver 3 receives a browsing instruction from the user (step 1000).

  Upon receiving the content search browsing instruction, the content management unit of the receiver reads the content guide metadata 100 of each content stored in the hard disk 16 of the receiver together with the downloaded content, and selects the content to be used as shown in FIG. Is displayed on the display unit 18 (step 1001).

  The user selects content to be used from the list presented on the screen of FIG. 7, and the content management unit accepts content selection via the remote control I / F 21 (step 1002). The content management unit of the receiver 3 reads out more detailed information from the information of the content guide metadata 100 of the content, and selects a thumbnail of the selected content as shown in FIG. 20 and a program summary, playback time, video, audio, subtitle information, Detailed information about the content such as genre information, license-related information such as the main body viewing time limit, the number of exports, the export destination viewing time limit, the export time limit, and whether or not to allow transcoding at the time of export are displayed (step 1003).

In the case of content that can be exported, the user can instruct execution by operating the export button with the remote controller (step 1004).
Upon receiving an export execution instruction, the export processing unit of the receiver 3 displays an export destination selection screen as shown in FIG. 9 (step 1905), and allows the user to select an export destination media type (step 1906).

  In the export processing section, the receiver 3 outputs the media as export destination candidates on the export destination selection screen among the media that can be used for export described in the 144 column of the content guide metafile. Only media with functions are selected and displayed as candidate destinations.

  Upon receiving the selection of the export destination media type, the export processing unit refers to the license information 104 of the content guide metafile 100, refers to the export license information for the specified media type (step 1907), and based on the information The export condition display screen as shown in FIGS. 21 and 22 is displayed (step 1908).

  FIG. 24 is an example of a flow for displaying the export condition confirmation screen. Steps 1907 and 1908 will be described with reference to FIG. The export processing unit refers to the license information 104 of the content guide metafile 100, and acquires the main body viewing period match flag 150. The export processing unit determines whether or not the viewing time limit information flag 150 is “with viewing time limit” (step 2401). If it is not “with viewing deadline” (if there is no viewing deadline), the export processing unit displays that there is no viewing deadline on the export condition confirmation screen (step 1908). If the viewing time limit information flag 150 is “no viewing time limit”, there is no limit.

  If the viewing time limit information flag 150 is “with viewing time limit”, the export processing unit acquires the main body viewing period match flag 151. The export processing unit determines whether or not the main body viewing period match flag 151 is “match” (step 2402). If it does not match, the export processing unit acquires information on the viewing period described in the output destination viewing period 152 described in the export license information (step 2404) and displays it on the screen (step 1908). If the main body viewing period match flag 151 is “match”, the export processing unit acquires information on the playback / viewable expiration date 149 described in the license information 104 for playback license (step 2403) and displays it on the screen. (Step 1908).

FIG. 21 shows a display example when the viewing time limit information flag 150 is “with viewing time limit” and the main body viewing period match flag 151 is “match” (step 2403).
In the example of FIG. 21, the export processing unit confirms that the viewing time limit information flag 150 is “There is a viewing time limit” and the main body viewing period match flag 151 is “match”. When it is acquired from the license information, “48 hours” is acquired from the playback / viewable expiration date 149, and “the content viewing period is 48 hours after export” is displayed.

  As the value set here, the time after export may be set, or when viewing with a receiver, the time obtained by subtracting the viewing time may be set. For example, if the receiver has already been viewing for 3 hours, 48 hours−3 hours = 45 hours, and “the content viewing period is 45 hours after export” may be displayed.

In the example of FIG. 22, the export processing unit is a display example when the viewing time limit information flag 150 is “There is a viewing time limit” and the main body viewing period match flag 151 is “not matched” (step 2404). "2010.1.1 1:00" is acquired from the output destination viewing period 152 of the license information for the export of the content guide metafile 100. "The viewing deadline of the exported content is 1:00 on January 1, 2010. Is displayed.
In this way, the display of the message changes depending on the format of the viewing period described in the output destination viewing period 152 or the playback / viewing deadline 149.

In addition, after export, the number of exports that can be performed is displayed based on the information of the number of exports allowed 145, and this corresponds to the part of “the number of remaining exports of this content is 9 when export is executed”.
Furthermore, the export processing unit also displays information on whether or not transcoding is possible according to the information of the transcode flag 149. “Recording mode can be changed and saved” is an example of a message when transcoding is possible.

When the selection of the menu for changing the recording mode is accepted in the menu selection on this screen (step 1018), the export processing unit displays the recording mode options as shown in FIG. 23 (step 1910). When the recording mode is selected (step 1911), the screen returns to the export condition display screen of FIG. 21 or FIG. Examples of recording mode options are “no conversion”, no conversion at all, “compress HD as it is” without reducing the resolution of HDTV content, and “SD to SDTV”, where the resolution is reduced to SDTV. Examples include “conversion compression” and “memory card compression” in which the resolution and bit rate are further reduced for viewing on a mobile device using a memory card.
Note that HD (High Definition) means high definition. SD (Standard definition) is standard definition.

When execution is selected in the menu (step 1909), export is started. The processing from step 1008 to step 1016 is the same as that in the first embodiment shown in FIGS.
FIG. 6 shows an embodiment in which an arbitrary number of copyable times can be set and exported. However, as shown in FIG. 19, the receiver 3 does not need to communicate with the license copyright management server. The export processing unit can also perform export. Of course, as shown in FIG. 6, it is possible to obtain an export license by exchanging with the license copyright management server.

The recording control unit 32 sets the copyright management information and the content encryption key to the external output or the medium based on the copyright protection method of the output destination (step 1014).
FIG. 16 shows an example of export processing to a removable medium. The details of step 1014 in the flow of FIG. 19 are the same as in FIG.
If there is a free space necessary for writing the export content in both the tamper-resistant area (security memory 57) and the normal storage medium (HDD 55), the recording control unit 32 manages the management information on the copyright-protected content in the security memory 57. As a storage area, an area for storing the actual video content data is secured in the HDD 55 (step 2001).

The recording control unit 32 then manages the copyright content management information for the iVDR copyright management system of the export content, that is, the start address of the area of the HDD 55 reserved as an area for storing the actual video content data, and the content. The iVDR 31 copyright protection method encryption key and content copy management information such as the copy count and generation count of content used to encrypt and store the content are generated and written and stored in the reserved copyright protected content management information storage area. (Step 2002).
The copyright management information written here includes the number of copies at the export destination, viewing period information, etc., and is set by the recording control unit 32 in accordance with the use condition information 323 for the designated medium described in the export license 320.

  The recording control unit 32 secures a copyright protection content management information storage area and an area for storing actual video content data if there is a free space necessary for writing the export content.

  The recording control unit 32 encrypts the copyright content management information for the removable media copyright management method of the export content, that is, the start address of the area reserved as an area for storing the actual video content data, and the content. Generate copyright management information such as encryption key for copyright protection method of removable media, content copy count and generation count, viewing period information, etc., and store the above secured copyright protection content management information Write to the area and save.

  The viewing period information set here is the same viewing period information as displayed in FIG. 21 and FIG. 22, and within 48 hours in the example of FIG. 21 and January 1, 2010 in the example of FIG. Until 00.

  At this time, the number of copies that can be attached to the export content is converted into a format according to the format of the copy count information used by the iVDR copy number management function by the export processing unit, thereby making it possible to copy the content copyright management information. Are generated and stored in the iVDR.

  In the example of FIG. 11, the export processing unit obtains copyable number information indicating that the content has the right to copy 9 times + move once, and uses this for the copy count management function of iVDR. Convert to a format according to the information format. Thereafter, the recording management unit 32 writes and saves this copy count information in the copyright protected content management information storage area of the iVDR.

  Thereafter, the export processing unit decrypts the encrypted data of the video content read from the HDD 16 with the encryption key of the export license stored in the export license holding buffer 400 (step 2003). The recording control unit 32 performs encryption with an encryption key depending on the copyright protection method of the iVDR 31 that stores the decrypted content as one of the management data of the corresponding content in the tamper resistant area, and stores the content data storage location Is written in the address area (step 2004).

Thus, the export content can be copied to the iVDR 31 that is the export destination as content data in accordance with the iVDR copyright management method.
Although FIG. 16 has been described using iVDR as an example, the present invention is not limited to this. The removable media may be any media that can be recorded in a copyright management format, such as a magnetic disk, a magneto-optical disk, such as iVDR, BD disk, SD card, flash memory, SSD (Solid State Drive). The interface in FIG. 15 is an interface corresponding to each medium.
When the export is successful, the export processing unit deletes the license information held in the export license holding buffer (steps 1015 and 1016).

  The CPU 50 of the removable medium 31 acquires viewing time limit information from the copyright-protected content management information storage area of the security memory 57 and checks whether the viewing time limit has expired. If the viewing time limit has expired, the CPU 50 renders the content unreproducible. As a method of making the content unreproducible, for example, the CPU 50 deletes the content stored in the HDD 55. Alternatively, the CPU 50 deletes the encryption key used for decrypting the content stored in the copyright protected content management information storage area of the security memory 57.

  In this case, it is necessary to acquire time information for collation with the viewing time limit information, but the removable medium 32 may have a clock unit that independently generates time information. Alternatively, when the removable medium 32 is connected to the receiver 3 or another device (such as a mobile phone, a television, or a computer), the CPU 50 may acquire time information from these devices. By comparing the acquired item information with the viewing time limit information, the CPU 50 determines whether or not the viewing time limit has expired. Note that these processes may be performed by the security unit 56 instead of the CPU 50.

  Further, not the CPU 50 and the security unit 56 of the removable medium 31 but the CPU 20 of the receiver 3 to which the removable medium 31 is connected and the recording control unit 32 may make the content unreproducible. In this case, the CPU 20 and the recording control unit 32 of the receiver 3 delete the content stored in the HDD 55 while the removable medium 31 is connected. Alternatively, the CPU 20 or the recording control unit 32 deletes the encryption key used for decrypting the content stored in the copyright-protected content management information storage area of the security memory 57.

According to the present embodiment, when exporting to a medium with a usage period condition, based on the metadata, the user can explicitly check the content usage period and use it.
In addition, when performing operations that match the usage period of the main body viewing and the usage period of the export destination media, the metadata for viewing the main body is shared and used as the metadata at the time of export, so that the metadata capacity Can be reduced.

  In the present embodiment, the export processing unit performs the export processing and the recording control unit 32 performs writing to the removable medium. However, the export processing unit may also perform the processing of the recording control unit 32. Good. Further, the recording control unit 32 may also perform processing of the export processing unit.

  In addition, this apparatus is not limited to an above-described Example, Various modifications are included. For example, the above-described embodiments have been described in detail for easy understanding of the product, and are not necessarily limited to those having all the configurations described. Further, a part of the configuration of one embodiment can be replaced with the configuration of another embodiment, and the configuration of another embodiment can be added to the configuration of one embodiment. Further, it is possible to add, delete, and replace other configurations for a part of the configuration of each embodiment.

  Further, each of the above-described configurations, functions, and the like may be realized by hardware by designing a part or all of them with, for example, an integrated circuit. Each of the above-described configurations, functions, and the like may be realized by software by the processor interpreting and executing a program that realizes each function. When each function is executed, information such as a corresponding program, table, and file can be stored in a memory such as the RAM 23 and the ROM 24 or a cache memory. At the time of non-execution, information such as programs, tables, and files for realizing each function can be placed in a memory such as the RAM 23 and the ROM 24, the hard disk device 16, or an IC card device.

  Further, the control lines and information lines indicate what is considered necessary for the explanation, and not all the control lines and information lines on the product are necessarily shown. Actually, it may be considered that almost all the components are connected to each other.

DESCRIPTION OF SYMBOLS 1 ... Content distribution server, 2 ... Copyright management server, 3 ... Receiver (IP television), 4 ... Network, 5 ... IP network corresponding storage device 11 ... Antenna tuner, 12 ... Descrambler, 13 ... Demultiplexer, 14 DESCRIPTION OF SYMBOLS ... Video / audio decoder, 15 ... Media recording control part, 16 ... Hard disk, 17 ... Hard disk drive, 18 ... Display screen, 19 ... Speaker, 20 ... CPU, 21 ... Remote control interface, 22 ... IP (Internet protocol) communication interface part , 23 ... Random access memory, 24 ... Read only memory, 25 ... Graphic / audio engine, 26 ... Video display controller, 27 ... Audio output controller, 28 ... Real time clock, 29 ... iVDR / DVD / BD interface driver , 30 ... remote control, 31 ... iVDR / BD / DVD disc, 32 ... recording control unit 50 ... CPU, 51 ... Serial Advanced Technology Attachment interface, 52 ... encryption unit, 53 ... buffer memory, 54 ... system memory, 55 ... hard disk 56 ... Security unit 57 ... Security memory 58 ... iVDR connector

Claims (11)

A content receiver,
An accepting unit that accepts designation of a recording medium to output content;
A license information acquisition unit for acquiring output license information describing the output conditions of the content;
An output unit for outputting the content to the designated storage medium;
Have
The output license information has usage time limit information indicating a usage time limit of the content at the output destination,
The output unit obtains the use period information from the output license information for the content, and sets the obtained use period information in a management information storage area of the designated storage medium;
A content receiver. A content receiver,
An accepting unit that accepts designation of a recording medium to output content;
A license information acquisition unit for acquiring reproduction license information describing a reproduction condition of the content by the content receiver;
An output unit for outputting the content to the designated storage medium;
Have
The reproduction license information includes reproduction time limit information indicating a time limit during which reproduction of the content by the content receiver is permitted,
The output unit acquires the reproduction time limit information from the reproduction license information for the content, and sets the acquired reproduction time limit information in a management information storage area of the designated storage medium. Content receiver. A content receiver,
An accepting unit that accepts designation of a recording medium to output content;
A license information acquisition unit that acquires output license information describing the output conditions of the content, and reproduction license information describing the reproduction conditions of the content by the content receiver;
An output unit for outputting the content to the designated storage medium;
Have
The output license information includes usage time limit information indicating a usage time limit of the content at the output destination, and main body viewing indicating whether or not the usage time limit at the output destination matches a time limit for reproduction by the content receiver. Period matching information, and
The reproduction license information includes reproduction time limit information indicating a time limit during which reproduction of the content by the content receiver is permitted,
The output unit is
When the main body viewing period matching information indicates that the contents match, the playback time limit information is acquired from the playback license information for the content, and the acquired playback time limit information is stored in the designated storage medium. Set in the management information storage area,
When the main body viewing period matching information does not indicate matching, the usage time limit information is acquired from the output license information for the content, and the acquired usage time limit information is stored in the designated storage medium. Set in the management information storage area of
A content receiver. The content receiver according to any one of claims 1 to 3,
When outputting the content, a copy number designating unit that accepts designation of the number of copies attached to the content;
An output processing unit for acquiring an encryption key for decrypting the content;
Have
The output processing unit receives the number of the encryption keys corresponding to the designated number of copies, decrypts the content with one of the received encryption keys, and designates the decrypted content as the designated storage medium A content receiver that outputs to the content receiver. The content receiver according to claim 4, wherein
The output processing unit sets the designated number of copies in a management information storage area of the designated storage medium. A content output method in a content receiver,
Accept the specification of the recording medium to output the content,
Obtain output license information describing the output conditions of the content,
The output license information has usage time limit information indicating a usage time limit of the content at the output destination,
The usage period information is acquired from the output license information for the content, the acquired usage period information is set in a management information storage area of the specified storage medium, and the content is specified as the storage medium A content output method comprising: A content output method in a content receiver,
Accept the specification of the recording medium to output the content,
Obtaining reproduction license information describing the reproduction conditions of the content by the content receiver;
The reproduction license information includes reproduction time limit information indicating a time limit during which reproduction of the content by the content receiver is permitted,
The reproduction time limit information is acquired from the reproduction license information for the content, the acquired reproduction time limit information is set in a management information storage area of the designated storage medium, and the content is designated the storage medium A content output method comprising: A content output method in a content receiver,
Accept the specification of the recording medium to output the content,
Obtaining output license information describing the output conditions of the content and reproduction license information describing the reproduction conditions of the content by the content receiver;
The output license information includes usage time limit information indicating a usage time limit of the content at the output destination, and main body viewing indicating whether or not the usage time limit at the output destination matches a time limit for reproduction by the content receiver. Period matching information, and
The reproduction license information includes reproduction time limit information indicating a time limit during which reproduction of the content by the content receiver is permitted,
When the main body viewing period matching information indicates that the contents match, the playback time limit information is acquired from the playback license information for the content, and the acquired playback time limit information is stored in the designated storage medium. Set in the management information storage area,
When the main body viewing period matching information does not indicate matching, the usage time limit information is acquired from the output license information for the content, and the acquired usage time limit information is stored in the designated storage medium. Set in the management information storage area of
A content output method for outputting the content to the designated storage medium. The content output method according to any one of claims 6 to 8,
When outputting the content, accept the designation of the number of copies attached to the content,
The output processing unit receives a number of encryption keys corresponding to the designated number of copies, decrypts the content with one of the received encryption keys, and stores the decrypted content in the designated storage medium A content output method characterized by outputting. The content output method according to claim 9, wherein
A content output method, wherein the specified number of times of copying is set in a management information storage area of the specified storage medium. A server,
A license transmission unit for transmitting output license information describing the output conditions of the content;
The output license information has usage time limit information indicating a usage time limit of the content at the output destination,
The expiration date information is used to set a management information storage area of a storage medium when the content is output to the storage medium.
A server characterized by that.

Images