JP3786015B2 - Encryption recording apparatus and encryption recording method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to an optical disc, an optical disc system, and an encryption communication method.
[0002]
[Prior art]
In recent years, with the spread of networks such as the Internet and optical ROM disks, distribution of network software using optical ROM disks is beginning. E-commerce transactions are also being studied.
[0003]
As a conventional technique, a soft electronic distribution system using a CD-ROM as a medium has been put into practical use. In this case, a method is generally used in which a password is given and software encrypted in advance recorded on a CD-ROM is decrypted.
[0004]
[Problems to be solved by the invention]
However, in the case of a CD-ROM, the ID of each disk cannot be set individually because additional recording cannot be performed on the disk. Therefore, if used simply, the encryption of all the disks manufactured from the same master with one password is canceled. For this reason, when a CD-ROM is used, it is necessary to create an ID for each disk on the hard disk on the personal computer side or send the ID created at the center to the user by mail.
[0005]
In an electronic distribution system using a conventional optical disc or optical disc system, it is required to simply supply an ID or encryption key to the optical disc or system. An object of the present invention is to realize simple supply of an ID and an encryption key to an electronic distribution system using a ROM disk.
[0006]
[Means for Solving the Problems]
In order to solve this problem, a write-once area (hereinafter abbreviated as BCA) in which a barcode is overwritten is provided in the pit portion of the optical disk, and a different ID for each disk and an encryption for communication if necessary in the BCA area when the optical disk is manufactured. By recording the key and the decryption key for communication separately, the user ID number, the encryption key for transmission for communication, and the reception Three of the decryption keys are automatically distributed, and some procedures that complicate the conventional system can be omitted. In this way, encrypted communication and identification of the disc containing the content are realized at the same time.
[0007]
DETAILED DESCRIPTION OF THE INVENTION
The present invention will be described based on examples. In the text, the additional recording area using the BCA method is called a BCA area, and the data recorded by the BCA is called BCA data. The first identification information is also called ID or disk ID.
[0008]
FIG. 1 shows a typical process of a disc with BCA. First, a first cipher 805 obtained by encrypting content 777 by a cipher encoder 803 using a first cipher key 802 such as a public key is modulated by an 8-16 modulator 917 such as a mastering device, and this modulated signal is converted by a laser. It is recorded in the first recording area 919 of the master 800 as uneven pits. A disk-shaped transparent substrate 918 is formed by a molding machine 808a using this master 800, and an A1 reflective film is formed by a reflective film creating machine 808b to produce 0.6 mm thick single-sided disks 809a and 809b, and a laminating machine In the second recording area 920 of the completed disc 809 bonded in 808c, the trimming device 807 uses the trimming device 807 to apply the PE ID and the decryption key 922 for the first encryption or the second encryption key 923 for Internet communication to each other by combining PE modulation and RZ modulation. -Modulate with RZ modulator 807a and BCA trim with pulse laser 807b to produce disc 801 with BCA. Since a bonded disk is used, the BCA contained therein cannot be tampered with and can be used for security purposes.
[0009]
Before entering the description, BCA will be briefly described.
[0010]
As shown in (1) of FIG. 2, in the BCA, the aluminum reflective film 809 is trimmed by the pulse laser 808 on the two-layer disc 800, and the stripe-shaped low reflection portion 810 is recorded based on the PE modulation signal. As shown in FIG. 2 (2), a BCA stripe is formed on the disk, and when this stripe is reproduced by a normal optical head, the BCA section loses the reflected signal. Therefore, the modulation signal is intermittent as shown in FIG. 2 (3). Missing portions 810a, 810b, and 810c are generated. The modulated signal is sliced at the first slice level 915. On the other hand, since the missing portion 810a and the like have a low signal level, they can be easily sliced at the second slice level 916. As shown in the recording / reproducing waveform diagram of FIG. 3, the formed barcodes 923a and 923b can be reproduced by level slicing at the second slice level 916 with a normal optical pick as shown in FIG. 3 (5). As shown in FIG. 3 (6), the waveform is shaped by the LPF filter and PE-RZ demodulated, and a digital signal is output as shown in (7). The demodulation operation will be described with reference to FIG. First, the BCA-attached disc 801 is laminated so that two transparent substrates are provided and the recording layer 801a is inside, and there are cases where the recording layer 801a is one layer and recording layers 801a and 801b are two layers. In the case of two layers, a BCA flag 922 indicating whether or not BCA is recorded in the control data of the first recording layer 801a close to the optical head 6 is recorded. Since the BCA is recorded in the second layer 801b, the optical head 6 is first moved to the radial position of the control data 924 in the innermost circumference of the second recording area 919 by focusing on the first recording layer 801a. Since the control data is the main information, it is EFM or 8-15 or 8-16 modulated. Only when the BCA flag 922 in the control data is “1”, the one-layer / two-layer switching unit 827 focuses the second recording layer 801b and reproduces the BCA. When sliced at a general first slice level 915 as shown in FIG. 2C by the level slicer 590, it is converted into a digital signal. This signal is demodulated by the EFM 925, 8-15 modulation 926, or 8-16 modulation 92 demodulator in the first demodulator, error-corrected by the ECC decoder 36, and main information is output. The control data in the main information is reproduced and the BCA is read only when the BCA flag 922 is 1. When the BCA flag 922 is 1, the CPU 923 issues an instruction to the first layer / two layer switching unit 827 and drives the focus adjusting unit 828 to focus from the first recording layer 801a to the second recording layer 801b. Switch. At the same time, the optical head 6 is moved by moving the optical head 6 to read the BCA recorded at a radius position of 920 in the second recording area, that is, in the case of the DVD standard, between 22.3 mm and 23.5 mm on the inner circumference side of the control data. Take. In the BCA area, a signal having a partially missing envelope as shown in FIG. 2 (3) is reproduced. By setting the second slice level 916 having a light amount lower than the first slice level 915 in the second level slicer 929, the reflection missing portion of the BCA can be detected and a digital signal is output. This signal is PE-RZ demodulated by the second demodulator 930 and ECC decoded by the ECC decoder 930d, whereby BCA data as sub information is output. In this way, the main information is demodulated by the first demodulator 928 of 8-16 modulation, and the sub information, that is, BCA data is demodulated and reproduced by the second demodulator 930 of PE-RZ modulation.
[0011]
FIG. 5A shows a reproduced waveform at the front part of the filter 943 and FIG. 5B shows a processing dimension accuracy of the slit of the low reflection part 810. It is difficult to make the slit width 5 to 15 μm or less. Further, if data is not recorded on the inner circumference from 23.5 mm, the recorded data is destroyed. Therefore, in the case of DVD, the maximum capacity after formatting is limited to 188 bytes or less due to the limitations of the shortest recording cycle = 30 μm and the maximum radius = 23.5 mm.
[0012]
The modulation signal is recorded in pits using the 8-16 modulation method, and a high-frequency signal like the high-frequency signal section 933 in FIG. 5A is obtained. On the other hand, the BCA signal is a low frequency signal such as the low frequency signal unit 932. Thus, when the main information is the DVD standard, it is a high-frequency signal 932 having a maximum frequency of about 4.5 MHz, and as shown in FIG. 5A, the sub-information is a low-frequency signal 933 having a period of 8.92 μs, that is, about 100 KHz. Therefore, it is easy to frequency separate the sub information using the LPF 943. The two signals can be easily separated by the frequency separation means 934 including the LPF 943 as shown in FIG. In this case, there is an effect that the LPF 943 may have a simple configuration.
[0013]
The above is the outline of BCA.
[0014]
Now, with reference to FIG. 6, the entire system of the encryption software unlocking system will be described by focusing on password issuing, encryption communication, and orderer authentication operations. First, since the steps of the press factory are manufactured in substantially the same procedure as in FIG. 1, the drawings of the master 800 and the completed disk 809 are omitted.
[0015]
In the press factory 811, the plaintext 810 of the first to nth contents is recorded on the master disc 800 of the optical disc by the encryption encoder 812 using the first to nth encryption keys 813 to encrypt the data or scramble the video signal. Is done. After the reflective film is formed on the disk-shaped substrate 809 manufactured by pressing from the master disk 800, two disk-shaped substrates are bonded together, and a completed disk 809 is made. On this completed disk 809, an ID 815 or / and a first encryption key 816 (public key) or / and a second encryption key 817 (public key) that differ from disk to disk are recorded in the BCA area 814. The disc B801 with BCA is distributed to the user.
[0016]
Since the contents of this disc are encrypted, it is necessary to pay for the price and obtain a password from a password issuing center, that is, an electronic store or a mall, for reproduction. This procedure will be described.
[0017]
When the user's first computer 909 reproduces the distributed BCA-equipped disc 801 on the reproduction device 819, the ID 815, the first encryption key 816, the second encryption key 817, and the connection are connected by the BCA reproduction unit 820 including the PE-RZ demodulation unit. The data at address 818 is reproduced. In order to obtain a password, a connection is made to the connection address 818 of the second computer 821a which is a server of the password issuing center 821 via the network 823 such as the Internet via the communication unit 822, and the ID is transmitted to the second computer 821a.
[0018]
Here, the procedure of encryption communication will be described. The second computer 821a receives the ID 815 from the user's playback device 819. Then, the second computer of the password issuing center 821 called “mall” or “electronic store”, that is, the server 821a has the encryption key database DB824. This database contains the ID of the disk or a secret key that is a decryption key corresponding to the first encryption key 816 of the ID, that is, the first decryption key 825 and a table of IDs. Therefore, the server can search for the first decryption key 825 based on the received ID. Thus, encrypted communication from the first computer to the second computer 821a is established. In this case, the first encryption key and the first decryption key are not public key encryption but are the same key if they are common keys for common key encryption.
[0019]
For example, when the user wants to use a part of encrypted content stored in the disk 801, for example, content whose content number 826 is n, the content number 826, that is, n is used as the first encryption key 816. The first encryption encoder 827 composed of a public key encryption function is used to transmit the encrypted cipher to the second computer 821a. As described above, the second computer 821a searches and knows the first decryption key 825 for decrypting this cipher. Therefore, this code can be surely plain. Thus, the privacy of the user's order information is protected by encryption.
[0020]
In this case, the first encryption key 816 may be signed using a public key encryption private key. This method is called “digital signature”. For a detailed explanation of the operation, refer to the item of “Digital Signature” in “E-Mail Security by Bruce Schneier 1995”.
[0021]
Returning to the encryption communication, this encryption is sent to the first encryption decoder 827 of the password issuing center 821 via the communication unit 822 and the network 823. In this way, the first pair encryption decoder 827 uses the first pair encryption key 825 paired with the first encryption key 816 to decrypt the encryption.
[0022]
In this case, since the public key is only one specific disk, an unauthorized order from a third party disk can be eliminated. In other words, since one disk can be authenticated, the user who owns this disk can be authenticated. Thus, since the content number n is proved to be an order of a specific individual, an unauthorized order of a third party can be eliminated.
[0023]
If the public key 816 is kept secret at this time, it can also be used technically for transmission of billing information that requires high security such as a credit card number by this method. However, in a store usually called “mall”, there is no guarantee of security, so the electronic billing does not handle user billing information. Only credit card and banking billing centers 828 can handle user financial information. Currently, security standards such as SET are being standardized, and public information encryption of RSA 1024 bits is used, and there is a high possibility that financial information will be encrypted.
[0024]
Next, an encryption communication procedure for accounting information in the case of the present invention will be described. First, by using the second encryption key 817 of the public key encryption reproduced by the BCA reproducing unit 820, the charging information 830 such as the personal credit card number is obtained by the second encryption encoder 831 by the public key encryption such as RSA. The encrypted data is sent from the communication unit 822 to the encryption decoder 832 of the third computer 828 via the second computer 821. In this case, when the digital signature is used, the secret key 829 is used as the second encryption key 817.
[0025]
Similar to the procedure for the encryption key of the second computer 821a of the password issuing center 821, the second decryption key 829 corresponding to the ID or the second encryption key 817 is searched from the encryption key database DB 824a, and the second decryption key 829 is used to search the second decryption key 829. The billing information encrypted by the encryption decoder 832 can be decrypted.
[0026]
If the second cryptographic encoder 831 performs a digital signature using the secret key 829, the second cryptographic decoder 832 can confirm the user's signature. Thus, the billing center 828 can safely obtain billing information such as a user's credit card number, bank card number, and bank password even using the Internet. Security is a problem in an open network such as the Internet. In this system, an encryption key (public key) for encryption communication or a private key for digital signature is recorded in the BCA. It can be done reliably. For this reason, there is an effect of preventing illegal billing and illegal orders by an unauthorized third party. Also, since different public keys can be used for each disk, that is, for each user, the confidentiality of communication is improved, and the possibility that user billing information is leaked to a third party is reduced.
[0027]
Here, returning to FIG. 6, the password issuing procedure and the password unlocking procedure will be described. In the password issuance center 821, the password is generated by the password generation unit 834 using an arithmetic expression such as public key encryption based on the three information of the ID, the content number that the user wants to unlock, and the time information indicating the usage permission period of the user. It is generated and transmitted to the first computer 909. To describe the simplest configuration example, the second computer encrypts the information obtained by mixing the decryption key disk ID for decrypting the nth content and the time information with the public key of the public key cryptography, and uses the secret key for solving this. The mixed nth password 834 a is created by the password generation unit 834 and transmitted to the first computer 909. The first computer receives the above-mentioned nth password and decrypts the disc ID, time information and the decryption key of the nth content with the secret key. Here, the password calculation unit 836 calculates whether the ID 835a of the BCA reproduced from the disc, the current second time information 835b, the allowed ID 833a, and the first time information 833 match and match. If they match, permission is given and the nth decryption key 836a is output to the encryption decoder 837, the nth content encryption 837a is decrypted, and the nth content 838 is output. The output period is limited only while the first time information 833 and the second time information 835b match. On the first computer 909 side, the password calculation unit 836 calculates the information of the ID, password 835, and time information from the clock 836b indicating the current time. If the ID and time information are correct, the correct decryption key is calculated. Since it is output as a result, the nth cipher is decrypted or descrambled by the encryption decoder 837, and plaintext data of the nth content 838, or a descrambled video signal or audio signal is output.
[0028]
In this case, if the second time information 835b of the clock 836b does not coincide with the first time information 833 of the password, the encryption is not correctly decrypted and thus reproduction is not performed. If time information is used, it can be applied to a time-limited rental system in which a movie can be played back for only three days at the time of rental use.
[0029]
In FIG. 6, the procedure is described using a block diagram, but a flowchart of this procedure will be described later with reference to FIGS. 16 to 23.
[0030]
Next, a device for the capacity of the encryption key is described. In this way, as shown in FIG. 7A, by inserting both the first encryption key 816 and the second encryption key 817 into the BCA, the merchandise transaction with the “mall” and the price settlement between the “charging center” Two security effects can be maintained.
[0031]
In this case, standardization such as SET is scheduled for security with the billing center, and RSA 1024, that is, a 128-byte encryption key is accommodated in the second encryption key area 817a. Then, since BCA has only 188 bytes, only 60 bytes remain for the encryption key of the transaction with “Mall”. An elliptic function public key cryptosystem is known as a cryptographic function having a size of 20 bytes and a security level comparable to that of 128 bytes of RSA1024.
[0032]
In the present invention, an elliptic function is used for the first encryption key area 816a. As for the elliptic function, security equivalent to RSA1024 is obtained with 20 bytes. For this reason, by using the elliptic function, there is an effect that both the first encryption key 816 and the second encryption key 717 can be accommodated in the 188-byte BCA area.
[0033]
As described above, by applying the BCA to the optical ROM disk, the ID number unique to the disk, the first and second encryption keys, and the connection address can be recorded. In this case, when using the Internet, the BCA automatically connects to the mall, and distributes the product by decrypting the content, authenticates the product purchase and keeps the secret, and authenticates the payment and keeps the confidentiality. This is achieved simply by distributing a disk on which the encryption key is recorded. For this reason, according to the encryption communication method of the present invention, the work of using an IC card, a floppy or a letter for distributing an ID or encryption key to a user can be omitted without reducing security and can be rationalized. effective. Also, the URL that is the Internet connection address is not fixed but is changed. A URL is recorded on the master, and it is only necessary to connect to this URL. However, changing the master when it is changed is inefficient in terms of time and cost. If the changed URL is recorded in the BCA and the connection address 931 is reproduced from the BCA and the BCA connection address 931 is connected with priority over the connection address of the master, the change is made without creating a new master. There is an effect that the connection address 931 is connected.
[0034]
FIG. 6 shows a case where the first key of the public key and the first key of the public key are recorded in the BCA.
[0035]
FIG. 8 shows two examples of the case where the first encryption key 816 as the public key and the third decryption key 817a as the secret key are recorded in the BCA and the case where the encryption communication is performed by generating the encryption key. Since the procedure is the same as in FIG. 6, only the differences will be described. First, in the press factory, the first encryption key 816 and the third decryption key 817a are recorded in the BCA. The third decryption key 817a is used to receive a cipher encrypted with a public key from the billing center. In this case, there is an effect that the security of reception is improved.
[0036]
First, a more specific example of encrypted communication for generating an encryption key will be described with reference to FIG. Since the first encryption key 816 is a public key, it is necessary to record the third decryption key 817a for reception in the BCA. On the other hand, BCA has a small capacity. A public key requires processing time. Therefore, in FIG. 8, the encryption key generation unit 838a generates a public key encryption key / decryption key pair or a common key by the first computer 836 using a random number generator or the like. An example of a common key is described. The common key K838 is encrypted by the first encryption key 816 and the first encryption encoder 842 and sent to the second computer 821a. In the second computer, the main decryption key 844 is used, and the main encryption decoder 843 conducts this encryption to obtain a common key K838a. Since both have the common key K, by passing the common key K to the second cryptographic encoder 842a and the second cryptographic decoder 847a, cryptographic communication from the store, that is, from the second computer 821a to the first computer 836 can be performed. Naturally, by passing the common key K to the second encryption encoder 827a and the second encryption decoder 845a, encrypted communication from the user, that is, the first computer 836 to the second computer 821a is also possible. The effect of the method of recording the first encryption key, which is a public key, in the BCA and generating the encryption key will be described. First, only the recording of the first encryption key is sufficient, and the recording of the decryption key can be omitted. Therefore, the capacity with a small BCA is not reduced. Next, since the decryption key is recorded in the BCA, security is improved. In the case of a common key, the key may be changed every time.
[0037]
Since the calculation time is short, there is an effect that processing time can be reduced. In this case, when the encryption key generation unit 838a generates a pair of encryption key and decryption key for public key encryption instead of the common key, the encryption key is encrypted and transmitted to the second computer 821a and used as the encryption key for the second encryption encoder 842a. If the decryption key is used as the decryption key of the second encryption decoder 847, the processing time becomes longer, but the security can be further improved as compared with the common key. If the processing CPU has a high performance, it is preferable to use a public key. When a new public key is generated, only the public key of the first encryption key is recorded in the BCA, so that no security problem occurs. The capacity of BCA is not consumed. Also, maintenance is easy because there is no need to change the encryption key.
[0038]
This time, when the common key K 838 a is defined by the second computer 821 a of the password issuing center 821, the common key is encrypted by the third encryption encoder 840 using the third encryption key 839 and transmitted to the personal computer 836. On the personal computer 836 side, the third encryption decoder 841 uses the third decryption key 837, which is a secret key reproduced from the BCA, to obtain a common key K838b. In this case, since the third decryption key 817a, which is a secret key, is only for this user, the content of communication from the center to the user is prevented from leaking to a third party. The format in this case is shown in FIG. The third decryption key 839b can be accommodated in the BCA because it can be 20 bytes using an elliptic function.
[0039]
Next, with reference to FIG. 9, a description will be given of an embodiment in which the master disk creation cost is reduced by using BCA for the encryption disk.
[0040]
If there are n, for example, 1000 plaintext contents 850, the encryption encoder 852 encrypts them using the 1st to mth encryption keys 851. The encrypted first to mth contents 853, the decryption program 854a of the 1st to mth contents, and the second encryption decoder 861a which is a program for decrypting the second encryption are recorded as uneven pits on the master disk. Thereafter, a reflective film is formed by molding on one substrate, and then the two substrates are bonded together to complete the optical disc 801. At this time, different identification information unique to the first disk, in other words, ID855 and decryption information 854 such as a password and a decryption key for unlocking the nth content, for example, the first content are encrypted by the second encryption encoder 860. The second cipher is recorded in the BCA in advance. Then, the second cipher is reproduced from the BCA reproducing unit 820 in the reproducing apparatus. Since the second encryption decoder 861 is reproduced from the data reproducing unit 862 for reproducing normal recording data other than the BCA, the second cipher is decrypted using this, and the ID 855a and the nth password 854a are reproduced. The The encryption decoder 855b decrypts the first cipher using the ID 855a and the password 854a using the decryption program 854a of the nth content reproduced from the data reproducing unit 862, and clears the plaintext 855c and identification information 855a of the nth content. obtain. In the case of a personal computer, the content and ID are recorded on the hard disk 863. This ID 855a checks whether there is the same ID on the network at the time of starting the program and operates the network protection, so that there is a secondary effect that unauthorized installation of software can be prevented. In other words, if one thousand pieces of encrypted content are put on one master disk and decryption information such as a password corresponding to specific software is recorded, an optical ROM disk of one specific content is substantially created. Is equivalent to The same effect as cutting 1000 kinds of software masters with one master can be obtained, and there is an effect that the cost for creating masters and labor can be reduced.
[0041]
FIG. 10 describes a procedure for encrypting content using a BCA when recording content on a RAM disk. First, BCA data is reproduced from the RAM disk 856 by the BCA reproduction unit 820, ID 857 is output, and sent to the encryption unit 859 via the interfaces 858a and 858b and the network. The encryption unit 859 encrypts the content 860 with the key including the ID 857 in the encryption encoder 861 or scrambles the video / audio signal. The encrypted content is sent to the recording / reproducing apparatus and recorded on the RAM disk 856 by the recording circuit 862.
[0042]
Next, when reproducing this signal, the data reproducing unit 865 demodulates the main data, reproduces the encrypted signal, and the encryption decoder 863 performs decryption. At this time, information including ID 857 is reproduced from the BCA area of the RAM disk 856 by the BCA reproducing unit 820 and sent to the encryption decoder 863 as part of the key. At this time, since the encryption key recorded on the RAM disk is a normal disk ID and the RAM disk ID is also a normal disk ID when it is normally copied, the encryption is decrypted or descrambled. The plaintext 864 of the nth content is output. In the case of video information, the MPEG signal is expanded to obtain a video signal.
[0043]
In this case, encryption uses the disk ID as a key. Since there is only one disk ID in the world, there is an effect that it can be copied only to one RAM disk.
[0044]
Here, if copying from this regular RAM disk to another RAM disk, the first regular disk ID ID1 is different from ID2 which is the disk ID of another illegal RAM disk. When the BCA of the illegal RAM disk is reproduced, ID2 is reproduced. However, since the content is encrypted with ID1, even if the encryption decoder 863 tries to unlock the key with ID2, the key is different and the cipher is not decrypted. Thus, the illegal copy RAM disk signal is not output, and the copyright is protected. Since the present invention is a Disk ID system, there is an effect that a normal RAM disk that is normally copied only once is unlocked regardless of which drive is used for reproduction. However, the encryption unit 859 may be an IC card equipped with an encryption encoder instead of the center.
[0045]
The copy prevention method will be described with reference to the block diagram of FIG. 11 and the flowchart of FIG. In step 877a, the installation program is operated. The sub information ID is output from the BCA reproducing unit 820 from the optical disk 801 bonded in step 877b. In step 877d, the content and network check software 870 are reproduced from the main information by the data reproducing unit 865. The content and ID 857 are recorded in the HDD 872. In order to prevent unauthorized tampering in step 877c, the ID 857 performs a specific secret cryptographic operation and is recorded as a software ID in the HDD 857. Thus, the software ID 873 is recorded in the HDD 872 of the personal computer 876 together with the content. Here, a case where the program of step 877f in FIG. 12 is started will be described. When starting the program, in step 877g, the software ID 873 of the HDD 872 is reproduced, and the software ID 873a in the HDD 872a of another personal computer 876a on the network 876 is checked via the interface 875. In step 877h, it is checked whether the software ID 873a of the other personal computer and the own software ID 873 have the same number. If they are the same number, the process proceeds to step 877j to stop the program start of the personal computer 876 or warn on the screen. Display a message.
[0046]
If the software ID 873a of the other personal computer is not the same number, it is determined that there is no illegal copy because there is no evidence that at least a plurality of contents have been installed on the network, and the process proceeds to step 877k and the program is allowed to start. . In this case, the software ID 873 may be transmitted to another personal computer via the network. In this personal computer, unauthorized installation can be detected by checking the duplication of the software ID of each personal computer. If there is fraud, send a warning message to the corresponding computer.
[0047]
Thus, by recording an ID in the BCA and recording a network check program in the pit recording area, it is possible to prevent multiple installations of software with the same ID on the same network. Thus, simple illegal copy protection is realized.
[0048]
By providing a writable writing layer 850 made of a white material as shown in FIG. 13, it is possible not only to print characters or write a password or the like with a pen, but also because the writing layer 850 becomes thick, the optical disc The effect of preventing damage to the substrate is also obtained. By printing a character ID 851 and a general bar code 852 obtained by converting the disk ID 815 that is a part of the BCA data 849 recorded by trimming into the BCA area 801a on the writing layer 850 and converting it into alphanumeric characters, In addition, the ID can be confirmed and collated with a POS bar code reader or visually without the user having to read the BCA on the playback device. The visible ID is not necessary when the user notifies the center of the ID via a personal computer. However, if the user verbally communicates the ID to the center by phone, the ID that is the same as the BCA ID is printed in a format that can be seen on the disc, so that the user can see the ID visually, so insert the disc into the computer. You can tell the ID to the center without. An optical disk manufacturing step will be described with reference to the flowchart of FIG. In step 853d, a disk is formed from the master and a substrate on which pits are recorded is created. In step 853e, an aluminum reflective film is formed. In step 853f, the two disk substrates are bonded together with an adhesive to complete a DVD disk or the like. In step 853g, screen printing label printing is performed on one side of the disc. At this time, the unique identification information is recorded on the master disk with a barcode. In step 853h, identification information such as an ID that differs for each disk in the POS barcode format is printed by an inkjet barcode printer or a thermal transfer barcode printer. In step 853i, this barcode is read out by a barcode reader, and in step 853j, BCA data corresponding to the identification information is printed in the second recording area of the disc. In this manufacturing method, after all the processes including the POS barcode except BCA are completed, the disc identification information is confirmed, and then BCA data is recorded. BCA can only be read by playing the disc, but POS barcodes are low in density and can be read by commercial barcode readers. Disc ID can be identified in every process in the factory. By recording the disc ID with the POS barcode before the BCA trimming, erroneous recording of the BCA and the POS barcode can be almost completely prevented.
[0049]
A method of using BCA that can perform secondary and tertiary recording by this BCA method will be described. As shown in FIG. 15, the software manufacturer can also secondary record the anti-piracy mark and the verification code as shown in step (2). In step (2), a disc 944b may be created in which a different ID number for each disc and an encryption key for secret communication with the user are recorded. The discs 944c and 944d can be reproduced without inputting a password.
[0050]
As another application, in step (3), information such as an encrypted or scrambled MPEG video signal is recorded on the disk 944e. The detailed operation of MPEG scramble is not described here. In step (4), the software company creates a disk 844f in which the sub public key for decrypting the ID number and descrambling information is secondarily recorded by BCA. This disc cannot be played alone. In step (5), after receiving the price of the disc at the store, a password is created with the sub secret key paired with the sub public key, and thirdarily recorded on the disc. Alternatively, a receipt with a password printed is given to the user. Thereafter, since the password is recorded on the disk 844g, the user can reproduce it. When this method is used, even if shoplifting a disk for which no price has been paid, the video is not scrambled and cannot be normally played back, so shoplifting becomes meaningless and reduced.
[0051]
In stores such as rental videos, if a password is permanently recorded in BCA, it is used when shoplifting is performed. In this case, as shown in step (6), the BCA is read by the POS bar code reader at the store and a password for descrambling is issued at step 951g, printed on the receipt at step 951i, and handed to the customer at step 951j. The customer inputs the receipt password to the player using the numeric keypad at step 951k at home. In step 951p, it is played back only for a predetermined day. If you rent a disk by giving only the password for a part of the software on the disk, if you want to see other software, you can notify the software password at step 951u and enter it at step 951k. Software can be played back. Although an example of a rental video store has been shown, when a personal computer software store sells encrypted personal computer software, a password may be printed and passed at a POS terminal.
[0052]
The operations at the cell sales store and rental store in steps (5) and (6) in FIG. 15 will be described more specifically with reference to FIG. The cell store receives the encrypted or scrambled disk 944f from the software maker and confirms the payment from the user, and issues the ID number and sub public key data of the disk 944f from the barcode recording device 945 via the POS terminal 946. Send to center 952. In the case of a small system, the password issuing center, that is, the system including the sub secret key of the sub public key may be in the POS terminal. The password issuing center inputs the disk ID number and time information in step 951q, performs calculation in step 951s, encrypts using the sub secret key in step 951t, issues the password in step 951g, and issues the network 948 and the POS terminal 846. The password is sent to the BCA bar code recording device 945 via, and the recorded disc 944g is delivered to the customer. This disc 944g can be reproduced as it is.
[0053]
Next, in the case of a rental store or a personal computer software store, first, the ROM disk 944f that has not been unencrypted or scrambled is displayed at the store. When the customer designates a specific ROM disk 944f, the disk 944f is held by holding the circular bar code reader 950 with a built-in rotary optical head 953 that scans in a whirling pattern in the center of the disk 900 in a transparent case. The barcode of the reflective layer by the non-reflective portion 915 is read, and the disk ID number is read. By printing the product ID barcode of the disc ID as shown at 852 in FIG. 13, it can be read by a bar code reader of a normal POS terminal. You may read from the circular barcode previously recorded on the original disk and pressed. Information including these disk IDs is processed by the POS terminal 946, the fee is settled from the credit card, and the password corresponding to the ID number is issued from the password issuing center in step 951g as described above. In the case of rental use, date information is added as in step 951r to limit the number of days that can be viewed, and a disk ID number is encrypted to create a password. In the case of this password, since it operates only on a specific date, for example, a rental period of 3 days can be set in the password.
[0054]
In step 951i, the password for descrambling thus issued is printed on the receipt 949 together with the rental date, return date, and rental title fee, and delivered to the customer along with the disc. The customer brings back the disk 944j and the receipt 949, and inputs the password to the numeric keypad input portion 954 of the first computer 909 in FIG. 6 in step 951k. It is divided using the key. Only when the password is correct, the encryption decoder 837 descrambles the program data and outputs the video output.
[0055]
In this case, when the time information is included in the password, the password is compared with the date data of the clock unit 836b and descrambled for the period of the matching date. The entered password is stored in the nonvolatile memory 755a of the memory 755 together with the corresponding ID number, and once the user inputs the password, it is descrambled without entering it again. Thus, there is an effect that the disk key can be electronically opened and closed during distribution.
[0056]
A method for decrypting software on a disc on which software is recorded as encrypted data will be described in detail with reference to FIG.
[0057]
Step 865 shows the overall flow of distribution of encrypted data and individual IDs to users. First, in step 865a, m pieces of data encrypted with the secret first encryption key and a program for decrypting the m pieces of encrypted data are recorded in the ROM area of one master. In step 865b, a substrate is formed from the master, and two substrates to which a reflective film is added are bonded together to create a plurality of completed ROM disks. In step 865c, decryption information (disc identification information different for each pressed disc and / or decryption key of encrypted data) necessary for decryption of the encrypted data is stored in the non-rewritable sub-recording area (called BCA) of the completed disc. Recording is performed with a modulation method different from that of the area. In step 865d, the user plays the distributed disc, selects the desired encrypted data n, and starts the decryption process. In step 865e, the user's first computer reproduces the encrypted data and the decryption program from the ROM area, and reads the decryption information from the sub recording area (BCA). If the second decryption information is not obtained online in step 865f, decryption auxiliary information such as an ID is displayed on the screen in step 871a of FIG. In step 871b, the user obtains a second decryption such as a password corresponding to the ID and inputs it to the first computer. In step 871c, a specific calculation of the public key cryptographic function is performed using the disc identification information, the second decryption information, and the encrypted data n. If the result is correct in step 871d, the nth data is plain-written in step 871f, and the user can operate the software of data n.
[0058]
Next, using the flowchart of FIG. 18, an encryption communication method essential for the Internet using BCA will be described. Step 868 is a routine of a method for distributing the communication program and the communication encryption key to the user. First, at step 868a, at least a communication program and connection information are recorded in the ROM area of one master. In step 868b, a substrate is formed from the master, and the two substrates are bonded to create a plurality of completed ROM disks. In step 868c, the disc identification information and encryption key for encryption communication that are different for each pressed disc are recorded in the non-rewritable sub-recording area (BCA) of the completed disc. In some cases, the connection address of the second computer and / or the decryption key for encryption communication is recorded by a modulation method different from that of the ROM area. In step 868d, the user's first computer reproduces the communication program and the encryption program from the ROM area, and reads the disc identification information and the communication encryption key from the sub recording area. Proceeding to FIG. 19, if there is a connection address in the BCA area in step 867a, the connection is made to the second computer based on the connection address such as the URL of the BCA area in step 867b, and if there is no connection address, the ROM area in step 867c. Connect to the computer with the connection address. In step 867d, transmission data is input. In step 867e, if there is an encryption key for encryption communication in the BCA area, the transmission data is encrypted in step 867g using the encryption key for encryption communication in the BCA area, and the third encryption is performed. Create Otherwise, in step 867f, the data is encrypted using the encryption key for encryption communication in the ROM area or HDD to create a third cipher.
[0059]
Next, in FIG. 20, a routine for generating a decryption key for encryption received from the second computer 910 will be described in step 869. First, in step 869a, if the communication decryption key is required in the first computer, the process proceeds to step 869b, where it is checked whether the BCA has a communication decryption key. If there is no decryption key, the ROM area is stored in step 869c. A new pair of second communication encryption key / second communication decryption key is newly created by the second encryption unit which reproduces the user key input or random number generator data from the ROM area using the encryption key / decryption key generation program reproduced from To generate. In step 869d, a fourth cipher is created by encrypting the “second communication encryption key or / and user data” using the communication encryption key recorded in the BCA and encryption software obtained by reproducing from the ROM area. In step 869e, the fourth cipher and the disc identification information or / and the user address are transmitted to the second computer having the connection address obtained by reproducing from the disc. As the processing of the second computer, in step 869f, the fourth encryption, the disc identification information, and the user address are received. In step 869g, a communication decryption key paired with the disc identification information is selected from the decryption key database, and the fourth cipher is decrypted using this communication decryption key to obtain a plaintext of the second communication encryption key. In step 869h, the second encryption key is used to transmit the fifth encryption obtained by encrypting the server data including a part of the user data to the first computer via the Internet 908. In step 869i, the fifth cipher (and disk identification information) is received and decrypted using the second communication decryption key and the decryption function recorded in the ROM area to obtain the plain text of the server data. In this way, bidirectional encryption communication is realized between the first and second computers by the method of step 869 in FIG.
[0060]
In step 870 of FIG. 21, a charging information reception routine will be described. If charging information is input in step 870a, a request is made to the second computer for a third encryption key for public key encryption for charging communication. In step 870b, the second computer requests the third encryption key from the third computer. Although the exchange step is omitted, the third computer 911 transmits the ID and the third encryption key to the second computer 910. In step 870c, the second computer receives the ID and the third encryption key. In step 870e, the second computer transmits the seventh cipher obtained by encrypting the third encryption key using the second communication encryption key or the like to the first computer. In step 870f, the first computer receives the seventh cipher, and in step 870g, the received seventh cipher is decrypted using the second communication decryption key described above, and the third cipher key (public key of the public key function) is obtained. ) In step 870h, the third encryption key is recorded in the HDD as necessary. This is used for the next transmission. In the case where charging information having a high confidential value such as a credit card number or a settlement password is input in step 870i, an eighth cipher in which the charging information is encrypted using the third encryption key in step 870j is stored in the second computer. To the third computer. The second computer receives the eighth cipher at step 870k and retransmits it to the third computer. Since the decryption key of the third cipher has only the third computer 912 which is a financial institution, it cannot be decrypted by the electronic store of the second computer. In step 870m, the third computer searches for the third decryption key corresponding to the third encryption key from the encryption key database using the identification information such as the disk, and uses the third decryption key which is the secret key of the public key encryption. The cipher is decrypted and the plain text of the billing information is obtained. In step 870n, it is checked whether the price can be collected from the financial information such as the user's credit information and deposit balance. In step 870p, the survey result is notified to the second computer. The second computer, the so-called online store, determines whether or not the price can be collected in step 870q. If it is determined that it is not possible, in step 870r, the product is not sent and the key for decrypting the encryption software is not sent. If it is determined that the payment can be collected, in the case of the key providing system as shown in FIG. In step 870t, the first computer receives the decryption key of the encryption software, releases the encryption of the nth encryption software in step 870u, and obtains the plaintext of the software in step 870w. In this way, a content key providing system is realized.
[0061]
In the method of step 870 in FIG. 21, the third computer, that is, the financial institution, requests and issues the public key of the third encryption key that is required to have high security as billing information as required. It may not be recorded in advance in the BCA. Therefore, there is an effect that a stronger RSA type encryption key of 256 bytes of RSA 2048 can be used as the third encryption key without consuming the BCA capacity. Furthermore, since it is not necessary to record in the BCA of all the disks in advance, the total number of third cryptographic keys issued is reduced, and the CPU time of the computer required for calculating the third cryptographic key is reduced. In addition, since the third cipher is not in the BCA, it is not disclosed, so the security is slightly improved. The role of the BCA in this case is to record the identification information of the secret communication disk by the RSA 1024 grade encryption key as shown in FIGS. If one BCA disk is used, encrypted communication with the second computer is realized, so the effect is high.
[0062]
Next, the encryption communication step 872 when both the communication encryption key and the communication decryption key are recorded in the BCA will be described with reference to FIG. In step 872g, the first computer 909 encrypts user data with the communication encryption key reproduced from the BCA, the ninth encryption, basic identification information recorded in the ROM area when the master is created, and the BCA area. The disc identification information is transmitted to the second computer 910. In step 872b, the second computer receives the ninth cipher, disc identification information, and basic identification information. In step 872c, the communication decryption key paired with the disc identification information is retrieved from the decryption key database, the ninth cipher is decrypted, and the plain text of the user data is obtained. In step 872e, the second encryption key corresponding to the disk identification information is selected from the encryption key database, and the server data and the third encryption key received from the third computer in the procedure described in FIG. The tenth encryption is transmitted to the first computer. In Step 872f, the first computer receives the tenth cipher, and in Step 872g, the received seventh cipher is decrypted using the above-described second decryption key for communication recorded in the BCA, and server data and third Get plaintext of encryption key (public key of public key function). In step 872h, the third encryption key is recorded in the HDD as necessary. When the charging information is input in step 872i, the process proceeds to step 872j, and the eighth encryption and the first encryption obtained by encrypting the charging information are transmitted to the third computer via the second computer using the third encryption key. In the second computer, the eleventh cipher is retransmitted to the third computer in step 872m. In the third computer, in step 872m, the third encryption key is searched for the third encryption key paired with the identification information such as the disk from the database, the eighth encryption is decrypted, and the plain text of the billing information is obtained. In step 872n, the possibility of collecting the charge to the user is checked, and in step 872p, the investigation result is transmitted to the second computer. In step 872q, the second computer checks whether the user can collect the bill. If it is determined that the payment can be collected, in the case of the key providing system as shown in FIG. The first computer receives the decryption key of the encryption software at step 872t, releases the encryption of the nth encryption software at step 872u, and obtains the software plaintext at step 872w. In this way, a content key providing system is realized.
[0063]
The advantage of the method of step 872 in FIG. 22 is that both the encryption key and the decryption key are recorded in the BCA area, so that it is not necessary to transmit the decryption key and encryption key necessary for reception from the second computer. Is a point. Since the BCA has a maximum capacity of 188 bytes, a cryptographic function such as a public key can be recorded because RSA 512 bytes, 64 bytes, and 128 bytes are sufficient. RSA512 grade bidirectional encryption is possible. Since the elliptic function can accommodate 7 to 8 pieces as shown in FIG. 7, the effect is even higher.
[0064]
The operation and effect when the first encryption key and the third encryption key are previously recorded in the BCA will be described with reference to FIG. Note that steps 872a to 872w in FIG. 22 and steps 873a to 873w in FIG. 23 have substantially the same configuration, so only the different steps will be described.
[0065]
First, since the third encryption key that protects the security of financial information such as billing information is recorded in the BCA, the second and third computers do not need to generate and transmit the third encryption key in step 873e. In steps 873e, 873f, and 873g, the twelfth cipher is transmitted and received. In step 873j, the third encryption key is read from the BCA area, and the user's billing information is sent to the third computer via the second computer. The method of FIG. 23 has an effect that the procedure is simplified because the generation and transmission / reception of the third encryption key are not required at all.
[0066]
In the case of an electronic payment system, there are usually a plurality of billing centers as in the case of credit start. Therefore, naturally a plurality of third encryption keys that are public keys are required. As described with reference to FIG. 7B, when the RSA encryption function is used, RSA 1024 great or more, that is, 128 bytes or more are required. Therefore, only one third encryption key 817b is included in 188 bytes of BCA. However, an elliptic function encryption key (elliptical encryption) that has recently appeared has a small capacity and can provide security equivalent to RSA. In recent years, the RSA function RSA1024 has become the minimum standard for security of financial information. In the case of the RSA function, 128 bytes are required, but in order to obtain the same security, it is said that the elliptical encryption requires about 20 to 22 bytes. Accordingly, as shown in FIG. 7C, a plurality of third ciphers handling financial information can be accommodated in a maximum of 7 to 8 BCA. By using elliptical cryptography, an electronic payment system using BCA is realized that supports a plurality of financial centers that are practically essential. Although the explanation has been focused on the third cipher, the effect of the elliptical cipher is the same even if it is used as the public key of the first cipher key, because high security with a plurality of electronic stores is maintained.
[0067]
Next, the RAM disk recording / reproducing apparatus using the BCA described in FIG. 10 will be described in more detail with reference to FIG. One example is the so-called Pay per
A recording procedure to the RAM disk in the View system will be described. First, a software company such as a CATV company encrypts content 880 such as movie software in the first transmitter using the first encryption key 882 in the program transmitter 883, generates the first encryption 900, and generates the CATV for each user. Transmit to a decoder 886, such as a decoder. When the decoder 886 sends a request for a specific program to the key issuing center 884 via the network, the key issuing center 884 performs descrambling on the specific software system ID number and specific time limit information 903. First decryption information such as a key, and recording permission to a RAM disk code The first decoding information 885 a including 901 is transmitted to the first decoding unit 887 of the first decoder 886. The first decryption unit 887 decrypts the first cipher 900 from the system ID 888 and the first decryption information 885a, and in the case of a video signal, the descrambled signal is a scrambled signal for copy protection using a further cipher. Is output from the third cipher output unit 889 and can be viewed on a general TV 899 although the original TV signal is copy-guarded. Here, when the recording permission code 901a is NO, it cannot be recorded on the RAM disk 894. However, in the case of OK, recording is possible only on one RAM disk 894. This method will be described.
[0068]
In the decoder 886, the IC card 902 is inserted, the BCA of the RAM disk 894 of the RAM recorder is read by the BCA playback unit 895, and the disk ID 905 is sent to the IC card 902. The IC card 902 checks the current time information 904 and the recording permission code 901a obtained from the disk IC 905 and the decoder 886, performs a shake hand type copy check 907 bidirectionally with the third encryption output unit 889, and records the recording permission code and If the copy check is OK, the second sub-encryptor 891 in the IC card 902 issues the second encryption key 906. In the second cipher 890, the third cipher is re-encrypted to generate a second cipher in which the content 880 is encrypted with the disc ID of a specific single disc, and is sent to the RAM recorder 892 and sent to the recording means 893. The second cipher 912 is recorded in the first recording area 894a of the RAM disk 894 by the laser using 8-15 or 8-16 modulation and modulated by the first modulation unit. Thus, the data on the RAM disk 894 is encrypted with a specific disk ID number.
[0069]
Next, when this disc is demodulated by the normal reproduction means 896 and the reproduction signal by the first demodulator 896a of 8-16 modulation, the second cipher of the content is output. The second decryptor 897 has a plurality of second decryption keys 898a, 898b, and 898c. This has a decryption key corresponding to the encryption key of each IC card which is different for each program supply company such as each CATV station. In this case, the decryption key identification information of the decoder 886 or the IC card 902 is recorded in the first recording area 894a at the time of recording. In the reproducing apparatus, the decryption key identification information 913 is read out from the first recording area 894a, and the second decryption key 898a corresponding to each encryption key based on the decryption keys 898a to 898z is obtained by the decryption key selection unit 914. The second cipher is decrypted by the second decryptor 897 using the disc ID 905a as one key. An IC card containing a specific decryption key may be used. In the case of video, a normal video descrambled by the TV 899a is obtained.
[0070]
In the system of FIG. 24, the disk ID 905 is sent to the IC card inserted into the decoder at the home of each user and the image data and the like are encrypted. Therefore, the software company 883 needs to individually change the encryption of the content distributed to each user. Absent. Therefore, when broadcasting pay-per-view scrambled video to a large number of viewers, such as satellite broadcasting or CATV, it is possible to allow each user to permit recording on only one RAM disk.
[0071]
When recording on one disk with the system of FIG. 24 and attempting to illegally copy or record on the second disk, that is, another disk ID RAM disk, in the case of BCA, a two-layer disk is used, so the disk ID is altered. Therefore, unauthorized copying to the second disk at the same time is prevented. Next, a pseudo recording permission code 901a and a third cipher are transmitted to a decoder or IC card at another time zone, and the data is encrypted with a specific disk ID. It is conceivable to record on a RAM disk having a different disk ID. Even in such an illegal act, the decoder time information management unit 902 in the IC card compares the time limit information 903 in the key issuing center 884 and the time information in the content with the current time in the time information unit 904a in the decoder. Then, it is checked whether or not the times match, and if it is OK, the IC card 902 permits the second cryptographic operation unit 990 to be encrypted.
[0072]
In this case, a shake-hand time check method in which the second encryptor 890 and the first decryption unit 887 communicate check data in both directions may be used.
[0073]
In the case of the shake hand method, the second encryption calculator 890 including the IC card, the first decryption unit 887, and the third encryption unit 889 confirm the encrypted data in both directions. For this reason, illegal copying in another time zone that is not the same as the content transmission time is prevented.
[0074]
Thus, in the decoder 886 of each user, the contents of the software company are recorded on only one RAM disk 894 having a specific disk ID that exists only in the world. This disk can be reproduced by any RAM disk player. Even when recording on a RAM disk by the method of FIG. 24, there is an effect that the copyright of the software company is protected.
[0075]
In the description of the figure in the text, encryption is performed by the encryption encoder and decryption is performed by the encryption decoder, but actually, an encryption algorithm and a decryption algorithm which are programs in the CPU are used.
[0076]
【The invention's effect】
In this way, by previously recording an ID, an encryption key for decryption, and a decryption key in the BCA area of the optical disc, decryption of the encrypted content can be realized with a simpler procedure. In addition, communication confidentiality is achieved without conventional registration procedures. By storing the network check program in the content, multiple installations of the same ID software on the same network can be prevented. Thus, there are various effects of improving security.
[Brief description of the drawings]
FIG. 1 is a process diagram of an optical disk according to an embodiment of the present invention.
FIG. 2 is a sectional view of trimming by a pulse laser according to an embodiment of the present invention.
FIG. 3 is a signal reproduction waveform diagram of a trimming unit according to an embodiment of the present invention.
FIG. 4 is a block diagram of a playback apparatus according to an embodiment of the present invention.
5A is a reproduction signal waveform diagram of the BCA section of the present invention. FIG.
(B) Dimensional relationship diagram of the BCA part of the present invention
FIG. 6 is a diagram showing an encryption communication method and a password encryption key method according to an embodiment of the present invention.
FIG. 7 is a format diagram of the BCA of the present invention.
FIG. 8 is a diagram showing an encryption communication method and an encryption / decryption method using a password according to an embodiment of the present invention;
FIG. 9 is an operation procedure diagram of a disc that is permitted to use the content portion of the embodiment of the present invention.
FIG. 10 is a block diagram when BCA is recorded on the RAM disk of the embodiment of the present invention.
FIG. 11 is a block diagram of an unauthorized copy prevention system according to the embodiment of this invention.
FIG. 12 is a flowchart for preventing unauthorized copying according to the embodiment of this invention.
FIGS. 13A and 13B are a top view and a cross-sectional view of an optical disc on which a product barcode is printed on the BCA according to an embodiment of the present invention. FIGS.
FIG. 14 is a block diagram of a POS settlement system using a ROM disk with BCA and a POS terminal according to an embodiment of the present invention.
FIG. 15 is a flowchart of descrambling of a press factory, a software company, and a store according to the embodiment of this invention.
FIG. 16 is a flowchart of an encryption / decryption step of encrypted data using a disk ID or the like according to an embodiment of the present invention.
FIG. 17 is a flowchart of an encryption / decryption step of encrypted data using a disk ID or the like according to the embodiment of this invention.
FIG. 18 is a flowchart of communication encryption key distribution and encryption communication using the BCA according to the embodiment of this invention.
FIG. 19 is a flowchart of communication encryption key distribution and encryption communication using the BCA according to the embodiment of this invention.
FIG. 20 is a flowchart of communication encryption key distribution and encryption communication using the BCA according to the embodiment of this invention.
FIG. 21 is a flowchart of an electronic payment system using a BCA according to an embodiment of the present invention.
FIG. 22 is a flowchart of an electronic payment system using a BCA according to an embodiment of the present invention.
FIG. 23 is a flowchart of an electronic payment system using a BCA according to an embodiment of the present invention.
FIG. 24 is a block diagram of a recording / reproducing method for restricting recording to one RAM disk using the BCA according to the embodiment of the present invention.
[Explanation of symbols]
801 Disc with BCA
802 fixed key
803 Cryptographic encoder
804 Recording means
805 content
806 ID
807 Trimming device
808a molding machine
808b Reflective film making machine
808c Laminating machine
809 Completed disc
809a single-sided disc
809b single-sided disc
811 Press hall
813 fixed key
814 BCA area
815 Disk ID
816 First encryption key (secret key)
817 Second encryption key (secret key)
818 Connection address
819 Playback device
820 BCA playback unit
821 Password Issuing Center
822 Communication Department
823 network
824 Encryption key DB
825 First decryption key
826 Content number
827 First cryptographic decoder
828 Billing Center
829 Second decryption key
830 Billing information
831 Second encryption encoder
832 Second encryption decoder
833 time information
834 Password generator
835 password
836 PC
837 Third decryption key
838 common key
839 Third encryption key
840 Third encryption encoder
841 Third cryptographic decoder
842 Main encryption encoder
843 Main encryption decoder
844 Main decryption key
845 First encryption decoder
846 Cryptographic encoder
847 Cryptographic decoder
849 BCA data
850 writing layer
851 characters
852 General barcode
853 decoder
860 Second encryption encoder
861 Second cryptographic decoder
862 Data playback unit
863 ROM area
864 additional area
865 Decoding flowchart
890 Second cryptographic operation unit
894a First recording area
908 Internet
909 First computer
910 Second computer
911 Third computer
912 Second cipher
913 Decryption key identification information
914 Decryption key selection means
915 First slice level
916 Second slice level
917 PE-RZ modulator
918 transparent substrate
919 First recording area
920 Second recording area
921 Disk ID
922 BCA flag
923 CPU
924 control data
925 EFM demodulation
926 8-15 modulation demodulation
927 8-16 modulation demodulation
928 First demodulator
930 Second demodulator
931 Connection address

Claims (4)

An input means for inputting content;
Encryption means for encrypting the input content;
Recording means for recording the encrypted content on a recording medium having identification information unique to the medium,
The identification information overlaps a part of the information recording area of the recording medium and is formed as a stripe pattern that is long in the radial direction,
The identification information is used to check whether the recording medium may be permitted to be recorded, and when the inspection is normal, the content encrypted by the encryption unit is recorded on the recording medium. An encryption recording apparatus characterized by the above. Receiving means for receiving the content;
Encryption means for encrypting the received content;
Recording means for recording the encrypted content on a recording medium having identification information unique to the medium,
The identification information overlaps a part of the information recording area of the recording medium and is formed as a stripe pattern that is long in the radial direction,
The identification information is used to check whether the recording medium may be permitted to be recorded, and when the inspection is normal, the content encrypted by the encryption unit is recorded on the recording medium. An encryption recording apparatus characterized by the above. An input process for inputting content;
An encryption step of encrypting the input content;
A recording step of recording the encrypted content on a recording medium having identification information unique to the medium;
Using said identification information, and a test step of performing Verifying the good medium also recording permission,
The identification information overlaps a part of the information recording area of the recording medium and is formed as a stripe pattern that is long in the radial direction,
Cipher recording method characterized by wherein, when the inspection process inspection is normal in, recording the encrypted the contents were in the recording medium. A receiving process for receiving content;
An encryption step of encrypting the received content;
A recording step of recording the encrypted content on a recording medium having identification information unique to the medium;
Using the identification information, and an inspection process for inspecting whether the medium may be permitted to be recorded ,
The identification information overlaps a part of the information recording area of the recording medium and is formed as a stripe pattern that is long in the radial direction,
Cipher recording method characterized by wherein, when the inspection process inspection is normal in, recording the encrypted the contents were in the recording medium.

Images