JP5277286B2 - Digital broadcast signal recording / reproducing apparatus, digital broadcast signal recording / reproducing method, digital information recording / reproducing apparatus, and digital information recording / reproducing method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a recording apparatus capable of protecting a copyright of a digital signal on a recording medium, and to provide a reproducing apparatus and a recording medium. <P>SOLUTION: In the digital signal recording apparatus and reproducing apparatus for recording or reproducing the digital signal on the recording medium, and a recording medium, when recording, a digital signal is encrypted with a key obtained by performing a predetermined arithmetic operation on key information and recorded in the recording medium together with the key information, and when reproducing, the reproduced digital signal is decrypted with the key obtained by performing the predetermined arithmetic operation on the key information reproduced from the recording medium, and output. <P>COPYRIGHT: (C)2012,JPO&amp;INPIT

Description

The present invention relates to a digital signal recording apparatus, a reproducing apparatus, and a recording medium for recording and reproducing a digital signal on a recording medium. And a recording medium.

In recent years, research on data compression such as video and audio using digital technology has progressed, and it has become possible to easily store and transmit these data. Along with this, digitization is rapidly progressing also in the field of broadcasting.

For example, a system is known in which analog video signals and audio signals are digitally compressed and encoded with high efficiency using the MPEG (Moving Picture Experts Group) standard and broadcast through satellites or coaxial cables. As a device for receiving this digital broadcast, there is a digital broadcast receiver called a set top box.

In addition, as a video / audio signal recording / reproducing device for home use, development of a digital VTR that uses a magnetic tape to record and reproduce digitally compressed video / audio signals such as digital TV broadcasts as digital signals. Is underway.

The digital broadcast receiver and the digital VTR are connected by a digital interface, and the received digital broadcast can be stored with high quality.

Furthermore, development of an apparatus for recording and reproducing video signals and audio signals using an optical disk or a hard disk is underway.

Japanese Patent Application Laid-Open No. 8-56350 describes a technique for selecting a desired program by receiving a digital signal transmitted by multiplexing a plurality of pieces of information. A digital VTR using a rotating magnetic head is described in, for example, Japanese Patent Laid-Open No. 5-17496.

Furthermore, regarding a digital broadcast recording system in which a digital broadcast receiver and a digital VTR are connected via a digital interface, the IEE Transactions
On Consumer Electronics, Vol. 42, No. 3, August 1996, 617-6
22 (IEEE Transactions on Consumer Electronics, Vol. 42, No. 3, August 1996, p61
7 ~ 622 「Newly Developed D-VHS Digital Tape Recording System for the Multimedia
Era ”).

JP-A-8-56350

IIE Transactions on Consumer Electronics, Vol. 42, No. 3, August 1996, pp. 617-622 (IEEE Transactions on Consumer Electronics, Vol. 42, No. 3, August 1996, p617-622 “Newly Developed D- VHS Digital Tape Recording System for the Multimedia Era ")

However, no consideration is given to the copyright protection of digital signals on a recording medium in which digital broadcasting or the like is recorded by a digital VTR or the like.

An object of the present invention is to protect the copyright of the de Ijitaru signal.

The above object can be achieved by, for example, the configuration described in the claims.

According to the present invention, it is possible to protect the copyright of the de Ijitaru signal.

In the embodiment of the present invention, it is a block diagram including a digital broadcast receiver and a digital signal recording / reproducing apparatus. It is a block diagram of the digital signal recording / reproducing apparatus 200 of FIG. It is a block diagram of the packet of a digital video compression signal. FIG. 4 is a configuration diagram of a packet header 306 in FIG. 3. It is a block diagram of the signal selected from the transmission signal and transmission signal of digital broadcasting It is a block diagram of the data encryption circuit 115 of FIG. It is a block diagram of the encryption device 1155 of FIG. FIG. 3 is a data key generation diagram in a control circuit 104 showing an example of generating a data key supplied to the data encryption circuit 115 and the data decryption circuit 116 of FIG. 2 is a diagram showing a recording pattern of one track of the tape 111. FIG. It is a block diagram of the data recording area 7 of FIG. It is a block diagram of the ID information 21 of FIG. FIG. 10 is a configuration diagram of data for one track in the data recording area 7 of FIG. 9. FIG. 13 is a block diagram of one packet block when a digital compressed video signal transmitted in a 188-byte packet format is recorded in data 41 of FIG. 12. It is a block diagram of the header 44 of the data recording area 7 of FIG. It is a block diagram of the pack data in the case of storing a block key in the area | region of the additional information 47 of FIG. It is a figure which shows the storage method of a block key. It is a figure which shows the other storage method of a block key. It is a specific block diagram of the time information 25 of FIG. FIG. 3 is a configuration diagram of a data decoding circuit 116 in FIG. 2. FIG. 3 is a configuration diagram of a digital recording / reproducing signal processing circuit 102 including a recording signal processing circuit 102a and a reproducing signal processing circuit 102b in FIG. It is a figure which shows the timing of the signal processing at the time of a data recording start. It is a figure which shows the key information on the tape 111 of FIG. It is a figure which shows the timing of the signal processing at the time of data reproduction. FIG. 6 is another configuration diagram of the digital signal recording / reproducing apparatus 200 of FIG. 1. It is a block diagram of the file recorded on the disc. It is a block diagram of one program area. It is a figure which shows the relationship between the intra-frame data and inter-frame data of a digital compression video signal. It is a block diagram of a digital compression video signal. It is a block diagram of a data sector. It is a block diagram to which an error correction code added when a data sector is recorded on a disk is added. 1 is a configuration diagram of a digital signal recording / reproducing apparatus using an optical disc as a recording medium. 6 is a diagram illustrating an example of generating a data key supplied to a data encryption circuit 709. FIG. It is a block diagram of the management data 633 of FIG. It is a figure which shows the method of storing the key information kr in a management data area. It is another block diagram of the digital signal recording / reproducing apparatus using an optical disk as a recording medium. It is a block diagram of the packet data stored in the user data 634 of the data sector of FIG. It is a block diagram of the time information when an encryption flag or the like is added to the time information described above.

  Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a block diagram including a digital broadcast receiver and a digital signal recording / reproducing apparatus. 20
0 is a digital signal recording / reproducing apparatus, 201 is a digital broadcast receiving apparatus, 202 is an antenna, and 207 is a receiver. Reference numeral 203 denotes a tuner, 204 denotes a selection circuit, 205 denotes a decoding circuit, 206 denotes an interface circuit, and 208 denotes a control circuit that controls the operation of the digital broadcast receiver 201. Here, although the digital broadcast receiver 201 and the digital signal recording / reproducing apparatus 200 are displayed as separate structures, they may be integrated.

FIG. 2 is a block diagram of the digital signal recording / reproducing apparatus 200 of FIG. FIG. 2 shows a recording / reproducing apparatus, but the same applies even when recording and reproduction are independent. 100 is a rotary head, 101
Is a capstan, 102a is a recording signal processing circuit for generating a recording signal at the time of recording, etc. 102
b is a reproduction signal processing circuit for demodulating a reproduction signal at the time of reproduction, 104 is a recording / reproduction mode control, for example, a control circuit such as a microprocessor, and 105 is a reference for rotation of the rotary head 100, etc. A timing generation circuit for generating a timing signal, 106 is a servo circuit for controlling the feed speed of the rotary head and tape, 107 is an input / output circuit for inputting a recording signal or outputting a reproduction signal, and 109 is a timing for recording. Timing control circuit, 1
10 is an oscillation circuit for generating a reference clock, 111 is a tape, 112 is a recording / reproducing circuit for analog video signals, 115 is a data encryption circuit for recording digital signals, 116 is a data decoding circuit for reproducing digital signals, and 117 is a digital signal A device key generator 118 that generates a device key that is a data key supplied to the data encryption circuit 115 or the data decryption circuit 116 when encrypting or decrypting information, and 118 is a data key for encrypting or decrypting digital information A block key generator 119 for generating a block key is an input / output control circuit that performs time stamp processing on packet data at the time of recording and output control of packet data at the time of reproduction.

The digital video compression signal is packet format data, and signals of a plurality of channels are time-division multiplexed and transmitted. In FIG. 1, a digital broadcast signal received by an antenna 202 is demodulated by a tuner 203, and then a necessary digital compressed video signal is selected by a selection circuit 204. The selected digital compressed video signal is decoded into a normal video signal by the decoding circuit 205 and output to the receiver 207. When processing such as scrambling is performed on the received signal, the selection circuit 204 cancels the processing and then performs decoding processing. When recording the received digital broadcast signal, the selection circuit 204 selects the digital compressed video signal to be recorded and information related thereto, and the interface circuit 20
6 is input to the digital signal recording apparatus 200 from the input / output terminal 108 of the digital signal recording / reproducing apparatus 200 and recorded. When the recorded digital broadcast signal is reproduced, the digital compressed video signal reproduced by the digital signal recording / reproducing apparatus 200 is output from the input / output terminal 108 to the interface circuit 206. The digital compressed video signal or the like input to the interface circuit 206 is processed by the selection circuit 204 and the decoding circuit 205 in the same manner as during normal reception, and is output to the receiver 207.

In FIG. 2 showing the configuration of the digital signal recording / reproducing apparatus 200 of FIG. 1, at the time of recording, part of the packet data input from the input / output terminal 108 is input to the control circuit 104 via the input / output circuit 107. The control circuit 104 detects the type of the packet data based on the information added to the packet data or the information sent separately from the packet data, determines the recording mode based on the detection result, and determines the recording signal processing circuit 102a and the servo. Circuit 10
6 operation mode is set. Next, the input / output circuit 107 outputs the packet data to be recorded to the data encryption circuit 115. In the data encryption circuit 115, the input packet data is encrypted by the data key generated in the control circuit 104 based on the keys generated by the device key generator 117 and the block key generator 118, and this is input / output Control circuit 119
Output to. The input / output control circuit 119 applies time stamps to the input packet data based on the time information from the timing generation circuit 105, and uses this to record the signal processing circuit 10.
Output to 2a. The recording signal processing circuit 102a generates recording data including an error correction code, ID information, subcode, block key information used for encryption, and the like in accordance with the recording mode determined by the control circuit 104. Is recorded on the tape 111 by the rotary head 100.

At the time of reproduction, reproduction operation is first performed in an arbitrary reproduction mode, and the reproduction signal processing circuit 102b performs I
D information is detected. Then, the control circuit 104 determines in which mode recording has been performed, and the operation mode of the reproduction signal processing circuit 102b and the servo circuit 106 is reset to perform reproduction. In the reproduction signal processing circuit 102b, synchronization signal detection, error detection correction, block key information and the like are obtained from the reproduction signal reproduced from the rotary head 100, and packet data is reproduced and output to the input / output control circuit 119. . The input / output control circuit 119 outputs to the data decoding circuit 116 packet data from which the time stamp has been removed based on the timing generated by the timing generation circuit 105. The data decryption circuit 116 decrypts the data key generated by the control circuit 104 based on the key generated by the device key generator 117 and the block key obtained by reproduction, and outputs the decrypted data to the input / output circuit 107. To do.

At the time of recording, the timing control circuit 109 controls the operation timing of the recording / reproducing apparatus based on the rate of the recording data input from the input / output terminal 108. At the time of reproduction, the operation is performed using the clock oscillated by the oscillation circuit 110 as the operation reference. .

FIG. 3 is a block diagram of a digital video compression signal packet. One packet is composed of a fixed length, for example, 188 bytes, and is composed of a 4-byte packet header 306 and 184-byte packet information 307. The digital compressed video signal is packet information 3
It is arranged in the area of 07. The packet header 307 includes information such as the type of packet information.

FIG. 4 is a configuration diagram of the packet header 306 of FIG. 501 is a synchronization byte indicating the head of the packet, 502 is an error display indicating whether there is an error, 503 is a unit start display indicating the start of the unit, 504 is a packet priority indicating the importance of the packet, 505 is a packet indicating the type of the packet ID 506 is a scramble control indicating the presence / absence of scramble, 507
Is an adaptation field control indicating presence / absence of additional information and presence / absence of packet information, 50
Reference numeral 8 denotes a cyclic counter that is counted up in units of packets.

FIG. 5 is a configuration diagram of a digital broadcast transmission signal and a signal selected from the transmission signals. 71
Is the packet of FIG. Usually, an audio signal, information on a program, and the like are added to the video signal, and a program of a plurality of channels is time-division multiplexed and transmitted.

FIG. 5A shows an example in which three-channel programs are multiplexed. V1, V2, and V3 are video signals of the respective channels, and A1, A2, and A3 are audio signal packets of the respective channels. Note that the video or audio may be composed of a plurality of video or audio in one channel. P0, P1, P2, and P3 are information relating to the program. Each packet is assigned a different packet ID 505, whereby the contents of the packet can be identified.

P0 is information relating to the entire transmission signal in FIG. 5A, and packets such as a program association table and program guide information for recognizing which packet ID is assigned to each program are time-division multiplexed. Is transmitted. P1, P2, and P3 are
This is information relating to each program, and a packet such as a program map table and scramble information for recognizing which packet ID is assigned to the video packet, audio packet, etc. of the channel is transmitted in a time division multiplexed manner. Usually, a fixed value, for example, 0 is assigned to the packet ID of the program association table.

When receiving, first recognize which packet ID is assigned to the program map table of the program you want to receive by the program association table, then,
It recognizes which packet ID is assigned to a video packet, an audio packet, etc. according to the program map table of the program to be received. Then, the video packet and the audio packet are extracted and the digital compressed data is decoded. At the same time, the program clock reference is extracted, thereby controlling the operation of the decoding circuit so that the decoding timing of the decoding circuit of the digital compressed data is synchronized with the timing at the time of encoding.

CR is program clock reference information for synchronizing at the time of decoding of digital compressed data.

Of course, the number of multiplexed channels may be other than 3 channels, for example, 4 channels,
Further, other information may be multiplexed.

FIG. 5B shows only the first channel information and related program information selected from FIG. 5A. When recording the first channel, this information is output from the digital broadcast receiver 201 to the recording / reproducing apparatus 200. Of course, information other than this may be recorded, and part of the packet information may be changed in order to facilitate processing during reproduction. For example, if the information in the program association table is changed to information only for the program to be recorded, channel selection becomes unnecessary during reproduction.

FIG. 6 is a block diagram of the data encryption circuit 115 of FIG. 1151 is a packet data input terminal, 1157 is a packet data output terminal, 1153a and 1153b are data key input terminals, 1
153c is a data key selection signal input terminal, 1153d is a processing mode selection signal input terminal,
Reference numerals 152 and 1156 denote block processing circuits, 1154 denotes a key schedule circuit, 1155 denotes an encryptor, 1158a and 1158b denote data key registers, and 1159 denotes a data key selector.
The data encryption circuit 115 encrypts and outputs in units of input packet data using a predetermined data key. At this time, the security of the packet data recorded on the tape can be improved by changing the data key at a certain time interval.

For example, the encryptor 1155 is a block composed of a plurality of bits so that even if an error such as a bit error occurs during transmission, the error does not affect subsequent data, that is, there is no error propagation. As described above, a block cipher that can realize cryptographic processing with a simple circuit configuration is used.

The packet data input from the input terminal 1151 is first received by the block processing circuit 1152.
Are divided into blocks P composed of a plurality of bits. For example, one block is 64 bits. Each block is sequentially encrypted by the encryptor 1155, and as a result, the block C is output. The block processing circuit 1156 then returns the block to the packet data format and outputs it to the output terminal 1157. Here, a data key, which is a key for encryption, is input from the control circuit 104 from the data key input terminals 1153a and 1153b and stored in the data key registers 1158a and 1158b. For example, the current data key is recorded in the data key register 1158a, and the data key to be switched next is recorded in the data key register 1158b.

The data key selection signal input terminal 1153c receives a signal indicating which data key of the data key registers 1158a and 1158b is selected from the control circuit 104, and the data key selector 1159 selects the selected data key. Is output. Here, for example, it is assumed that the data key of the key register 1158a is selected. The selected data key is converted into subkeys KA and KB in the schedule circuit 1154 and supplied to the encryptor 1155. For example, the data key length is 56 bits and the sub key length is 32 bits.
The upper 32 bits of the data key are assigned to KA, and the addition value of the upper 32 bits and the lower 32 bits of the data key is assigned to KB.

Here, when the data key is changed, the data key register 115 is sent from the control circuit 104.
A signal is input from the data key selection signal input terminal 1153c to output 8b. The data key selector controls to switch to the next packet data without switching the selection output until the encryption of all the blocks of one packet data is completed.

In addition, for example, there is a method of increasing the encryption strength by taking an exclusive OR of the output of the encryptor 1155 and the input of the encryptor 1155 and applying feedback in units of blocks.

FIG. 7 is a block diagram of the encryptor 1155 of FIG. In the figure, 551, 552, 553, 554
Is the encryption processing unit, Pa and Pb are the upper and lower bits of the input block data P, Ca and Cb
Is encrypted data, and KA and KB are subkeys. As shown in the figure, for example, an input 64-bit block P is separated into its upper 32 bits Pa and lower 32 bits Pb. The Pa and Pb are subjected to exclusive OR (5511), bit shift and addition operations (5512, 5513, 5515: A << p cyclically shift A to the left by p bits in the encryption processing unit 551. And the addition operation (5514, 5516) is performed, and the result is input to subsequent cryptographic processing units 552, 553, which perform the same processing as the cryptographic processing unit 551, and further to a cryptographic processing unit (not shown), and repeated in multiple stages. The computation is performed, and the encryption processing unit 554 at the final stage
The encrypted block C is obtained from the data Ca and Cb output by.

The data encryption circuit 115 in FIG. 2 and FIG. 7 has been described above. However, the data decryption circuit 116 in FIG. be able to. However, the calculation 5516 in FIG. 7 is a subtraction process. Also,
Of course, the sub keys KA and KB must use the same keys as those used for encryption.

In addition, when there is no need to protect the packet data to be recorded, for example, when the program to be recorded is allowed to be freely copied, the packet data may be recorded on the tape as it is without being encrypted. . This can be realized, for example, by switching the data encryption circuit 115 and the data decryption circuit 116 between the encryption / decryption function of the input packet and the function of passing through without doing anything. In the data encryption circuit 115 of FIGS. 2 and 6, the processing mode selection signal input via the processing mode selection signal input terminal 1153d of FIG.
Although the input X5 to the operation 5516 is fixed to zero, the block can be passed without performing encryption and decryption processing. According to this method, the operation can be switched while the passage delay time of the input packet is kept constant. Although not shown, as another method, as another method, the packet data input from the input terminal 1151 is not transmitted through the block processing circuit 1152, the encryptor 1155, and the block processing circuit 1156, but the output terminal 1157.
Or the packet data output from the block processing circuit 1156 is output to the output terminal 11
A switching circuit for switching whether to output to 57 is provided in the preceding stage of the output terminal 1157, and a processing mode selection signal input via the processing mode selection signal input terminal 1153d is input to the switching circuit and output from the block processing circuit 1156. Packet data or input terminal 1
There is also a method of switching the packet data input to 157. These methods are illustrated in FIG.
The data decoding circuit 116 in FIG. 19 can also be realized with the same configuration as described above.

FIG. 8 is a data key generation diagram in the control circuit 104 showing an example of generating a data key supplied to the data encryption circuit 115 and the data decryption circuit 116 of FIG. Device key generator 117
Stores, for example, 96-bit predetermined fixed key information. The block key generator 118 is a random number generator that generates a 96-bit random number by, for example, a command 1181 from the control circuit 104 of FIG. 120 is a 96-bit exclusive OR calculator; 121
Is a hash function calculator. In FIG. 8A, the block key and the device key are exclusive-ORed by the exclusive-OR calculator 120, hash-calculated by the hash function calculator 121, and selected from the results. 56 bits are supplied as a data key to the data encryption circuit 115 of FIG. The hash function is a function whose input data is difficult to guess from the output result, and the block key and device key that are secret information cannot be obtained from the data key.

Further, by generating the command 1181 from the control circuit 104 in FIG. 2 at a certain time interval and repeatedly generating the data key by the above-described calculation, the data key can be changed sequentially, and the data on the recording medium can be changed. It becomes possible to improve the safety of the machine. Next, the block key generator 11
The block key (Kr) generated in step 8 is sent to the recording signal processing circuit 102a shown in FIG.

At the time of reproduction, instead of the block key generated by the block key generator 118, using the block key (Kp) reproduced from the tape 111, the same operation as described above is performed to obtain a data key,
The data is supplied to the data decoding circuit 116 in FIG.

FIG. 8B shows an example in which the key information Kr recorded on the tape 111 is obtained by performing an exclusive OR operation on the block key with the device key. In this case, the block key itself is input to the hash function calculator. At the time of reproduction, the same operation as described above is performed using Kp reproduced from the tape 111 instead of the block key in FIG. 8A, and a data key is obtained and supplied to the data decryption circuit 116.

Next, a recording method on the tape will be described.

FIG. 9 shows a recording pattern for one track. 3 is a subcode recording area for recording subcodes such as time information and program information, 7 is a data recording area for recording a digital compressed video signal, 2 and 6 are preambles of the respective recording areas, and 4 and 8 are respective recordings. An area postamble, 5 is a gap between the respective recording areas, and 1 and 9 are margins at the track end. Thus, by providing a postamble, a preamble, and a gap in each recording area, each area can be dubbed independently. of course,
A digital signal other than the digital compressed video signal may be recorded in the recording area 7. The data recording area 7 is composed of a plurality of blocks (different from the above-described blocks that are small units of encryption).

FIG. 10 is a block diagram of the data recording area 7 of FIG. 20 is a synchronization signal, 21 is ID information, 22 is data, and 23 is a parity for first error detection and correction (C1 parity).
It is. For example, the synchronization signal 20 is 2 bytes, the ID information 21 is 3 bytes, and the data 22 is 99 bytes.
The byte and parity 23 are composed of 8 bytes, and one block is composed of 112 bytes.

FIG. 11 is a configuration diagram of the ID information 21 of FIG. 31 is a group number, 32 is a track address, 33 is a block address in one track, and 35 is a parity for detecting an error in the group number 31, track address 32 and block address 33. The block address 33 is an address for identifying a block in each recording area. For example, in the data recording area 7 of FIG. The track address 32 is an address for identifying a track. For example, the address can be changed in units of one track or two tracks to identify n tracks. For example, by setting 0 to 5 or 0 to 2, 6 tracks can be identified. The group number 31 in FIG.
96 tracks can be identified by changing the value in units of 6 tracks identified by the track address 32 to 0-15. If the track address 32 is synchronized with the period of a second error correction code to be described later, the process at the time of recording and the identification at the time of reproduction can be facilitated.

FIG. 12 is a block diagram of data for one track in the data recording area 7 of FIG. In addition, FIG.
The synchronization signal 20 and ID information 21 shown in 0 are omitted. The data recording area 7 is composed of, for example, 336 blocks. Data 41 is stored in the first 306 blocks, and the next 30 blocks.
A second error correction code (C2 parity) 43 is recorded in the block. C2 parity 43 is
It is composed of n tracks, for example, 6 tracks. When viewed in units of 6 tracks, the data is 306 blocks × 6 tracks of data, and the data is divided into 18 and 10 blocks of C2 parity are added to each of the 102 blocks. For example, a Reed-Solomon code may be used as the error correction code. Each block of 99 bytes of data is composed of a 3-byte header 44 and 96-byte data 41.

FIG. 13 shows a digital compressed video signal transmitted in a 188-byte packet format.
2 is a configuration example of a block of one packet at the time of recording in the second data 41. FIG. In this case, 4
Byte time information 25 is added to form 192 bytes, and one packet is recorded in two blocks. The time information 25 is information on the transmission time of the packet. That is, the time when the beginning of the packet is transmitted or the interval between packets is counted with the reference clock, the count value is recorded together with the packet data, and the interval between packets is set based on the information at the time of reproduction. By doing so, data can be output in the same form as when it was transmitted.

FIG. 14 is a configuration diagram of the header 44 of the data recording area 7 of FIG. The header 44 includes format information 45, block information 46, and additional information 47. In the format information 45 and the block information 46, various recording information relating to recording is recorded, and in the additional information 47, other auxiliary information is recorded.

The format information 45 is information related to the recording format, and stores recording mode (standard speed mode and other identification), type of packet data to be handled, copy restriction information indicating whether or not the recorded packet data can be copied, and the like. A plurality of blocks constitute one piece of information. For example, 12 bytes of 12 blocks constitute one piece of information. And
By repeatedly recording this information multiple times, the detection capability during reproduction is improved. Here, it is possible to record the above-described key information and the like.

The block information 46 is information for identifying the type of data recorded in the data recording area 41. Here, the presence / absence and type of high-speed variable-speed playback data (which speed corresponds to high-speed variable-speed playback data), etc. are recorded. It is also possible to record the above key information and the like here.

The additional information 47 includes, for example, pack data that is one piece of information with 6 bytes of 6 blocks, and the first 1 byte is an item code indicating the type of information, and the remaining 5 bytes are data. It is possible to record various types of data. For example, key information such as the block key described above, information such as recording time, type of recording signal, and the like can be recorded here.

FIG. 15 is a configuration diagram of pack data when a block key is stored in the area of additional information 47 in FIG.

In the first byte of the pack data, an item information code indicating that the subsequent information is key information is stored.

Information (key sequence number, key attribute, key flag) indicating the type of the stored key is recorded in the second byte. As described above, since the security of data on the recording medium can be improved by sequentially changing the block key at a certain time interval, for example, the block key stored in this pack is the current Key attribute information indicating whether the block key is used for encrypting packet data or the block key to be used next is recorded. In addition, the switching timing is recorded with a key flag that is reversed every time the block key is updated. This information facilitates key switching during playback. The key sequence number stores information indicating that there is a subsequent pack when the block key cannot be stored in one pack. For example, the block key is 9
In the case of 6 bits, it is divided into three packs and stored, and each key sequence number is 2
1 and 0 are stored, and 0 indicates the final pack. Another method is to store the size of the entire data and know the remaining size.

The block key is stored in the 3rd to 6th bytes.

In the example of FIG. 8B described above, the key information Kr is stored instead of the block key.

FIG. 16 shows a block key storage method. In this example, only the current key information is recorded in the pack data of each track. Therefore, the key attribute described above is fixed information that only indicates the current key, and need not be recorded. (1) in the figure shows a state in which the 96-bit current block key A (A0 to A11) is divided and stored in three packs. Normally, these packs are recorded a plurality of times per track in order to improve data reliability. For example, by recording three packs in the first, middle, and last areas of the track (a total of nine packs), it is possible to reduce the influence of missing bursts in the reproduction signal due to clogging of the magnetic head. The three packs do not necessarily have to be recorded as a continuous pack. By inserting packs storing other information between the packs, the packs storing the key information can be distributed and recorded. In addition, the key information itself can be protected, and the reliability is further improved. FIG. 2B shows pack data recorded on the track whose block key is switched to B. In this case, the key flag of the block key B is inverted.

FIG. 17 is a diagram showing another method of storing the block key. FIG. 17 shows the current key information,
In this method, key information to be used next is also generated and recorded in advance. Here, the key attribute information is “0” for the block key used for encryption of the current packet data, and “1” for the block key to be used next. The key flag that is inverted every time the block key is updated repeats “0” and “1” alternately.

(1) in the figure shows a state in which the 96-bit current block key A is stored. (2) stores the next block key B. These (1) and (2) are recorded in the additional information area of the block in the same track. (3) is pack data recorded on a track whose block key is switched to B. In this case, the block key B is the current key of the key attribute information “0”, and the key flag is also inverted. Further, (4) stores a key C to be used next. (3) and (4) are recorded on the track as pack data in the same track.

In addition to storing the key flag indicating the update timing of the block key in the pack of the additional information 47, there is a method of storing it in the format information 45 or the block information 46 shown in FIG.

As described above, the key information is recorded on the tape, but the timing for switching the block key is the break of the n tracks (6 tracks in this embodiment), which is the unit for adding the C2 parity. Thus, C2 parity can be calculated during reproduction, and the data reliability of key information is improved.

In the above example, information indicating the timing at which the block key is updated is recorded as a key flag. However, in the recording signal processing circuit 102a in FIG. 2, the track address 32 or group number 31 shown in FIG. By synchronizing the value with the C2 parity calculation cycle and the update timing, the update timing of the key information at the time of reproduction can be determined by the value of the track address 32 or the group number 31 without particularly recording the key flag. It is also possible to detect. For example, in the recording signal processing circuit 102a of FIG. 2, the track address 32 repeats a value from 0 to 5 for each track, and six tracks having the values 0 to 5 are added to the above-described unit for adding the C2 parity. And Then, at the timing when the value changes from 5 to 0, the data encryption circuit 115 updates and records the block key. During reproduction, the reproduction signal processing circuit 102b in FIG. 2 detects the timing when the value of the track address 32 changes from 5 to 0, and the data decryption circuit 116 updates the key. Further, when updating with a longer cycle, for example, when the value of the track address 32 is changed from 5 to 0 using the group number 31, the group number 31 is incremented by 1 and the values of 0 to 15 are repeated. By doing so, it becomes possible to detect the update timing of the unit of 96 tracks and the break of the unit of addition of C2 parity.

FIG. 18 is a specific configuration example of the time information 25 (4 bytes = 32 bits) in FIG. 13, and shows another method of storing the key flag and the encryption flag. Here, for example, time information 25
1 is 22-bit information, 252 is the aforementioned key flag (1 bit), and 253 is an encryption flag (1 bit) indicating whether or not the subsequent packet data is encrypted. At the time of recording, the input / output control circuit 119 in FIG. 2 performs time information 251 that is a time stamp.
In addition, for example, “1” is stored in the encryption flag 253 when the subsequent packet data is encrypted, “0” is stored when it is not encrypted, and the key flag 252 stores
The key flag of the pack data that stores the key information corresponding to the subsequent packet data is stored. During reproduction, the input / output control circuit 119 in FIG.
5 is output to the data decryption circuit 116, and the encryption flag 253 and the key flag 252 are supplied to the data decryption circuit 116 to control the operation of the data decryption circuit 116.

FIG. 19 is a block diagram of the data decoding circuit 116 of FIG. 1161 is a packet data input terminal, 1167 is a packet data output terminal, 1163a and 1163b are data key input terminals, 1163c is a data key selection signal input terminal, 1163d is a processing mode selection signal input terminal, and 1162 and 1166 are block processing circuits, 1164 is a key schedule circuit, 1165 is a decoder, 1168a and 1168b are data key registers, and 1169 is a data key selector. The data decryption circuit 116 decrypts and outputs in units of input packet data using a predetermined data key.

The decryptor 1165 uses a block cipher that realizes a decryption process in units of blocks composed of a plurality of bits.

The packet data input from the input terminal 1161 is similar to the data encryption circuit 115,
The block C is divided into a plurality of bits and each block is sequentially decoded by the decoder 1165. As a result, the block P is output, and the block processing circuit 1166 returns the packet data to the output terminal 1167. . Here, a data key, which is a key for decryption, is input from the control circuit 104 through the data key input terminals 1163a and 1163b and stored in the data key registers 1168a and 1168b. For example, the current data key is recorded in the data key register 1168a, and the data key to be switched next is recorded in the data key register 1168b.

Also, the encryption flag 253 detected from the input / output control circuit 109 is input from the processing mode selection signal input terminal 1163d, and it is determined whether the decryptor 1165 is in a decryption operation mode or a mode in which nothing is passed. Further, from the data key selection signal input terminal 1163c,
The key flag 252 detected from the input / output control circuit 109 is input, and the data key selector 116 is input.
9 is used to output the selected data key. The selected data key is converted into subkeys KA and KB in the schedule circuit 1164 and supplied to the encryptor 1165.

Here, when the encryption flag or key flag detected by the input / output control circuit 119 in FIG. 2 changes, the operation mode and data key of the data decoder 116 are selected in conjunction with the change.

As described above, by adding an encryption flag and a key flag to each packet data, it is possible to realize the presence / absence of encryption, determination of key information, and decryption processing in units of packet data.

In addition, as the storage location of the encryption flag indicating whether or not it is encrypted, a method of storing the second byte of the pack storing the key information shown in FIG. 15, or the format information 45 shown in FIG. There is also a method of storing in the block information 46.

By storing the encryption flag in the format information 45 or the block information 46 etc.
For example, when the encryption flag indicates “1”, that is, when the packet data is encrypted, the operation of the data decryption circuit 116 is set as the decryption operation, and the key stored in the additional information 47 is stored in the key. When the information is acquired and the encryption flag is “0”, the operation of the data decryption circuit 116 is output as it is without being decrypted, so that the control operation when the packet data is not encrypted is Simplification can be achieved. In the method of storing the encryption flag in the pack for storing the key information, when the encryption flag is “0”, that is, the packet data is not encrypted, the block key information after the third byte of the pack is stored. Not.

In addition, it is also possible to determine whether or not encryption is performed based on the presence or absence of a pack that stores key information without using an encryption flag.

FIG. 20 is a block diagram of the digital recording / reproducing signal processing circuit 102 including the recording signal processing circuit 102a and the reproducing signal processing circuit 102b of FIG. 400 is a memory circuit, 401 is a memory control circuit that generates an address for controlling the memory circuit 400 in accordance with the control circuit 104 of FIG. 2, 402 is a C2 parity operation circuit, 403 is a C1 parity operation circuit, and 404 is from the control circuit 104. According to the setting content, ID information at the time of recording, subcode generation, format information, block information, addition of additional information such as key information, and ID information at the time of reproduction, subcode,
An additional information processing circuit for acquiring additional information such as format information, block information, and key information, and a modulation / demodulation circuit 405 for performing modulation processing during recording and demodulation processing during reproduction. In this embodiment, as an example, since 6 tracks of data are required to perform C2 parity calculation, it is assumed that the memory circuit 400 has a capacity for storing data of at least 6 tracks.

At the time of recording, the recording state is set by the control circuit 104 in FIG. 2 via the terminals 411 and 413. The packet data encrypted by the data encryption circuit 115 in FIG. 2 is input from the terminal 410 and stored in the memory circuit 400 in accordance with a control signal from the memory control circuit 401. C2
After the data necessary for the parity operation is accumulated, it is sequentially read from the memory circuit 400, and C
The data is input to the 2-parity operation circuit 402 and a predetermined operation is performed. The calculation result obtained by the C2 parity calculation circuit 402 is stored in the memory circuit 400. On the other hand, according to the setting from the control circuit 104 in FIG. 2 via the terminal 413, the additional information processing circuit 404 generates pack data such as key information corresponding to the key of the input encrypted packet data, and the memory circuit 400
Accumulated in. Further, the data read from the memory circuit 400 including the key information and the like so as to constitute the recording block is added with the C1 parity by the C1 parity calculation circuit 403 and is input to the modulation / demodulation circuit 405. A signal modulated by the modulation / demodulation circuit 405 is output via the terminal 414 and recorded on the tape 111 via the recording / reproducing amplifier 116 and the rotary head 100 shown in FIG.

FIG. 21 is a diagram showing signal processing timing at the start of data recording. FIG.
) Is the packet data input from the data encryption circuit 115, FIG. 21B is the data key that the data encryption circuit 115 used for encryption, and FIG. 21C is the C2 parity 4 described above.
FIG. 21D shows a C2 parity calculation cycle (6 tracks in this embodiment) in the C2 parity calculation circuit 402 of FIG.
A recording signal to be recorded on the tape 111 is shown. In the embodiment of FIG. 21, the block key A is generated in advance before the time t 1 when the recording start is set, and the data key Ka is calculated and supplied to the data encryption circuit 115. Further, before the time t1 at which the recording start is set, the recording signal processing circuit 102a performs control so that the recording signal processing is performed by regarding that there is no packet regardless of the input signal. As a result, even if the recording start is set at time t0, the C2 parity can be calculated for the data in the period p0.

The control circuit 104 in FIG. 2 completes the C2 parity calculation cycle s0 of the input data when recording is started at time t0, and n tracks (six tracks in this embodiment) constituting the second error correction code. Control is performed so that a recording signal is output from the head of the recording (FIG. 21D). The data key is updated in this C2 parity calculation cycle. For example, the block key B is generated before the time t2, the data key Kb is calculated and supplied to the data encryption circuit 115,
At time t2, the data encryption circuit 115 switches the data key to Kb. Normal,
The data encryption circuit 115 causes a delay time from input to output of packet data due to the processing. Therefore, the data key supplied to the data encryption circuit 115 is switched to Kb at a time before the data delay time generated by the data encryption circuit 115 encrypting the packet from time t2. Alternatively, the packet data whose data key has been switched may be postponed to the processing of the next calculation cycle. In this embodiment, extra data is recorded at the beginning, but C2 parity is added to the signal to be recorded and recording can be performed in units of the C2 parity calculation cycle, regardless of the timing of the time t1 for starting recording. . Also,
At the time of reproduction, since the extra data portion at the head is recorded as if there is no packet, it is only used for C2 parity calculation and is not output.

At the end of recording, the recording / reproducing signal processing circuit 102a performs a recording operation on the tape 111 using a C2 parity calculation cycle (6 in this embodiment).
Control is performed by the control circuit 104 so that the track is completed. With this control method, C2 parity is added to all the recording data on the tape 111 regardless of the switching timing of recording start and recording end, the key information is updated in units of C2 parity calculation cycles, and packet data is encrypted. Therefore, at the time of reproduction, reproduction can be performed in units of C2 parity calculation cycles, and C2 parity calculation is possible, so that the data reliability of key information is also improved.

FIG. 22 is a diagram showing key information on the tape 111 of FIG. In the figure, 1111 to 111
Reference numeral 7 denotes a recording track shown in units of 6 tracks which is a C2 parity calculation cycle. In this figure, the recording tracks 1111 to 1113 are the block key A, the recording track 1
114 to 1116 store packet data encrypted based on the block key B, and pack data which is key information corresponding to the packet data. A recording track 1117 is a track recorded without being encrypted. As shown in this figure, the encrypted track,
Unencrypted tracks can be mixed on the same tape. The key information is updated, for example, every m × n tracks, such as 48 tracks and 96 tracks (m is an integer of 1 or more,
In the present embodiment, n is 6), or an entire program, etc., but the key changeover or the boundary between the encrypted track and the unencrypted track is the C2 parity calculation cycle (this In the embodiment, it is a break of 6 tracks).

The operation during recording has been described above. Here, the key information is stored in the subcode area (7 in FIG. 9).
), But the key information is stored in the header (44 in FIG. 12) of each block and recorded in the data storage area (7 in FIG. 9) on each track. It becomes difficult to rewrite only key information by post-recording. Accordingly, it is possible to prevent the key information from being lost, and there is an effect that it is impossible to intentionally perform cryptographic communication by intentionally falsifying only the key information.

  Next, a method for reproducing from a tape will be described.

In the digital recording / reproducing signal processing circuit 102 shown in FIG.
The playback state is set by the control circuit 104 of FIG. The tape 111
The reproduction signal reproduced by the rotary head 100 and inputted from the terminal 414 is converted into the modulation / demodulation circuit 4.
After being demodulated at 05, the C1 parity calculation circuit 403 performs C1 parity calculation to detect and correct the error, and the C1 parity calculation result is also stored in the memory circuit 400 together. After data necessary for C2 parity calculation is accumulated, it is sequentially read from the memory circuit 400 in accordance with a control signal from the memory control circuit 401 and input to the C2 parity calculation circuit 402. In the C2 parity calculation circuit 402, calculation is performed on the above data, and the error detection and correction data and the C2 parity calculation result are stored in the memory circuit 400 again.

Data is read from the memory circuit 400 in a predetermined order with reference to the timing signal input from the timing generation circuit 105 of FIG. 2 via the terminal 412, and the C1 parity, C2
With reference to the parity calculation result, only data with no error is output from the terminal 410 to the input / output control circuit 119 of FIG. On the other hand, the additional information processing circuit 404 acquires key information, subcodes, and the like from the data read from the memory circuit 400, and controls the control circuit 1 shown in FIG.
Send to 04. After that, Kp is extracted from the key information obtained by the operation shown in FIG. 8, ie, reproduction, exclusive OR with the device key from the device key generator 117, and the hash function 121 is calculated. A data key is obtained and output to the data decryption circuit 116 in FIG. This data key is the same as the data key used at the time of recording, and the data decryption circuit 1
16, the original packet data can be obtained correctly.

FIG. 23 is a diagram showing the timing of signal processing during data reproduction according to the present invention. FIG.
3 (a) is a reproduction signal reproduced from the tape 111 via the rotary head 100, and FIG.
) Shows the C2 parity calculation cycle (6 tracks in this embodiment), and FIG.
Indicates packet data output from the input / output control circuit 119, and FIG. 23 (d) indicates a data key supplied to the data decryption circuit 116 of FIG. In the additional information processing circuit 404, the key information KpC used in this cycle is detected in the calculation cycle s3. The data key Kc obtained by the above-described operation by this KpC is stored, for example, in the above-described data key register 1163a, and the data key selector 1169 is also selected so that the data key Kc of the data key register 1163a is output. ing.

Next, when it is detected in the operation cycle s4 that the key information KpD is used, the data key Kd is obtained in advance by the above-described operation, stored in the data key register 1163b, and at the timing of time t3. The data key selector 1169 is controlled to switch to the data key Kd of the data key register 1163b. By the above method, the reproduction operation while updating the data key can be performed.

In addition, when additional recording is performed on a tape that has already been recorded, by starting recording from the break of the additional unit of C2 parity, the data reliability of the key information of the track immediately before additional recording is not impaired. Connection recording is possible.

As another method for distinguishing whether packet data is encrypted, FIG.
Since the synchronization byte 501 indicated by is normally fixed data, for example, the reproduction signal processing circuit 1
In 02b, this synchronization byte is detected, and if it can be detected, the data decoding circuit 116 in FIG. 2 is switched to a function that passes the input packet data without doing anything. If it cannot be detected, FIG. By switching the data decryption circuit 116 to the decryption function operation and performing the operation of detecting the key information in the additional information area, the packet data was encrypted and recorded, and the track was recorded without being encrypted. Detection is possible even in the case of a tape mixed with tracks.

Also, a soft tape recorded in advance can be created and played back by the method described above, and the packet data on the tape can be protected.

Although the example in which the current block key is stored in the recording track has been described above, the calculation of the data key must be performed within one calculation cycle of C2. If the calculation of the data key is not in time within one calculation cycle of C2, as described above, the next data is recorded in advance by recording the current block key and the next block key in the recording track. You can ask for the key.

FIG. 24 is another configuration diagram of the digital signal recording / reproducing apparatus 200 of FIG. In the figure, 12
1 is a digital interface circuit that implements a protocol such as a high-speed digital bus interface such as IEEE1394, and has a function of transmitting data at high speed while maintaining a time interval of input packet data. It is a digital interface bus. Reference numeral 123 denotes an encryption / decryption circuit for protecting digital data transmitted on the digital interface 122. The encryption / decryption circuit encrypts the packet data and transmits it on the digital interface bus 122, or decrypts the received digital data. A control circuit 124 such as a microprocessor controls the digital interface circuit 121 and the encryption / decryption circuit 123.

At the time of recording, the encrypted digital data transmitted on the digital interface bus 122 is subjected to predetermined packet processing in the digital interface circuit 121, and is decrypted into the original packet data in the encryption / decryption circuit 123. Output circuit 1
Output to 07. Thereafter, as described above, the data encryption circuit 115 encrypts the packet data and records it on the tape 111. At the time of reproduction, the data decryption circuit 116 decrypts the reproduced packet data, outputs it from the input / output circuit 107 to the encryption / decryption circuit 123, encrypts it by the encryption / decryption circuit 123, and the digital interface circuit 1
21 to the digital interface bus 122. According to this, both the packet data on the tape and the packet data on the digital interface bus can be protected.

  Next, an embodiment using an optical disk will be described.

FIG. 25 is a configuration diagram of a file recorded on the disc. A lead-in area 601 stores various parameters. 602, 603,... Are a program 1 area, a program 2 area,..., And different programs are stored in each program area.

FIG. 26 is a configuration diagram of one program area, for example, the program 1 area. The program area is composed of a plurality of units, and each unit stores, for example, one sequence which is one unit of a digital compressed video signal described later.

FIG. 27 shows the relationship between intra-frame data compressed in units of frames of a digitally compressed video signal and inter-frame data in which only difference information is compressed using predictions from previous and subsequent frame data. Reference numeral 621 denotes an intra frame, and 622 denotes an inter frame. The digital compressed video signal has a predetermined number of frames, for example, 15 frames as one sequence, the head of which is an intra frame 621, and the remaining frames are inter frames 622 compressed using prediction from the intra frame 621. Of course, the intra frame 621 may be arranged in addition to the head.

FIG. 28 shows the configuration of a digital compressed video signal. 623 is a picture header added in frame units, and 624 is a sequence header added in sequence units. The sequence header 624 includes information such as a synchronization signal and a transmission rate. The picture header 623 includes a synchronization signal and identification information such as an intra frame or an inter frame. Usually, the length of each data changes with the amount of information. One sequence is stored in one unit.

Each unit shown in FIG. 26 is composed of a plurality of data sectors.

FIG. 29 is a configuration diagram of each data sector. 631 is ID information, 4 bytes, 632 is ID
Parity for error detection and correction of information 631 is 2 bytes, 633 is management data 6 bytes, 634 is user data 2048 bytes, 635 is user data 634 parity for error detection and correction 4 bytes . Of these, the user data 634 is shown in FIG.
The digital compressed video signal indicated by is divided and stored. In addition, the digital compressed audio compressed signal is also divided and stored in the user data 634. One unit described above is a collection of data sectors each storing a digital compressed video signal and an audio signal.

FIG. 30 is a block diagram in which an error correction code added when data sectors are recorded on a disk is added. First, the data sector is divided into 172 bytes, and a part of the parity 637 for the first error detection and correction of 10 bytes (part of the C1 parity parity 637) is added thereto. Further, n data sectors (for example, 16 in this embodiment) are collected, and this time 16 parity 636 (C2 for the second error detection / correction in 192 bytes in the row direction).
Parity 636) is added. A part of the C1 parity 637 of 10 bytes is also added to the obtained C2 parity 636.

FIG. 31 is a block diagram of a digital signal recording / reproducing apparatus using an optical disc as a recording medium. In the figure, 701 is an optical disc, 702 is an optical pickup, 703a is a recording signal processing circuit for generating a recording signal at the time of recording, 703b is a reproduction signal processing circuit for demodulating the reproduction signal at the time of reproduction, and 704 is a micro signal. A control circuit such as a processor, 705 is a spindle motor, 706 is a servo circuit for controlling the rotational speed of the optical disk 701 and the position and focus of the optical pickup 702, and 709 is a data encryption for recording a digital signal having the same configuration as in FIG. Circuit 710 is a data decoding circuit for reproducing a digital signal having the same configuration as in FIG.
A device key generator 71 for generating a device key as a data key to be supplied to the data encryption circuit 709 or the data decryption circuit 710 when encrypting or decrypting a digital signal; 71
2 is a disk key generator for generating a disk key, which is another source of data keys for encrypting or decrypting digital information, and 713 is another one for data keys for encrypting or decrypting digital information. A block key generator 719 for generating a block key
Is a digital interface circuit, and 720 is an input / output terminal.

At the time of recording, a digital signal such as a digital compressed video signal divided into the format of user data 634 in the data sector of FIG. 29 is input to the digital interface circuit 719 from the input / output terminal 720. The input digital signal is received by the data encryption circuit 709 using the data key generated in the control circuit 704 based on the keys generated by the device key generator 711, the disk key generator 712, and the block key generator 713. The input digital signal is encrypted and output to the recording signal processing circuit 703a. In the recording signal processing circuit 703a, the ID of FIG.
631, parity 632, management data 633, and parity 635 are added to form a data sector format. Next, in units of n data sectors (16 in this embodiment), C1 parity 637 and C2 parity 636 shown in FIG. 30 are added, and although not shown, a predetermined rearrangement, header is added, and modulation is performed. Processing is performed and recording is performed on the optical disc 701 via the optical pickup 702.

FIG. 32 shows an example of generating a data key supplied to the data encryption circuit 709. For example, these generations are performed in the control circuit 704 of FIG. The device key generator 711 stores, for example, 96-bit predetermined fixed key information. Disc key generator 71
2. The block key generator 713 is, for example, commanders 7121, 7 from the control circuit 704 in FIG.
A random number generator 131 generates a 96-bit random number. 721 and 722 are 96-bit exclusive OR calculators, and 723 is a hash function calculator. First, the block key is
The hash function calculator 723 performs a hash operation, and 56 bits of the result is
The data key is supplied to the data encryption circuit 709 in FIG. Also, the 96-bit block key is exclusive ORed with the 96-bit disk key by the exclusive OR calculator 722 (hereinafter referred to as key information Kr) and sent to the recording signal processing circuit 703a in FIG. , Optical disc 7
01 is recorded. Further, the exclusive OR of the disk key and the device key is calculated by the exclusive OR calculator 721 (hereinafter referred to as key information kd), and is sent to the recording signal processing circuit 703a in FIG. , Recorded on the optical disc 701.

Here, the command key 7131 from the control circuit 704 in FIG. 31 is generated at a certain time interval, and the data key is repeatedly generated by the above-described calculation, so that the data key can be changed sequentially, and on the optical disc. It becomes possible to increase the safety of data. Commander 71
21 is generated once in one recording operation, for example. Alternatively, when the first recording is performed on the blank optical disk, the kd is generated and recorded once. From the next recording operation, the key information kd on the optical disk is once reproduced, and the exclusive OR of the device key and the device key is performed. There is also a method of obtaining key information kr by performing exclusive OR with a block key using a disk key obtained by taking the above. Further, there is a method in which the key information kd is recorded in advance during the manufacturing process of the optical disc without using the disc key generator 712, and the kd is reproduced before the recording operation to obtain the disc key. The key information kd is recorded, for example, in the lead-in area 601 in FIG.

When reproducing, first, the key information kd is reproduced, the key information kd and the device key are XORed to obtain a disk key, and the reproduced key information kr and the obtained disk key are obtained. A block key is obtained by taking an exclusive OR, and a data key to be input to the data decryption circuit 710 in FIG. 31 is obtained by performing an operation of the hash function 723.

In FIG. 31, at the time of reproduction, the reproduction signal reproduced from the optical pickup 702 is input to the reproduction signal processing circuit 703b, where the reproduction signal processing circuit 703b performs demodulation, error detection correction, and user data 634 in FIG. A digital signal of the form is output to the data decoding circuit 710. The reproduction signal processing circuit 703b also reproduces the disk key and block key information and sends them to the control circuit 704. The control circuit 704 performs the above-described data key reproduction operation and supplies it to the data decryption circuit 710. In the data decoding circuit 710, the digital signal from the reproduction signal processing circuit 703b is decoded and output from the input / output terminal 720 via the digital interface circuit 719.

If there is no need to protect the digital signal to be recorded, it may be recorded on the optical disc as it is without being encrypted.

FIG. 33 is a configuration diagram of the management data 633 of FIG. The management data 633 stores the key information kr described above. 6341 is an encryption flag indicating whether or not the user data of the data sector in which the management data 633 is stored is encrypted, and 6342 is a data validity flag indicating whether or not the key information stored in the management data is valid. , 6343 is a key sequence number indicating that there is subsequent management data when the key information kr cannot be stored in one management data 633, and 6344 is the key information kr.

FIG. 34 is a diagram showing a method for storing the key information kr in the area of the management data 633 in FIG. In this example, 16 data sectors (additional units of the C2 parity 636 in FIG.
The management information of data sector 0 to data sector 015) is stored as one unit, and the above-described 64-bit key information is stored. The 96-bit key information kr includes three pieces of management data, kr0 and kr1.
, Kr2 and stored. At this time, the encryption flag 6341 is “1” indicating that the data is encrypted, the data validity flag is “1” indicating that the data is valid, and the key sequence number 6343 is 2 in order of the three management data. 1 and 0 are stored, and 0 indicates the end of the division, and these are repeatedly stored in 16 pieces of management data, however, since the last management data is half-finished, the data valid flag is “0” indicating invalidity is stored.

As described above, the key information is recorded on the optical disc. At this time, the key information is updated in units of 16 or integral multiple data sectors. The key information can be updated every m × n data sectors, such as 64 data sectors, 128 data sectors (m is an integer of 1 or more, and n is 16 in this embodiment). The transition or the boundary between the presence or absence of encryption is a break of an additional unit of C2 parity (16 data sectors in this embodiment). As a result, C2 parity can be calculated during reproduction, and the data reliability of key information is improved.

Note that the recording signal processing circuit 703a and the reproduction signal processing circuit 703b perform the same operation as the operation of the digital recording / reproduction signal processing circuit 102 in FIG. However, the additional unit of C2 parity is n data sector units (16 data sectors in this embodiment).

FIG. 35 is another configuration diagram of a digital signal recording / reproducing apparatus using an optical disc as a recording medium. In this embodiment, a fixed-length packet of the digital video compression signal shown in FIG. 3 is recorded on and reproduced from the optical disc 701. In FIG. 35, reference numeral 717 denotes, for example, IEEE1
394 is a digital interface circuit for realizing a protocol such as a high-speed digital bus interface such as 394, while maintaining the time interval of input packet data
It has a function to transmit data at high speed. Reference numeral 718 denotes a digital interface bus. Reference numeral 715 denotes an encryption / decryption circuit for protecting digital data transmitted on the digital interface 718. The encryption / decryption circuit 715 encrypts packet data and transmits it to the digital interface bus 718 or decrypts received digital data. Reference numeral 716 denotes a control circuit such as a microprocessor, and a digital interface circuit 717.
The encryption / decryption circuit 715 is controlled. Reference numeral 707 denotes a sector conversion circuit that converts packet data into user data in a data sector, or extracts packet data from user data.
Reference numeral 8 denotes an input / output control circuit for performing time stamp processing on packet data during recording and output control of packet data during reproduction.

At the time of recording, the digital interface circuit 717 performs predetermined packet processing on the encrypted digital data transmitted over the digital interface bus 718, and the encryption / decryption circuit 715 decrypts the original packet data and inputs it. Output circuit 7
14 for output. Thereafter, the packet data is encrypted by the data encryption circuit 709, the time stamp is applied to the packet data input by the input / output control circuit 708, and the data is output to the sector conversion circuit 707. The sector conversion circuit 707 converts the input packet data into the above-described user data format of the data sector. The digital signal converted into the user data format is sent to the optical disc 7 via the recording signal processing circuit 703a and the optical pickup 702.
01 is recorded.

Therefore, on the optical disc 701, the key information is recorded in a predetermined area together with the digital signal encrypted with the key obtained by performing a predetermined calculation on the key information. The digital signal has a packet format of a predetermined length. Further, the key information is updated at a predetermined interval and recorded in a predetermined area. Furthermore, a converted digital signal converted with a plurality of types of keys and the key are recorded.

During reproduction, the sector conversion circuit 707 extracts the packet data from the reproduced user data via the optical pickup 702 and the recording signal processing circuit 703a, and the input / output control circuit 708 outputs the packet data based on the time stamp added at the time of recording. Packet data from which the timing is removed and the time stamp is removed is output. Further, in the data decryption circuit 710, the reproduced packet data is decrypted, output from the input / output circuit 714 to the encryption / decryption circuit 715, encrypted in the encryption / decryption circuit 715, and then transmitted from the digital interface circuit 717 to the digital interface bus. Output to 718.

FIG. 36 is a configuration diagram of packet data stored in the user data 634 of the data sector in FIG. 29 converted by the sector conversion circuit 707 in FIG. A plurality of fixed-length packets of digital video compression signals are stored. In the input / output control circuit 708 of FIG. 35, for example, 4-byte time information 642, 644,... Is added to each packet 643, 645,. When the data sector is 2048 bytes, 10 packets with time information added can be stored. Packets with time information added need not be stored continuously,
There may be an unused area in the middle. Further, by adding the packet header 641, it is possible to easily determine the packet break.

Also in the present embodiment, the timing of switching the key information described above or the boundary of the presence or absence of encryption shall be the break of n data sectors (16 data sectors in this embodiment), which is an additional unit of this C2 parity. Thus, the C2 parity can be calculated during reproduction, and the data reliability of the key information is improved.

37 is a configuration diagram of the time information 642, 644,... Encryption flag 651
Is a flag indicating whether or not the packet is encrypted, and the key flag is a flag indicating which key is encrypted when the packet is encrypted. For example,
By setting this flag to 2 bits and taking a value that increases by 1 every time the key is updated, 0, 1, 2, 3, etc., and storing the same flag in the management data of FIG. Each corresponding key can be specified. These flags may be stored in the packet header 641 described above. According to this method, it is possible to arbitrarily update the key for each packet.

In the above embodiment, the recording / reproducing on the magnetic tape and the optical disk has been described. However, the present invention can be similarly applied to the case of recording / reproducing on any other recording medium such as a magnetic disk or a semiconductor memory.

In the case of the semiconductor memory described above, switching of key information or whether or not to perform encryption may be performed, for example, at an address break which is one unit of recording in the semiconductor memory.

In this embodiment, the present invention is applied to a system that encrypts a digital signal with a key. However, the present invention is not limited to this embodiment, and can be applied to, for example, a system in which a digital signal is scrambled by a key code. That is, the present invention is applicable to at least any system in which a digital signal is processed so that it is converted from its original clear state.

7 ... Data recording area, 20 ... Synchronization signal, 21 ... ID information, 22 ... Data, 25 ... Time information, 31 ... Group number, 32 ... Track address, 33 ... Block address, 41 ... Video signal data, 44 ... Header, 45 ... format information, 46 ... block information, 47 ... additional information, 71 ... packet, 100 ... rotating head, 101 ... capstan, 102a ... recording signal processing circuit, 102b ... reproduction signal processing circuit, 104 ... control circuit, 105 ... Timing generation circuit 106 ... Servo circuit 107 ... Input / output circuit 109 ... Timing control circuit 110
DESCRIPTION OF SYMBOLS ... Oscillation circuit, 115 ... Data encryption circuit, 116 ... Data decryption circuit, 117 ... Device key generator, 118 ... Block key generator, 119 ... Input / output control circuit, 200 ... Digital signal recording / reproduction device, 201 ... Digital broadcast reception Machine, 203 ... tuner, 204 ... selection circuit, 2
05 ... Decryption circuit, 206 ... Interface circuit, 208 ... Control circuit, 1152 ... Block processing circuit, 1154 ... Key schedule circuit, 1155 ... Encryptor, 1158 ... Data key register, 1159 ... Data key selector, 1165 ... Decryptor, 400 ... Memory circuit 401
... Memory control circuit, 402 ... C2 parity operation circuit, 403 ... C1 parity operation circuit, 4
04 ... Additional information processing circuit, 405 ... Modulation / demodulation circuit, 551 ... Cryptographic processing unit. 701: Optical disk, 702: Optical pickup, 703a ... Recording signal processing circuit, 703b ... Reproduction signal processing circuit, 704 ... Control circuit, 705 ... Spindle motor, 706 ... Servo circuit, 707 ... Sector conversion circuit, 708 ... Input / output control circuit 709 ... Data encryption circuit, 710 ... Data decryption circuit, 711 ... Device key generator, 712 ... Disc key generator, 713 ... Block key generator, 719 ... Digital interface circuit.

Claims (4)

In a digital broadcast signal recording / reproducing apparatus for receiving a digital broadcast signal in which a plurality of digital compression-encoded and scrambled streams are time-division-multiplexed, recorded on a recording medium, and reproduced from the recording medium
Receiving means for receiving the digital broadcast signal;
Selecting means for selecting and descrambling a desired stream from the digital broadcast signal received by the receiving means;
Random number generating means for generating random numbers;
Key information generating means for generating at least one key information unique to the recording medium based on the random number;
An encryption key generation means for generating an encryption key by performing a predetermined operation from the key information;
An encryption means for encrypting the descrambled stream selected by the selection means based on the encryption key generated by the encryption key generation means;
Recording / reproducing means for recording the key information generated by the key information generating means and the stream encrypted by the encrypting means on the recording medium, and reproducing from the recording medium;
Decryption means for decrypting the encrypted stream reproduced by the recording / reproducing means based on the encryption key generated by the encryption key generating means from the key information reproduced by the recording / reproducing means;
A first output means for decompressing and outputting the stream selected and descrambled by the selection means, or the stream decoded by the decoding means;
A stream selected and descrambled by the selection means, or a second output means for outputting the stream decoded by the decoding means as a digital signal;
Control the random number generation means, the key information generation means, the encryption key generation means, the encryption means, the recording / reproduction means, the decryption means, the first output means, and the second output means. Control means,
The control state in the control means includes
When first recording a descrambled stream selected by the selection unit on an empty recording medium, a random number is generated by the random number generation unit, and key information based on the random number is generated by the key information generation unit, An encryption key is generated from the key information by the encryption key generation means, and the key information generated by the key information generation means based on the random number is recorded on the recording medium by the recording / reproducing means, and the random number Based on the encryption key generated by the encryption key generation unit from the key information generated by the key information generation unit based on the encryption, the stream is encrypted by the encryption unit, the encrypted stream A first control state for controlling the recording / reproducing means to record on the recording medium;
When recording a descrambled stream selected by the selection unit on a recording medium on which an encrypted stream has already been recorded, the recording medium reproduces the key information recorded on the recording medium. Based on the encryption key generated by the encryption key generation means from the reproduced key information, the encryption key generation means generates an encryption key from the reproduced key information, and A second control state in which a stream is encrypted by the encryption unit, and the encrypted stream is controlled to be recorded on the recording medium by the recording / reproducing unit;
When reproducing the recorded stream from the recording medium, the key information recorded on the recording medium is reproduced from the recording medium by the recording / reproducing means, and the encryption key generation is performed from the reproduced key information. An encryption key is generated by the means, and the stream reproduced by the recording / reproducing means is decrypted by the decrypting means on the basis of the encryption key generated by the encryption key generating means from the reproduced key information. The decrypted stream is decompressed from the first output means and output, or the decrypted stream is encrypted from the second output means with an encryption different from the encryption in the encryption means. A digital broadcast signal recording / reproducing apparatus, characterized in that there is a third control state in which control is performed so as to perform and output. In a digital broadcast signal recording / reproducing method for receiving a digital broadcast signal in which a plurality of digital compression-encoded and scrambled streams are time-division multiplexed, recorded on a recording medium, and reproduced from the recording medium,
Receiving the digital broadcast signal; and
A descrambling step of selecting and descrambling a desired stream from the received digital broadcast signal;
A recording / reproducing step of recording the selected and descrambled stream on the recording medium and reproducing the recorded stream from the recording medium;
An output step of outputting a stream descrambled by selection or a stream reproduced from the recording medium,
In the recording state in the recording / reproducing step,
When first recording a descrambled stream selected as an empty recording medium, a random number is generated, and at least one key information unique to the recording medium is generated based on the random number, Performing a predetermined calculation to generate an encryption key, encrypting the stream based on the encryption key, and recording the key information and the encrypted stream on the recording medium;
When recording a descrambled stream selected and recorded on the recording medium on which an encrypted stream has already been recorded, the key information recorded on the recording medium is reproduced from the recording medium, and the reproduced key There is a second recording state in which a predetermined calculation is performed from information to generate an encryption key, the stream is encrypted based on the encryption key, and the encrypted stream is recorded on the recording medium,
The playback state in the recording / playback step includes:
The key information recorded on the recording medium is reproduced from the recording medium, an encryption key is generated by performing a predetermined calculation from the reproduced key information, and the reproduced stream is based on the encryption key. There is a playback state to decrypt,
In the output state in the output step,
A first output state in which the stream descrambled by selection or the stream reproduced and decoded from the recording medium is output;
There is a second output state in which a stream descrambled by selection or a stream reproduced from the recording medium and decrypted is encrypted and output as a digital signal different from the encryption. A method for recording and reproducing digital broadcast signals. In a digital information recording / reproducing apparatus that receives digital information, records it on a recording medium, and reproduces it from the recording medium,
Receiving means for receiving the digital information;
Random number generating means for generating random numbers;
Key information generating means for generating at least one key information unique to the recording medium based on the random number;
An encryption key generation means for generating an encryption key by performing a predetermined operation from the key information;
Encrypting means for encrypting the digital information received by the receiving means based on the encryption key generated by the encryption key generating means;
Recording / reproducing means for recording the key information generated by the key information generating means and the digital information encrypted by the encryption means on the recording medium, and reproducing from the recording medium;
Decrypting means for decrypting the encrypted digital information reproduced by the recording / reproducing means based on the encryption key generated by the encryption key generating means from the key information reproduced by the recording / reproducing means; ,
First output means for decompressing and outputting the digital information received by the receiving means or the digital information decoded by the decoding means;
Digital information received by the receiving means, or second output means for outputting the digital information decoded by the decoding means as a digital signal;
Control the random number generation means, the key information generation means, the encryption key generation means, the encryption means, the recording / reproduction means, the decryption means, the first output means, and the second output means. Control means,
The control state in the control means includes
When the digital information received by the receiving unit is first recorded on an empty recording medium, the random number generating unit generates a random number, the key information generating unit generates key information based on the random number, and the encryption An encryption key is generated from the key information by a key generation unit, the key information generated by the key information generation unit based on the random number is recorded on the recording medium by the recording / reproducing unit, and based on the random number Based on the encryption key generated by the encryption key generation means from the key information generated by the key information generation means, the digital information is encrypted by the encryption means, and the encrypted digital information is A first control state for controlling the recording and reproducing means to record on the recording medium;
When recording the digital information received by the receiving means on a recording medium on which encrypted digital information has already been recorded, the key information recorded on the recording medium is reproduced from the recording medium by the recording / reproducing means. Then, an encryption key is generated from the reproduced key information by the encryption key generation unit, and the digital information is generated based on the encryption key generated by the encryption key generation unit from the reproduced key information. A second control state for controlling the encrypted digital information to be recorded on the recording medium by the recording / reproducing means;
When reproducing the recorded digital information from the recording medium, the key information recorded on the recording medium is reproduced from the recording medium by the recording / reproducing means, and the encryption key is reproduced from the reproduced key information. An encryption key is generated by the generation means, and the digital information reproduced by the recording / reproduction means is generated by the decryption means based on the encryption key generated by the encryption key generation means from the reproduced key information. Decrypting and outputting the decrypted digital information from the first output means, or encrypting the decrypted digital information from the second output means with the encryption means A digital information recording / reproducing apparatus, characterized in that there is a third control state in which control is performed so as to perform different encryption and output. In a digital information recording / reproducing method in a digital information recording / reproducing apparatus for receiving digital information, recording it on a recording medium, and reproducing it from the recording medium,
Receiving the digital information; and
A recording / reproducing step of recording the received digital information on the recording medium and reproducing the recorded digital information from the recording medium;
Output digital information received or output digital information reproduced from the recording medium,
In the recording state in the recording / reproducing step,
When the received digital information is first recorded on an empty recording medium, a random number is generated, and at least one key information unique to the recording medium is generated based on the random number, and a predetermined calculation is performed from the key information. To generate an encryption key, encrypt the digital information based on the encryption key, and record the key information and the encrypted digital information on the recording medium;
When recording the received digital information on a recording medium on which the encrypted digital information has already been recorded, the key information recorded on the recording medium is reproduced from the recording medium, and the predetermined key information is reproduced from the reproduced key information. There is a second recording state in which an encryption key is generated by performing the operation, the digital information is encrypted based on the encryption key, and the encrypted digital information is recorded on the recording medium,
The playback state in the recording / playback step includes:
The key information recorded on the recording medium is reproduced from the recording medium, an encryption key is generated by performing a predetermined calculation from the reproduced key information, and the reproduced digital information is based on the encryption key. There is a playback state to decrypt
In the output state in the output step,
A first output state in which received digital information or digital information reproduced and decoded from the recording medium is decompressed and output;
Digital information having a second output state in which received digital information or digital information reproduced and decoded from the recording medium is encrypted and output as a digital signal different from the encryption Recording and playback method.

Images