KR20080083463A - Recording medium, method of configuring control information and recording/playback and apparatus there of - Google Patents

Abstract

A recording medium, a method for forming control information, and a recording/reproducing method, and an apparatus thereof are provided to easily judge whether a security system exists in a recording medium or not by installing a security system flag on the recording medium. A recording medium comprises a management area having a medium data area where medium data of a corresponding recording medium is recorded and a security system area. The medium data includes data for a physical structure of the corresponding recording medium and a security system flag. The security system flag indicates whether the security system is placed on the recording medium or not.

Description

Recording medium, method of configuring control information and recording / playback and apparatus there of}

1 is a cross-sectional view schematically showing the structure of a recording medium according to an embodiment of the present invention.

2 is a schematic diagram illustrating in detail the PIC region and DI information according to an embodiment of the present invention.

3 is a schematic diagram showing the configuration of media information DI according to an embodiment of the present invention.

4 to 7 respectively show 'Security_flag' according to an embodiment of the present invention.

8 illustrates 'HRL_flag' according to an embodiment of the present invention.

9 is a schematic diagram illustrating in detail the PIC region and SI information according to an embodiment of the present invention.

10 is a block diagram showing a recording / playback apparatus according to an embodiment of the present invention.

Fig. 11 shows a data structure in data recorded on a recording medium according to the present invention.

12 is a flowchart illustrating a data reproduction process according to an embodiment of the present invention.

13 is a flowchart illustrating a process of determining whether a security system is provided with a security system according to an embodiment of the present invention.

14 is a block diagram illustrating a mutual relationship of drive host authentication according to an embodiment of the present invention.

15 is a flowchart illustrating a drive host authentication process according to an embodiment of the present invention.

* Explanation of symbols for main parts of the drawings

11: pickup section 12: second control section

13: signal processor 14: servo unit

15: memory 16: first control unit

17: AV decoder 18: AV encoder

20: recording and playback section 21: PIC area

25: DI area 26: DI fragment

28: SI area 100: recording medium

111: media key block (MKB) 115: encrypted content

200: Drive 211: Host Revocation List (HRL)

221: drive certificate 300: host

311: Drive Revocation List (DRL) 321: Host Certificate

331: Device key 351: Decryption module

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an efficient recording and reproducing of data on a recording medium. The present invention relates to a method and apparatus for efficiently accessing a recording medium provided with a security system, and a recording medium used therein.

As optical recording media, optical disks capable of recording large amounts of data are widely used. Recently, new high-density optical recording media capable of recording and storing high-quality video data and high-quality audio data for a long time have been developed. Along with this, there is a need to provide a security system for content that needs to be protected, such as high-definiton audiovisual contents. That is, if some or all of the content included in the optical recording medium corresponds to a work, unauthorized copying or distribution of the content through the optical recording medium may infringe the rights of the author, that is, copyright (copy right). Protection of that right is required. In addition, when a networking function is provided on an optical recording medium and a user exchanges information with a content provider (CP) on a network, a method for authenticating whether the content provider is a trusted real person is also required.

To this end, recently, a digital authentication method for performing authentication on the optical recording medium using a public-key infrastructure (PKI) has been widely used. Here, the digital authentication means that the authentication target proves identity or the authentication target has a legitimate right to access information on a recording medium or related services through the authentication process. ID information and electronic keys are used here. An authentication method using a public key infrastructure uses a public key that is public and can be used by anyone, and a private key that can be used only by one person because it is not disclosed as a pair corresponding to the public key.

For example, the authentication information of the authentication target for the optical recording medium is encrypted through an encryption algorithm using a private key of a trusted Certificate Authority (CA). The cipher text generated as a result is decrypted through a decryption algorithm using a public key of a trusted certification authority, and authenticates an authentication object using authentication information obtained as a result of the decryption.

In addition to the above methods, various authentication methods may be used, and although such various authentication methods have been gradually developed and used, there is a problem that a safe and efficient security system for a recording medium is not yet provided.

The present invention was made in view of the above circumstances, and an object of the present invention is to provide a safe and efficient security system for a recording medium.

Another object of the present invention is to provide a method for efficiently accessing a recording medium provided with the security system.

It is another object of the present invention to provide a method for efficiently determining and accessing whether a security system is provided with a recording medium, and to provide such a recording medium.

In order to achieve the above object, the recording medium of the present invention is a recording medium having a management area, and in the management area is provided a medium information area in which the media information of the recording medium is recorded, and the medium information corresponds to the corresponding recording medium. It contains data about the physical structure of the recording medium and a security system flag. Alternatively, the recording medium of the present invention is a recording medium having a management area, wherein the management area includes a medium information area and a security system area, and the medium information recorded in the medium information area has a physical structure of the recording medium. Includes data about and security system flags. Here, the security system flag may indicate whether a security system is provided in the recording medium. In this case, the security system flag may also indicate information about a method of the security system. The medium information area may be provided in a priority recording area of the recording medium, and the priority recording area may be configured to have a different physical structure from other areas of the recording medium. Here, the priority recording area is recorded when the recording medium is produced. The security system area may have security system information including a host revocation list.

In addition, when the recording medium of the present invention includes at least two recording layers, the management area of each recording layer includes media information, and the media information includes data and security system related to the physical structure of the recording medium. It may include a flag.

The control information configuration method of the present invention is a method of configuring control information for determining a recording medium equipped with a security system, wherein the control information is a medium having a minimum information and a security system flag for accessing the recording medium. Information data and security system information data.

A data recording method for a recording medium of the present invention records medium information in a management area of a recording medium, wherein the medium information includes a minimum information and a security system flag for accessing the recording medium. In this case, the medium information may be first recorded in the recording area when the recording medium is produced. The data recording method may further include recording security system information in the management area. The security system information may include a host revocation list distributed by a certification authority when the recording medium is produced.

The data reproducing method for the recording medium of the present invention reads out the medium information recorded in the management area of the recording medium, and determines whether the recording medium is a recording medium provided with a security system using the medium information. Here, the data reproduction method may determine whether the security system is a recording medium provided with the security system flag according to whether the security system flag is provided in the medium information. Alternatively, the data reproduction method may determine whether the security system is a recording medium provided with the security system flag included in the medium information. For example, the presence or absence of a security system may be determined according to whether the data of the system flag is 0 or 1.

The data recording and reproducing method of the present invention comprises the steps of: (a) reading out media information recorded in a management area of a recording medium, and (b) determining whether the recording medium is a recording medium provided with a security system by using the medium information. And (c) releasing the security of the recording medium provided with the security system, and (d) accessing data on the released recording medium. In the step (b), the presence or absence of a security system is determined based on a security system flag provided in the medium information. Step (c) performs a drive host authentication process. The drive host authentication process may include verifying mutual validity of a certificate and legitimate authority for accessing data. The method of recording and reproducing data may further include reading security system information of the recording medium to verify whether the host revocation list is the latest version. If the authentication process fails, the recording medium may further include informing a user that recording or reproducing is impossible.

DETAILED DESCRIPTION Hereinafter, specific embodiments of a recording medium, a method of configuring control information, a recording / reproducing method, and an apparatus according to the present invention will be described in detail with reference to the accompanying drawings.

In addition, the terminology used in the present invention was selected as a general term widely used as possible now, but in certain cases, the term is arbitrarily selected by the applicant, in which case the meaning is described in detail in the description of the invention, The present invention is to be understood as the meaning of terms rather than names.

In this regard, the term "recording medium" as used herein means any medium on which data is recorded or can be recorded. For example, an optical disk, a magnetic tape, or the like may include a medium capable of recording data regardless of a recording method. The "recording and reproducing apparatus" also refers to a device for recording data on a recording medium of various standards or reproducing data recorded on the recording medium. Examples include a drive that can be built in a host such as a computer, a dedicated device for recording or reproducing a recording medium, and the like. Here, the host may correspond to a device such as a PC or a program provided in the computer to record or reproduce data. In addition to the function of reproducing the data recorded on the recording medium, the recording and reproducing apparatus may also include a function of receiving an external input signal and processing the same by reproducing the signal.

The present invention relates to a recording medium provided with a security system and to recording and reproducing data for such a recording medium. In this regard, in the present specification, for convenience of description, a method of performing authentication on the optical recording medium using a public key infrastructure (PKI) is defined in the Advanced Access Content System (hereinafter referred to as 'AACS'). The method will be described as an example. In particular, as a case where mutual authentication is performed as defined in the AACS, a case where a drive and a host play data stored on a recording medium together will be described in detail. However, this is for convenience of explanation and the recording medium of the present invention to be described later is not limited to this embodiment.

First, an embodiment of a recording medium according to the present invention will be described in detail with reference to the drawings. FIG. 1 shows a schematic structure in one embodiment of a single layer recording medium with one recording layer.

On the inner circumference and the outer circumference of the recording medium, a lead-in area and a lead-out area are provided as management areas. In this case, the lead-in area first includes a pre-recorded area (area denoted by 'A'). The priority recording area A is an area that has already been recorded and produced at the time of manufacture of the recording medium and corresponds to an area which can no longer be recorded by the user or the system. Therefore, it is an area in which basic information necessary for recording or reproducing data on the recording medium can be stored. Recording media (e.g., Read-Only Format, ROM format) in which user data is pre-stored and released, or recording media that can be repeatedly recorded once or multiple times by the user (for example, recordable or rewritable, that is, R / RW format recording medium), in each case, the priority recording area A may be provided. In the ROM-type recording medium, data is recorded in all areas other than the above-mentioned priority recording area A when the recording medium is produced. In the recording medium of the R / RW format, only the recording area A is recorded when the recording medium is produced. do. The other area becomes a recordable area by the user or the system.

In addition, the priority recording area A can be configured to have a physical structure different from that of other areas as necessary. For example, first, the recording area A can be configured to have different track pitch sizes by increasing the track pitch and having a track pitch that conforms to the general standard of the other areas. Through this, the track pitch refers to the distance between the centerlines of two adjacent tracks in the radial direction of the recording medium. Through such a difference in physical structure, it is possible to more easily distinguish signals of data recorded in the priority recording area A. FIG.

A variety of information including general information about a recording medium can be recorded in the priority recording area A. In the present specification, the priority recording area is referred to as a permanent information & control data (PIC) area for convenience of description. do. These names may be different from each other according to the standard of the recording medium, which will be described later in detail. For reference, in the case of a recording medium having two or more recording layers, the inner circumference of the first recording layer may be a lead-in area, and the inner circumference of the second recording layer may be a lead-out area. In this case, the PIC area may be provided on the inner circumference of each recording layer.

The data area is provided with a user data area in which actual data of a user is recorded and spare areas ISA and OSA for replacing the defective area when a defective area is generated. Specifically, the spare area includes an inner spare area (ISA) of a recording medium inner periphery and an outer spare area (OSA) of a recording medium outer periphery. At this time, in the case of a recordable recording medium, only a drive can record and play back, and in a system requiring drive authentication, a host may select an area where data can be read from the protected area only through a drive authentication process. It is called a protected area by a security system.

Hereinafter, the lead-in area of the recording medium will be described in detail centering on the PIC area 21. The PIC area 21 is provided with Disc Information (DI) 25 and Security System Information 28 (SI). In this case, a disc information area in which each information is recorded and a security system information area may be separately allocated.

The medium information (DI) 25 is information about a recording medium which is essentially required for recording data on the recording medium or reproducing the recorded data. In other words, the media information DI may be referred to as "physical format information" according to the type of the recording medium as a kind of control information. In the present specification, for convenience of description, it will be referred to as DI, but the technical spirit of the present invention is not limited to the name. In addition, the security system information (SI) 28 is information that is essentially required before performing an authentication process or the like according to the security system in the recording medium provided with the security system. Details of the media information DI 25 and security system information SI 28 will be described in detail later.

In this case, a protection area adjacent to the PIC area may be provided to prevent data in the PIC area from being overwritten with other data. In addition, the lead-in area may include an info area (for example, INFO1 and INFO2 areas may be applicable), a reserved area, and the like. The info area is an area in which access restriction information, other information related to control, and the like are recorded. The reserved area is an area in which predetermined information can be allocated in the next specification, and all bits can be allocated as '0' (Zero).

Fig. 2 briefly shows the structure of the PIC region in this embodiment.

When the minimum recording unit of data in the recording medium is referred to as 'cluster', the PIC area includes 847 clusters to form a fragment as one upper recording unit, and a total of five fragments. Fragments gather to form a PIC region. At this time, 543 clusters may be gathered to form one fragment according to the recording medium, which may be defined differently according to the type and standard of the recording medium.

Here, the medium information DI, 21 is recorded in the head cluster of the first fragment IF0 of the PIC area, and the medium information DI is divided into a plurality of recording layers and the speed of the recording medium. The number of pieces of media information DI is composed of 26 bytes or 112 bytes. At this time, the media information consisting of the 26 bytes or 112 bytes is also called a media information frame (DI frame) 26. In this regard, the size of the medium information frame (DI frame) 26 is 26 bytes because the recording speed information and the recording related information (WS) are not required in the case of the ROM type recording medium. In this case, since the recording speed information and the recording related information should be included in the medium information DI, it can be composed of 112 bytes. It will be apparent that the numerical value indicating the specific size is only an example of the present invention, which may be variously adjusted in the future according to the size of information included in the medium information DI. In addition, by repeatedly recording the same medium information (DI, 21) in the head cluster of the remaining fragments, it is possible to cope with the loss of the medium information. In this case, the medium information DI, 21 is repeatedly recorded five times in the PIC area.

3 illustrates a specific embodiment of the media information frame (DI frame) 26. The media information frame (DI frame) 26 may include a 'Disc inforamtion identifier (hereinafter referred to as' DI') field, a 'DI Format Number' field, a 'disc type identifier' field, a 'Disc size / Class / Version' field, field indicating information on a recording medium, such as a disc strcture 'field. It also includes a 'Security_flag' field.

In this specification, the description will be given based on the 'Security_flag' field. The 'Security_flag' enables the recording and reproducing apparatus to determine or identify whether the recording / reproducing apparatus is provided with a protection device. A specific embodiment will be described below with reference to the accompanying drawings. In this regard, each embodiment will be described based on the differences between the parts except for the redundant description for convenience of description.

A first embodiment of 'Security_flag' will be described with reference to FIG. 4. 'Security_flag' may be allocated 1 byte as shown in FIG. 3. One bit (for example, the b0 bit) is allocated as an 'existence of security system'. If b0 is 0, this corresponds to a recording medium having no protection device set to 'not protected'. If b0 is 1, it corresponds to a recording medium that is not protected as 'protected'.

A second embodiment of the 'Security_flag' will be described with reference to FIG. 5. Here, one bit (for example, b0 bit) is allocated as an 'existence of security system' and the other bit (for example, b1 bit) is assigned as a 'type of security system'. If b0 is 0, this corresponds to a recording medium having no protection device set to 'not protected'. If b0 is 1, it corresponds to a recording medium that is not protected as 'protected'. In particular, when b0 is 1, b1 provides information on a protection scheme. That is, when b1 is 0, this indicates a case of being protected by the AACS scheme. When b1 is 1, the protection is performed by other methods.

A third embodiment of the 'Security_flag' will be described with reference to FIG. 6. In this embodiment, unlike the second embodiment, two bits (for example, b1 and b2 bits) are allocated to the 'type of security system'. Here, the two bits may be set to correspond to each protection scheme. That is, when b2b1 is 00, 01, 10, and 11, each of the protection schemes is set. In this embodiment, b2b1 is 00 to indicate that the recording medium is protected by the AACS scheme. If b1b1 is 01, 10, or 11, it can be reserved or assigned to indicate another protection method as necessary. The number of bits allocated to the 'type of security system' may be allocated two or more bits as necessary.

A fourth embodiment of the 'Security_flag' will be described with reference to FIG. 7. In the present embodiment, information indicating whether the protected data or the protected area corresponds to part or all of the recording medium may be included. That is, information indicating 'status of security system' is allocated. As a specific example, two bits (eg, b1 and b2 bits) are allocated as 'status of security system'. Here, if b1b0 is 00, this means that the recording medium has no data or area protected by 'there is no protection'. If 01, 'partial data protected' indicates that the recording medium is protected for a part of the user data. 10 indicates that the recording medium is protected to a part of the user data area. If 11, 'all of them protected' indicates that the recording medium is protected for the entire data or area.

According to another specific embodiment of the media information frame (DI frame) according to the present invention, 'HRL_flag' may be included instead of 'Security_flag' of the first embodiment. A specific embodiment of the 'HRL_flag' will be described with reference to FIG. 8. As shown, one bit (e.g., b0 beater) is assigned a 'existence of HRL'. This corresponds to information indicating whether a host revocation list (HRL, which will be described later in detail) is recorded on the recording medium. Here, if b0 is 0, 'there is no HRL' indicates that the host revocation list does not exist on the recording medium. In other words, this indicates that the recording medium is not protected by the AACS method described above. On the other hand, if b0 is 1, 'there is HRL' indicates that the host revocation list exists on the recording medium. In other words, this corresponds to the recording medium protected by the AACS method described above. Through this, it is possible to determine or identify whether the recording medium is protected by the AACS method only with the media information ID.

According to another specific embodiment of the media information frame (DI frame) according to the present invention, it may be determined whether the security system is provided according to the presence or absence of a security system flag such as 'HRL_flag' instead of 'Security_flag'. Specifically, for example, if all of the flag information is reserved (zero), it is determined that the security system is not provided in the corresponding recording medium. If data including 1 is recorded in the flag, it is determined that a security system is provided.

FIG. 5 shows a specific embodiment of the security system information (SI) 28 together with the structure of the PIC area in this embodiment. Here, the security system information (SI) 28 is recorded in the second cluster of the first fragment IF0 of the PIC area, and the security system information (SI) 28 is a recording layer that can be accepted by the recording medium. And a plurality of numbers per double speed. In this case, each of the security system information (SI) 28 may also be referred to as a security system information frame (SI frame, not shown). The security system information (SI) 28 includes a field for recording 'Type and Version' information and a field for recording a 'Host Revocation List (HLR)'. In addition, by repeatedly recording the security system information (SI) 28 having the same contents in the second cluster of the remaining fragments, it is possible to cope with the loss of the security system information (SI) 28. In this case, the security system information (SI) 28 is also repeatedly recorded five times in the PIC area. Here, the position of the cluster for recording the security system information (SI) 28 can be changed.

Fig. 10 shows an embodiment of a recording / playback apparatus according to the present invention. The recording / reproducing section 20 receives the signals read out from the pickup section 11 and the pickup section 11 for directly recording data on the recording medium or reading the data recorded on the recording medium and restoring the desired signal values. A signal processor 13 which modulates and transmits a signal to be recorded or modulated to a signal recorded on a recording medium, and a pickup unit for accurately reading out a signal from the recording medium or accurately recording a signal on the recording medium. (11) includes a servo 14 for controlling, a memory 15 for temporarily storing management information and data including defect management information, and a first controller 16 for controlling the components. do. In this connection, a recording / reproducing apparatus composed of only the recording / reproducing section 20 is also referred to as a “drive”.

When the pickup unit 11 records data on the recording medium or reproduces the recorded data, the pickup unit 11 records the control information of the recording medium in the management area under the control of the first control unit 16 and records the data using the control information. Record data on the medium or reproduce the recorded data. When the first controller 16 reads data from each of the data area and the system area, the first controller 16 adjusts the RF signal and the servo according to the physical characteristics of each area. . The first controller 16 determines whether the recording medium is equipped with a security system by using the medium information DI.

The second control unit 12 is responsible for the control of the entire component, and in particular, in connection with the present invention, for receiving a user command or the like through an interface with a user, recording for recording or reproducing data on a recording medium. Alternatively, the playback command is transmitted to the recording and playback section 20. Here, the device or program including the second control unit 12 and acting together with the recording and reproducing unit 20 as a recording and reproducing apparatus is called a "host." In addition, the drive and the host have information in each memory for performing a mutual authentication process. Details of the authentication process and related information will be described later.

The AV decoder 17 decodes the signal read out from the recording medium under the control of the second control unit 12, restores it to desired information, and provides the same to the user. The AV encoder 18 records a signal on the recording medium. Under the control of the second control unit 12, the input signal is converted into a signal having a specific format, for example, an MPEG2 transport stream, and provided to the signal processing unit 13.

In addition to the recording and reproducing apparatus, a display apparatus (not shown) for displaying a signal reproduced through the recording and reproducing unit 50 or providing information to the end user through the control unit 20 is further included.

Fig. 11 shows an embodiment of a file structure of data recorded on a recording medium provided with a security system.

In the recording medium according to an embodiment of the present invention, one or more BDMV directories 52 and a directory in which a certificate is stored are located under one root directory 51, for example, a CFRTIFICAES directory 57. In the BDMV directory 57, an index file ("index") 53 and an object file ("MovieObjet") 54 are stored as general file (parent file) information for ensuring interactivity with a user. Included and provided are directories such as a PLAYLIST directory 55, a CLIPINF directory 56, and the like, which have information about data recorded in the actual recording medium, information on how to reproduce them, and the like. In addition, at least one certificate may exist in the recording medium. In addition, the directory in which the certificate is stored, for example, the CFRTIFICATES directory 53 may exist in more than one place in various places of the recording medium. For example, in a recording medium provided with a security system as defined by AACS, an AACS directory 58 is provided under the CFRTIFICATES directory 53. Information related to the security system is stored in the AACS directory 58 in the file format of MKB_RO.inf 59 or the like. An authentication process is performed on the recording medium using the security system related information, and when the right authority is confirmed through this, the data recorded on the recording medium is reproduced.

Hereinafter, a method of protecting content provided to a user through a recording medium as specifically defined by AACS will be described in detail with reference to the accompanying drawings. Here, the content means the data that is provided by the author of the recording medium as the content constituting the title (Title). A replicator who is duly granted the right to copy the content (in this case, the creator of the recording medium may correspond to this) encrypts the content to be protected using one or more private keys. do. The private key used to encrypt the content is referred to as a title key. The producer of the recording medium also records the encryption rules, authentication information, certificates, and the like together with the encrypted contents in the corresponding recording medium 100. In this manner, the recording medium 100 provided with the security system can be manufactured. In the case of a system using a concatenated key, a key used to release the title key is called a media key. Therefore, the media key may be required to decrypt the encrypted content 115.

On the other hand, an authorized certification authority (for example, AACS LA may correspond to AACS) may provide a private device key 331 to a producer of a recording and reproducing apparatus that has been granted the right to host 300. Or a recording / reproducing apparatus such as the drive 200.

As shown in Fig. 12, when the recording medium is loaded (S1), the recording / reproducing apparatus determines whether the recording medium has the above security system (S2). If the recording / reproducing apparatus determines that the recording medium is a recording medium without a security system, the recording / reproducing apparatus can access the data of the recording medium without the need for the release of the security system. Through this, data of the recording medium can be reproduced (S5). However, if it is determined that the recording medium 100 provided with the security system, the authentication process for releasing the security system is performed by the following process (S3). Depending on whether the authentication process is completed (S4) is classified as follows. When the authentication process is completed (S4), data of the recording medium 100 provided with the security system may be reproduced through a display unit (not shown) provided in the recording / reproducing apparatus (S5). However, if the authentication process fails, the recording / reproducing apparatus cannot reproduce the data of the recording medium (S6).

The process of determining whether the recording / playback apparatus is a recording medium provided with a security system may be performed as shown in FIG. When the recording medium is loaded into the recording / reproducing apparatus (S10), it is judged whether or not it is accessible to the medium information (DI) area of the recording medium (S11). If the medium information DI is not known, the position and structure of the data recorded on the recording medium are not known, and thus the recording medium cannot be reproduced (S12). If it is determined that the medium information DI area is accessible, the medium information DI is read. The recording and reproducing apparatus determines whether 'Security_flag' or 'HRL_flag' exists in the medium information DI (S14). If 'Security_flag' or 'HRL_flag' does not exist in the medium information DI, the recording / reproducing apparatus determines that a security system is not provided in the recording medium (S15). On the other hand, if 'Security_flag' or 'HRL_flag' exists in the medium information DI, the recording / reproducing apparatus determines that a security system is provided in the recording medium (S16).

When a recording medium provided with a security system is loaded, a method of protecting content provided to a user through the recording medium as specifically defined by AACS will be described in detail with reference to FIGS. 14 and 15. In the recording and reproducing apparatus composed of the drive and the host which performs the drive authentication, the case where the security system is released by generating the above-described media key will be described in detail as an example.

The overall mutual relationship will be described with reference to the block diagram shown in FIG. When the recording medium 100 provided with the security system is loaded into the drive 200 in the same manner as in FIG. 13, the host 300 receives the medium key (not shown) through an authentication process between the drive 200 and the host 300. ) Through this, the decryption module 351 may decrypt the encrypted content 115 using the media key. Data on the recording medium 100 provided with the security system may be reproduced through a display unit (not shown) provided in the recording / reproducing apparatus.

Specifically, a case of releasing a security system by generating the above-described media key will be described in detail as an example. The host 300 uses the key information contained in the recording medium 100 received from the drive 200 and the device key 331 assigned to the host 300 to generate the medium key. As a specific example, the key information recorded on the recording medium 100 forms a media key block 11 (hereinafter referred to as MKB). Here, the media key block 11 (MKB) corresponds to a kind of data block used in a system using a concatenated key, and a device having an essential private key (here, the device key 33 corresponds to this) may be used as the medium. A general key (for example, the above-described media key) can be generated through the key block 111 (MKB). Such a media key block 111 (MKB) may be generated by a certification authority, provided to a replicator who is duly authorized by a content owner, and stored in the recording medium 100.

In addition, an authentication process such as a Drive Authentication Algorithm may be performed in the process of generating the media key as described above. That is, as defined by AACS, a drive-host authentication protocol is used for the host 300 to prove the integrity of data received from the drive 200. In this case, the drive 200 also checks the validity of the host 300. Specifically with reference to the drawings as follows.

Licensed Drives (200) have a Drive Certificate (22) and a Drive Private Key that contain information such as Drive ID and Drive Public Key. , Not shown). In addition, the licensed drive 200 includes a latest version of the Host Revocation List (HRL) 211 in a nonvolatile memory (not shown). Here, the 'host revocation list' refers to a list of revoked hosts that have been revoked by a certification authority for some reason. The host revocation list is composed of a 'host revocation list entry (HRL Entry)' containing host ID (Host_ID) information for each retired host, and needs to be updated when the host revocation list entry is added. That is, when the certification authority distributes the updated host revocation list, the drive 200 receives the updated host revocation list and stores the latest version of the host revocation list in the memory.

Referring to FIG. 15, a specific example of the authentication process in terms of the authorized drive 200 is as follows.

If it is determined that the recording medium provided with the security system is loaded into the drive according to the AACS regulations (S110), the drive authentication process is performed. In this case, the determination of step S110 is performed by the above-described process of FIG. 13, and includes 'existence security system' and / or 'type of security system' and 'status of security system' provided in 'Security_flag' or 'HRL_flag'. Judging from the information.

In order to perform the drive authentication process, the drive reads data from the security system information (SI) area of the corresponding recording medium (S111). As described above, the security system information SI includes a 'host revocation list HRL'. The drive checks whether the read host revocation list is more recent than the host revocation list stored in the drive (S112). For example, the read host revocation list includes a new host revocation list entry. If the stored host revocation list includes all the entries of the host revocation list read from the recording medium, it is determined that it is the latest version and proceeds to the next step. On the other hand, if the read host revocation list includes a new host revocation list entry, it is determined as the latest version of the revocation list. Accordingly, the drive replaces or updates the host revocation list of the memory with the host revocation list read from the recording medium (S113).

The drive uses the host certificate to check the validity of the host certificate and whether the host has legitimate authority to access the inserted recording medium. To this end, the drive receives a host certificate from the host (S114). In this case, the host certificate includes data such as a host ID, a host public key, and signature data, which are assigned a unique value for each host. The drive verifies the signature of the host certificate by using the public key of the certificate authority (S115). If the certificate is verified, the next step is performed. If the certificate fails, the drive determines that the host is not authorized and fails authentication. In addition, the drive may verify whether the host is revoked by determining whether the host ID is included in the host revocation list, that is, whether the host has the right to access the recording medium (S116). At this time, if the host ID is not included in the host revocation list, the process proceeds to the next step to perform the authentication process. However, if the host ID is included in the host revocation list and the host ID is determined to be revoked, the authentication process fails. When the validity and revocation of the host certificate is confirmed as described above, the drive generates a digital signature and transmits it to the host (S117). The signature is verified by the host, and if verification fails, the authentication process also fails.

Meanwhile, a licensed host 300 may include a host certificate including a host ID and a host public key, and a host private key (not shown). And the like. In addition, the licensed host 300 includes a latest version of the Drive Revocation List (DRL) 311 in a memory (not shown). Here, the drive revocation list is a list of revoked drives that have been revoked by a certification authority for some reason. In terms of the authorized host 300, the authentication process may be similar to the authentication process of the drive of FIG. 13. In other words, the host requests the drive certificate from the drive to confirm the validity and revocation of the drive certificate. The host then verifies the drive's certificate signature using the certificate authority's public key. The host then checks the drive revocation list to ensure that the drive ID has not been retired. If the authentication of the drive is successful as described above, the host also generates a digital signature and sends it to the drive, and the drive verifies the signature.

As described above, when the digital signature is verified in both the drive and the host, the drive and the host share a bus key. Specifically, a bus key is generated by the drive and the host, respectively, and the authentication process is completed when the generated bus key is the same. If the generated bus keys are different, the authentication process is interrupted and fails.

As mentioned above, preferred embodiments of the present invention are disclosed for purposes of illustration, and those skilled in the art can improve and change various other embodiments within the spirit and technical scope of the present invention disclosed in the appended claims below. , Replacement or addition would be possible.

The recording medium, the data recording and reproducing method and the apparatus according to the present invention described above have the following effects.

That is, another object of the present invention is to provide a method for efficiently accessing a recording medium provided with the security system.

Another object of the present invention is to provide a method for efficiently determining and accessing a recording medium provided with a security system and to provide such a recording medium.

Claims (36)

In a recording medium having a management area, A media information area in which the media information of the recording medium is recorded is provided in the management area. The medium information, And a security system flag and data relating to the physical structure of the recording medium. In a recording medium having a management area, A media information area and a security system area are provided in the management area. And the medium information recorded in the medium information area includes data on a physical structure of the recording medium and a security system flag. The method according to claim 1 or 2, wherein the security system flag, And whether a security system is provided in the recording medium. The method of claim 3, wherein the security system flag, And information on the manner of the security system together. The method according to claim 1 or 2, wherein the security system flag, Recording medium characterized in that one byte is allocated. The method of claim 5, wherein the security system flag, A recording medium characterized by one bit being assigned to an 'existence of security system'. The method of claim 5, wherein the security system flag, A recording medium, characterized in that one bit is assigned a 'existence of security system' and the other bit is assigned a 'type of security system'. The method of claim 5, wherein the security system flag, Wherein one bit is assigned to an 'existence of security system' and at least two bits are assigned to a 'type of security system'. The method of claim 5, wherein the security system flag, At least one bit is assigned to a 'status of security system'. The method of claim 5, wherein the security system flag, At least one bit is assigned to an 'existence of HRL'. The method of claim 1 or 2, wherein the medium information area, And a recording medium provided in the priority recording area of the recording medium. The method of claim 11, wherein the priority recording area is, And a physical structure different from other areas of the recording medium. The method of claim 11, wherein the priority recording area is, And is recorded when the recording medium is produced. The method of claim 2, wherein the security system area, And security system information including a host revocation list. A recording medium having at least two recording layers, A management area of each said recording layer includes medium information, said medium information including data concerning a physical structure of said recording medium and a security system flag. The method of claim 15, wherein the security system flag, And whether a security system is provided in the recording medium. A method of configuring control information for determining a recording medium with a security system, the method comprising: The control information, And control system information data and media information data having a minimum information and a security system flag for accessing the recording medium. 18. The system of claim 17, wherein the security system flag is And whether or not a security system is provided in the recording medium. 19. The system of claim 18, wherein the security system flag is And control information of the security system. The method of claim 17, wherein the security system information data, And a host revocation list. Record the media information in the management area of the recording medium, The medium information, A method of recording data on a recording medium, comprising: minimal information for accessing the recording medium and a security system flag. The method of claim 21, wherein the security system flag, And information indicating whether a security system is provided in the recording medium. The method of claim 22, wherein the security system flag, And information on a method of the security system together. The method of claim 21, wherein the medium information, A data recording method of a recording medium, characterized in that at the time of manufacture of the recording medium, it is first recorded in the recording area. The method of claim 21, wherein the data recording method, And recording security system information in the management area. The method of claim 25, wherein the security system information, And a host revocation list distributed by a certification authority when the recording medium is produced. Reading the medium information recorded in the management area of the recording medium, And determining whether the corresponding recording medium is a recording medium provided with a security system by using the medium information. The method of claim 27, wherein the data reproducing method is And determining whether the security system is a recording medium provided with the security system flag in the medium information. The method of claim 27, wherein the data reproducing method is And determining whether the security system is a recording medium provided with the data of the security system flag included in the medium information. The method of claim 29, wherein the data reproduction method, And determining whether the security system is present according to whether the data of the system flag is 0 or 1. (a) reading the medium information recorded in the management area of the recording medium; (b) determining whether the recording medium is a recording medium provided with a security system using the medium information; (c) releasing the security of the recording medium provided with the security system; (d) the security system accessing data on the released recording medium. 32. The method of claim 31, wherein step (b) comprises: And determining the presence or absence of a security system based on a security system flag provided in said medium information. 32. The method of claim 31, wherein step (c) comprises: A method of recording and reproducing data, characterized by performing a drive host authentication process. 34. The method of claim 33, wherein the drive host authentication process, And verifying each other validity of the certificate and whether there is a legitimate authority to access the data. 32. The recording and reproducing method of data according to claim 31, And reading out the security system information of the recording medium to verify whether the host revocation list is the latest version. 32. The recording and reproducing method of data according to claim 31, And if the authentication process fails, instructing the user that the recording medium is impossible to record or reproduce.

Images