JP2001211080A - Data processor, data processing method and contents data creating method, and program providing media - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a configuration capable of efficiently performing reproduction processing for contents data which are compressed audio or image data. SOLUTION: In this configuration, the contents data are constituted as a combination of a compressed data and a decompression processing program, and a reproduction processing device proceeds decompression processing by applying the compression processing program attendant to the compressed contents. In other case, the contents data are constituted as a combination of the compressed data and a header part storing the kinds of the compression program, or as a combination of a decompression processing program and the header part storing the kinds of the decompression processing program. Then, based on a header information, the reproduction processing device determines the decompression program adaptable to the compressed contents, and the device searches the program and performing the decompression processing.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

TECHNICAL FIELD The present invention relates to a data processing device,
More particularly, the present invention relates to a data processing method, a content data generating method, and a program providing medium, and more particularly, to a configuration which provides a configuration for efficiently executing a reproducing process when data content is compressed audio data or image data. Specifically, the configuration of the content data is configured by combining the compressed data and the decompression processing program, or the decompression can be performed based on the header information of the compressed data content in which the applied decompression processing program is stored as the header information. The present invention relates to a data processing device, a data processing method, and a content data generation method capable of searching and extracting a processing program and executing a reproduction process.

[0002] The present invention relates to a storage medium such as a DVD or a CD, or a cable such as a CATV, the Internet, or satellite communication.
Various contents such as sounds, images, games, programs, etc., which can be obtained through wireless communication means or the like, are reproduced by a recording / reproducing device owned by the user, and dedicated recording devices, such as a memory card, a hard disk, a CD-R, The present invention relates to a configuration and a method capable of efficiently executing a decompression process when content data includes compressed data when using content stored in a recording device while using the content stored in a recording device.

[0003]

2. Description of the Related Art Recently, game programs, audio data,
Various software data (hereinafter, referred to as “Content”) such as image data and a document creation program are distributed via a network such as the Internet or via a circulating storage medium such as a DVD or a CD. are doing. These distribution contents can be stored in a recording device attached to a recording / reproducing device such as a PC (Personal Computer) or a game device owned by the user, for example, a memory card, a hard disk, or the like. Can be used by reproduction from a storage medium.

[0004] The main components of a memory card device used in a conventional video game device, information device such as a PC are a control means for operation control and a slot provided in the main body of the information device connected to the control means. And a non-volatile memory connected to the control means for storing data. The nonvolatile memory provided in the memory card is constituted by an EEPROM, a flash memory, or the like.

[0005] Such memory cards, CDs, DVDs,
Various contents such as data acquired through a network or a program are transmitted from a game device used as a playback device, a user instruction from an information device main body such as a PC, or a user instruction from a connected input unit. And played back through the information device itself or a connected display, speaker, or the like.

[0006] Many software contents such as game programs, music data, image data, and the like generally have distribution rights and the like owned by their creators and sellers. Therefore, when distributing these contents, certain usage restrictions, that is, only authorized users are allowed to use the software, and unauthorized duplication is not performed, that is, security is taken into consideration. It is common to adopt a configuration as described above.

[0007] One method of realizing the use restriction for the user is an encryption process of the distributed content. That is, for example, various contents such as encrypted audio data, image data, and game programs are distributed via the Internet or the like, and the distributed encrypted contents are distributed only to those who are confirmed to be authorized users. This is a means for decrypting, that is, providing a decryption key.

[0008] The encrypted data can be returned to usable decrypted data (plaintext) by a decryption process according to a predetermined procedure. Data encryption and decryption methods using an encryption key for such information encryption processing and a decryption key for decryption processing are well known in the art.

There are various types of data encryption / decryption methods using an encryption key and a decryption key. One example is a so-called common key encryption method. In the common key encryption method, an encryption key used for data encryption processing and a decryption key used for data decryption are shared, and a common user used for these encryption processing and decryption is assigned to a regular user. Thus, data access by an unauthorized user without a key is eliminated. DES (Data Encryption Standard: Data encry
ption standard).

The encryption key and the decryption key used for the above-mentioned encryption processing and decryption can be obtained by applying a one-way function such as a hash function based on a certain password or the like. A one-way function is a function that makes it very difficult to obtain an input from its output. For example, a one-way function is applied with a password determined by the user as an input, and an encryption key and a decryption key are generated based on the output. Conversely, it is practically impossible to obtain a password as the original data from the encryption key and the decryption key obtained in this way.

In addition, a method called a public key encryption method uses a different algorithm for processing using an encryption key used for encryption and processing for a decryption key used for decryption. Public key encryption is
This is a method using a public key that can be used by an unspecified user, and encrypts an encrypted document for a specific individual using a public key issued by the specific individual. A document encrypted with a public key can be decrypted only with a private key corresponding to the public key used for the encryption processing. Since the private key is owned only by the individual who issued the public key, a document encrypted with the public key can be decrypted only by the individual having the private key. A typical public key encryption method is RSA (Rivest-Shamir-Adlema).
n) There is a cipher.

[0012] By using such an encryption method, it is possible to provide a system that can decrypt encrypted content only for authorized users. A conventional content distribution configuration employing these encryption methods will be briefly described with reference to FIG.

FIG. 1 shows a reproducing means 10 such as a PC (personal computer), a game machine, etc.
It reproduces programs, audio data, video data, etc. (Content) obtained from data providing means such as the CD 30 and the Internet 40,
1 shows an example of a configuration in which data acquired from the D30, the Internet 40, and the like can be stored in a storage unit 20, such as a floppy disk, a memory card, or a hard disk.

[0014] Contents such as programs, audio data, and video data are subjected to encryption processing and provided to a user having the reproducing means 10. The authorized user obtains the encrypted data and the key data that is the encryption and decryption keys.

The reproduction means 10 has a CPU 12, and a reproduction processing section 14 executes a reproduction process of input data. The reproduction processing unit 14 executes the decryption processing of the encrypted data, and reproduces the provided program and reproduces the content such as audio data and image data.

[0016] An authorized user can copy the provided program,
In order to use the contents again, the storage means 20 performs processing for storing contents such as programs / data. The reproduction means 10 has a storage processing unit 13 for executing the content storage processing. The storage processing unit 13 performs an encryption process on the data and executes the storage process in order to prevent unauthorized use of the data stored in the storage unit 20.

When encrypting content, a content encryption key is used. The storage processing unit 13 encrypts the content using the content encryption key, and
(A floppy disk), a memory card, a hard disk, or the like.

When the user takes out the stored content from the storage means 20 and reproduces it, the user
The encrypted data is taken out, and the playback processing unit 14 of the playback means 10 executes a decryption process using a content decryption key, that is, a decryption key, to obtain decrypted data from the encrypted data and reproduce the data.

The decoded audio data, image data, etc.
The data is output to the AV output unit and reproduced. However, in recent years, many contents are often subjected to compression processing and stored or distributed in a storage medium. Therefore, before the playback process,
It is necessary to decompress these compressed data.
For example, if the audio data is MP3 compressed, the audio data is decoded by an MP3 decoder and output. If the content data is image data and is an MPEG2 compressed image, the data is output after the MPEG2 decoder performs the decompression process.

However, there are various types of compression processing and expansion processing programs, and even if compressed data is provided from a content provider via a medium, a network, or the like, there is no corresponding expansion processing execution program in the playback device. In such a case, a situation occurs in which this cannot be reproduced.

[0021]

SUMMARY OF THE INVENTION The present invention is directed to a configuration for efficiently executing a process of reproducing compressed data, that is, to efficiently execute a process of reproducing content when the content is compressed audio data or image data. An object of the present invention is to provide a data processing device, a data processing method, and a content data generation method to be executed.

[0022]

SUMMARY OF THE INVENTION A first aspect of the present invention is as follows.
A data processing device that performs a process of reproducing content data provided by a storage medium or a communication medium, executes content data analysis of content data including compressed content and a decompression processing program of the compressed content, and executes the content data analysis. And compressed content from
A content data analysis unit that executes an extraction process of a decompression processing program; and a decompression process of compressed content included in the content data using a decompression processing program included in the content data obtained as an analysis result of the content data analysis unit. And a decompression processing unit to execute the data processing apparatus.

Further, in one embodiment of the data processing device of the present invention, a data storage unit for storing the compressed content extracted by the content data analysis unit, and a decompression processing program extracted by the content data analysis unit are stored. And a decompression processing unit that performs decompression processing by applying a decompression processing program stored in the program storage unit to the compressed content stored in the data storage unit. It is characterized by having.

Further, in one embodiment of the data processing apparatus according to the present invention, the content data analysis unit acquires configuration information of the content data based on header information included in the content data and analyzes the content data. It is characterized by having a configuration.

Further, in one embodiment of the data processing apparatus of the present invention, the header information includes reproduction priority information of the compressed content, and the decompression processing unit includes a plurality of compressed contents to be decompressed. The decompression processing unit is configured to sequentially execute content decompression processing in accordance with the priority, based on the priority information in the header information acquired by the content data analysis unit.

Further, in one embodiment of the data processing device of the present invention, the data processing device further comprises a display means for displaying information on the compressed content to be subjected to the decompression processing, and content information displayed on the display means. Input means for inputting the reproduction content identification data selected from the above, and the decompression processing unit performs decompression processing of the compressed content corresponding to the identification data based on the reproduction content identification data input from the input means. It is characterized in that it is configured to execute.

Further, a second aspect of the present invention is a data processing apparatus for performing a reproducing process of content data provided by a storage medium or a communication medium, wherein the content data includes either a compressed content or a decompression program. To determine whether the content data is a compressed content or a decompression program from the header information included in the received content data, and if the content data is a compressed content,
From the header information of the content data, obtain the type of the compression processing program applied to the compressed content, and if the content data is an expansion processing program, obtain the type of the expansion processing program from the header information of the content data. A decompression processing unit for performing decompression processing of the compressed content, the decompression processing unit comprising: a decompression processing program applicable to a compression processing program type of the compressed content analyzed by the content data analysis unit. Is selected based on the type of decompression processing program analyzed by the content data analysis unit, and a decompression process is executed by the selected decompression processing program.

Further, in one embodiment of the data processing device of the present invention, the data processing device further includes a data storage unit that stores the compressed content extracted by the content data analysis unit, and a data storage unit that stores the compressed content. A program storage unit for storing the extracted decompression processing program, wherein the decompression processing unit applies the decompression processing program stored in the program storage unit to the compressed content stored in the data storage unit And performing a decompression process.

Further, in one embodiment of the data processing apparatus of the present invention, the header information includes playback priority information of the compressed content, and when there are a plurality of compressed contents to be expanded, the expansion processing section The content decompression process in is based on the priority information in the header information acquired by the content data analysis unit,
The present invention is characterized in that it is configured to execute sequentially according to the priority order.

Further, in one embodiment of the data processing apparatus of the present invention, the data processing apparatus has a search unit for searching for a decompression program, and the search unit includes a compressed content analyzed by the content data analysis unit. The present invention is characterized in that a decompression processing program applicable to the above-mentioned compression processing program type is searched for a program storage means accessible by the data processing apparatus as a search target.

Further, in one embodiment of the data processing device of the present invention, the data processing device further comprises a display means for displaying information of the compressed content to be subjected to the decompression processing, and content information displayed on the display means. Input means for inputting the reproduction content identification data selected from the above, and the decompression processing unit performs decompression processing of the compressed content corresponding to the identification data based on the reproduction content identification data input from the input means. It is characterized in that it is configured to execute.

Further, a third aspect of the present invention is a data processing method for reproducing content data provided by a storage medium or a communication medium. The data processing method comprises the steps of: Executing a content data analysis of the content data including the content data, extracting a compressed content and an expansion processing program from the content data, and a content data analysis step of extracting the content data from the content data. And a decompression process step of performing a decompression process of the compressed content included in the content data using the decompression processing program to be executed.

Further, in one embodiment of the data processing method of the present invention, the data processing method further includes a data storage step of storing the compressed content extracted by the content data analysis step, A program storing step of storing the extracted decompression processing program, wherein the decompression processing step applies the decompression processing program stored in the program storage step to the compressed content stored in the data storage step And performing a decompression process.

Further, in one embodiment of the data processing method of the present invention, the content data analyzing step includes:
The content data is configured to be obtained based on header information included in the content data, and the content data is analyzed.

In one embodiment of the data processing method of the present invention, the header information includes reproduction priority information of the compressed content, and the decompression processing unit includes a plurality of compressed contents to be subjected to decompression processing. In the decompression processing step, based on the priority information in the header information acquired in the content data analysis step, the content decompression processing is sequentially performed according to the priority.

Further, in one embodiment of the data processing method of the present invention, the data processing method further comprises a display step of displaying on the display means information of the compressed content to be decompressed, and a display step of displaying the information on the display means. An input step of inputting the reproduction content identification data selected from the received content information, wherein the decompression processing step corresponds to the reproduction content identification data based on the reproduction content identification data input in the input step. It is characterized in that a decompression process of the compressed content is executed.

Further, a fourth aspect of the present invention is a data processing method for performing a reproduction process of content data provided by a storage medium or a communication medium, wherein the content data includes either a compressed content or a decompression program. To determine whether the content data is a compressed content or a decompression program from the header information included in the received content data, and if the content data is a compressed content,
From the header information of the content data, obtain the type of the compression processing program applied to the compressed content, and if the content data is an expansion processing program, obtain the type of the expansion processing program from the header information of the content data. An analysis step, and a selection step of selecting a decompression processing program applicable to a compression processing program type of the compressed content analyzed in the content data analysis step based on the decompression processing program type analyzed by the content data analysis step. And a decompression processing step of performing decompression processing by the decompression processing program selected in the selection step.

Further, in one embodiment of the data processing method of the present invention, the data processing method further includes a data storage step of storing the compressed content extracted by the content data analysis unit, A program storing step of storing the extracted decompression processing program, wherein the decompression processing step applies the decompression processing program stored in the program storage step to the compressed content stored in the data storage step And execute the decompression process.

Further, in one embodiment of the data processing method of the present invention, the header information includes playback priority information of the compressed content. Are sequentially executed according to the priority order based on the priority order information in the header information acquired in the content data analysis step.

Further, in one embodiment of the data processing method of the present invention, the data processing method further includes a search step of searching for a decompression processing program, wherein the search step is analyzed in the content data analysis step. A decompression processing program applicable to the compression processing program type of the compressed content is searched by making the accessible program storage means a search target.

Further, in one embodiment of the data processing method of the present invention, the data processing method further comprises a display step of displaying information of the compressed content to be decompressed on the display means, and a display step of displaying the information on the display means. An input step of inputting the reproduction content identification data selected from the received content information, wherein the decompression processing step corresponds to the reproduction content identification data based on the reproduction content identification data input from the input means. It is characterized in that a decompression process of the compressed content is executed.

Further, a fifth aspect of the present invention is a content data generating method for generating content data provided by a storage medium or a communication medium, wherein the method comprises the steps of: A content data generation method is characterized by generating combined content data.

Further, in one embodiment of the content data generating method of the present invention, the content data is further provided with configuration information of the content data as header information of the content data.

Further, in one embodiment of the content data generating method of the present invention, the content data includes, as header information, playback priority information of the content included in the content data.

Further, a sixth aspect of the present invention is a content data generating method for generating content data provided by a storage medium or a communication medium, wherein the content data is a compressed content or a decompression processing program. If the content data is compressed content, the type of the compression processing program applied to the compressed content is added as header information, and the content data is added to the decompression processing program. The content data generation method is characterized by generating content data to which a decompression processing program type is added as header information.

Further, in one embodiment of the content data generation method according to the present invention, reproduction priority information of the content included in the content data is added as header information of the content data.

Further, a seventh aspect of the present invention is a program providing medium for providing a computer program for causing a computer system to execute a reproduction process of content data provided by a storage medium or a communication medium, The computer program executes content data analysis of content data including compressed content and a decompression processing program for the compressed content, and executes a content data analysis for extracting compressed content and decompression processing program from the content data. And a decompression processing step of executing decompression processing of compressed content included in the content data using a decompression processing program included in the content data obtained as an analysis result of the content data analysis step. In program providing medium characterized.

The program providing medium according to the present invention is, for example, a medium that provides a computer program in a computer-readable format to a general-purpose computer system capable of executing various program codes. The form of the medium is not particularly limited, such as a storage medium such as a CD, an FD, and an MO, and a transmission medium such as a network.

Such a program providing medium defines a structural or functional cooperative relationship between the computer program and the providing medium in order to realize a predetermined computer program function on a computer system. Things. In other words, by installing the computer program into the computer system via the providing medium, a cooperative operation is exerted on the computer system, and the same operation and effect as the other aspects of the present invention can be obtained. You can do it.

[0050] Still other objects, features and advantages of the present invention are:
It will become apparent from the following more detailed description based on the embodiments of the present invention and the accompanying drawings.

[0051]

Embodiments of the present invention will be described below. The procedure of the description is performed according to the following items. (1) Data processing device configuration (2) Content data format (3) Outline of encryption processing applicable in data processing device (4) Storage data configuration of recording / reproducing device (5) Storage data configuration of recording device (6) Recording / reproduction Authentication process between device and recording device (6-1) Outline of mutual authentication process (6-2) Switching of key block at the time of mutual authentication (7) Download process from recording / reproducing device to recording device (8) Recording device (9) Key exchange processing after mutual authentication (10) Plural content data formats and download and reproduction processing corresponding to each format (11) Check value (I) at content provider
CV) Generation processing mode (12) Encryption processing key generation configuration based on master key (13) Control of encryption strength in encryption processing (14) Program activation processing based on activation priority in handling policy for content data (15) Content configuration And playback (decompression) processing (16) Generation of save data and storage / reproduction processing in a recording device (17) Rejection configuration of unauthorized device (18) Secure chip configuration and manufacturing method

(1) Configuration of Data Processing Apparatus FIG. 2 is a block diagram showing the overall configuration according to an embodiment of the data processing apparatus of the present invention. The data processing apparatus of the present invention has a recording / reproducing device 300 and a recording device 400 as main components.

The recording / reproducing device 300 is, for example, a personal computer.
It is constituted by a computer (PC: Personal Computer), a game machine, or the like. Recording / reproducing device 300
As shown in FIG. 2, the control unit 301 performs overall control including communication control with the recording device 400 at the time of encryption processing in the recording / reproducing apparatus 300, the recording / reproducing apparatus encryption processing unit 302 that performs overall encryption processing, A recording device controller 303 for performing authentication processing and reading / writing data with a recording device 400 connected to a recording / reproducing device; a reading unit 304 for reading at least data from a medium 500 such as a DVD; and a communication for transmitting / receiving data to / from the outside Part 3
05.

The recording / reproducing device 300 downloads content data to the recording device 400 and reproduces content data from the recording device 400 under the control of the control unit 301. The recording device 400 is a storage medium preferably detachable from the recording / reproducing device 300, for example, a memory card or the like, a nonvolatile memory such as an EEPROM or a flash memory, a hard disk,
M and the like.

The recording / reproducing device 300 is distributed from a storage medium shown at the left end of FIG. 2, a reading unit 304 as an interface capable of inputting content data stored in a DVD, CD, FD, HDD, or a network such as the Internet. It has a communication unit 305 as an interface capable of inputting content data, and inputs content from outside.

The recording / reproducing device 300 has an encryption processing unit 302, and downloads content data input from the outside via the reading unit 304 or the communication unit 305 to the recording device 400, or outputs the content data to the recording device 400. Authentication processing when playing and executing from 400,
It performs encryption processing, decryption processing, data verification processing, and the like. The cryptographic processing unit 302 includes a control unit 306 that controls the entire cryptographic processing unit 302, an internal memory 307 that holds information such as a key for cryptographic processing, and is processed so that data cannot be easily read from the outside. It includes an encryption / decryption unit 308 that performs encryption processing, decryption processing, generation / verification of authentication data, generation of random numbers, and the like.

The control unit 301 includes, for example, the recording / reproducing device 30
When the recording device 400 is attached to the recording device 400, an initialization command is transmitted to the recording device 400 via the recording device controller 303, or the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 and the recording device encryption Mutual authentication processing performed between the encryption / decryption units 406 of the processing unit 401, check value comparison processing, encryption, decryption processing, etc.
The mediation process in various processes is performed. Each of these processes will be described in detail later.

The cryptographic processing unit 302 is a processing unit that executes authentication processing, encryption processing, decryption processing, data verification processing, and the like, as described above. The cryptographic processing control unit 306, internal memory 307, It has a decoding unit 308.

The encryption processing control unit 306 includes
0, which is a control unit that executes control related to overall encryption processing such as authentication processing and encryption / decryption processing performed at 0.
For example, setting of an authentication completion flag at the time of completion of an authentication process performed between the recording / reproducing device 300 and the recording device 400, various processes performed in the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302, For example, it performs overall control of the encryption process, such as an instruction to execute a check value generation process for download or reproduction content data, and an instruction to execute various key data generation processes.

The internal memory 307, which will be described in detail later, includes key data necessary for various processes such as a mutual authentication process, a check value collation process, an encryption process and a decryption process, which are executed in the recording / reproducing device 300. Alternatively, it stores identification data and the like.

The encryption / decryption unit 308 is provided in the internal memory 30
7 is downloaded to the recording device 400 using the key data stored in the storage device 7, or the content data stored in the recording device 400 is reproduced from the recording device 400.
It performs authentication processing, encryption processing, and decryption processing at the time of execution, as well as processing such as generation / verification of a predetermined check value and an electronic signature, data verification, and generation of a random number.

Here, since the internal memory 307 of the recording / reproducing device encryption processing unit 302 holds important information such as an encryption key, it is necessary to have a structure that is difficult to read illegally from the outside. Therefore, the cryptographic processing unit 302 is configured by a semiconductor chip having a structure that is difficult to access from the outside, has a multilayer structure, and the internal memory is sandwiched by a dummy layer such as an aluminum layer or configured in a lowermost layer. In addition, the memory is configured as a tamper-resistant memory having a characteristic that it is difficult to read data illegally from the outside, such as a narrow operating voltage and / or frequency range. For this configuration,
This will be described in detail later.

The recording / reproducing device 300 has a central processing unit (main CPU: Central CPU) in addition to these encryption processing functions.
Processing Unit) 106, RAM (Random Access Mem)
ory) 107, ROM (Read Only Memory) 108, AV
A processing unit 109, an input interface 110, a PIO (parallel I / O interface) 111, and an SIO (serial I / O interface) 112 are provided.

Central processing unit (Main CPU: Centra
l Processing Unit) 106, RAM (Random Access M)
emory) 107 and ROM (Read Only Memory) 108
This is a component functioning as a control system of the recording / reproducing device 300 main body, and mainly functions as a reproduction processing unit for executing reproduction of data decrypted by the recording / reproducing device encryption processing unit 302.
For example, a central processing unit (main CPU: Central Proc)
The essing unit (106) controls the reproduction and execution of the content, such as outputting the content data read and decoded from the recording device to the AV processing unit 109 under the control of the control unit 301.

The RAM 107 is used as a main storage memory for various processes in the CPU 106, and
It is used as a work area for processing by 106.
The ROM 108 stores an OS started by the main CPU 106.
A basic program for starting up the program is stored.

The AV processing unit 109 specifically has a data compression / decompression processing mechanism such as an MPEG2 decoder, ATRAC decoder, MP3 decoder, etc., and a display or a speaker (not shown) attached or connected to the recording / reproducing unit. For data output to the data output device.

The input interface 110 outputs input data from various input means such as a connected controller, keyboard and mouse to the main CPU 106. The main CPU 106 executes a process according to an instruction from a controller from a user based on, for example, a running game program or the like.

PIO (Parallel I / O Interface)
111, SIO (serial I / O interface) 11
Reference numeral 2 is used as a connection interface with a storage device such as a memory card or a game cartridge, a portable electronic device, or the like.

The main CPU 106 also performs control when storing, for example, setting data and the like relating to a running game and the like as save data in the recording device 400. In this process, the storage data is transferred to the control unit 301,
The control unit 301 causes the encryption processing unit 302 to execute encryption processing for save data as necessary, and stores the encrypted data in the recording device 400. These encryption processes will be described later in detail.

The recording device 400 is a storage medium which is preferably detachable from the recording / reproducing device 300 as described above, and is constituted by a memory card, for example. The recording device 400 includes an encryption processing unit 401, an external memory 402
Having.

The recording device encryption processing unit 401 downloads the content data from the recording / reproducing device 300 or reproduces the content data from the recording device 400 to the recording / reproducing device 300.
Authentication processing and encryption processing between the
It is a processing unit that performs a decryption process, a data verification process, and the like, and includes a control unit, an internal memory, an encryption / decryption unit, and the like, like the encryption processing unit of the recording / reproducing device 300. These details are shown in FIG. As described above, the external memory 402 includes a nonvolatile memory such as an EEPROM or a flash memory, a hard disk, a RAM with a battery, and the like, and stores encrypted content data and the like.

FIG. 3 shows a data processing apparatus according to the present invention in which a medium 50 serving as a content providing means for receiving data is provided.
0, the outline of the data structure input from the communication means 600 is shown, and these content providing means 500, 60
FIG. 3 is a diagram mainly showing a configuration related to encryption processing in a recording / reproducing device 300 for inputting content from 0 and a recording device 400, and showing the configuration thereof.

The medium 500 is, for example, an optical disk medium, a magnetic disk medium, a magnetic tape medium, a semiconductor medium, or the like. The communication unit 600 is a unit capable of data communication such as Internet communication, cable communication, satellite communication, and the like.

In FIG. 3, a recording / reproducing device 300 includes a medium 500 serving as content providing means, a communication means 600
, That is, the content according to a predetermined format as shown in FIG. 3, and stores the content in the recording device 400 after the verification.

As shown in the medium 500 and the communication means 600 in FIG. 3, the content data has the following components. Identification information: identification information as an identifier of content data. Handling policy: Content information of content data, for example, header size, content size, format version, content type indicating whether the content is a program or data, and content only, which can be used only by the device from which the content was downloaded A handling policy that includes usage restriction information, such as whether the device can be used on other devices. Block information: Block information including the number of content blocks, block size, an encryption flag indicating the presence or absence of encryption, and the like. Key data: an encryption key for encrypting the block information described above,
Alternatively, key data including a content key for encrypting the content block. Content block: A content block composed of program data, music, image data, and the like to be actually reproduced. Having. The details of the content data will be described in more detail later with reference to FIG.

The content data includes a content key (here, this is referred to as a content key (hereinafter referred to as Kc).
)), and is provided to the recording / reproducing device 300 from the medium 500 and the communication means 600. The content can be stored in an external memory of the recording device 400 via the recording / reproducing device 300.

For example, the recording device 400 uses a key unique to the recording device (here, this is called a storage key (hereinafter, referred to as Kstr)) stored in the internal memory 405 in the recording device. The content included in the content data, block information included as header information of the content data, various key information,
For example, the content key Kcon or the like is encrypted and stored in the external memory 402. Content data recording / reproducing device 3
In the process of downloading content data from 00 to the recording device 400 or the process of reproducing content data stored in the recording device 400 by the recording / reproducing device 300, mutual authentication between devices, encryption and decryption of content data, etc. Predetermined procedures are required. These processes will be described later in detail.

As shown in FIG. 3, the recording device 400 has an encryption processing unit 401 and an external memory 402. The encryption processing unit 401 includes a control unit 403, a communication unit 404, an internal memory 405, and an encryption / decryption unit 406. , External memory control unit 40
Seven.

The recording device 400 controls the external memory 402, controls the external memory 402, interprets the command from the recording / reproducing device 300, and stores the recording device encryption processing unit 401 and the contents. It comprises an external memory 402.

The recording device encryption processing unit 401 includes a control unit 403 that controls the entire recording device encryption processing unit 401,
Communication unit 40 for transmitting and receiving data to and from recording / reproducing device 300
4. Internal memory 405 that holds information such as key data for encryption processing and is processed so as not to be easily read from the outside, encryption processing, decryption processing, generation / verification of authentication data, Encryption / decryption unit 40 for generating random numbers
6. It has an external memory control unit 407 for reading and writing data in the external memory 402.

The control unit 403 is a control unit that executes control related to the overall encryption processing such as authentication processing and encryption / decryption processing performed in the recording device 400.
Setting of an authentication completion flag when the authentication process performed between the recording / reproducing device 300 and the recording device 400 is completed;
Various types of processing executed in the encryption / decryption unit 406 of the encryption processing unit 401, for example, an instruction for executing a check value generation process regarding download or reproduction content data, an instruction for executing a generation process for various key data, and the like; Perform

As will be described in detail later, the internal memory 405 is configured by a memory having a plurality of blocks, and performs a mutual authentication process, a check value collation process, an encryption process, and a decryption process executed in the recording device 400. And the like, a plurality of sets of key data or identification data required in various processes are stored.

The internal memory 405 of the recording device encryption processing unit 401 stores the recording / reproducing device encryption processing unit 302 described above.
Like the internal memory 307, important information such as an encryption key is held, so that it is necessary to have a structure that is difficult to read illegally from the outside. Therefore, the encryption processing unit 401 of the recording device 400 is configured by a semiconductor chip having a structure that is difficult to access from the outside, has a multilayer structure, and the internal memory is sandwiched between dummy layers such as an aluminum layer, A lower voltage and / or operating voltage
In addition, the configuration is such that it is difficult to read data illegally from the outside, such as a narrow frequency range. Note that the recording / reproducing device encryption processing unit 302 may be software configured so that secret information such as a key is not easily leaked to the outside.

The encryption / decryption unit 406 includes the recording / reproducing unit 30
0, the content data stored in the external memory 402 of the recording device 400, or the mutual authentication process between the recording / reproducing device 300 and the recording device 400.
By using the key data and the like stored in the storage unit 05, data verification processing, encryption processing, decryption processing, generation and verification of a predetermined check value and an electronic signature, generation of a random number, and the like are executed.

The communication unit 404 is connected to the recording device controller 303 of the recording / reproducing device 300 and
Communication of transfer data between the recording / reproducing unit 300 and the recording device 400 during the download processing, the reproduction processing, or the mutual authentication processing of the content data in accordance with the control of the control unit 301 of FIG. Perform

(2) Content Data Format Next, referring to FIGS. 4 to 6, the contents data format stored in the medium 500 or the data communication means 6 in the system of the present invention will be described.
The data format of data circulating over 00 will be described.

FIG. 4 is a diagram showing a format of the entire content data, and FIG. 5 is a diagram showing details of a “handling policy” constituting a part of a header portion of the content data. FIG. 6 is a diagram showing details of “block information” which constitutes a part of a header part of content data in the configuration shown in FIG.

Here, a representative example of a data format applied in the system of the present invention will be described. However, the system of the present invention is suitable for real-time processing of a format corresponding to a game program, music data, and the like. A plurality of different data formats, such as a plurality of data formats, can be used, and the aspects of these formats will be described in more detail later in “(10) Multiple Content Data Formats and Download and Playback Processing Corresponding to Each Format” .

In the data format shown in FIG.
The part shown in gray is the encrypted data, the part in the double frame is tampering check data, and the other white parts are unencrypted plaintext data. The encryption key of the encryption unit is a key shown on the left of each frame. In the example shown in FIG. 4, each block (content block data) of the content section includes both encrypted and unencrypted blocks. These modes are different depending on the content data, and all the content block data included in the data may be encrypted.

As shown in FIG. 4, the data format is divided into a header section and a content section. The header section includes identification information (Content ID), a handling policy (Usage
Policy, Check Value A (Integrity Check Value A)
(Hereinafter referred to as ICVa)), a block information key (Block
Information Table Key (Kbit),
Content key Kcon, block information (Block Informat
ion Table (hereinafter referred to as BIT)), check value B
(ICVb) and the total check value (ICVt), and the content section is composed of a plurality of content blocks (for example, encrypted content and unencrypted content).

Here, the identification information indicates an individual identifier (Content ID) for identifying the content. As shown in FIG. 5, the handling policy is a header size (Header Len
gth), a content size (Content Length) indicating the size of the content portion, a format version (Format Version) indicating format version information, and a format type (Format T) indicating a format type.
ype), a content type (Content Type) indicating the type of content such as whether the content stored in the content section is a program or data, and activation priority information (ACT) indicating the activation priority when the content type is a program. Operation Priority), usage restriction information (Localizati) indicating whether the content downloaded according to this format can be used only by the device that downloaded it or can be used by other similar devices.
onField), and copy restriction information (Copy restriction information) indicating whether the content downloaded according to this format can be copied from the downloaded device to another similar device.
Permission), movement restriction information (Move Permission) indicating whether content downloaded according to this format can be transferred from the downloaded device to another similar device, and an algorithm used to encrypt the content block in the content part. An encryption algorithm that indicates the use of the algorithm used to encrypt the content in the content section.
Verification method that shows how to generate check values (Integrity Chec
k Method).

[0092] The data items recorded in the above-mentioned handling policy are one example, and various handling policy information can be recorded according to the form of the corresponding content data. For example, as will be described in detail in “(17) Elimination of unauthorized device (revocation) configuration” in the later stage, an identifier of an unauthorized recording / reproducing device is recorded as data, and the use of content by the unauthorized device is excluded by collation at the start of use. Such a configuration is also possible.

The check values A and ICVa are check values for verifying falsification of the identification information and the handling policy. It functions as a check value of partial data, not the entire content data, ie, a partial check value. The data block information key Kbit is used to encrypt block information, and the content key Kcon is used to encrypt content blocks. The block information key Kb
It and the content key Kcon are provided on a distribution key (Distributi
on Key (hereinafter, referred to as Kdis).

FIG. 6 shows details of the block information. In addition,
The block information in FIG. 6 is data that is all encrypted with the block information key Kbit as understood from FIG. As shown in FIG. 6, the block information includes the number of content blocks (Bloc
k Number) and N pieces of content block information. The content block information includes a block size (Block Length), an encryption flag (Encryption Flag) indicating whether or not encryption has been performed, and a verification target flag (ICV Flame) indicating whether a check value needs to be calculated.
g), and a content check value (ICVi).

The content check value is a check value used to verify tampering of each content block. For a specific example of a method for generating a content check value, see “(10) Multiple data formats,
Download processing to a recording device corresponding to each format and reproduction processing from the recording device ". Note that the block information key Kbit that encrypts the block information is further encrypted with the distribution key Kdis.

The description of the data format of FIG. 4 will be continued. The check values B and ICVb are stored in the block information key Kbi.
t, a content key Kcon, and a check value for verifying tampering of block information. It functions as a check value of partial data, not the entire content data, ie, a partial check value. The total check value ICVt is the ICV
a, ICVb, check value IC of each content block
Vi (if set), these partial check values, or check values for verifying tampering of all data to be checked.

In FIG. 6, the block size,
Although the encryption flag and the verification target flag can be freely set, the configuration may be such that rules are determined to some extent. For example, the block information BIT may be compressed by repeating the cipher text area and the plain text area with a fixed size, encrypting all the content data, or the like. In addition, in order to make the content key Kcon different for each content block, the content key Kcon is used instead of the header part.
It may be included in a content block. For an example of the content data format, see “(10)
A plurality of content data formats and download and playback processes corresponding to each format will be described in more detail.

(3) Outline of Cryptographic Processing Applicable to Data Processing Apparatus of the Present Invention Next, various forms of cryptographic processing applicable to the data processing apparatus of the present invention will be described. Note that the description regarding the encryption processing described in this item “(3) Outline of encryption processing applicable to data processing apparatus of the present invention” will be described in detail in the various processing in the data processing apparatus of the present invention which will be specifically described later, for example, a . Authentication process between the recording / reproducing device and the recording device. b. Download processing for content recording device. c. An outline of an encryption process which is a basis of a process executed in a process such as a process of reproducing content stored in a recording device will be described. Specific processing in the recording / reproducing device 300 and the recording device 400 will be described in detail for each processing in item (4) and thereafter of this specification.

The following is an outline of the encryption processing applicable to the data processing apparatus. (3-1) Message authentication using a common key encryption method (3-2) Digital signature using a public key encryption method (3-3) Public key encryption (3-4) Mutual authentication by common key cryptography (3-5) Public key certificate (3-6) Mutual authentication by public key cryptography (3-7) Elliptic curve encryption (3-8) Decryption Process Using Elliptic Curve Cryptography (3-9) Random Number Generation Process

(3-1) Message Authentication by Common Key Cryptography First, a process of generating tampering detection data using a common key cryptography will be described. The tampering detection data is data for checking tampering and authenticating a creator, attached to data for which tampering is to be detected.

For example, the check values A and B of the double frame portion in the data structure described in FIG. 4, the total check value, the content check value stored in each block in the block information shown in FIG. Is generated as the falsification detection data.

Here, an example using DES in a common key cryptosystem will be described as one example of a method for generating digital signature data. In the present invention, in addition to DES, processing in the same common key cryptosystem, for example, FEAL (Fast Encipherment ALgorithm: NTT), AE
It is also possible to use S (Advanced Encryption Standard: US next standard encryption) or the like.

A method of generating a digital signature using a general DES will be described with reference to FIG. First, before generating an electronic signature, a message to be subjected to the electronic signature is divided into 8-byte units (hereinafter, the divided messages are referred to as M1 and M1).
M2,..., MN). And the initial value (Initia
l Exclusive OR of Value (hereinafter referred to as IV) and M1 (the result is referred to as I1). Next, I1 is entered into the DES encryption unit, and is encrypted using a key (hereinafter, referred to as K1) (output is referred to as E1). Subsequently, E1 and M2 are XORed, the output I2 is input to the DES encryption unit, and is encrypted using the key K1 (output E2). Hereinafter, this is repeated, and encryption processing is performed on all messages. The last EN appears as an electronic signature. This value is generally used as the message authentication code (MAC).
tication Code)) and is used to check for tampering of the message. Such a method of chaining ciphertexts is called a CBC (Cipher Block Chaining) mode.

Note that the MAC value output in the generation example as shown in FIG. 7 includes the check values A and B, the total check value, and the block shown in FIG. 6 in the double frame portion in the data structure shown in FIG. It can be used as the content check values ICV1 to ICVN stored in each block in the information.
At the time of verifying the MAC value, the verifier generates the MAC value in the same manner as at the time of generation, and if the same value is obtained, the verification is determined to be successful.

In the example shown in FIG. 7, the initial value IV is exclusive-ORed with the first 8-byte message M1, but the initial value IV may be set to 0 and the initial value may not be exclusive-ORed. It is possible.

FIG. 8 is a processing configuration diagram showing a MAC value generation method with further improved security compared to the MAC value generation method shown in FIG. FIG. 8 shows the single DE of FIG.
An example is shown in which a MAC value is generated using Triple DES instead of S.

Each Triple DES (Triple D) shown in FIG.
FIG. 9 shows a detailed configuration example of the ES) component. FIG. 9 (a),
As shown in (b), Triple DES (Triple DES)
There are two different aspects of the configuration. FIG. 9 (a)
Shows an example using two encryption keys, and performs an encryption process using a key 1, a decryption process using a key 2, and an encryption process using a key 1 in this order. The keys are K1, K2,
Two types are used in the order of K1. FIG. 9B shows an example in which three encryption keys are used. In this case, an encryption process using a key 1, an encryption process using a key 2, and an encryption process using a key 3 are performed in this order. Perform the conversion process. The key is K1,
Three types of keys are used in the order of K2 and K3. By adopting a configuration in which a plurality of processes are continuously performed, a single DES
The security strength is improved compared to. However, this Triple DES configuration has the disadvantage that the processing time is about three times as long as single DES.

The triple DES described with reference to FIGS. 8 and 9
FIG. 10 shows an example of a MAC value generation configuration with an improved configuration. In FIG. 10, the encryption processing for each message from the beginning to the middle of the message string to be signed is all processing by a single DES, and only the encryption processing for the last message is a triple DES shown in FIG.
(Triple DES) configuration.

With such a configuration shown in FIG. 10, the processing time for generating the MAC value of the message is reduced to approximately the same time as the time required for the MAC value generation processing by the single DES, and the security is reduced by the single DES. It is possible to increase the MAC value. The triple DES configuration for the last message is shown in FIG.
It is also possible to adopt a configuration of

(3-2) Digital Signature Using Public Key Encryption Method The above is a method for generating electronic signature data when a common key encryption method is applied as an encryption method. A method for generating an electronic signature using a key cryptosystem will be described with reference to FIG. The processing shown in FIG.
C-DSA ((Elliptic Curve Digital Signature Alg
orithm) and digital signature data generation processing flow using IEEE P1363 / D3). Here, an example in which elliptic curve cryptography (hereinafter, referred to as ECC) is used as the public key cryptosystem will be described. In the data processing device of the present invention, for example, RSA cryptography ((Rivest, Shamir, Adleman), etc. (ANSI X9.31)) in a similar public key cryptosystem other than elliptic curve cryptography
Can also be used.

The steps in FIG. 11 will be described. In step S1, p is a characteristic, a and b are coefficients of an elliptic curve (elliptic curve: y ² = x ³ + ax + b), G is a base point on the elliptic curve, r is an order of G, and Ks is a secret key ( 0 <Ks <
r). In step S2, the hash value of the message M is calculated, and f = Hash (M).

Here, a method of obtaining a hash value using a hash function will be described. The hash function is a function that receives a message, compresses the message into data having a predetermined bit length, and outputs the data as a hash value. With a hash function, it is difficult to predict the input from the hash value (output). When one bit of the data input to the hash function changes, many bits of the hash value change, and the same hash value It has a feature that it is difficult to find different input data. As the hash function, MD4, MD5, SHA-1, or the like may be used, or DES-CBC similar to that described with reference to FIG. 7 or the like may be used. In this case, the MAC (check value: equivalent to ICV), which is the final output value, is the hash value.

Subsequently, in step S3, a random number u (0 <u
<R) is generated, and a coordinate V (Xv, Yv) obtained by multiplying the base point by u is calculated in step S4. The addition and doubling on the elliptic curve are defined as follows.

[0114]

(Equation 1)

Using these, the u times of the point G is calculated (the operation is performed as follows, although the speed is slow, but it is the easiest to understand. G, 2 × G, 4 × G... 2 ⁱ × G (where G is i
(I is the bit position counted from the LSB of u)).

In step S5, c = Xvmod r is calculated. In step S6, it is determined whether or not this value becomes 0. If not, d = [(f + cKs) in step S7.
/ U] mod r is calculated, and it is determined whether or not d is 0 in step S8. If d is not 0, c and d are output as digital signature data in step S9. Suppose r
Is 160 bits long, the digital signature data is 320 bits long.

If c is 0 in step S6, the flow returns to step S3 to generate a new random number again. Similarly, if d is 0 in step S8, the process returns to step S3 to generate a random number again.

(3-3) Verification of Digital Signature Using Public Key Cryptography Next, a method for verifying a digital signature using the public key cryptography will be described.
This will be described with reference to FIG. In step S11, M is a message, p is a characteristic, a and b are coefficients of an elliptic curve (elliptic curve:
y ² = x ³ + ax + b), G is a base point on an elliptic curve, r is an order of G, and G and Ks × G are public keys (0 <Ks
<R). In step S12, it is verified whether the digital signature data c and d satisfy 0 <c <r and 0 <d <r. If this is satisfied, the hash value of the message M is calculated in step S13, and f = Hash (M).
Next, h = 1 / d mod r is calculated in step S14, and h1 = fh mod r, h2 = ch mo in step S15.
Calculate dr.

In step S16, the h already calculated
Using 1 and h2, the point P = (Xp, Yp) = h1 × G
+ H2 · Ks × G is calculated. Since the digital signature verifier knows the public key G and Ks × G, it can calculate a scalar multiple of a point on the elliptic curve as in step S4 in FIG. Then, in step S17, it is determined whether or not the point P is an infinite point. If not, the process proceeds to step S18 (actually, the determination of the infinite point can be made in step S16. That is, P = (X , Y) and Q = (X, -Y), λ cannot be calculated and P + Q is known to be an infinite point.) In step S18, Xp mo
dr is calculated and compared with the digital signature data c. Finally, if the values match, the process proceeds to step S19, where it is determined that the electronic signature is correct.

When it is determined that the electronic signature is correct, it is understood that the data is not falsified and that the person holding the secret key corresponding to the public key has generated the electronic signature.

If the digital signature data c or d does not satisfy 0 <c <r and 0 <d <r in step S12, the flow advances to step S20. Step S17
In step S2, even if point P is a point at infinity,
Go to 0. Furthermore, in step S18, Xp
The process also proceeds to step S20 when the value of mod r does not match the digital signature data c.

If it is determined in step S20 that the digital signature is incorrect, whether the data has been falsified
It can be seen that the person holding the private key corresponding to the public key did not generate the electronic signature.

(3-4) Mutual Authentication Using Common Key Cryptography Next, a mutual authentication method using a common key cryptosystem will be described with reference to FIG.
This will be described with reference to FIG. In FIG. 13, DES is used as the common key cryptosystem, but any other common key cryptosystem may be used as described above. In FIG. 13, first, B generates a 64-bit random number Rb, and transmits Rb and its own ID, ID (b), to A. Upon receiving this, A generates a new 64-bit random number Ra, and Ra, R
b and ID (b) in the order of key Ka in the DES CBC mode.
The data is encrypted using b and returned to B. According to the DES CBC mode processing configuration shown in FIG.
1, Rb corresponds to M2, ID (b) corresponds to M3, initial values:
Outputs E1, E2, and E3 when IV = 0 are cipher text.

[0124] Upon receiving this, B transmits the received data to the key Ka.
b. In the method of decrypting the received data, first, the ciphertext E1 is decrypted with the key Kab to obtain a random number Ra. Next, the ciphertext E2 is decrypted with the key Kab, and the result and E1
Is exclusive-ORed to obtain Rb. Finally, the ciphertext E3 is decrypted with the key Kab, and the result is exclusively ORed with E2 to obtain ID (b). Ra, Rb, I thus obtained
It verifies that Rb and ID (b) of D (b) match those transmitted by B. If this verification passes, B becomes A
Is authenticated as valid.

Next, B generates a session key (Session Key (hereinafter, referred to as Kses)) to be used after authentication (a random number is used as a generation method). And Rb, Ra,
In the order of Kses, the data is encrypted using the key Kab in the DES CBC mode, and is returned to A.

[0126] Upon receiving this, A transmits the received data to the key Ka.
b. The method of decoding the received data is the same as the decoding process of B, and thus the details are omitted here. It verifies that Rb and Ra among the Rb, Ra, and Kses thus obtained match those transmitted by A. If the verification passes, A authenticates B as valid. After mutually authenticating each other, the session key Kse
s is used as a common key for secret communication after authentication.

[0127] If an invalid or inconsistent data is found during the verification of the received data, the process is interrupted assuming that the mutual authentication has failed.

(3-5) Public Key Certificate Next, a public key certificate will be described with reference to FIG.
The public key certificate is a certificate authority in public key cryptography (C
A: A certificate issued by a Certificate Authority. When a user submits his / her own ID and public key to a certificate authority, the certificate authority adds information such as the certificate authority ID and expiration date, and further performs authentication. This is a certificate created by adding a signature by the authority.

The public key certificate shown in FIG. 14 is composed of the certificate version number, the serial number of the certificate assigned by the certificate authority to the certificate subscriber, the algorithm and parameters used for the electronic signature, the name of the certificate authority, the certificate , The name of the relying party (user ID), the public key of the relying party, and the digital signature.

The digital signature includes the version number of the certificate, the serial number of the certificate assigned by the certificate authority to the certificate subscriber, the algorithm and parameters used for the digital signature,
A hash value is generated by applying a hash function to the name of the certification authority, the expiration date of the certificate, the name of the relying party, and the entire public key of the relying party, and a hash value is generated for the hash value. This is data generated using a key. For example, the processing flow described with reference to FIG. 11 is applied to the generation of the digital signature.

The certificate authority issues the public key certificate shown in FIG. 14, updates the expired public key certificate, and prepares an unauthorized person list for rejecting an illegal user. , Management, distribution (revocation of this: Revoca
tion). Further, a public key and a secret key are generated as needed.

On the other hand, when using this public key certificate, the user verifies the digital signature of the public key certificate using the public key of the certificate authority held by the user, and succeeds in verifying the digital signature. After that, the public key is extracted from the public key certificate, and the public key is used. Therefore, all users who use the public key certificate need to hold a common certificate authority public key. The method of verifying the electronic signature is described in FIG.
2, the details are omitted.

(3-6) Mutual Authentication Using Public Key Cryptography Next, a mutual authentication method using a 160-bit elliptic curve cryptosystem, which is a public key cryptosystem, will be described with reference to FIG. In FIG. 15, ECC is used as a public key cryptosystem, but any public key cryptosystem may be used as described above. Also, the key size need not be 160 bits. In FIG. 15, B first generates a 64-bit random number Rb and transmits it to A. A that received this
Generates a new 64-bit random number Ra and a random number Ak smaller than the characteristic p. And the base point G is A
A point Av = Ak × G multiplied by k is obtained, and Ra, Rb, Av
Digital signature for (X coordinate and Y coordinate) Generate Sig and send it back to B along with A's public key certificate. here,
Ra and Rb are 64 bits each, and the X coordinate and Y coordinate of Av are each 160 bits.
Generate a digital signature for the bits. The method of generating the electronic signature has been described with reference to FIG. The public key certificate has also been described with reference to FIG.

A public key certificate, Ra, Rb, Av, electronic signature B that has received Sig, R that A has transmitted
Verify that b matches the one generated by B. As a result, if they match, the digital signature in the public key certificate of A is verified with the public key of the certificate authority, and the public key of A is extracted. Since the verification of the public key certificate has been described with reference to FIG. 14, the details are omitted. Then, using the public key of the extracted A, the digital signature A. Verify Sig. Since the method of verifying the electronic signature has been described with reference to FIG. 12, the details are omitted. After successfully verifying the electronic signature, B authenticates A as valid.

Next, B generates a random number Bk smaller than the characteristic p. And the point B obtained by multiplying the base point G by Bk
v = Bk × G, and a digital signature B.V. for Rb, Ra, Bv (X coordinate and Y coordinate). Generate Sig and send it back to A along with B's public key certificate.

B's public key certificate, Rb, Ra, Av, digital signature A that has received Sig, R that B has transmitted
Verify that a matches the one generated by A. As a result, if they match, the electronic signature in B's public key certificate is verified with the public key of the certificate authority, and B's public key is extracted. Then, using the public key of B, the digital signature B.
Verify Sig. After successfully verifying the electronic signature, A authenticates B as valid.

If both are successfully authenticated, B becomes Bk
XAv (Bk is a random number, but Av is a point on an elliptic curve, so a scalar multiplication of a point on the elliptic curve is required), A calculates Ak × Bv, and calculates the X coordinate of these points The lower 64 bits are used as a session key for subsequent communication (when the common key encryption is a 64-bit key length common key encryption). Of course, the session key may be generated from the Y coordinate, and may not be the lower 64 bits. In the secret communication after the mutual authentication, the transmission data may not only be encrypted with the session key but also may be digitally signed.

In the case of verifying the electronic signature or the verification of the received data, if an invalid or inconsistent is found, the processing is interrupted assuming that the mutual authentication has failed.

(3-7) Encryption Process Using Elliptic Curve Encryption Next, encryption using elliptic curve encryption will be described with reference to FIG. In step S21, Mx, My
Is a message, p is a characteristic, a and b are coefficients of an elliptic curve (elliptic curve: y ² = x ³ + ax + b), G is a base point on the elliptic curve, r is an order of G, G and Ks × G are It is assumed that the public key (0 <Ks <r). In step S22, the random number u is set to 0
It is generated so that <u <r, and the coordinate V obtained by multiplying the public key Ks × G by u is calculated in step S23. The scalar multiplication on the elliptic curve has been described in step S4 in FIG. In step S24, the X coordinate of V is multiplied by Mx to obtain a remainder with p and set to X0. In step S25, the Y coordinate of V is multiplied by My and the remainder is calculated with p and set to Y0. If the length of the message is smaller than the number of bits of p,
My uses a random number, and the decoding unit discards My. In step S26, u × G is calculated, and in step S27, ciphertext u × G, (X0, Y0) is obtained.

(3-8) Decryption Processing Using Elliptic Curve Cryptography Next, decryption using elliptic curve cryptography will be described with reference to FIG. In step S31, u × G,
(X0, Y0) of the encrypted data, p a target number, a, coefficient of the elliptic curve b (elliptic ^{curve: y 2 = x 3 + ax} + b), of order of the base point on the elliptic curve G, the r G , Ks are secret keys (0 <Ks <r). In step s32, the encrypted data u × G is multiplied by the secret key Ks, and the coordinates V (Xv, Y
Find v). In step S33, of the encrypted data,
The X coordinate of (X0, Y0) is extracted, and X1 = X0 / Xv
mod p is calculated, and in step S34, the Y coordinate is extracted, and Y1 = Y0 / Yv mod p is calculated. Then, in step S35, the message is extracted by setting X1 to Mx and Y1 to My. At this time, if My is not a message, Y1 is discarded.

As described above, the secret key is Ks, the public key is G,
By setting Ks × G, a key used for encryption and a key used for decryption can be different keys.

Another example of public key cryptography is RSA.
The cipher is known, but detailed explanation is omitted (PKCS #
1 Version 2 has details).

(3-9) Random Number Generation Processing Next, a random number generation method will be described. As a random number generation method, a true random number generation method in which thermal noise is amplified and generated from its A / D output, and a pseudo random number generation method in which a plurality of linear circuits such as M sequences are generated in combination are known. In addition, a method of generating using a common key encryption such as DES is also known. In this example, a pseudo random number generation method using DES will be described (based on ANSI X9.17).

First, the value of 64 bits obtained from data such as time (when the number of bits is less than or equal to 0, the upper bit is set to 0) is D, the key information used for Triple-DES is Kr, Is S (seed). At this time, the random number R is calculated as follows.

[0145]

(Equation 2)

Here, Triple-DES () uses the first argument as encryption key information and sets the value of the second argument as Tripl
It is assumed that the function is to be encrypted by e-DES, the operation ＾ is exclusive OR in 64-bit units, and the value S finally obtained is updated as a new seed (seed).

Hereinafter, when generating random numbers continuously,
Formulas (2-2) and (2-3) are repeated.

The various processing modes relating to the encryption processing applicable in the data processing apparatus of the present invention have been described above. Next, specific processing executed in the data processing device of the present invention will be described in detail.

(4) Configuration of Data Stored in Recording / Reproducing Device FIG. 18 is a view for explaining the data holding contents of the internal memory 307 included in the recording / reproducing device encryption processing section 302 in the recording / reproducing device 300 shown in FIG. is there.

As shown in FIG. 18, the following keys and data are stored in the internal memory 307. MKake: recording / reproducing device 300 and recording device 400
A master key for a recording device authentication key for generating an authentication key (Authentication and Key Exchange Key (hereinafter, referred to as Kake)) required for a mutual authentication process performed with (see FIG. 3). IVake: Initial value for the recording device authentication key. MKdis: delivery key master key for generating the delivery key Kdis. IVdis: Initial value for distribution key generation. Kicva: A check value A generation key that is a key for generating the check value ICVa. Kicvb: Check value B generation key which is a key for generating check value ICVb. Kivc: Check value ICV of each content block
A content check value generation key that is a key for generating i (i = 1 to N). Kicvt: a total check value generation key that is a key for generating the total check value ICVt. Ksys: a system signature key used to attach a common signature or ICV to the distribution system. Kdev: a recording / reproducer signature key unique to the recording / reproducing device, which differs for each recording / reproducing device and is used by the recording / reproducing device to attach a signature or ICV. IVmem: initial value, initial value used for encryption processing in mutual authentication processing and the like. Common to recording devices. These keys and data are stored in the internal memory 307 included in the recording / reproducing device encryption processing unit 302.

(5) Configuration of Data Stored in Recording Device FIG. 19 is a diagram showing a data holding state on the recording device. In FIG. 19, the internal memory 405 is divided into a plurality of blocks (N blocks in this example), and the following keys and data are stored in each block. IDmem: recording device identification information, identification information unique to the recording device. Kake: an authentication key, an authentication key used for mutual authentication with the recording / reproducing device 300. IVmem: initial value, initial value used for encryption processing in mutual authentication processing and the like. Kstr: a storage key, a block information key, and an encryption key for other content data. Kr: random number generation key, S: seed These data are held in individual blocks.
The external memory 402 holds a plurality of (M in this example) content data, and each holds the data described in FIG. 4 as shown in, for example, FIG. 26 or FIG. 26 and 27 will be described later.

(6) Mutual Authentication Process Between Recording / Reproducing Device and Recording Device (6-1) Outline of Mutual Authentication Process FIG. 20 is a flowchart showing an authentication procedure between the recording / reproducing device 300 and the recording device 400. In step S41, the user inserts the recording device 400 into the recording / reproducing device 300. However, if a recording device capable of contactless communication is used, there is no need to insert it.

When the recording device 400 is set in the recording / reproducing device 300, the recording device detecting means (not shown) in the recording / reproducing device 300 shown in FIG. Next, step S42
, The control unit 301 of the recording / reproducing device 300 controls the recording device 400 via the recording device controller 303.
To send an initialization command. The recording device 400 which has received the message is sent to the control unit 40 of the recording device encryption processing unit 401.
In 3, the command is received via the communication unit 404, and if the authentication completion flag is set, it is cleared. That is, an unauthenticated state is set.

Next, in step S43, the control unit 301 of the recording / reproducing device 300
2 transmits an initialization command. At this time, the recording device insertion port number is also transmitted. By transmitting the recording device insertion port number, even when a plurality of recording devices are connected to the recording / reproducing device 300, authentication processing and data transmission / reception with the plurality of recording devices 400 can be performed at the same time.

In the recording / reproducing apparatus encryption processing section 302 of the recording / reproducing apparatus 300 which has received the initialization command, the control section 306 of the recording / reproducing apparatus encryption processing section 302 sets an authentication completion flag corresponding to the recording device insertion port number. If it is, clear it. That is, an unauthenticated state is set.

Next, in step S44, the control section 301 of the recording / reproducing apparatus 300 specifies a key block number used by the recording device encryption processing section 401 of the recording device 400. The details of the key block number will be described later. In step S45, the control unit 301 of the recording / reproducing device 300 reads the recording device identification information IDmem stored in the specified key block of the internal memory 405 of the recording device 400. In step S46, the control unit 301 of the recording / reproducing device 300 transmits the recording device identification information IDmem to the recording / reproducing device encryption processing unit 302,
Authentication key Kak based on recording device identification information IDmem
e is generated. As a method of generating the authentication key Kake,
For example, it is generated as follows.

[0157]

(Equation 3)

Here, MKake corresponds to the recording / reproducing device 300.
Is a master key for a recording device authentication key for generating an authentication key Kake required for a mutual authentication process performed between the recording device 400 and the recording device 400 (see FIG. 3). The key is stored in the internal memory 307 of the device 300. IDmem is recording device identification information unique to the recording device 400. Further I
Vake is an initial value for a recording device authentication key. In the above equation, DES () is a function for encrypting the value of the second argument with DES using the first argument as an encryption key, and the operation ＾ indicates exclusive OR in 64-bit units.

For example, when the DES configuration shown in FIGS. 7 and 8 is applied, the message M shown in FIGS. 7 and 8 is used as recording device identification information: IDmem, and the key K1 is used as a master key for device authentication key: MKake. , The initial value IV:
The output obtained as IVake is the authentication key Kake.

Next, in step S47, mutual authentication and generation processing of the session key Kses are performed. Mutual authentication is performed between the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 and the encryption / decryption unit 406 of the recording device encryption processing unit 401, and the mediation is performed by the control unit 30 of the recording / reproducing device 300.
One is going.

The mutual authentication processing can be executed, for example, according to the processing described with reference to FIG. FIG.
In the configuration shown in FIG.
0 corresponds to the recording device 400. First, the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 generates a random number Rb, and transmits the random number Rb and its own recording / reproducing device identification information IDdev to the recording device encryption processing unit 401 of the recording device 400. The recording / reproducing device identification information I
Ddev is an identifier unique to the playback device stored in the storage unit configured in the recording / playback device 300. The recording / reproducing device identification information ID is stored in the internal memory of the recording / reproducing device encryption processing section 302.
The dev may be recorded.

Random number Rb and recording / reproducing device identification information IDd
The recording device encryption processing unit 401 of the recording device 400 that has received the ev generates a new 64-bit random number Ra, and generates the authentication key Kake in the DES CBC mode in the order of Ra, Rb, and the recording / reproducing device identification information IDdev. Then, the data is encrypted and sent back to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. For example, DES C shown in FIG.
According to the BC mode processing configuration, Ra is M1 and Rb is M
2. IDdev corresponds to M3, initial value: IV = IVm
Outputs E1, E2, and E3 when em is the cipher text.

The recording / reproducing device encryption processing section 302 of the recording / reproducing device 300 which has received the ciphertexts E1, E2, E3 decrypts the received data with the authentication key Kake. The received data is decrypted by first decrypting the ciphertext E1 with the authentication key Kake, and performing an exclusive OR operation on the result and IVmem to obtain a random number R
Obtain a. Next, the ciphertext E2 is decrypted with the authentication key Kake, and the result is exclusively ORed with E1 to obtain Rb. Lastly, the ciphertext E3 is decrypted with the authentication key Kake, and the result and E2 are exclusive-ORed to obtain the recording / reproducing device identification information IDd.
ev. Of the Ra, Rb, and recording / reproducing device identification information IDdev thus obtained, it is verified whether Rb and the recording / reproducing device identification information IDdev match those transmitted by the recording / reproducing device 300. If the verification passes, the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300
00 is authenticated as valid.

Next, the recording / reproducing device encryption processing section 302 of the recording / reproducing device 300 transmits the session key (Sess
An ion Key (hereinafter referred to as Kses) is generated (a random number is used as a generation method). And Rb, Ra, Kse
In the order of s, encryption is performed using the key Kake and the initial value IVmem in the DES CBC mode, and the encrypted data is returned to the recording device encryption processing unit 401 of the recording device 400.

The recording device encryption processing unit 401 of the recording device 400 that has received the data converts the received data into a key Kake.
To decrypt. The method of decrypting the received data is the same as the decryption process in the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and thus the details are omitted here. Of the Rb, Ra, Kses thus obtained, Rb and Ra
Verify that it matches the one transmitted by the recording device 400. If the verification passes, the recording device encryption processing unit 401 of the recording device 400 authenticates the recording / reproducing device 300 as valid. After mutually authenticating each other, the session key Kses is used as a common key for secret communication after authentication.

[0166] In the case of verification of received data, if an invalid or mismatch is found, the process is interrupted assuming that mutual authentication has failed.

If the mutual authentication succeeds, step S
From 48, to step S49, where the session key Kses
Is stored in the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and an authentication completion flag indicating that the mutual authentication has been completed is set. If the mutual authentication has failed, the process proceeds to step S50, where the session key Kses generated in the authentication process is discarded, and the authentication completion flag is cleared. Note that the clearing process is not always necessary when the data has already been cleared.

When the recording device 400 is removed from the recording device insertion slot, the recording device detecting means in the recording / reproducing device 300 determines that the recording device 400 has been removed by the control section 301 of the recording / reproducing device 300. And the control unit 301 of the recording / reproducing device 300 receiving the
The recording / reproducing apparatus 300 of the recording / reproducing apparatus 300 is instructed to clear the authentication completion flag corresponding to the recording device insertion slot number.
The recording / reproducing device encryption processing unit 302 clears the authentication completion flag corresponding to the recording device insertion port number.

Here, an example in which the mutual authentication process is executed according to the procedure shown in FIG. 13 has been described.
Not limited to the above-described authentication processing example, for example, FIG.
5 may be performed. In the procedure shown in FIG. 13, A in FIG. 13 is the recording / reproducing device 300, B is the recording device 400, and B: The ID that the recording device 400 sends first to the recording / reproducing device 300 is the ID in the recording device. Mutual authentication processing may be performed as the recording device identification information in the key block. Various processes can be applied to the authentication processing procedure executed in the present invention, and the present invention is not limited to the above-described authentication processing.

(6-2) Switching of Key Blocks During Mutual Authentication One feature of the mutual authentication processing in the data processing apparatus of the present invention is that a plurality of key blocks (ex. N key blocks) are provided on the recording device 400 side. And the recording / reproducing device 300 designates one key block (step S44 in the processing flow of FIG. 20) and executes the authentication process. As described earlier with reference to FIG. 19, the internal memory 4 included in the encryption processing unit 401 of the recording device 400
05 has a plurality of key blocks formed therein, each of which stores various data such as different key data and ID information. The mutual authentication process performed between the recording / reproducing device 300 and the recording device 400 described with reference to FIG. 20 is performed on one of the plurality of key blocks of the recording device 400 in FIG.

Conventionally, in a configuration in which a mutual authentication process is performed between a storage medium and a reproducing apparatus thereof, a common key: a common authentication key is used for mutual authentication. Therefore, for example, when the authentication key is changed for each product destination (by country) or for each product, the key data required for the authentication processing on the recording / reproducing device side and the recording device side must be changed in both devices. Is required. Therefore, for example, the key data required for the authentication processing stored in the newly released recording / reproducing device does not correspond to the key data required for the authentication processing stored in the previously sold recording device, and a new key data is required. The recording / reproducing device may not be able to access the old version of the recording device. Conversely, a similar situation occurs in the relationship between the new version of the recording device and the old version of the recording / reproducing device.

In the data processing device according to the present invention, FIG.
As shown in FIG. 9, key blocks as a plurality of different key sets are stored in the recording device 400 in advance. In the recording / reproducing device, a key block to be applied to the authentication process, that is, a designated key block is set for each product destination (by country), or for each product, model, version, and application. This setting information is stored in a memory unit of the recording / reproducing device, for example, the internal memory 307 in FIG. 3 or another storage element of the recording / reproducing device 300, and is accessed by the control unit 301 in FIG. A key block is specified according to the setting information.

The master key MKake for the recording device authentication key in the internal memory 307 of the recording / reproducing apparatus 300 is an authentication key master key set according to the setting of each designated key block, and can correspond only to the designated key block. Therefore, mutual authentication with key blocks other than the designated key block is not established.

As can be understood from FIG. 19, N key blocks 1 to N are set in the internal memory 405 of the recording device 400, and recording device identification information, an authentication key, an initial value, A storage key, a random number generation key, and a seed are stored, and at least key data for authentication is stored as different data for each block.

As described above, the key data structure of the key block of the recording device 400 is different for each block. Therefore, for example, a key block in which a certain recording / reproducing apparatus A can perform an authentication process using the master key MKake for a recording device authentication key stored in the internal memory is a key block N
o. 1, and a key block that can be authenticated by the recording / reproducing device B of another specification is another key block, for example, a key block N
o. 2 can be set.

As will be described in more detail later, when the content is stored in the external memory 402 of the recording device 400, the content is encrypted using the storage key Kstr stored in each key block and stored. Become. More specifically, a content key for encrypting a content block is encrypted with a storage key.

As shown in FIG. 19, the storage key is configured as a different key for each block. Therefore, between two recording / reproducing units set to specify different key blocks, the content stored in the memory of one recording device is prevented from being commonly used by both. That is, a recording / reproducing device having different settings can use only contents stored in a recording device that matches each setting.

It should be noted that the data that can be shared for each key block can be shared. For example, only the key data for authentication and the storage key data may be configured to be different.

As a specific example of configuring a key block including a plurality of different key data in such a recording device,
For example, there is an example in which a key block number to be designated is set differently for each model (stationary type, portable type, etc.) of the recording / reproducing device 300, or a designated key block is set differently for each application. Further, for a recording / reproducing device sold in Japan, for example, the designated key block is set to N
o. 1, the recording / reproducing device sold in the United States assigns the designated key block No. It is also possible to adopt a configuration in which a different key block setting is performed for each region such as 2. With such a configuration, contents used in different sales regions and stored with different storage keys in the recording device can be transferred from the United States to Japan or from Japan to the United States by a recording device such as a memory card. Even if it has been
Since it is impossible to use it with a recording / reproducing device with a different key setting, unauthorized use of contents stored in memory,
Disordered distribution can be prevented. Specifically, the content key Kcon encrypted with the different storage key Kstr is 2
The state of mutual availability between countries can be eliminated.

Further, the recording device 400 shown in FIG.
At least one of key blocks 1 to N of the internal memory 405 of the The N key blocks may be configured as key blocks that can be commonly used in any of the recording / reproducing devices 300.

For example, the key block No. is assigned to all devices. N
Key MKa for a recording device authentication key that can be authenticated with
By storing “ke”, it is possible to handle the content as a distributable content irrespective of the type of the recording / reproducing device 300, each application, each destination country, and the like. For example, the key block No. The encrypted content stored in the memory card with the storage key stored in N is a content that can be used in all devices. For example, music data or the like is encrypted with a storage key of a commonly available key block and stored in a memory card, and the memory card is stored in a memory card, for example, a portable voice storing a master key MKake for a common recording device authentication key. By setting it on a playback device or the like, it is possible to perform decoding and playback processing of data from a memory card.

FIG. 21 shows an example of using a recording device having a plurality of key blocks in the data processing apparatus of the present invention. The recording / reproducing device 2101 is a recording / reproducing device for products for Japan, and has a key block No. of a recording device. It has a master key for which the authentication process between 1 and 4 is established. The recording / reproducing device 2102 is a recording / reproducing device of a product for US, and has a key block No. of a recording device. It has a master key for which the authentication process between 2 and 4 is established. Recording / reproducing device 2
Reference numeral 103 denotes a recording / reproducing device of a product for the EU, which is a key block No. of a recording device. It has a master key for which the authentication process between 3 and 4 is established.

For example, the recording / reproducing device 2101 has been authenticated with the key block 1 or the key block 4 of the recording device A 2104, and has performed encryption processing via the storage key stored in each key block. Content is stored in the external memory. The recording / reproducing unit 2102 establishes authentication with the key block 2 or the key block 4 of the recording device B 2105, and stores the content that has been subjected to encryption processing via the storage key stored in each key block in the external memory. Is stored in The recording / reproducing device 2103 authenticates with the key block 3 or the key block 4 of the recording device C 2106, and stores the content that has been subjected to the encryption processing via the storage key stored in each key block in the external memory. Is stored in Here, when the recording device A 2104 is attached to the recording / reproducing device 2102 or the recording / reproducing device 2103, the content encrypted by the storage key of the key block 1 is subjected to the recording / reproducing device 2102, the recording / reproducing device 2103.
Since the authentication between the key block 1 and the key block 1 is not established, the key block 1 cannot be used. On the other hand, the content that has been encrypted using the storage key of the key block 4 can be used because authentication is established between the recording / reproducing device 2102, the recording / reproducing device 2103, and the key block 4.

As described above, in the data processing apparatus of the present invention, a key block composed of a plurality of different key sets is formed in a recording device, while a master capable of authenticating a specific key block is provided in a recording / reproducing apparatus. Since the configuration is such that the key is stored, it is possible to set content usage restrictions according to various usage modes.

It is also possible to designate a plurality of key blocks which can be designated in one recording / reproducing device, for example, 1 to k, and a plurality of key blocks which can be designated in other recording / reproducing devices, such as p to q. Yes, and a configuration in which a plurality of commonly available key blocks may be provided.

(7) Download processing from recording / reproducing device to recording device Next, in the data processing apparatus of the present invention, the recording / reproducing device 3
A process of downloading content from 00 to the external memory of the recording device 400 will be described.

FIG. 22 is a flowchart for explaining a procedure for downloading content from the recording / reproducing device 300 to the recording device 400. In FIG. 22, it is assumed that the above-described mutual authentication processing has already been completed between the recording / reproducing device 300 and the recording device 400.

At step S51, the recording / reproducing device 30
The control unit 301 of “0” reads data according to a predetermined format from the medium 500 storing the content using the reading unit 304, or receives data according to the predetermined format from the communication unit 600 using the communication unit 305. Then, the control unit 301 of the recording / reproducing device 300
Transmits the header portion (see FIG. 4) of the data to the recording / reproducing device encryption processing section 302 of the recording / reproducing device 300.

Next, in step S52, the control unit 306 of the recording / reproducing device encryption processing unit 302, which has received the header in step S51, performs the recording / reproducing device encryption processing unit 3 operation.
02 causes the encryption / decryption unit 308 to calculate the check value A. As shown in FIG. 23, the check value A uses the check value A generation key Kicva stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and uses the identification information (Co
The calculation is performed according to the ICV calculation method described with reference to FIG. The initial value IV may be set to IV = 0, or the check value A generating initial value IVa may be stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 and used. Finally, the check value A is compared with the check value: ICVa stored in the header. If they match, the process proceeds to step S53.

As described above with reference to FIG. 4, the check values A and ICVa are check values for verifying falsification of the identification information and the handling policy. Recorder / reproducer encryption processor 30
The check value calculated in accordance with the ICV calculation method described with reference to FIG. 7 using the check value A generation key Kicva stored in the internal memory 307 as a key and the identification information (Content ID) and the handling policy (Usage Policy) as messages. A
Is the check value stored in the header (Header): IC
If it matches Va, it is determined that there is no falsification of the identification information and the handling policy.

Next, in step S53, the control section 306 of the recording / reproducing apparatus encryption processing section 302 sets the delivery key Kdis
Is generated by the encryption / decryption unit 308 of the recording / reproducing unit encryption processing unit 302. The distribution key Kdis is generated as follows, for example.

[0192]

(Equation 4)

Here, MKdis is a delivery key master key for generating the delivery key Kdis, which is a key stored in the internal memory of the recording / reproducing device 300 as described above. The Content ID is identification information of a header portion of the content data, and further includes an IVdi.
s is the initial value for the distribution key. In the above equation,
DES () is a function for encrypting the value of the second argument using the first argument as an encryption key, and the operation ＾ indicates exclusive OR in 64-bit units.

In step S54, the control section 306 of the recording / reproducing apparatus encryption processing section 302 uses the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to execute step S5.
3. Using the delivery key Kdis generated in step 3, the reading unit 30
4 or the communication unit 3
A decryption process is performed on the block information key Kbit and the content key Kcon (see FIG. 4) stored in the header of the data received from the communication unit 600 via the communication unit 05. As shown in FIG. 4, the block information key Kbit and the content key Kcon are previously encrypted by a distribution key Kdis on a medium such as a DVD or a CD or a communication path such as the Internet.

Further, in step S55, the control section 306 of the recording / reproducing apparatus encryption processing section 302 uses the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to transmit the block information key Kbit decrypted in step S54. Decrypts the block information (BIT). As shown in FIG. 4, the block information (BIT) is previously encrypted by a block information key Kbit on a medium such as a DVD or a CD or on a communication path such as the Internet.

Further, in step S56, the control section 306 of the recording / reproducing apparatus encryption processing section 302 divides the block information key Kbit, the content key Kcon and the block information (BIT) into 8-byte units, and divides them all into exclusive logical units. Add (any operation such as addition or subtraction may be used). Next, the control unit 30 of the recording / reproducing device encryption processing unit 302
Reference numeral 6 denotes an encryption / decryption unit 3 of the recording / reproducing device encryption processing unit 302.
08 is caused to calculate a check value B (ICVb). As shown in FIG. 24, the check value B is obtained by using the check value B generation key Kicvb stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and encrypting the exclusive OR value calculated earlier with DES. And generate it. Finally, the check value B is compared with the ICVb in the Header, and if they match, the process proceeds to Step S57.

As described above with reference to FIG. 4, the check values B and ICVb are check values for verifying tampering of the block information key Kbit, the content key Kcon, and the block information (BIT). Recorder / reproducer encryption processor 3
Check value B stored in the internal memory 307 of No. 02
Using the generated key Kicvb as a key, a block information key Kbit,
The value obtained by dividing the content key Kcon and the block information (BIT) into 8-byte units and performing an exclusive OR operation is represented by D
The check value B generated by encrypting with ES is the header (He
check value stored in ader): If the check value matches ICVb, the block information key Kbit and the content key Kc
on, it is determined that the block information has not been tampered with.

In step S57, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate an intermediate check value. As shown in FIG. 25, as the intermediate check value, the total check value generation key Kicvt stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 is used as a key, and the check value A in the verified header (Header) is The check value B and all the held content check values are calculated as messages according to the ICV calculation method described in FIG. Even if the initial value IV = 0, the initial value IVt for generating a total check value may be stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 and used.
Further, the generated intermediate check value is stored in the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 as necessary.

This intermediate check value is generated by using the check value A, the check value B, and all the content check values as a message. This may be performed by a check value comparison process. However, in the present embodiment, the non-falsification verification process as shared data of the entire system and the verification process for identifying as occupied data occupied only by each recording / reproducing device 300 after the download process can be executed separately. Therefore, a plurality of different check values from the intermediate check value, that is, the total check value ICVt and the recording / reproducing device-specific check value I
CVdev can be generated separately based on the intermediate check value. These check values will be described later.

Control unit 30 of recording / reproducing device encryption processing unit 302
Reference numeral 6 denotes an encryption / decryption unit 3 of the recording / reproducing device encryption processing unit 302.
08 is made to calculate the total check value ICVt. As shown in FIG. 25, the total check value ICVt is determined by using the system signature key Ksys stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key and setting the intermediate check value to DES.
Generated by encryption. Lastly, the generated total check value ICVt is compared with the ICVt in the Header stored in step S51.
Proceed to 58. The system signature key Ksys is a signature key common to a plurality of recording / reproducing devices, that is, an entire system set that executes recording / reproducing processing of certain data.

As described above with reference to FIG. 4, the total check value ICVt is a check value for verifying tampering of all the check values of ICVa, ICVb, and each content block. Therefore, if the total check value generated by the above processing matches the check value: ICVt stored in the header (Header), ICVa, ICV
b, It is determined that all check values of each content block have not been tampered with.

Next, in step S58, the control unit 301 of the recording / reproducing device 300 extracts the content block information in the block information (BIT) and checks whether the content block is to be verified. If the content block is to be verified, the content check value is stored in the block information in the header.

If the content block is to be verified, the corresponding content block is read from the medium 500 by using the reading unit 304 of the recording / reproducing device 300, or by using the communication unit 305 of the recording / reproducing device 300. It is received from the communication unit 600 and transmitted to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. The control unit 306 of the recording / reproducing device encryption processing unit 302 that has received this causes the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 to calculate the content intermediate value.

The content intermediate value is obtained by decrypting the input content block in the DES CBC mode with the content key Kcon decrypted in step S54, dividing the result into 8-byte units, and performing exclusive OR (addition, addition,
Any operation such as subtraction may be performed).

Next, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate a content check value. The content check value is determined by using the content check value generation key Kivc stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and setting the content intermediate value to DE.
Generated by encrypting with S. Then, the control unit 306 of the recording / reproducing device encryption processing unit 302 compares the content check value with the control unit 301 of the recording / reproducing device 300 in step S51.
Compare the ICV in the content block received from
The result is passed to the control unit 301 of the recording / reproducing device 300. If the verification is successful, the control unit 301 of the recording / reproducing device 300 fetches the next content block to be verified and causes the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 to verify the content block. The same verification process is repeated until the block is verified. In addition, Header
If it is combined with the generation side, even if IV = 0, the content check value generation initial value IVc may be stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 and used. In addition, all the checked content check values are stored in the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. Furthermore, the recording / reproducing device 300
The recording / reproducing device encryption processing unit 302 monitors the verification order of the content blocks to be verified, and if the order is wrong or if the same content block is verified twice or more, the authentication failed. And Then, when all the verifications succeed, the process proceeds to step S59.

Next, in step S59, the recording / reproducing device encryption processing section 302 of the recording / reproducing device 300 performs the processing in step S59.
The encryption / decryption unit 308 of the recording / reproducing unit encryption processing unit 302 encrypts the block information key Kbit and the content key Kcon decrypted at 54 with the session key Kses shared at the time of mutual authentication. . Recording / reproducing device 30
0 reads the block information key Kbit and the content key Kcon encrypted with the session key Kses from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and reads these data from the recording device of the recording / reproducing device 300. The data is transmitted to the recording device 400 via the controller 303.

Next, in step S60, the recording device 400 receiving the block information key Kbit and the content key Kcon transmitted from the recording / reproducing device 300.
Causes the encryption / decryption unit 406 of the recording device encryption processing unit 401 to decrypt the received data with the session key Kses shared during mutual authentication, and stores the decrypted data in the internal memory 405 of the recording device encryption processing unit 401. It is re-encrypted with the stored storage device-specific storage key Kstr. Finally, the control unit 301 of the recording / reproducing device 300
Then, the block information key Kbit and the content key Kcon re-encrypted with the storage key Kstr are read from the recording device 400 via the recording device controller 303 of 00. Then, these keys are replaced with a block information key Kbit and a content key Kcon encrypted with the distribution key Kdis.

At step S61, the recording / reproducing device 30
0, the control unit 301 controls the handling policy (Us
age policy), the downloaded content can be used only by the recording / reproducing device 300 (in this case, the usage constraint information is set to 1) or can be used by another similar recording / reproducing device 300 (this In this case, it is determined whether the usage restriction information is set to 0). If the result of the determination is that the use restriction information is 1, the flow proceeds to step S62.

[0209] In step S62, the recording / reproducing device 30
The control unit 301 of 0 causes the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 to calculate a check value unique to the recording / reproducing device. As shown in FIG. 25, the check value unique to the recording / reproducing device is determined by using the recording / reproducing device signature key Kdev stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key and storing the intermediate value held in step S58. Check value DES
Generated by encryption. The calculated check value ICVdev unique to the recording / reproducing device is overwritten instead of the total check value ICVt.

As described above, the system signature key Ks
ys is a system signature key used to attach a common signature or ICV to the distribution system, and the recording / reproducing device signature key Kdev differs for each recording / reproducing device. Recording / reproducing device signature key used for That is, the system signature key Ksys
The data signed by is successfully checked by a system (recording / reproducing device) having the same system signature key,
That is, since the total check values ICVt match, they can be commonly used.
v, the recording / reproducing device signature key is a key unique to the recording / reproducing device. Therefore, data signed using the recording / reproducing device signature key Kdev, that is, after the signature, the recording device When the recording device is mounted on another recording / reproducing device and the recording device is to be reproduced, the check value ICVdev unique to the recording / reproducing device does not match, and an error occurs.

[0211] Therefore, in the data processing apparatus of the present invention, by setting the use restriction information, it is possible to freely set contents that can be used in common to the system and contents that can be used uniquely for the recording / reproducing device.

In step S63, the recording / reproducing device 30
0 of the recording device 400
In the external memory 402.

FIG. 26 is a diagram showing the content status in the recording device when the use restriction information is 0. FIG. 27 is a diagram showing the content status in the recording device when the use restriction information is 1. FIG. 26 differs from FIG. 4 only in that the content block information key Kbit and the content key Kcon are encrypted with the distribution key Kdis or the storage key Kstr.
27 is different from FIG. 26 in that the check value calculated from the intermediate check value is encrypted with the system signature key Ksys in FIG. 26, whereas in FIG. That is, it is encrypted with the device signature key Kdev.

In the processing flow of FIG. 22, if the verification of the check value A fails in step S52, if the verification of the check value B fails in step S56, the verification of the total check value ICVt fails in step S57. If the verification of the content check value of each content block fails in step S58, the process proceeds to step S6.
Proceed to 4 to display a predetermined error.

In step S61, the use restriction information is set to 0.
If it is, the process skips step S62 and proceeds to step S63.

(8) Reproducing Process of Information Stored in Recording Device by Recording / Reproducing Device Next, a reproducing process of the content information stored in the external memory 402 of the recording device 400 by the recording / reproducing device 300 will be described.

FIG. 28 is a flowchart for explaining a procedure in which the recording / reproducing device 300 reads out content from the recording device 400 and uses the content. Also in FIG. 28, it is assumed that mutual authentication has already been completed between the recording / reproducing device 300 and the recording device 400.

At step S71, the recording / reproducing device 30
0 of the recording device controller 303
The content is read from the external memory 402 of the recording device 400 by using. Then, the control unit 301 of the recording / reproducing device 300 transmits the header portion of the data to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. Step S72 is the same process as step S52 described in “(7) Download process from recording / reproducing device to recording device”, and the control unit 306 of the recording / reproducing device encryption processing unit 302 that has received the header, This is a process of causing the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 to calculate the check value A. Check value A is
The check value stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as shown in FIG.
A generation key Kicva as a key, identification information (Content ID)
And a usage policy as a message, and is calculated according to the same ICV calculation method as described with reference to FIG.

As described above, check values A, ICV
“a” is a check value for verifying falsification of the identification information and the handling policy. Check value A generation key Kicv stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302
a as a key, identification information (Content ID) and handling policy (Usag
e Policy) as a message, the check value A calculated according to the ICV calculation method described in FIG.
If the check value stored in er) matches the ICVa, it is determined that the identification information and the handling policy stored in the recording device 400 have not been tampered with.

Next, in step S73, the control unit 301 of the recording / reproducing device 300 causes the read header (Header
r) From the part, the block information key Kbit and the content key K
The con is taken out and transmitted to the recording device 400 via the recording device controller 303 of the recording / reproducing device 300. The recording device 400 that has received the block information key Kbit and the content key Kcon transmitted from the recording / reproducing device 300 transmits the received data to the encryption / decryption unit 406 of the recording device encryption processing unit 401, and to the recording device encryption processing unit 401. Is decrypted using the storage device-specific storage key Kstr stored in the internal memory 405, and is re-encrypted using the session key Kses shared during mutual authentication. Then, the control unit 301 of the recording / reproducing device 300
Is the recording device controller 30 of the recording / reproducing device 300.
3, the session key Kse from the recording device 400.
The block information key Kbit and the content key Kcon re-encrypted in s are read.

Next, in step S74, the control section 301 of the recording / reproducing apparatus 300 sets the received session key Ks
The block information key Kbit and the content key Kcon re-encrypted in es are transmitted to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300.

The recording / reproducing device encryption processing section 302 of the recording / reproducing device 300 that has received the block information key Kbit and the content key Kcon re-encrypted with the session key Kses,
Encryption / decryption unit 308 of recording / reproducing device encryption processing unit 302
Then, the block information key Kbit and the content key Kcon encrypted with the session key Kses are decrypted with the session key Kses shared at the time of mutual authentication.
Then, the block information received in step S71 is decrypted with the decrypted block information key Kbit.

Note that the recording / reproducing device encryption processing section 302 of the recording / reproducing device 300 outputs the decrypted block information key Kbit,
The content key Kcon and the block information BIT are transmitted to the block information key Kbi received in step S71.
t, the content key Kcon and the block information BIT. Further, the control unit 301 of the recording / reproducing device 300 reads out the decrypted block information BIT from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 in advance.

Step S75 is the same process as step S56 described in "(7) Download process from recording / reproducing device to recording device". The control unit 306 of the recording / reproducing device encryption processing unit 302 reads the block information key Kbit and the content key K read from the recording device 400.
The con and the block information (BIT) are divided into 8-byte units, and all of them are exclusive ORed. Next, the control unit 306 of the recording / reproducing device encryption processing unit 302 sends the check value B to the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302.
(ICVb) is calculated. The check value B is, as shown in FIG.
Using the check value B generation key Kicvb stored in the internal memory 307 as a key, the exclusive OR value calculated previously is encrypted with DES and generated. Finally, check value B
Is compared with the ICVb in the Header. If they match, the process proceeds to Step S76.

As described above, the check values B, IC
Vb is the block information key Kbit and the content key Kco
n is a check value for verifying tampering of block information. Internal memory 307 of recording / reproducing device encryption processing unit 302
The block information key Kbit, the content key Kcon, and the block information (BIT) read from the recording device 400 are obtained by dividing the block information key Kbit, the content key Kcon, and the block information (BIT) into 8-byte units by using the check value B generation key Kicvb stored as a key as an exclusive OR. Check value B generated by encrypting the value with DES
Is equal to the check value: ICVb stored in the header in the data read from the recording device 400, the block information key Kbit, the content key Kcon,
It is determined that the block information has not been tampered with.

In step S76, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate an intermediate check value. The intermediate check value is stored in the internal memory 30 of the recording / reproducing device encryption processing unit 302 as shown in FIG.
7, the check value A and the check value B in the verified header (Header) and all the held content check values are used as messages using the total check value generation key Kicvt stored in the key 7 as a message. It is calculated according to the ICV calculation method described above. Note that even if the initial value is IV = 0,
The IVt may be stored as the initial value for total check value generation in the internal memory 307 of the recording / reproducing device encryption processing unit 302, and may be used. Further, the generated intermediate check value is stored in the recording / reproducing device encryption processing unit 3 of the recording / reproducing device 300 as necessary.
02.

Next, in step S77, the control section 301 of the recording / reproducing apparatus 300 extracts use restriction information from the usage policy included in the header part of the data read from the external memory 402 of the recording device 400, The downloaded content is stored in the recording / reproducing device 30.
It is determined whether it can be used only with 0 (use restriction information is 1) or can be used by another similar recording / reproducing device 300 (use restriction information is 0). As a result of the determination, the usage restriction information is 1, that is, the downloaded content is
If the use restriction that can be used only with 0 is set, the process proceeds to step S80. If the use restriction information is 0, that is, the setting is such that it can be used by another similar recording / reproducing device 300, the process proceeds to step S78. move on. The processing in step S77 may be performed by the encryption processing unit 302.

In step S78, the calculation of the total check value ICVt is performed in the same manner as in step S58 described in (7) Download processing from the recording / reproducing device to the recording device. That is, the recording / reproducing device encryption processing unit 3
The 02 control unit 306 causes the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 to calculate the total check value ICVt. The total check value ICVt is the same as that of FIG.
As shown in (1), the intermediate check value is generated by encrypting the intermediate check value with DES using the system signature key Ksys stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key.

Next, the process proceeds to a step S79, wherein a step S79 is executed.
The total check value ICVt generated in 78 and the ICVt in the header saved in step S71.
Are compared, and if they match, the process proceeds to step S82.

As described above, the total check value ICV
t is a check value for verifying tampering of all the check values of the ICVa, ICVb, and each content block. Therefore, the total check value generated by the above-described processing is the check value stored in the header (Header): IC
If it matches the Vt, it is determined that the data stored in the recording device 400 has not been tampered with for all the check values of the ICVa, ICVb, and each content block.

If it is determined in step S77 that the downloaded content is a setting that can be used only by the recording / reproducing device 300, that is, if the setting information is 1, the process proceeds to step S80.

In step S80, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate a check value ICVdev unique to the recording / reproducing apparatus. The check value ICVdev unique to the recording / reproducing device is stored in the internal memory 30 of the recording / reproducing device encryption processing unit 302 as shown in FIG.
7, the intermediate check value is generated by encrypting the intermediate check value with DES using the recording / reproducing device signature key Kdev unique to the recording / reproducing device as a key. In step S81, step S80
The check value ICVdev unique to the recording / reproducing device calculated in step S71 and the ICVde in the header stored in step S71.
v is compared, and if they match, the process proceeds to step S82.

As described above, data signed by the system signature key Ksys is successfully used by a system (recording / reproducing apparatus) having the same system signature key, that is, the total check value ICVt matches, so that it is commonly used When the recording / reproducing apparatus signature key Kdev is signed using the recording / reproducing apparatus signature key Kdev, the recording / reproducing apparatus signature key is a key unique to the recording / reproducing apparatus.
, Ie, data stored in the recording device after the signature, when the recording device is mounted on another recording / reproducing device and is to be reproduced, the check value ICVdev unique to the recording / reproducing device is used. Does not match, and an error occurs, so that reproduction cannot be performed. Therefore, by setting the use restriction information, it is possible to freely set contents that can be used in common to the system and contents that can be used uniquely for the recording / reproducing device.

At step S82, the recording / reproducing device 30
The control unit 301 of 0 extracts the content block information in the block information BIT read out in step S74, and checks whether the content block is to be encrypted. If it was encrypted,
The corresponding content block is transmitted to the recording device 4 via the recording device controller 303 of the recording / reproducing device 300.
00 from the external memory 402 and the recording / reproducing device 30
0 is transmitted to the recording / reproducing device encryption processing unit 302. Upon receiving this, the control unit 306 of the recording / reproducing device encryption processing unit 302
When the content is decrypted by the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302, and when the content block is to be verified, the next step S83 is performed.
The content check value is verified in.

Step S83 is the same process as step S58 described in "(7) Download process from recording / reproducing device to recording device". Recording / reproducing device 30
The control unit 301 of 0 retrieves the content block information in the block information (BIT), determines whether or not the content block is to be verified from the storage state of the content check value, and determines that the content block is to be verified. In this case, the corresponding content block is received from the external memory 402 of the recording device 400 and transmitted to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. The recording / reproducing device encryption processing unit 302 receiving this
Control unit 306 causes the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 to calculate a content intermediate value.

The content intermediate value is generated by decrypting the input content block in the DES CBC mode with the content key Kcon decrypted in step S74, dividing the result into 8 bytes, and performing exclusive OR operation on all the results.

Next, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate a content check value. The content check value is determined by using the content check value generation key Kivc stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and setting the content intermediate value to DE.
Generated by encrypting with S. Then, the control unit 306 of the recording / reproducing device encryption processing unit 302 compares the content check value with the control unit 301 of the recording / reproducing device 300 in step S71.
Compare the ICV in the content block received from
The result is passed to the control unit 301 of the recording / reproducing device 300. If the verification is successful, the control unit 301 of the recording / reproducing device 300 fetches the next content block to be verified and causes the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 to verify the content block. The same verification process is repeated until the block is verified. The initial value is IV
Even when = 0, the initial value IVc for generating a content check value may be stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 and used. In addition, all the checked content values are stored in the recording / reproducing device 300.
In the recording / reproducing device encryption processing unit 302. Furthermore, the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300
Monitors the verification order of the content blocks to be verified, and if the order is incorrect or if the same content block is verified more than once, it is assumed that the authentication has failed.

The control unit 301 of the recording / reproducing apparatus 300 receives the comparison result of the content check value (if not verified, all the comparison results are successful), and if the verification is successful, Then, the decrypted content is extracted from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. Then, the next content block to be decrypted is taken out, and the recording / reproducing device encryption processing section 30 of the recording / reproducing device 300 is taken out.
2, and the process is repeated until all the content blocks are decoded.

[0239] In step S83, when the recording / reproducing apparatus encryption processing unit 302 of the recording / reproducing apparatus 300 does not match in the verification processing of the content check value, the processing is stopped at that point of time as a verification failure, and remains. It does not decrypt the content. In addition, the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 monitors the decryption order of the content blocks to be decrypted, and the order is wrong or the same content block is decrypted twice or more. In this case, it is assumed that the decoding has failed.

If the verification of the check value A fails in step S72, if the verification of the check value B fails in step S75, the total check value IC is determined in step S79.
If the verification of Vt has failed, if the verification of the check value ICVdev unique to the recording / reproducing device has failed in step S81, if the verification of the content check value of each content block has failed in step S83, step S84 is performed.
To perform a predetermined error display.

As described above, when downloading or using content, not only can important data and content be encrypted and concealed, and tampering verification can be performed, but also block information BIT can be decrypted. Since the block information key Kbit for decrypting the content and the content key Kcon for decrypting the content are stored with the storage device-specific storage key Kstr, it is assumed that the data on the storage medium is simply copied to another storage medium. Also, it is possible to prevent the content from being correctly decrypted. More specifically, for example, in step S74 of FIG. 28, a different storage key Ks
This is because, since the data encrypted by tr is decrypted, another recording device has a configuration in which the data cannot be correctly decrypted.

(9) Key Exchange Processing After Mutual Authentication One of the features of the data processing apparatus of the present invention is that only after the mutual authentication processing executed between the recording / reproducing apparatus 300 and the recording device 400 described above. In addition, the recording device can be used, and its use mode is limited.

For example, a recording / reproducing device 300 and a recording / reproducing device 300 are used in order to generate a recording device such as a memory card in which contents are stored by illegal duplication or the like, and to set the recording device in a recording / reproducing device to prevent use. The contents (encrypted) can be transferred between the recording / reproducing device 300 and the recording device 400 on condition that mutual authentication processing is performed between the devices 400 and that the authentication is OK.

In order to realize the above-described restricted processing, in the data processing apparatus of the present invention, all processing in the encryption processing unit 401 of the recording device 400 is executed based on a preset command sequence. It has a configuration. That is, the recording device has a command processing configuration for sequentially taking out a command based on a command number from a register and executing the command. FIG. 29 illustrates a command processing configuration in the recording device.

As shown in FIG. 29, between the recording / reproducing apparatus 300 having the recording / reproducing apparatus encryption processing section 302 and the recording device 400 having the recording device encryption processing section 401,
A command number (No.) is output from the recording device controller 303 to the communication unit (including the reception register) 404 of the recording device 400 under the control of the control unit 301 of the recording / reproducing device 300.

[0246] The recording device 400 includes an encryption processing unit 401.
The control unit 403 has a command number management unit 2201. The command number management unit 2901 holds a command register 2902, and stores a command sequence corresponding to a command number output from the recording / reproducing device 300. In the command sequence, as shown on the right side of FIG. 29, command numbers are sequentially associated with execution commands from command numbers 0 to y. Command number management unit 2901
Monitors the command number output from the recording / reproducing device 300, retrieves the corresponding command from the command register 2902, and executes it.

As shown on the right side of FIG. 29, the command sequence stored in the command register 2902 is associated with the command numbers 0 to k preceding the command sequence relating to the authentication processing sequence. Further, the command numbers p to s after the command sequence related to the authentication processing sequence correspond to the decryption, key exchange, and encryption processing command sequence 1, and the subsequent command numbers u to y correspond to the decryption, key exchange, and encryption processing command sequence 2. Is attached.

As described in the authentication processing flow of FIG. 20, when the recording device 400 is mounted on the recording / reproducing device 300, the control unit 301 of the recording / reproducing device 300 controls the recording device via the recording device controller 303. 4
At 00, an initialization command is transmitted. The recording device 400 that has received the command receives the command via the communication unit 404 in the control unit 403 of the recording device encryption processing unit 401,
The authentication flag 2903 is cleared. That is, an unauthenticated state is set. Alternatively, in a case where power is supplied from the recording / reproducing device 300 to the recording device 400, a method may be adopted in which the power is turned on and the device is set to an unapproved state.

Next, the controller 301 of the recording / reproducing device 300
Transmits an initialization command to the recording / reproducing device encryption processing unit 302. At this time, the recording device insertion port number is also transmitted. By transmitting the recording device insertion port number, even when a plurality of recording devices are connected to the recording / reproducing device 300, authentication processing and data transmission / reception with the plurality of recording devices 400 can be performed at the same time.

The recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 that has received the initialization command clears the authentication flag 2904 corresponding to the recording device insertion port number in the control unit of the recording / reproducing device encryption processing unit 302. That is, an unauthenticated state is set.

When these initialization processes are completed, the control section 301 of the recording / reproducing apparatus 300 outputs command numbers sequentially from the command number 0 through the recording device controller 303 in ascending order. The command number management unit 2901 of the recording device 400 monitors the command number input from the recording / reproducing device 300, confirms that the command number is sequentially input from 0, extracts the corresponding command from the command register 2902, performs authentication processing, and the like. Execute various processes. If the input command numbers are not in the prescribed order, it is determined that an error has occurred, and the command number reception value is reset to the initial state, that is, the executable command number = 0.

As shown in FIG.
The command sequence stored in 02 is given a command number so that the authentication process is performed first.
Processing sequences of decryption, key exchange, and encryption processing are stored in the subsequent processing.

A specific example of the processing sequence of the decryption, key exchange, and encryption processing will be described with reference to FIGS.

FIG. 30 shows a part of the process executed in the process of downloading the content from the recording / reproducing device 300 to the recording device 400 described above with reference to FIG. Specifically, it is executed between steps S59 and S60 in FIG.

In FIG. 30, step S3001 is
Data encrypted with a session key Kses (ex. Block information key Kbit, content key K
Con) is received by the recording device, and thereafter, the command strings p to s shown in FIG. 29 are started. The command strings p to s are started after the authentication processing commands 0 to k are completed and the authentication flags 2903 and 2904 shown in FIG. This is guaranteed by the command number management unit 2901 receiving command numbers only in ascending order from 0.

Step S3002 is a process in which the recording device stores data (ex. Block information key Kbit, content key Kcon) encrypted with the session key Kses received from the recording / reproducing device in a register.

Step S3003 determines whether the session key Ks
es encrypted data (ex. block information key Kb
It is a step of taking out the contents key (it, content key Kcon) from the register and decrypting it with the session key Kses.

The step S3004 sets the session key Ks
es decrypted data (ex. block information key Kb
It is a step of executing a process of encrypting (it, content key Kcon) with the storage key Kstr.

The above processing steps 3002 to 3004
Is a process included in the command numbers p to s in the command register described with reference to FIG. These processes are
Command numbers p to s received from the recording / reproducing device 300 in the command number management unit 2901 of the recording device 400
Are sequentially executed by the recording device encryption processing unit 401 according to.

The next step S3005 is that the storage key Kst
r (ex. block information key Kbi)
t, content key Kcon) in the external memory of the recording device. In this step, the recording device encryption processing unit 401
0 reads the data encrypted with the storage key Kstr,
Thereafter, it may be stored in the external memory 402 of the recording device 400.

The above steps S3002 to S3004
Is a non-interruptible execution sequence that is continuously executed. For example, even if there is a data read command from the recording / reproducing device 300 at the end of the decoding process in step S3003, the read command is stored in the command register Since the command numbers in the ascending order set in the command numbers p to s of 2902 are different, the command number management unit 2
901 does not accept execution of reading. Therefore, it is impossible to read decrypted data generated at the time of key exchange in the recording device 400 from outside, for example, from the recording / reproducing device 300, and it is possible to prevent illegal reading of key data and contents.

FIG. 31 shows a part of the processing executed in the content reproduction processing for reading out the content from the recording device 400 and reproducing it in the recording / reproducing device 300 described above with reference to FIG. Specifically, this is the process executed in step S73 in FIG.

In FIG. 31, step S3101 is
The storage key Ks from the external memory 402 of the recording device 400
data encrypted with tr (ex. block information key Kb
It is a step of reading out the content key Kcon).

In step S3102, data (ex. Block information key Kbit, content key Kc) encrypted with storage key Kstr read from the memory of the recording device
on) is stored in a register. In this step, the external memory 40 of the recording device 400
2, the recording / reproducing apparatus 300 may read the data encrypted with the storage key Kstr, and thereafter store the data in the register of the recording device 400.

In step S3103, the data (ex. Block information key Kbit,
This is a step of taking out the content key Kcon) from the register and decrypting it with the storage key Kstr.

In step S3104, the data decrypted with the storage key Kstr (ex. The block information key Kbit,
This is a step of encrypting the content key Kcon) with the session key Kses.

The above processing steps 3102 to 3104
Is a process included in the command numbers u to y in the command register described in FIG. These processes are
In the command number management unit 2901 of the recording device, the recording device encryption processing unit 406 sequentially executes according to the command numbers u to y received from the recording / reproducing device 300.

In the next step S3105, data encrypted with the session key Kses (ex. Block information key K
This is a process of transmitting a bit and a content key Kcon) from the recording device to the recording / reproducing device.

The above steps S3102 to S3104
Is a non-interruptible execution sequence that is continuously executed. For example, even if there is a data read command from the recording / reproducing device 300 at the end of the decoding process in step S3103, the read command is stored in the command register Since the command numbers are different from the ascending command numbers set in the command numbers u to y of the 2902, the command number management unit 2
901 does not accept execution of reading. Therefore, it is impossible to read decrypted data generated at the time of key exchange in the recording device 400 from outside, for example, from the recording / reproducing device 300, and it is possible to prevent illegal reading of key data or content.

In the processing shown in FIGS. 30 and 31, an example is shown in which the objects to be decrypted and encrypted by key exchange are the block information key Kbit and the content key Kcon.
The command sequence stored in the command register 2902 shown in FIG. 29 may include decryption and encryption processing involving key exchange of the content itself. However, the present invention is not limited to this example.

The key exchange processing after mutual authentication in the data processing device of the present invention has been described above. in this way,
The key exchange process in the data processing device of the present invention can be executed only after the authentication process between the recording / reproducing device and the recording device is completed, and further, it is possible to prevent the decrypted data in the key exchange process from being accessed from outside. With this configuration, high security of contents and key data is ensured.

(10) Plural Content Data Formats and Download and Playback Processes Corresponding to Each Format In the above embodiment, for example, the media 500 shown in FIG.
Alternatively, the case has been described where the data format in the communication means 600 is one of the types shown in FIG. However, the data format in the medium 500 or the communication means 600 is not limited to the format shown in FIG. 4 described above, and may be different depending on the content, such as when the content is music, image data, or a program such as a game. It is desirable to adopt a data format that has been adopted. Hereinafter, a plurality of different data formats, a download process to a recording device corresponding to each format, and a reproduction process from the recording device will be described.

FIGS. 32 to 35 show four different data formats. On the left side of each figure, the media 5 shown in FIG.
00 or the data format on the communication means 600, and the data format when stored in the external memory 402 of the recording device 400 is shown on the right side of each drawing. First, the outline of the data formats shown in FIGS. 32 to 35 will be described, and then the content of each data in each format and the difference between the data in each format will be described.

FIG. 32 shows format type 0,
This is the same as the type shown as an example in the above description. The feature of this format type 0 is that the whole data is divided into N data blocks of an arbitrary size, that is, blocks 1 to N, and each block is arbitrarily encrypted, and an encrypted block and an unencrypted block, that is, The point is that data can be configured by mixing plaintext blocks. The block is encrypted by the content key Kcon. The content key Kcon is encrypted on the medium by the delivery key Kdis, and when stored in the recording device, by the storage key Kstr stored in the internal memory of the recording device. Encrypted. As for the block information key Kbit, the distribution key Kd is also displayed on the medium.
is stored in the internal memory of the recording device at the time of storage in the recording device.
It is encrypted by str. These key exchanges are performed in accordance with the process described in “(9) Key exchange process after mutual authentication”.

FIG. 33 shows format type 1,
The format type 1 divides the entire data into N data blocks, that is, blocks 1 to N, similarly to the format type 0. However, the format type 1 has the same size as the N blocks described above. Format type 0. The encryption mode of the block using the content key Kcon is the same as that of the format type 0 described above. Further, the content key Kcon and the block information key Kbit that are encrypted on the medium by the distribution key Kdis and encrypted by the storage key Kstr stored in the internal memory of the recording device when stored in the recording device are also stored in the format type 0. Is the same as The format type 1 is different from the format type 0 and has a fixed block configuration, thereby simplifying configuration data such as the data length of each block.
The memory size of the block information can be reduced as compared with the format type 0.

In the configuration example shown in FIG. 33, each block is composed of a pair of an encrypted part and a non-encrypted (plaintext) part. If the block lengths and configurations are regular as described above, it is not necessary to check each block length and block configuration at the time of decryption processing and the like, so that efficient decryption and encryption processing can be performed. In the format 1, the parts constituting each block, that is, the encrypted part and the non-encrypted (plaintext) part can be defined as check targets for each part. , The content check value ICVi is defined for the block.

FIG. 34 shows format type 2,
The feature of this format type 2 is that it is divided into N data blocks of the same size, that is, block 1 to block N, and each block is encrypted with an individual block key Kblc. The encryption of each block key Kblc is executed by the content key Kcon. The content key Kcon is encrypted on the medium by the delivery key Kdis, and is stored in the internal memory of the recording device at the time of storage in the recording device. It is encrypted with the key Kstr. As for the block information key Kbit, the distribution key Kd is also displayed on the medium.
is stored in the internal memory of the recording device at the time of storage in the recording device.
It is encrypted by str.

FIG. 35 shows format type 3,
The feature of the format type 3 is that, like the format type 2, the data blocks are divided into N data blocks of the same size, that is, blocks 1 to N, and each block is encrypted with an individual block key Kblc. In addition, without using the content key, the encryption of each block key Kblc is performed on the
This is that the data is encrypted with the storage key Kstr on the recording device. The content key Kcon does not exist on the media or on the device. The block information key Kbit is encrypted on the medium by the distribution key Kdis, and when stored in the recording device, is encrypted by the storage key Kstr stored in the internal memory of the recording device.

Next, the contents of the data of the format types 0 to 3 will be described. As described above, data is roughly classified into a header part and a content part. The header part includes a content identifier, a handling policy, check values A and B, a total check value, a block information key, a content key, and a block. Information is included.

The handling policy includes a content data length, a header length, a format type (formats 0 to 3 described below), for example, a content type such as a program or data, and a content recording device. As described in the download and playback sections, a localization flag which is a flag for determining whether or not the content can be used specifically for the recording / reproducing device, a permission flag for copying and moving the content, and a content encryption flag. It stores various kinds of usage restriction information and processing information related to contents, such as a conversion algorithm and a mode.

Check value A: ICVa is a check value for the identification information and the handling policy.
It is generated by the method described in 3.

The block information key Kbit is a key for encrypting the block information. As described above, the block information key Kbit is encrypted on the medium by the delivery key Kdis. Is encrypted with the storage key Kstr stored in

The content key Kcon is a key used for encrypting the content. In the format types 0 and 1, the content key Kcon is encrypted with the delivery key Kdis on the medium in the same manner as the block information key Kbit. It is encrypted by the storage key Kstr stored in the internal memory of the device. In the format type 2, the content key Kcon is also used for encrypting the block key Kblc formed in each content block. In format type 3, there is no content key Kcon.

[0284] The block information is a table describing information of each block, and a flag indicating the size of the block and whether or not each block is encrypted, that is, whether each block is to be checked (ICV). Information indicating whether or not the information is stored is stored. If the block is to be checked, the check value ICVi of the block (the check value of block i) is defined and stored in the table. This block information is stored in a block information encryption key Kbit.
Is encrypted by

The block check value, that is, the content check value ICVi, is a value obtained by performing an exclusive OR operation on the entire plaintext (decrypted text) in 8-byte units when the block is encrypted. 307 is generated as a value encrypted with the content check value generation key Kivc. When the block is not encrypted, the entire block data (plaintext) is set in 8 bytes in units of a falsification check value generation function (DES-CBC-MAC and a content check value generation key Kivc shown in FIG. 36). ) Is generated as the value obtained by inputting FIG. 36 shows the check value IC of the content block.
5 shows a configuration example for generating Vi. Each of the messages M constitutes 8 bytes of the decrypted data or the plaintext data.

In the format type 1, if at least one of the parts in the block is the target data of the check value ICVi, that is, if the part needs to be checked, the content check value ICVi is defined for the block. When the part j is encrypted, the check value P-ICVij of the part j in the block i is a content check value generation key Kicv obtained by exclusive ORing the entire plaintext (decrypted text) in units of 8 bytes.
Generated as a value encrypted with c. If the part j is not encrypted, the entire data (plaintext) of the block of the part is altered in units of 8 bytes, and the tampering check value generation function (DES-CBC-MAC, the content check value generation key Kivc shown in FIG. 36) is used. Is used as a key).

Further, it is shown that one block i is a check target [ICV flag = subject]
of ICV], that is, when there is only one check required part, the check value P-ICVij generated by the above method is used as it is as the check value ICVi of the block, and the check target is included in one block i. [ICV flag = subject
of ICV] when there are multiple parts
A falsification check value generation function (DES-CBC-MA) shown in FIG. 37 in units of 8 bytes for data obtained by concatenating a plurality of part check values P-ICVij in the order of part numbers.
C, the content check value generation key Kivc is used as a key). FIG. 37 shows a configuration example for generating a content check value ICVi of a content block.

In the format types 2 and 3, the check value ICVi of the block is not defined.

Check value B: ICVb is a check value for the block information key, the content key, and the entire block information, and is generated by, for example, the method described with reference to FIG.

The total check value ICVt is the check value A: ICVa, the check value B: ICVb, and the check value for the entire check value ICVi included in each block whose content is to be checked.
Check value A: ICVa as described in FIG.
And the like by applying a system signature key Ksys to an intermediate check value generated from each check value, and performing an encryption process.

In the format types 2 and 3, the total check value ICVt is equal to the check value A:
ICVa, check value B: executes encryption processing by applying a system signature key Ksys to an intermediate check value generated from content data, that is, data obtained by concatenating the entire content data from the block key of block 1 to the last block, to ICVb. Generated by FIG. 38 shows a configuration example for generating the total check value ICVt in format types 2 and 3.

When the above-mentioned localization flag is set to 1, the unique check value ICVdev is
That is, when the content indicates that the content can be used uniquely for the recording / reproducing device, the check value is replaced with the total check value ICVt. In the case of format types 0 and 1, the above-described check value A: ICVa is used. , Check value B: ICVb, and check value ICVi included in each block whose content is to be checked
Generated as a check value for the whole. Specifically, as described with reference to FIG. 25 or FIG. 38, the encryption process is performed by applying the recording / reproducing device signature key Kdev to the intermediate check value generated from each check value such as the check value A: ICVa. Generated by running.

Next, a process of downloading content from the recording / reproducing device 300 to the recording device 400 in each of the format types 0 to 3 and the recording / reproducing device 300
Will be described with reference to the flowcharts of FIGS.

First, the process of downloading content in format types 0 and 1 will be described with reference to FIG.

The process shown in FIG. 39 is started, for example, by mounting the recording device 400 on the recording / reproducing device 300 shown in FIG. Step S101 is an authentication processing step between the recording / reproducing device and the recording device, and is executed according to the authentication processing flow of FIG. 20 described above.

When the authentication processing in step S101 is completed and the authentication flag is set, in step S102, the recording / reproducing apparatus 300 converts, for example, the medium 500 storing the content data into a predetermined format via the reading unit 304. The data is read out according to a predetermined format from the communication means 600 by using the communication unit 305 or the control unit 3 of the recording / reproducing apparatus 300.
01 transmits the header part of the data to the recording / reproducing apparatus encryption processing unit 302 of the recording / reproducing apparatus 300.

Next, in step S103, the control unit 306 of the encryption processing unit 302
The second encryption / decryption unit 308 calculates the check value A. As shown in FIG. 23, the check value A uses the check value A generation key Kicva stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and uses the identification information (Co
ntent ID) and a usage policy (Usage Policy) as a message in accordance with the ICV calculation method described with reference to FIG. Next, in step S104, the check value A and the check value stored in the header (Header): IC
Va are compared, and if they match, step S105
Proceed to.

As described above, check values A and ICV
“a” is a check value for verifying falsification of the identification information and the handling policy. Check value A generation key Kicv stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302
a as a key, identification information (Content ID) and handling policy (Usag
e Policy) as a message, a check value A calculated according to, for example, an ICV calculation method is a header (Header).
If the check value matches ICVa, it is determined that the identification information and the handling policy have not been tampered with.

[0299] Next, in step S105, the control unit 306 of the recording / reproducing device encryption processing unit 302 sets the delivery key Kdi.
s is taken out or generated by the recording / reproducing device encryption processing unit 302
Is performed by the encryption / decryption unit 308. The method of generating the delivery key Kdis is performed using the delivery key master key MKdis, for example, as in step S53 of FIG. 22 described above.

Next, in step S106, the control unit 306 of the recording / reproducing device encryption processing unit 302 reads using the generated distribution key Kdis using the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302. The block information key Kbit and the content key Kcon stored in the header of data received from the communication unit 600 via the medium 500 received via the unit 304 or the communication unit 600 via the communication unit 305.
Is performed.

Further, in step S107, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to decrypt the block information with the decrypted block information key Kbit. Become

Further, in step S108, the control section 306 of the recording / reproducing apparatus encryption processing section 302 generates a check value B (ICVb ') from the block information key Kbit, the content key Kcon and the block information (BIT). As shown in FIG. 24, the check value B is determined by using a check value B generation key Kicvb stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, a block information key Kbit, a content key Kcon, and block information ( BIT) is generated by encrypting the exclusive OR value composed of BIT) with DES. Next, in step S109, the check value B is compared with the ICVb in the header, and if they match, the process proceeds to step S110.

As described above, the check values B, IC
Vb is the block information key Kbit and the content key Kco
n is a check value for verifying tampering of block information. Internal memory 307 of recording / reproducing device encryption processing unit 302
The block information key Kbit, the content key Kcon, and the block information (BIT) are divided into 8-byte units using the check value B generation key Kicvb stored in the key as a key, and a value obtained by exclusive OR is encrypted with DES. If the generated check value B matches the check value: ICVb stored in the header, it is determined that the block information key Kbit, the content key Kcon, and the block information have not been tampered with.

In step S110, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate an intermediate check value. The intermediate check value is, as shown in FIG.
Using the total check value generation key Kicvt stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, the check value A, the check value B, and all the held content check values in the verified Header are The message is calculated according to the ICV calculation method described in FIG.
The generated intermediate check value is stored in the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 as necessary.

Next, in step S111, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate the total check value ICVt '. Total check value ICVt '
25, as shown in FIG.
Signature key K stored in the internal memory 307 of the
Using sys as a key, an intermediate check value is encrypted with DES and generated. Next, in step S112, the generated total check value ICVt 'and the ICV in the header (Header) are set.
t are compared, and if they match, step S113
Proceed to.

As described above with reference to FIG. 4, the total check value ICVt is a check value for verifying the tampering of all the check values of the ICVa, ICVb, and each content block. Therefore, if the total check value generated by the above processing matches the check value: ICVt stored in the header (Header), ICVa, ICV
b, It is determined that all check values of each content block have not been tampered with.

[0307] Next, in step S113, the control section 301 of the recording / reproducing apparatus 300 sets the block information (BIT).
The content block information in the box is extracted, and it is checked whether or not the content block is to be verified. If the content block is to be verified, the content check value is stored in the block information in the header.

[0308] If the content block is to be verified, the corresponding content block is read by the reading unit 30 of the recording / reproducing unit 300 in step S114.
4 or received from the communication means 600 using the communication unit 305 of the recording / reproducing device 300, and transmitted to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300. The recording / reproducing device encryption processing unit 302 receiving this
Control unit 306 causes the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 to calculate the content check value ICVi ′.

[0309] The content check value ICVi 'is such that, when the block is encrypted as described above, the input content block is decrypted with the content key Kcon in the DES CBC mode, and the result is all 8 bytes. A content intermediate value generated by performing an exclusive OR operation on a unit basis is encrypted with a content check value generation key Kivc stored in an internal memory 307 of the recording / reproducing device 300 and generated. If the block is not encrypted, the entire data (plaintext) is converted into an alteration check value generation function (DES-CBC-MAC, content check value generation key Kivc as a key) shown in FIG. Generated as a value obtained by input.

[0310] Next, in step S115, the control unit 306 of the recording / reproducing device encryption processing unit 302 checks the content check value and the IC in the content block received from the control unit 301 of the recording / reproducing device 300 in step S102.
V, and compares the result with the control unit 30 of the recording / reproducing device 300.
Pass to 1. The control unit 3 of the recording / reproducing device 300 receiving this
01, if the verification is successful, the next content block to be verified is taken out and made to be verified by the recording / reproducing device encryption processing section 302 of the recording / reproducing device 300, and the same verification process is repeated until all the content blocks are verified. (Step S116).

[0311] Steps S104 and S10
9. In any of Steps S112 and S115, if the check values do not match, the download process ends as an error.

Next, in step S117, the recording / reproducing device encryption processing section 302 of the recording / reproducing apparatus 300 transmits the block information key Kbit and the content key Kcon decrypted in step S106 to the encryption / reproduction The decryption unit 308 is encrypted with the session key Kses shared at the time of mutual authentication. Recording / reproducing device 300
The control unit 301 reads the block information key Kbit and the content key Kcon encrypted with the session key Kses from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and reads these data from the recording device controller of the recording / reproducing device 300. The data is transmitted to the recording device 400 via the server 303.

Next, in step S118, the block information key Kbit transmitted from the recording / reproducing device 300
Device 400 that has received content key Kcon
Causes the encryption / decryption unit 406 of the recording device encryption processing unit 401 to decrypt the received data with the session key Kses shared during mutual authentication, and stores the decrypted data in the internal memory 405 of the recording device encryption processing unit 401. The control unit 301 of the recording / reproducing device 300 re-encrypts the data with the stored storage device-specific storage key Kstr, and the recording device 4 via the recording device controller 303 of the recording / reproducing device 300.
From 00, the block information key Kbit and the content key Kcon re-encrypted with the storage key Kstr are read. That is, the block information key Kb encrypted with the delivery key Kdis
It changes the key between it and the content key Kcon.

[0314] Next, in step S119, the control unit 301 of the recording / reproducing apparatus 300 extracts use restriction information from the usage policy (Usage Policy) of the data header, and the downloaded content is used only by the recording / reproducing apparatus 300. It is determined whether or not it is possible. This determination is made when the localization flag (use restriction information) = 1 is set, the downloaded content can be used only by the recording / reproducing device 300, and the localization flag (use restriction information) = 0. Means that the downloaded content is another similar recording / playback device 300
It shows that it can be used. If the localization flag (use restriction information) = 1 as a result of the determination,
Proceed to step S120.

[0315] In step S120, the recording / reproducing device 3
The control unit 301 of 00 causes the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 to calculate a check value unique to the recording / reproducing device. The check value unique to the recording / reproducing device is stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as shown in FIG.
Using the recording / reproducing device signature key Kdev unique to the recording / reproducing device stored as a key, the intermediate check value generated in step S110 is encrypted by DES and generated. The calculated check value ICVdev unique to the recording / reproducing device is overwritten instead of the total check value ICVt.

As described above, the system signature key Ks
ys is a system signature key used to attach a common signature or ICV to the distribution system, and the recording / reproducing device signature key Kdev differs for each recording / reproducing device. Recording / reproducing device signature key used for That is, data signed by the system signature key Ksys is successfully used by a system (recording / reproducing apparatus) having the same system signature key, that is, the total check value ICVt matches, so that the data can be commonly used. , Recording / reproducing device signature key Kde
v, the recording / reproducing device signature key is a key unique to the recording / reproducing device. Therefore, data signed using the recording / reproducing device signature key Kdev, that is, after the signature, the recording device When the recording device is used in another recording / reproducing device to reproduce the data stored therein, the check value ICVdev unique to the recording / reproducing device becomes inconsistent and an error occurs, so that the data cannot be reproduced. In the data processing device of the present invention, the content that can be commonly used in the system and the content that can be used uniquely for the recording / reproducing device can be freely set by setting the use restriction information.

Next, in step S121, the control unit 301 of the recording / reproducing device 300
02 is executed to form a storage data format. As described above, there are 0 to 3 format types, which are set in the handling policy in the header (see FIG. 5). According to this setting type, the right side of FIGS. The data is formed according to the storage format. Since the flow shown in FIG. 39 is one of the formats 0 and 1, it is formed in one of the formats of FIGS.

[0318] When the formation of the storage data format is completed in step S121, the control unit 301 of the recording and reproducing device 300 stores the content in the external memory 402 of the recording device 400 in step 122.

The above is the mode of the download processing of the content data in the format types 0 and 1.

Next, the download processing of the content data in the format type 2 will be described with reference to FIG. A description will be given focusing on differences from the download processing of the format types 0 and 1 described above.

Steps S101 to S109 are the same as the above-mentioned download processing of format types 0 and 1, and therefore description thereof is omitted.

In the format type 2, since the content check value ICVi is not defined as described above, the content check value ICVi is included in the block information.
Does not have Vi. The intermediate check value in the format type 2 is, as shown in FIG. 38, a check value A, a check value B, and data obtained by concatenating the entire contents data from the first data of the first block (block key of block 1) to the last block. It is generated by applying the system signature key Ksys to the intermediate check value generated based on the information and executing an encryption process.

Therefore, in the download processing of format type 2, content data is read in step S151, and in step S152, an intermediate check value is generated based on the check values A and B and the read content data. In addition,
Even if the content data is encrypted, the content data is not decrypted.

[0324] In the format type 2, decoding of block data and inquiry processing of a content check value are not performed as in the processing of the format types 0 and 1 described above, so that quick processing is possible.

[0325] The processing after step S111 is the same as the processing in format types 0 and 1, and a description thereof will be omitted.

The above is the mode of the download processing of the content data in the format type 2. As described above, the download processing of the format type 2 does not perform the decoding processing of the block data and the inquiry processing of the content check value unlike the processing of the format types 0 and 1, so that the processing can be performed quickly, and real-time processing of music data or the like can be performed. This format is suitable for data processing that requires processing.

Next, the download processing of the content data in the format type 3 will be described with reference to FIG. The following description focuses on differences from the download processing of the format types 0, 1, and 2 described above.

Steps S101 to S105 are the same as the above-described download processing of format types 0, 1, and 2, and therefore description thereof is omitted.

The format type 3 basically has many parts in common with the processing in the format type 2,
Format type 3 does not have a content key,
The difference from the format type 2 is that the block key Kblc is stored in the recording device after being encrypted with the storage key Kstr.

Description will be made focusing on differences from format type 2 in format type 3 download processing. In format type 3, step S1
In step S161, which is the step subsequent to step 05, the block information key is decrypted. Recorder / reproducer encryption processor 3
02, using the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302, using the delivery key Kdis generated in step S105, and receiving the media 500 via the reading unit 304, or The block information key Kbit stored in the header of the data received from the communication unit 600 via the communication unit 305 is decrypted. In the format type 3, since the content key Kcon does not exist in the data, the content key Kcon is not decrypted.

In the next step S107, step S1
The block information is decrypted using the block information key Kbit decrypted in step 61, and further, in step S162, the control unit 306 of the recording / reproducing device encryption processing unit 302
Is a block information key Kbit and block information (B
IT), a check value B (ICVb ′) is generated.
The check value B is the check value B generation key Kic stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302.
Using vb as a key, an exclusive OR value including a block information key Kbit and block information (BIT) is encrypted by DES and generated. Next, in step S109,
The check value B is compared with the ICVb in the header. If they match, the process proceeds to step S151.

In format type 3, check values B and ICVb function as check values for verifying block information key Kbit and tampering of block information.
If the generated check value B matches the check value: ICVb stored in the header, it is determined that the block information key Kbit and the block information have not been tampered with.

[0333] Steps S151 to S112 are the same as the format type 2 processing, and a description thereof will be omitted.

In step S163, step S151
Block key K included in the content data read in
blc is decrypted with the distribution key Kdis generated in step S105.

Next, in step S164, the recording / reproducing device 3
00 in step S16
1 and the block information key Kbit decrypted in step 1
The encryption / decryption unit 308 of the recording / reproducing unit encryption processing unit 302 encrypts the block key Kblc decrypted in 163 with the session key Kses shared at the time of mutual authentication. The control unit 301 of the recording / reproducing device 300 reads the block information key Kbit and the block key Kblc encrypted with the session key Kses from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and reads these data. Is transmitted to the recording device 400 via the recording device controller 303.

Next, in step S165, the block information key Kbit transmitted from the recording / reproducing device 300 is transmitted.
Device 400 that has received the block key Kblc
Causes the encryption / decryption unit 406 of the recording device encryption processing unit 401 to decrypt the received data with the session key Kses shared during mutual authentication, and stores the decrypted data in the internal memory 405 of the recording device encryption processing unit 401. The control unit 301 of the recording / reproducing device 300 re-encrypts the data with the stored storage device-specific storage key Kstr, and the recording device 40 via the recording device controller 303 of the recording / reproducing device 300.
From 0, the block information key Kbit and the block key Kblc re-encrypted with the storage key Kstr are read. That is,
Initially, the block information key K encrypted with the distribution key Kdis
The block information key Kbit and the block key Kblc obtained by re-encrypting the bit and the block key Kblc with the storage key Kstr
Replace with

The following steps S119 to S122 are the same as those of the format types 0, 1, and 2 and will not be described.

The above is the mode of the download processing of the content data in the format type 3. As described above, the download processing of format type 3 does not perform the decoding processing of the block data and the inquiry processing of the content check value, similarly to the format type 2, so that the processing can be performed quickly, and real-time processing such as music data is required. This format is suitable for data processing. Further, since the range in which the encrypted content is protected by the block key Kblc is localized, the security is higher than that of the format type 2.

Next, the reproduction process from the recording device 400 in the recording / reproducing device 300 in each of the format types 0 to 3 will be described with reference to the flow charts of FIGS.

First, the content reproduction process in format type 0 will be described with reference to FIG.

Step S201 is an authentication processing step between the recording / reproducing device and the recording device, and is executed according to the above-described authentication processing flow of FIG.

When the authentication processing in step S201 is completed and the authentication flag is set, in step S202, the recording / reproducing device 300 reads a data header according to a predetermined format from the recording device 400, and To the recording / reproducing device encryption processing unit 302.

Next, in step S203, the control unit 306 of the encryption processing unit 302
The second encryption / decryption unit 308 calculates the check value A. As shown in FIG. 23 described above, the check value A uses the check value A generation key Kicva stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and handles identification information (Content ID). Policy (Usage Polic
y) is calculated as a message. Next, step S
At 204, the calculated check value A and the header (He
Check value stored in ader): Compare ICVa,
If they match, the process proceeds to step S205.

The check values A and ICVa are check values for verifying falsification of the identification information and the handling policy. If the calculated check value A matches the check value: ICVa stored in the header, it is determined that the identification information and the handling policy stored in the recording device 400 have not been tampered with.

Next, in step S205, the control unit 301 of the recording / reproducing device 300 extracts the block information key Kbit and the content key Kcon encrypted with the storage device-specific storage key Kstr from the read header,
The data is transmitted to the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.

The recording device 400 that has received the block information key Kbit and the content key Kcon transmitted from the recording / reproducing device 300 transmits the received data to the encryption / decryption unit 406 of the recording device encryption processing unit 401 and the recording device encryption key. The decryption process is performed using the storage device-specific storage key Kstr stored in the internal memory 405 of the processing unit 401, and the session key Kse shared during mutual authentication is used.
It is encrypted again with s. This processing is as described in detail in the section of (9) Key exchange processing after mutual authentication described above.

[0347] In step S206, the recording / reproducing device 300
Of the block information key Kb re-encrypted with the session key Kses from the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.
It and the content key Kcon are received.

Next, in step S207, the control unit 301 of the recording / reproducing device 300
The block information key Kbit and the content key Kcon re-encrypted with the session key Kses are transmitted to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and the block information key Kbit and the content key Kco re-encrypted with the session key Kses.
n, the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 transmits the block information key Kbit and the content key Kcon encrypted with the session key Kses to the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302. Is decrypted with the session key Kses shared at the time of mutual authentication.

In step S208, the block information read in step S202 is decrypted with the decrypted block information key Kbit. Note that the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 includes the decrypted block information key Kbit and the content key Kcon.
And the block information BIT are replaced with the block information key Kbit, the content key Kcon, and the block information BIT included in the header read in step S202 and stored. The control unit 30 of the recording / reproducing device 300
Reference numeral 1 denotes a recording / reproducing device for decoding the decoded block information BIT.
00 is read out from the recording / reproducing device encryption processing unit 302 of FIG.

[0350] Further, in step S209, the control section 306 of the recording / reproducing apparatus encryption processing section 302 generates a check value B (ICVb ') from the block information key Kbit, the content key Kcon and the block information (BIT). As shown in FIG. 24, the check value B is determined by using a check value B generation key Kicvb stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, a block information key Kbit, a content key Kcon, and block information ( BIT) is generated by encrypting the exclusive OR value composed of BIT) with DES. Next, in step S210, the check value B is compared with the ICVb in the header, and if they match, the process proceeds to step S211.

The check values B and ICVb are check values for verifying the falsification of the block information key Kbit, the content key Kcon, and the block information, and the generated check value B is the check value stored in the header (Header). Value: If the value matches ICVb, the recording device 400
It is determined that there is no falsification of the block information key Kbit, the content key Kcon, and the block information in the data stored in.

In step S211, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate an intermediate check value. The intermediate check value is, as shown in FIG.
Using the total check value generation key Kicvt stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, a check value A, a check value B in the verified Header, and all content check values in the block information are transmitted as a message. Is calculated according to the ICV calculation method described in FIG. The generated intermediate check value is stored in the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 as necessary.

[0353] Next, in step S212, the control unit 301 of the recording / reproducing device 300 extracts the usage restriction information from the usage policy included in the header part of the data read from the external memory 402 of the recording device 400, It is determined whether the content to be reproduced can be used only by the recording / reproducing device 300 (use restriction information is 1) or can be used by another similar recording / reproducing device 300 (use restriction information is 0). As a result of the determination, if the use restriction information is 1, that is, if the use restriction that the reproduced content can be used only by the recording / reproducing device 300 is set, step S213 is performed.
If the use restriction information is 0, that is, if the setting is such that it can be used by another similar recording / reproducing device 300, the process proceeds to step S215. Note that the process of step S212 may be performed by the encryption processing unit 302.

In step S213, the recording / reproducing device 300
The control unit 301 includes a check value ICV unique to the recording / reproducing device.
dev ′ is recorded / reproduced by the recording / reproducing device 300
02 is calculated. Check value ICV specific to recording / reproducing device
As shown in FIG. 25, dev ′ uses the recording / reproducing device signature key Kdev stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key, and uses the intermediate check value held in step S211 as DES. Generate by encryption.

Next, in step S214, the check value IC unique to the recording / reproducing device calculated in step S213
Vdev 'is compared with ICVdev in the header read in step S202, and if they match, the process proceeds to step S217.

On the other hand, in step S215, the control unit 306 of the recording / reproducing device encryption processing unit 302 sends the total check value ICV to the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302.
Let t be calculated. The total check value ICVt ′ is shown in FIG.
As shown in (1), the intermediate check value is generated by encrypting the intermediate check value with DES using the system signature key Ksys stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key.
Next, in step S216, the generated total check value ICVt ′ is compared with the ICVt in the header, and if they match, the process proceeds to step S217.

[0357] The total check value ICVt and the check value ICVdev unique to the recording / reproducing device are represented by ICVa, ICV
b, a check value for verifying tampering of all check values of each content block. Therefore, if the check value generated by the above process matches the check value: ICVt or ICVdev stored in the header, the IC stored in the recording device 400
It is determined that Va, ICVb, and the check value of each content block have not been tampered with.

Next, in step S 217, the control unit 301 of the recording / reproducing device 300 reads out block data from the recording device 400. Further, step S218
It is determined whether or not the data has been encrypted. If the data has been encrypted, the encryption processor 302 of the recording / reproducing device 300 decrypts the block data. If not, the process skips step S219 and proceeds to step S220.

[0359] Next, in step S220, the control section 301 of the recording / reproducing device 300 sets the block information (BIT).
It is checked whether or not the content block is to be verified, based on the content block information in. If the content block is to be verified, the content check value is stored in the block information in the header. If the content block is to be verified, the content check value ICVi ′ of the content block is calculated in step S221. If the content block is not to be verified, the process skips steps S221 and S222 and proceeds to step S223.

The content check value ICVi ′ is obtained by decrypting the input content block with the content key Kcon in the DES CBC mode when the block is encrypted as described above with reference to FIG. The content intermediate value generated by exclusive ORing every 8 bytes is generated by encrypting with a content check value generation key Kivc stored in the internal memory 307 of the recording / reproducing device 300. If the block is not encrypted, the entire data (plaintext) is changed in units of 8 bytes in a tampering check value generation function (DES-CBC-MAC,
The content check value generation key Kivc is used as a key).

[0361] In step S222, the control unit 306 of the recording / reproducing device encryption processing unit 302 compares the generated content check value ICVi 'with the content check value ICVi stored in the header received from the recording device 400 in step S202. Are compared, and the result is passed to the control unit 301 of the recording / reproducing device 300. The control unit 301 of the recording / reproducing apparatus 300 that has received the information, if the verification has been successful, proceeds to step S223 and proceeds to step S223.
The plaintext data for execution (reproduction) is stored in the AM. The control unit 301 of the recording / reproducing device 300 further fetches the next content block to be verified,
0, the recording / reproducing device encryption processing unit 302 performs the same verification processing until all the content blocks are verified.
The M storage process is repeated (step S224).

Steps S204 and S21
0, step S214, step S216, step S
If the check value does not match in any of 222, the reproduction process ends as an error.

If it is determined in step S224 that all blocks are to be read, the flow advances to step S225 to start execution and reproduction of the content (program, data).

The above is the mode of the reproduction processing of the content data in the format type 0.

Next, the process of reproducing content data in format type 1 will be described with reference to FIG. The following description focuses on differences from the above-described format type 0 reproduction processing.

The processing from step S201 to step S217 is the same as the above-mentioned format type 0 reproduction processing, and a description thereof will be omitted.

In format type 1, step S2
At 31, decryption of the encrypted part is performed to generate a part ICV. Further, in step S232, a block ICVi ′ is generated. As described above, in the format type 1, when at least one of the parts in the block is the target data of the check value ICVi, the content check value ICVi is defined for the block. The check value P-ICVij of part j in block i is
Is encrypted, a value obtained by exclusive ORing the entire plaintext (decrypted text) in 8-byte units is generated as a value encrypted with the content check value generation key Kivc. Also,
If part j is not encrypted, data (plaintext)
It is generated as a value obtained by inputting the whole data to the falsification check value generation function (DES-CBC-MAC, content check value generation key Kivc as a key) shown in FIG. 36 in units of 8 bytes.

Further, [ICV flag = subject] indicates that one block i is to be checked.
of ICV], the check value P-ICVij generated by the above-described method is used as the block check value ICVi as it is, and 1
[I] indicates that the object is to be checked in one block i.
When there are a plurality of parts having the CV flag = subject of ICV], a plurality of parts check values P
-A falsification check value generating function (DES-CBC-MAC, DES-CBC-MAC,
The content check value generation key Kivc is used as a key). This is described earlier in FIG.
As described in the above.

In the format type 1, a comparison process of the content check value generated in the above-described procedure is executed in step S222. The following step S2
The processing after 23 is the same as that for format type 0, and a description thereof will be omitted.

Next, the process of reproducing content data in format type 2 will be described with reference to FIG. The following description focuses on differences from the above-described format types 0 and 1 reproduction processing.

Steps S201 to S210 are the same as the above-described playback processing of format types 0 and 1, and therefore description thereof is omitted.

In the format type 2, the step S21 executed in the format types 0 and 1
1 to S216 are not executed. Also, since the format type 2 has no content check value, the verification of the content check value in step S222 executed in the format types 0 and 1 is not executed.

In the format type 2 data reproducing process, after the verifying step of the check value B in step S210, the process proceeds to step S217, where the recording / reproducing device 300
Under the control of the control unit 301, the block data is read. Further, in step S241, a decryption process of the block key Kblc included in the block data is performed by the encryption processing unit 306 of the recording / reproducing device 300.
Block key Kblc stored in recording device 400
Are encrypted with the content key Kcon as shown in FIG. 34, and the block key Kblc is decrypted using the content key Kcon decrypted in the previous step S207.

Next, in step S242, the block data is decrypted using the block key Kblc decrypted in step S241. Further, in step S243, execution of content (program, data) and reproduction processing are executed. Step S217
To S243 are repeatedly executed for all blocks. When it is determined in step S244 that all blocks have been read, the reproduction processing ends.

As described above, the format type 2 processing omits the check value verification processing of the total check value and the like, and has a configuration suitable for high-speed decoding processing. Real-time processing such as music data is required. This format is suitable for data processing.

Next, the reproduction process of the content data in the format type 3 will be described with reference to FIG. The following description focuses on differences from the above-described format types 0, 1, and 2.

The format type 3 basically has a lot in common with the processing in the format type 2,
The format type 3 does not have a content key as described in FIG.
Is different from the format type 2 in that it is stored in the recording device after being encrypted with the storage key Kstr.

In steps S201 to S210, steps S251, S252, S25
3. The process of step S254 is configured as a process that does not include a content key unlike the corresponding process in the format types 0, 1, and 2 described above.

[0379] In step S251, the recording / reproducing device 3
The control unit 301 of “00” extracts the block information key Kbit encrypted with the storage device-specific storage key Kstr from the read header, and transmits the block information key Kbit to the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.

The recording device 400 that has received the block information key Kbit transmitted from the recording / reproducing device 300
The received data is decrypted by the encryption / decryption unit 406 of the recording device encryption processing unit 401 using the storage device-specific storage key Kstr stored in the internal memory 405 of the recording device encryption processing unit 401, and mutual authentication is performed. It is re-encrypted with the shared session key Kses. This processing is as described in detail in the section of (9) Key exchange processing after mutual authentication described above.

At step S252, the recording / reproducing device 300
Of the block information key Kb re-encrypted with the session key Kses from the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.
Receives it.

Next, in step S253, the control unit 301 of the recording / reproducing device 300
The block information key Kbit re-encrypted in ses is transmitted to the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300,
Upon receiving the block information key Kbit re-encrypted with the session key Kses, the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 performs encryption / decryption of the recording / reproducing device encryption processing unit 302.
The decryption unit 308 decrypts the block information key Kbit encrypted with the session key Kses with the session key Kses shared at the time of mutual authentication.

Further, in step S208, the block information read out in step S202 is decrypted with the decrypted block information key Kbit. Note that the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 uses the decrypted block information key Kbit and the block information BI
T is stored in place of the block information key Kbit and block information BIT included in the header read in step S202. Further, the control unit 301 of the recording / reproducing device 300 reads out the decrypted block information BIT from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300 in advance.

[0384] Further, in step S254, the control section 306 of the recording / reproducing apparatus encryption processing section 302 generates a check value B (ICVb ') from the block information key Kbit and the block information (BIT). Check value B is
As shown in FIG. 24, the check value B generation key K stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302
Using icvb as a key, an exclusive OR value including a block information key Kbit and block information (BIT) is encrypted by DES and generated. Next, in step S210, the check value B is compared with the ICVb in the header, and if they match, the process proceeds to step S211.

In the format type 3, since the block key is encrypted with the storage key when stored in the recording device, the decryption processing with the storage key in the recording device 400 and the encryption processing with the session key are further performed. A decryption process using the session key in the recording / reproducing device 300 is required. A series of these processes is performed in step S255,
This is the processing step shown in step S256.

[0386] In step S255, the recording / reproducing device 300
The control unit 301 extracts the block key Kblc encrypted with the storage device-specific storage key Kstr from the block read in step S217, and
Is transmitted to the recording device 400 via the recording device controller 303.

The recording device 400 that has received the block key Kblc transmitted from the recording / reproducing device 300 transmits the received data to the encryption / decryption unit 406 of the recording device encryption processing unit 401 and the internal data of the recording device encryption processing unit 401. Decryption processing is performed using the storage device-specific storage key Kstr stored in the memory 405, and re-encryption is performed using the session key Kses shared during mutual authentication. This processing is as described in detail in the section of “(9) Key exchange processing after mutual authentication” described above.

[0388] In step S256, the recording / reproducing device 300
Is transmitted from the recording device 400 via the recording device controller 303 of the recording / reproducing device 300 to the block key Kblc re-encrypted with the session key Kses.
To receive.

Next, in step S257, the block key Kbl by the encryption processing unit 306 of the recording / reproducing device 300 is
A decryption process using the session key Kses of c is performed.

Next, in step S242, the block data is decrypted by using the block key Kblc decrypted in step S257. Further, in step S243, execution of content (program, data) and reproduction processing are executed. Step S217
To S243 are repeatedly executed for all blocks. When it is determined in step S244 that all blocks have been read, the reproduction processing ends.

[0391] The above processing is the reproduction processing of the content in the format type 3. Although the format type 2 is similar to the format type 2 in that the verification processing of the total check value is omitted, the processing configuration is higher in security level than the format type 2 in that a key exchange process of a block key is included. .

(11) Check Value (ICV) Generation Process in Content Provider In the above-described embodiment, the process of verifying various check values ICV is executed at the stage of content download or playback process. Has been explained. Here, the mode of each check value (ICV) generation processing and verification processing will be described.

First, the check values described in the embodiments will be briefly summarized. The check values ICV used in the data processing device of the present invention include the following.

Check value A, ICVa: Check value for verifying falsification of identification information and handling policy in content data. Check value B, ICVb: Check value for verifying tampering of block information key Kbit, content key Kcon, and block information. Content check value ICVi: Check value for verifying tampering of each content block of content. Total check value ICVt: Check value for verifying check value ICVa, check value ICVb, and alteration of all check values of each content block. Reproducer-specific check value ICVdev: This is a check value that is replaced with the total check value ICVt when the localization flag is set to 1, that is, when the content indicates that the content is uniquely usable for the recording / reproducing device. The check value A: ICVa, the check value B: ICVb, and the check value ICVi included in each block whose content is to be checked.
Generated as a check value for the whole. Depending on the format, the contents to be checked by the ICVt and ICVdev may not be the check value of each content block but the content itself.

Each of the above check values is used in the data processing device of the present invention. Among the above check values, the check value A, the check value B, the total check value, and the content check value are, for example, as shown in FIGS. 32 to 35 and FIG. The ICV value is generated by the user based on the respective verification target data, stored in the data together with the content, and provided to the user of the recording / reproducing device 300. The user of the recording / reproducing device, that is, the content user generates an ICV for verification based on the respective data to be verified when downloading or reproducing the content to the recording device, and generates the ICV for verification based on the stored ICV. Is compared. The playback device-specific check value ICVdev is replaced with the total check value ICVt and stored in the recording device when the content indicates that the content is uniquely usable for the recording / playback device.

In the above-described embodiment, the generation process of the check value has been described mainly in terms of the configuration of the generation process by DES-CBC. However, the ICV generation processing mode is not limited to the above-described method, but includes various generation processing modes and various verification processing modes. In particular, regarding the relationship between the content provider or administrator and the content user, various ICV generation and verification processing configurations described below are possible.

FIGS. 46 to 48 show diagrams for explaining the generation process of the check value ICV by the creator and the verification process by the verifier.

FIG. 46 shows the DE described in the above embodiment.
In this configuration, for example, an ICV generator, which is a content provider or a manager, performs an ICV generation process by the S-CBC, and provides the generated ICV together with the content to a recording / reproducing user, that is, a verifier. In this case, the key required by the recording / reproducing device user, that is, the verifier at the time of the verification process is, for example, each check value generation key stored in the internal memory 307 shown in FIG. A verifier (recorder / reproducer user) who is a content user generates a check value by applying DES-CBC to data to be verified using a check value generation key stored in the internal memory 307. Execute the comparison processing with the stored check value. In this case, each check value generation key is configured as a key that is secretly shared by the creator of the ICV and the verifier.

In FIG. 47, a creator of an ICV, which is a content provider or a manager, generates an ICV by a digital signature of a public key cryptosystem, and provides the generated ICV together with the content to a content user, that is, a verifier. . The content user, that is, the verifier stores the public key of the ICV creator, and executes the ICV verification process using the public key. In this case, the public key of the content user (user of the recording / reproducing device), that is, the ICV creator of the verifier does not need to be kept secret, and management becomes easy. This is a mode suitable for a case where the generation and management of the ICV are performed at a high security management level, such as a case where the generation and management of the ICV are performed by one entity.

FIG. 48 shows that a creator of an ICV, which is a content provider or a manager, generates an ICV by a digital signature of a public key cryptosystem, and provides the generated ICV together with the content to a content user, that is, a verifier. Further, the public key used by the verifier for verification is stored in a public key certificate (for example, see FIG. 14) and provided to the recording / reproducing device user, that is, the verifier, together with the content data. If there are a plurality of ICV generators, each generator has the key management center create data (public key certificate) for certifying the validity of the public key.

The content user who is the verifier of the ICV has the public key of the key management center, and the verifier executes verification of the public key certificate using the public key of the key management center. IC stored in the public key certificate
Extract the public key of the creator of V. In addition, I
The ICV is verified using the public key of the creator of the CV.

In this method, there are a plurality of ICV creators,
This is an effective mode when a management execution system by a center that executes the management is established.

(12) Configuration for Generating Cryptographic Processing Key Based on Master Key Next, a configuration for generating various cryptographic processing keys based on the master key, which is one of the characteristic configurations in the data processing system of the present invention, will be described. .

As described earlier with reference to FIG. 18, various master keys are stored in the internal memory of the recording / reproducing device 300 in the data processing apparatus of the present invention. An authentication key Kake is generated (see Equation 3), or a distribution key Kdis is generated (see Equation 4).

Conventionally, encryption communication between one-to-one entities, that is, between a content provider and a content user, or between the recording / reproducing apparatus 300 and the recording medium 400 in the above-described data processing apparatus of the present invention,
When performing mutual authentication, MAC generation, verification, and the like, secret information common to each entity, for example, key information, is held. Also, a one-to-many relationship, for example, many content users for one content provider, or one
Regarding the relationship between a large number of recording media and the like for one recording / reproducing device, all entities, that is, many content users, or a configuration in which secret information shared by many recording media, for example, key information is stored or held, Alternatively, one content provider individually manages secret information (ex. Key) of each of a large number of content users, and uses the secret information according to each content user.

However, if there is a one-to-many use relationship as described above, secret information (ex. Key) shared by all
Has the drawback that if one secret leak occurs, it affects everyone who uses the same secret information (ex. Key). Further, if one administrator, for example, a content provider individually manages secret information (ex. Key) of each of a large number of content users and uses the secret information (ex. Key) in accordance with each content user, all users can be managed. A list in which identification is performed and the secret data (ex. Key) unique to the identification data is required is required, and there is a disadvantage that the burden of maintenance of the list increases as the number of users increases.

In the data processing device of the present invention, the conventional problems in sharing secret information between entities are solved by holding a master key and generating various individual keys from the master key. Less than,
This configuration will be described.

In the data processing apparatus of the present invention, when different individual keys are required for various encryption processing, authentication processing, and the like between the recording device and the medium storing the content, or between the recording / reproducing devices, the individual keys are used. The key is generated using individual information such as identifier data (ID) inherent to the device or the medium and a predetermined individual key generation method in the recording / reproducing device 300. With this configuration, even if the generated individual key is specified, if the leakage of the master key is prevented, it is possible to prevent damage to the entire system. In addition, the configuration in which the key is generated using the master key eliminates the need to manage the association list.

A specific configuration example will be described with reference to the drawings. First, FIG. 49 shows a diagram for explaining a configuration for generating various keys using various master keys of the recording / reproducing device 300. Content is input from the medium 500 and the communication unit 600 in FIG. 49 in the same manner as in the above-described embodiment. The content is encrypted by the content key Kcon, and the content key Kcon is
Is encrypted by

For example, if the recording / reproducing device 300
0, when the content is taken out from the communication means 600 and the content is to be downloaded to the recording device 400, the recording / reproducing device 300 transmits the encrypted content key as described with reference to FIGS. Key K
It is necessary to obtain dis. This Kdis is obtained directly from the medium 500 and the communication means 600, or is obtained in advance by the recording / reproducing device 300 and
Although it is possible to store the key in a memory within 0, such a distribution configuration of the key to a large number of users has a possibility of leakage affecting the entire system as described above.

In the data processing system of the present invention, the delivery key Kdis is stored in the memory of the recording / reproducing device 300 as shown in the lower part of FIG.
is and the processing based on the content ID, ie, Kdi
The distribution key Kdis is generated by applying s = DES (MKdis, content ID). According to this configuration, in the content distribution configuration between the content provider that supplies the content from the medium 500 and the communication unit 600 and the recording / reproducing device 300 that is the content user, even if there are many content providers, There is no need to distribute the distribution key Kdis through a medium, a communication medium, or the like, and it is not necessary to store the distribution key Kdis in each recording / reproducing device 300, and security can be kept high.

Next, generation of the authentication key Kake will be described. The download processing from the recording / reproducing apparatus 300 shown in FIGS. 22 and 39 to 41 to the recording medium 400 described above, or the content stored in the recording medium 400 described in FIGS.
, The mutual authentication process between the recording / reproducing device 300 and the recording medium 400 (see FIG. 20).
Is required.

As described with reference to FIG. 20, in this authentication process, the recording / reproducing device 300 needs the authentication key Kake. The recording / reproducing device 300 acquires the authentication key directly from the recording medium 400, for example, or
00 can be acquired and stored in a memory in the recording / reproducing device 300. However, similar to the configuration of the delivery key described above,
Such a key distribution scheme to a large number of users has the potential for leakage affecting the entire system.

In the data processing system of the present invention, the authentication key Kake is stored in the memory of the recording / reproducing device 300 as shown in the lower part of FIG.
and a process based on the recording device identification ID: IDmem, that is, Kake = DES (MKake, IDme
m) to obtain the authentication key Kake.

[0415] Further, the download processing from the recording / reproducing apparatus 300 shown in Fig. 22 and Figs. 39 to 41 to the recording medium 400 or the content stored in the recording medium 400 described in Fig. 28 and Figs.
0, the recording / reproducing device signature key Kdev required for the process of generating the recording / reproducing device-specific check value ICVdev when the content is uniquely usable for the recording / reproducing device. The same configuration as described above can be adopted. In the above embodiment, the recording / reproducing device signature key Kdev is stored in the internal memory. However, the recording / reproducing device signature key master key MKdev is stored in the memory, and the recording / reproducing device signature key Kdev is stored in the internal memory. Instead, Kdev = DES (MKd) based on the recording / reproducing device identifier: IDdev and the recording / reproducing device signature key master key MKdev, if necessary, as shown in the lower part of FIG.
ev, IDdev) and the recording / reproducing device signature key Kdev
, The recording / reproducing device signature key Kdev
There is an advantage that it is not necessary to provide the device individually.

As described above, in the data processing apparatus of the present invention, information such as keys necessary for procedures related to cryptographic information processing between two entities such as between a provider and a recording / reproducing device or between a recording / reproducing device and a recording device. Is generated sequentially from the master key and each ID, so that even if the key information leaks from each entity, the range of damage by the individual key is further limited, and the individual entity There is no need to manage the key list.

[0417] A plurality of processing examples of the present configuration will be described with reference to the flow. FIG. 50 shows an example of a process of encrypting content or the like using a master key by a content production or manager, and a process of decrypting encrypted data using a master key in a user device, for example, the recording / reproducing device 300 in the above-described embodiment. is there.

[0418] Step S501 in the content production or management is a step of giving an identifier (content ID) to the content. Step S502
Is a step of generating a key for encrypting the content or the like based on the master key and the content ID of the content production or manager. This is, for example, the delivery key K
In the process of generating dis, the above-mentioned Kdis = DE
Delivery key Kd by S (MKdis, content ID)
Generate is. Next, step S503 is a step of encrypting a part or all of the content with a key (for example, a distribution key Kdis). The content creator distributes the content, which has been subjected to the encryption processing through these steps, via a medium such as a DVD or a communication means.

[0419] On the other hand, on the user device side such as the recording / reproducing device 300, in step S504, the content ID is read from the content data received via the media, the communication means, and the like. Next, step S505
Generates a key to be applied to the decryption of the encrypted content based on the read content ID and the owned master key. In this generation process, when the distribution key Kdis is obtained, for example, the distribution key Kdis = DES (MKd
is, content ID). In step S506,
The content is decrypted using this key, and step S507 is performed.
To use the decrypted content, that is, execute reproduction or a program.

In this example, as shown in the lower part of FIG. 50, both the content production or manager and the user device use the master key (for example, the delivery key generation master key MK).
master) and the respective IDs each having a distribution key necessary for encrypting and decrypting the content.
Generated based on (content ID).

In this system, if the delivery key is leaked to a third party, the content can be decrypted by the third party, but the decryption of other content having a different content ID can be prevented. Therefore, there is an effect that the influence of the leakage of one content key on the entire system can be minimized. Also, there is an effect that it is not necessary for the user device side, that is, the recording / reproducing device, to hold a key association list for each content.

Next, with reference to FIG. 51, an example will be described in which a content production or manager owns a plurality of master keys and executes a process corresponding to a content distribution target.

[0423] Step S511 in the content production or management is a step of giving an identifier (content ID) to the content. Step S512
Is a plurality of master keys (for example, a plurality of distribution key generation master keys MKdi
and s) selecting one master key.
This selection processing will be further described with reference to FIG. 52. A master key to be applied is set in advance in association with each country of the content user, each model, or each version of the model, and is executed according to the setting. Is what you do.

Next, in step S513, step S513
An encryption key is generated based on the master key selected in 512 and the content ID determined in step S511. If this is a process of generating the distribution key Kdisi, for example, it is generated by Kdisi = DES (MKdisi, content ID). Next, step S514
Uses a key (for example, distribution key K)
(disi). In step S515, the content creator distributes the content ID, the used master key identification information, and the encrypted content using the encrypted content as one distribution unit via a medium such as a DVD or a communication means. I do.

[0425] On the other hand, the user device such as the recording / reproducing device 300 determines in step S516 that the master key corresponding to the master key identification information in the content data distributed via a medium such as a DVD or communication means. Is determined as to whether or not it owns. If there is no master key corresponding to the master key identification information in the content data, the distribution content cannot be used in the user device, and the process ends.

[0426] If the user owns the master key corresponding to the master key identification information in the distributed content data, in step S517, the content I is received from the content data received via the media, communication means, or the like.
Read D. Next, in step S518, a key to be applied to decrypt the encrypted content is generated based on the read content ID and the owned master key. When the generation process is to obtain the distribution key Kdisi, for example, the distribution key Kdisi = DES (MKdisi,
Content ID). In step S519, the content is decrypted using the key, and in step S520, use of the decrypted content, that is, reproduction or execution of a program is performed.

In this example, as shown in the lower part of FIG. 51, the content production or the manager has a plurality of master keys, for example, a plurality of distribution key generation master keys MKdis1.
Ｎn to a master key set. On the other hand, the user device has one master key, for example, one master key KKdisi for generating a distribution key, and only when the content production or the administrator performs the encryption process using the MKdisi, the user device transmits the content. It can be decrypted and used.

As a specific example of the mode shown in the flow of FIG. 51, FIG. 52 shows an example in which a different master key is applied for each country. The content provider has master keys MK1 to MKn.
The MK1 is used to generate a key for executing a process of encrypting content to be distributed to a user device for Japan. For example, an encryption key K1 is generated from the content ID and MK1, and the content is encrypted using K1. Also, MK
2 is used to generate a key for executing a process of encrypting content to be delivered to a user device for US, and MK3 is set to be used for generating a key for executing a process of encrypting content to be delivered to a user device for EU (Europe). are doing.

On the other hand, a master key MK1 is stored in an internal memory of a user device for Japan, specifically, a recording / reproducing device such as a PC or a game machine sold in Japan, and a master key MK1 is stored in a user device for US. The key MK2 is stored in the internal memory, and the master key MK3 is stored in the internal memory in the EU user device.

In such a configuration, the content provider encrypts the content to be distributed to the user device by selectively using the master key from the master keys MK1 to MKn according to the user device that can use the content. Execute For example, in order to make the content available only to a user device for Japan, the master key M
The content is encrypted with the key K1 generated using the K1. This encrypted content can be decrypted using the master key MK1 stored in the user device for Japan, that is, a decryption key can be generated, but the master key MK2 stored in another US or EU user device can be decrypted. , MK3, the key K1 cannot be obtained, so that the encrypted content cannot be decrypted.

[0431] As described above, by the content provider selectively using a plurality of master keys, it is possible to set use restrictions on various contents. In FIG. 52, an example is shown in which the master key is distinguished according to the country of the user device. However, as described above, various usage modes are possible, such as switching the master key according to the model of the user device or according to the version. It is.

Next, FIG. 53 shows an example of processing in which a media-specific identifier, that is, a media ID and a master key are combined. here. The medium is, for example, a medium storing contents such as a DVD and a CD. Media ID
May be unique for each medium, for example, may be unique for each title of content such as a movie, or may be unique for each production lot of media. As described above, various methods can be used as the method of assigning the media ID.

[0433] In step S521 in the media production or management, an identifier for the medium (media I
D). Step S522 is:
This is a step of generating a key for encrypting the contents stored in the medium based on the master key and the medium ID of the media production or manager. This is for example
In the process of generating the delivery key Kdis, the aforementioned Kdi
The distribution key Kdis is generated by s = DES (MKdis, media ID). Next, step S523 is a step of encrypting a part or all of the media storage content using a key (for example, a distribution key Kdis).
The media producer supplies the content storage medium that has been subjected to the encryption processing through these steps.

On the other hand, for example, the user device such as the recording / reproducing device 300 reads the media ID from the supplied media in step S524. Next, in step S525, a key to be applied to decrypt the encrypted content is generated based on the read media ID and the owned master key. In the generation process, when the distribution key Kdis is obtained, for example, the distribution key Kdis = DES
(MKdis, media ID). Step S52
In step 6, the content is decrypted using the key,
At 527, the use of the decrypted content, that is, the reproduction or the program is executed.

In this example, as shown in the lower part of FIG. 53, both the media production or manager and the user device use the master key (for example, the delivery key generation master key MKd).
is), and has a master key and IDs each having a delivery key necessary for encrypting and decrypting the content.
(Media ID).

In this system, if the media key is leaked to a third party, the content in the medium can be decrypted by the third party, but the content stored in another medium having a different media ID can be decrypted. Therefore, there is an effect that the influence of the leakage of one media key on the entire system can be minimized. Also, there is an effect that it is not necessary for the user device side, that is, the recording / reproducing device, to hold a key association list for each medium. In addition, since the size of content encrypted with one media key is limited to the capacity that can be stored in the media, it is unlikely that the amount of information required for ciphertext attack will be reached, and decryption is possible. Properties can be reduced.

Next, FIG. 54 shows an identifier unique to the recording / reproducing device.
That is, an example of processing in which the recording / reproducing device ID and the master key are combined is shown.

Step S53 for recording / reproducing user
1 is a step of generating a key for encrypting content or the like based on a master key and a recording / reproducing device ID stored in, for example, an internal memory of the recording / reproducing device. This is for example
In the process of generating the content key Kcon, Kco
The content key Kcon is generated by n = DES (MKcon, recording / reproducing device ID). Next, step S53
Step 2 is a step of encrypting a part or all of the stored content with a key (for example, a distribution key Kcon). A step S533 stores the encrypted content in a recording device such as a hard disk.

[0439] On the other hand, on the system administrator side managing the recording / reproducing device, when the user of the recording / reproducing device storing the content requests recovery of the stored data, in step S534, the recording / reproducing device sends the recording / reproducing device ID. Is read.
Next, in step S535, a key to be applied to the decryption of the encrypted content is generated based on the read recording / reproducing device ID and the owned master key. In the case of obtaining the content key Kcon in this generation process, for example, the content key Kcon = DES (MKcon, recording / reproducing device ID). In step S536, the content is decrypted using the key.

In this example, as shown in the lower part of FIG. 54, both the recording / reproducing device user and the system administrator use a master key (for example, a content key generation master key MKco).
n), and sequentially generates a delivery key required for encrypting and decrypting the content based on the respective master key and each ID (recording / reproducing device ID).

In this system, if the content key is leaked to a third party, the content can be decrypted by the third party, but the content encrypted for another recording / reproducing device having a different recording / reproducing device ID can be used. Since it is possible to prevent the decryption of a content key, the effect of leakage of one content key on the entire system can be minimized. In addition, there is an effect that it is not necessary for both the system management side and the user device side to hold a key association list for each content.

FIG. 55 shows a configuration in which an authentication key used for mutual authentication between a slave device, for example, a recording device such as a memory card, and a host device, for example, a recording / reproducing device, is generated based on a master key. In the above-described authentication processing (see FIG. 20), the authentication key is stored in advance in the internal memory of the slave device. However, as shown in FIG. 55, the authentication key is generated based on the master key during the authentication processing. can do.

For example, the slave device, which is a recording device, performs step S
At 541, an authentication key Kake used for mutual authentication processing based on the master key and the slave device ID stored in the internal memory of the slave device as a recording device.
Generate This is, for example, Kake = DES (MKa
ke, slave device ID). Next, in step S542, the generated authentication key is stored in the memory.

On the other hand, on the host device side such as a recording / reproducing device, in step S543, the slave device ID is read from the attached recording device, that is, the slave device via the communication means. Next, in step S544, the read slave device ID
And an authentication key to be applied to the mutual authentication process based on the own authentication key generation master key. In this generation process, for example, the authentication key Kake = DES (MKake, slave device ID). In step S545, an authentication process is performed using the authentication key.

In this example, as shown in the lower part of FIG. 55, both the slave device and the master device have a master key, that is, an authentication key generation master key MKake.
, And sequentially generates an authentication key required for the mutual authentication process based on the respective master keys and slave device IDs.

In this system, if the authentication key is leaked to a third party, the authentication key is valid only for the slave device, so that authentication is not established in relation to other slave devices. This has the effect of minimizing the effects caused by key leakage.

As described above, in the data processing apparatus of the present invention, a key or the like necessary for a procedure related to cryptographic information processing between two entities such as between a content provider and a recording / reproducing device or between a recording / reproducing device and a recording device. The information is sequentially generated from the master key and each ID. Therefore, even if key information is leaked from each entity, the range of damage caused by individual keys is further limited,
Further, it is not necessary to manage the key list for each individual entity as described above.

(13) Control of Encryption Strength in Encryption Process In the above-described embodiment, the encryption process between the recording / reproducing device 300 and the recording device 400 will be described mainly with reference to FIG. Single D explained
The example using the encryption processing by the ES configuration has been described. However, the encryption processing method applied in the data processing device of the present invention is not limited to the above-mentioned single DES method at all, and an encryption method according to a required security state can be adopted.

[0449] For example, a triple DES system such as the configuration shown in Figs. 8 to 10 described above may be applied. For example, both the encryption processing unit 302 of the recording / reproducing device 300 shown in FIG. 3 and the encryption processing unit 401 of the recording device 400 are configured to be able to execute the triple DES method.
It is possible to adopt a configuration for executing processing corresponding to the encryption processing by the triple DES method described in the above.

However, the content provider gives priority to the processing speed in accordance with the content and sets the content key Kc
On may be a 64-bit key configuration by a single DES system, or the content key Kcon may be a 128-bit or 192-bit key configuration by a triple DES system with priority given to security. Therefore, the configuration of the encryption processing unit 302 of the recording / reproducing device 300 and the configuration of the encryption processing unit 401 of the recording device 400 are triple DES.
It is not preferable to adopt a configuration that can support only one of the system and the single DES system. Therefore, the encryption processing unit 302 of the recording / reproducing device 300 and the recording device 40
0 is a single DES, triple D
It is desirable to adopt a configuration that can support any of the ES systems.

However, the encryption processing unit 302 of the recording / reproducing device 300 and the encryption processing unit 401 of the recording device 400
Single DES system, Triple DES
In order to realize a configuration that can execute both of the methods, separate circuits and logics must be configured. For example, in order to execute the processing corresponding to the triple DES in the recording device 400, it is necessary to newly store the instruction set of the triple DES in the command register shown in FIG. This complicates the processing unit included in the recording device 400.

Therefore, the data processing apparatus of the present invention has a single DES configuration for the logic of the encryption processing unit 401 of the recording device 400, and can execute processing corresponding to triple DES encryption processing. A configuration is proposed in which encrypted data (key, content, etc.) can be stored in the external memory 402 of the recording device.

For example, in the example of the data format type 0 shown in FIG. 32, when the content data is downloaded from the recording / reproducing device 300 to the recording device 400, the flow of the format type 0 previously described is shown. An authentication process is executed in step S101 of 39, and a session key Kses is generated here. Further, in step S117, the recording / reproducing device 3
In the cryptographic processing unit 302 on the 00 side, the session key Kse
s, the encryption key is transferred to the recording device 400 via the communication unit. In step S118, the encryption processing unit 403 of the recording device 400 that has received the encryption key performs The content key Kcon is decrypted using the session key Kses, the content key Kcon is encrypted using the storage key Kstr, and the encrypted content key Kcon is transmitted to the encryption processing unit 302 of the recording / reproducing device 300. The reproducer 300 forms a data format (step S
121), the formatted data is transmitted to the recording device 400, and the data received by the recording device 400 is stored in the external memory 402.

In the above processing, steps S117, S1
If the encryption processing in the encryption processing unit 401 of the recording device 400 executed between the 18 is configured to be able to selectively execute either the single DES or the triple DES, the content provider follows the triple DES. Both cases of providing content data using the content key Kcon and providing content data using the content key Kcon according to the single DES can be handled.

FIG. 56 shows a triple D using both the encryption processing section 302 of the recording / reproducing apparatus 300 and the encryption processing section 401 of the recording device 400 in the data processing apparatus of the present invention.
4 shows a flow illustrating a configuration for executing a cryptographic processing method according to the ES system. In FIG. 56, as an example, the recording / reproducing device 3
This is an example of encryption processing of the content key Kcon using the storage key Kstr executed when the content data is downloaded to the recording device 400 from 00, and shows an example where the content key Kcon is a key according to the triple DES method. I have. Here, the content key Kco
An example of the processing will be described on behalf of n, but the same processing can be performed for other data such as another key or content.

In the triple DES system, FIG.
As described in (10), (6)
128 in case of 4-bit key and triple DES method
This is a process in which two or three keys are used as a bit or 192 bit key configuration. These three content keys are respectively designated as Kcon1, Kcon2, (Kco
n3). Since Kcon3 may not be used in some cases, it is shown in parentheses.

The processing in FIG. 56 will be described. Step S301 is a mutual authentication processing step between the recording / reproducing device 300 and the recording device 400. This mutual authentication processing step is executed by the processing of FIG. 20 described above. At the time of this authentication processing, a session key Kses is generated.

When the authentication processing in step S301 is completed, in step S302, a collation processing of each check value, check value A, check value B, content check value, total check value, and each ICV is executed.

If the check value (ICV) collation processing is completed and it is determined that there is no data tampering, step S
Proceeding to 303, in the recording / reproducing device 300, the control unit 306 of the recording / reproducing device encryption processing unit 302 uses the encryption / decryption unit 308 of the recording / reproducing device encryption processing unit 302 to extract the previously extracted or generated delivery key. Using Kdis, the content key Kcon stored in the header part of the received media 500 or the data received from the communication unit 600 via the communication unit 305 is decrypted. The content key in this case is a key based on the triple DES method,
Content key Kcon1, Kcon2, (Kcon3)
It is.

[0460] Next, in step S304, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to execute the content keys Kcon1, Kcon decrypted in step S303.
content key Kcon in con2, (Kcon3)
Session key K shared only for 1 in mutual authentication
Encrypt with ses.

The control section 301 of the recording / reproducing apparatus 300 controls the content key Kcon encrypted with the session key Kses.
1 is read from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and these data are transmitted to the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.

[0462] Next, in step S305, the content key Kcon1 transmitted from the recording / reproducing device 300 is transmitted.
Receiving the content key Kcon1 from the recording device 400,
Decryption is performed by the decryption unit 406 using the session key Kses shared during the mutual authentication. Further, step S3
At 06, the storage device-specific storage key K stored in the internal memory 405 of the storage device encryption processing unit 401
It is re-encrypted by str and transmitted to the recording / reproducing device 300 via the communication unit 404.

Next, in step S307, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to transmit the content keys Kcon1, Kcon decrypted in step S303.
content key Kcon in con2, (Kcon3)
Session key K shared only during mutual authentication
Encrypt with ses.

[0464] The control section 301 of the recording / reproducing apparatus 300 controls the content key Kcon encrypted with the session key Kses.
2 is read from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and these data are transmitted to the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.

[0465] Next, in step S308, the content key Kcon2 transmitted from the recording / reproducing device 300.
Receiving the content key Kcon2, the recording device 400
Decryption is performed by the decryption unit 406 using the session key Kses shared during the mutual authentication. Further, step S3
09, the storage device-specific storage key K stored in the internal memory 405 of the storage device encryption processing unit 401
It is re-encrypted by str and transmitted to the recording / reproducing device 300 via the communication unit 404.

Next, in step S310, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to execute the content keys Kcon1, Kcon decrypted in step S303.
content key Kcon in con2, (Kcon3)
Session key K shared only for mutual authentication at the time of mutual authentication
Encrypt with ses.

[0467] The control section 301 of the recording / reproducing apparatus 300 controls the content key Kcon encrypted with the session key Kses.
3 is read from the recording / reproducing device encryption processing unit 302 of the recording / reproducing device 300, and these data are transmitted to the recording device 400 via the recording device controller 303 of the recording / reproducing device 300.

[0468] Next, in step S311, the content key Kcon3 transmitted from the recording / reproducing device 300 is received.
Receiving the content key Kcon3, the recording device 400
Decryption is performed by the decryption unit 406 using the session key Kses shared during the mutual authentication. Further, step S3
12, the storage device-specific storage key K stored in the internal memory 405 of the storage device encryption processing unit 401.
It is re-encrypted by str and transmitted to the recording / reproducing device 300 via the communication unit 404.

[0469] Next, in step S313, the encryption processing section of the recording / reproducing device forms the various data formats described with reference to Figs.

[0470] Finally, in step S314, the recording device 400 stores the received data for which the format has been formed in the external memory 402. This format data includes the content keys Kcon1, Kcon2, and (Kcon3) encrypted with the storage key Kstr.

By performing such processing, the content key stored in the recording device 400 is
It can be stored as a key by the ES encryption method. Note that the content keys are Kcon1 and Kcon2
If these are the two keys, steps S310 to S312
Is omitted.

[0472] As described above, the recording device 400 repeatedly executes the processing of the same mode, that is, the processing steps of steps S305 and S306 a plurality of times only by changing the target, thereby obtaining the key to which the triple DES is applied. It can be stored in memory. If the content key Kcon is a single DES applicable key, step S30
5, S306 may be executed, and the formatting process in step S313 may be executed and stored in the memory. In such a configuration, the command for executing the processing of steps S305 and S306 is stored in the command register of FIG. 29 described above, and this processing is performed according to the content key mode, that is, the triple DES method or the single DES method.
The configuration may be appropriately executed once to three times. Therefore, both the triple DES method and the single DES method can be performed without including the triple DES processing method in the processing logic of the recording device 400. In addition,
The encryption method can be recorded in the handling policy in the header portion of the content data, and can be determined by referring to the policy.

(14) Program Start Process Based on Start Priority in Handling Policy for Content Data As can be understood from the content data structure of FIGS. 4 to 6 described above, the program is used in the data processing device of the present invention. The handling policy stored in the header part of the content data includes content type and activation priority information. Recording / reproducing device 300 in data processing device of the present invention
When there are a plurality of accessible content data recorded on the recording device 400 or various recording media such as a DVD, a CD, a hard disk, and a game cartridge, the activation order of these contents is determined according to the activation priority information. I do.

[0474] The recording / reproducing device 300 is provided for each recording device DV.
After executing the authentication process with various recording devices such as a D device, a CD drive device, and a hard disk drive device, the program in the content data having the highest priority is preferentially executed according to the priority information in the content data. Hereinafter, the “program activation process based on the activation priority in the handling policy of the content data” will be described.

In the above description of the embodiment of the data processing apparatus of the present invention, the processing in the case where the recording / reproducing apparatus 300 reproduces and executes content data from one recording device 400 has been mainly described. However, in general, the recording / reproducing apparatus 300 includes a DVD, a CD, a hard disk via a reading unit 304, a memory card, a game cartridge connected via PIO 111 and SIO 112 in addition to the recording device 400 as shown in FIG. And so on, which allow access to various recording media. In FIG. 2, only one reading unit 304 is shown to avoid complicating the drawing. However, the recording / reproducing device 300 can mount different storage media, for example, DVD, CD, floppy disk, and hard disk in parallel. It is.

[0476] The recording / reproducing device 300 can access a plurality of storage media, and each of the storage media stores content data. For example, content data supplied by an external content provider such as a CD is
When the data is stored in the media in the data configuration of FIG. 4 described above and downloaded via these media or communication means, the content is stored in each storage medium such as a memory card in the content data configuration in FIGS. 26 and 27. I have. further,
Specifically, as shown in FIGS. 32 to 35, the content data is stored in different formats on a medium and a recording device according to the format type of the content data. However, in each case, the handling policy in the header of the content data includes the content type and the activation priority information.

[0477] The content activation processing of the recording / reproducing apparatus when access to a plurality of content data is possible will be described with reference to the flow.

FIG. 57 is a processing flow showing a processing example (1) when there are a plurality of startable contents. Step S611 is a step of executing authentication processing of a recording device accessible by the recording / reproducing device 300. Accessible recording devices include memory cards, DVD devices,
CD drive, hard disk drive, and, for example, P
The game cartridge and the like connected via the IO 111 and the SIO 112 are included. The authentication process is executed for each recording device under the control of the control unit 301 shown in FIG. 2, for example, according to the procedure described above with reference to FIG.

[0479] Next, in step S612, a startable program is detected from content data stored in the memory of the recording device that has been successfully authenticated. this is,
More specifically, the process is executed as a process for extracting a program whose content type included in the handling policy of content data is a program.

[0480] Next, in step S613, the startup priority of the bootable programs extracted in step S612 is determined. Specifically, this is a process of comparing the priority information included in the handling information in the headers of the plurality of startable content data selected in step S612 and selecting the highest priority.

Next, the program selected in step S614 is started. If the set priorities are the same among a plurality of programs that can be started, a default priority is set among the recording devices, and the content program stored in the device with the highest priority is executed.

FIG. 58 shows a processing mode in which identifiers are set for a plurality of recording devices and authentication processing and content program search are sequentially performed for the recording devices to which the identifiers are assigned, that is, when there are a plurality of startable contents. Processing example (2) is shown.

In step S621, the recording / reproducing device 300
This is a step of executing an authentication process (see FIG. 20) of the recording device (i) attached to the printer. A plurality (n) of recording devices are sequentially assigned identifiers 1 to n.

In step S622, in step S621
It is determined whether or not the authentication is successful. If the authentication is successful, the process proceeds to step S623 to search for a bootable program from the recording medium of the recording device (i). If the authentication is not successful, the process proceeds to step S627 to determine the presence or absence of a recording device capable of retrieving a new content. If not, the process ends. If the recording device exists, the process proceeds to step S628 and the recording device identifier is determined. i is updated, and the authentication processing steps after step S621 are repeated.

[0485] The process in step S623 is a process of detecting a startable program from the content data stored in the recording device (i). Specifically, this is executed as a process of extracting a program whose content type included in the content data handling policy is a program.

In step S624, it is determined whether or not a program whose content type is program has been extracted.
If extracted, in step S625, the program with the highest priority is selected from the extracted programs, and the selected program is executed in step S626.

[0487] If it is determined in step S624 that a program whose content type is a program has not been extracted, the flow advances to step S627 to determine whether there is a recording device for new content search. If not, the process ends. If a recording device exists, the process proceeds to step S628 to update the recording device identifier i, and repeats the authentication processing steps from step S621.

[0488] Fig. 59 is a processing flow showing a processing example (3) when there are a plurality of startable contents. Step S651 is a step of executing authentication processing of a recording device accessible by the recording / reproducing device 300. The authentication processing of the accessible DVD device, CD drive, hard disk device, memory card, game cartridge, etc. is executed. The authentication process is executed for each recording device under the control of the control unit 301 shown in FIG. 2, for example, according to the procedure described above with reference to FIG.

[0489] Next, in step S652, a startable program is detected from the content data stored in the memory of the recording device that has been successfully authenticated. this is,
More specifically, the process is executed as a process for extracting a program whose content type included in the handling policy of content data is a program.

[0490] Next, in step S653, information such as the name of the startable program extracted in step S652 is displayed on the display means. Although the display means is not shown in FIG. 2, data output as AV output data is output to a display means (not shown). Note that user-provided information such as the program name of each content data is stored in the identification information of the content data, and each content that has been authenticated via the control unit 301 under the control of the main CPU 106 shown in FIG. The program information such as the program name of the data is output to the output means.

Next, in step S654, a program selection input by a user through input means such as an input interface, a controller, a mouse, and a keyboard shown in FIG.
Is received, and executes the user selection program in step S655 according to the selection input.

As described above, in the data processing device of the present invention,
A configuration in which the program start priority information is stored in the handling information in the header in the content data, and the recording / reproducing device 300 starts the program according to the priority or displays the start program information on the display means and selects the program by the user. This eliminates the need for the user to search for the program, and saves the time required for activation and the user's labor. In addition, since all programs that can be started are started after the authentication processing of the recording device or displayed as a program that can be started, the complexity of processing such as selecting a program and then confirming the validity is reduced. Will be resolved.

(15) Content Configuration and Playback (Decompression) Processing In the data processing apparatus of the present invention, as described above, the recording / reproducing device 300 downloads the content from the medium 500 or the communication means 600, or
Reproduction processing is performed from 0. The above description has centered on the processing of the encrypted data accompanying the processing of downloading or reproducing the content.

Control unit 3 in recording / reproducing device 300 in FIG.
Reference numeral 01 controls overall authentication processing, encryption, and decryption processing accompanying download processing or playback processing of content data from a device 500 such as a DVD that provides content data, the communication unit 600, and a recording device.

Reproducible contents obtained as a result of these processes are, for example, audio data, image data, and the like. The decoded data is transmitted from the control unit 301 to the main C shown in FIG.
It is placed under the control of the PU, and is output to the AV output unit according to audio data, image data, and the like. However, if the content is, for example, audio data and is MP3 compressed,
The audio data is decoded and output by the MP3 decoder of the AV output unit shown in FIG. If the content data is image data and is an MPEG2 compressed image, the MPEG2 decoder of the AV processing unit executes the decompression process and outputs the result. As described above, the data included in the content data may be subjected to compression (encoding) processing, or may be data that has not been subjected to compression processing.

[0496] However, there are various types of compression processing and decompression processing programs, and if there is no corresponding decompression processing execution program even if compressed data is provided from a content provider, it cannot be reproduced. Occurs.

Therefore, the data processing apparatus of the present invention uses a configuration in which compressed data and its decoding (decompression) processing program are stored together in the data content, or the link information between the compressed data and the decoding (decompression) processing program. A configuration for storing as header information of content data is disclosed.

FIG. 60 shows a simplified diagram of the elements related to this configuration and related elements from the overall data processing diagram shown in FIG. The recording / reproducing device 300 is, for example, a DVD or a CD.
And the like, a communication device 600, or a recording device 4 such as a memory card storing content.
Various contents are provided from 00. These contents are audio data, still images, moving image data, program data, etc., and are those that have been subjected to encryption processing, those that have not been subjected to encryption processing, and those that have been subjected to compression processing. Various data, such as missing data, are included.

[0499] When the received content is encrypted, control by the control unit 301 and decryption processing by the encryption processing of the encryption processing unit 302 are executed by the method described in the above item. The decrypted data is sent to the AV processing unit under the control of the main CPU 106.
Is stored in the memory 3090 of the AV processing unit 109, and the content analysis unit 3091 analyzes the content configuration. For example, if a data decompression program is stored in the content, the program is stored in the program storage unit 3093, and if data such as audio data and image data is included, these are stored in the data storage unit 3092. The decompression processing unit 3094 executes decompression processing of the compressed data stored in the data storage unit 3092 using a decompression processing program such as MP3 stored in the program storage unit, and outputs the data to the speaker 3001 and the monitor 3002. .

Next, some examples of the structure and processing of data received by the AV processing unit 109 via the control unit 301 will be described. Note that here, audio data is shown as an example of content, and MP3 is applied as an example of a compression program. However, this configuration is applicable not only to audio data but also to image data. In addition, not only MP3 but also various programs such as MPEG2 and 4 can be applied to the compression / expansion processing program.

[0501] Fig. 61 shows a content configuration example. FIG.
Is music data 6102 compressed by MP3, MP
This is an example in which a three-decryption (expansion) processing program 6101 is combined into one content. These contents are stored as one content in the medium 500 or the recording device 400, or distributed from the communication unit 600. The recording / reproducing device 300 performs a decryption process by the encryption processing unit 303 if the content is encrypted as described above,
The data is transferred to the AV processing unit 109.

[0502] Content analysis unit 30 of AV processing unit 109
In step 91, the received content is analyzed, and the audio data decompression program (MP3 decoder) is extracted from the content including the audio data decompression program (MP3 decoder) and the compressed audio data, and the program is stored in the program storage unit 3093. Then, the compressed audio data is stored in the data storage unit 3092. The content analysis unit 3091 receives information such as a content name and content configuration information received separately from the content, or identification data such as a data name included in the content, data indicating a data length, a data configuration, and the like. May be performed based on the content. Next, the compression / decompression processing unit 309
4 executes expansion processing of MP3 compressed audio data stored in the data storage section 3092 in accordance with the audio data expansion program (MP3 decoder) stored in the program storage section 3093, and the AV processing section 109 converts the expanded audio data. Output to the speaker 3001.

[0503] Fig. 62 is a flow chart showing an example of a process of reproducing data having the content structure shown in Fig. 61. Step S
Reference numeral 671 denotes a data name stored in the memory 3090 of the AV processing unit 109, for example, if the content is music data, information such as a song name is extracted from information received separately from the content or from data in the content.
2 is displayed. A step S672 receives a user's selection from various input means such as a switch and a keyboard via the input interface 110, and outputs a reproduction processing command based on the user input data to the AV processing unit 109 under the control of the CPU. The AV processing unit 109 determines in step S
At step 673, data extraction and decompression processing is performed according to the user's selection.

Next, FIG. 63 shows an example of a configuration in which one content contains either compressed audio data or a decompression processing program, and further includes content information indicating the content of the content as header information of each content. Show.

As shown in FIG. 63, when the content is a program 6202, the header information 6201 indicates that the content is a program, and the program type is MP3
Content identification information indicating that the program is a decompression program is included. On the other hand, when the audio data 6204 is included as content, the content information of the header 6203 includes M
Information that the data is P3 compressed data is included. This header information is added to the content to be transferred to the AV processing unit 109 by selecting only the information necessary for reproduction from the data included in the handling policy of the content data configuration shown in FIG. It is possible to configure. Specifically, an identification value of the handling policy data required in the encryption processing unit 302 and the identification value of the data required in the playback processing in the AV processing unit 109 is added to each component data in the “handling policy” shown in FIG. However, only those indicating that these identification values are necessary in the AV processing unit 109 can be extracted and used as header information.

[0506] The AV receiving each content shown in FIG.
According to the header information, the content analysis unit 3091 of the processing unit 109 stores the program content in the program storage unit 3093 if it is a program, and stores the data content in the data storage unit 3092 if it is data. Thereafter, the compression / decompression processing unit 3094 takes out the data from the data storage unit, and
The decompression process is executed according to the MP3 program stored in 93 and output. If the same program is already stored in the program storage unit 3093, the program storing process may be omitted.

FIG. 64 is a flowchart showing an example of a process of reproducing data having the content structure shown in FIG. Step S
Reference numeral 675 denotes a data name stored in the memory 3090 of the AV processing unit 109, for example, if the content is music data, information such as a song name is extracted from information received separately from the content or from a header in the content.
2 is displayed. In step S676, the selection of the user is received from various input means such as a switch and a keyboard via the input interface 110.

Next, in step S677, a program for reproducing data corresponding to the user selection (for example, MP3)
Search for. It is preferable that the maximum search range of the program search target is an accessible range of the recording / reproducing device 300. For example, each medium 500, shown in FIG.
The communication means 600, the recording device 400, and the like are also set as the search range.

[0509] The content passed to the AV processing unit 109 is only the data portion, and the program content may be stored in another recording medium in the recording / reproducing device 300.
It may be provided from a content provider via media such as VD and CD. Therefore, the search target is set to a range in which the storage of the recording / reproducing device 300 is accessible. When a playback program is found as a result of the search, the CPU 1
Under the control of 06, a reproduction processing command based on the user input data is output to the AV processing unit 109. AV processing unit 109
Executes the data extraction and decompression processing by the user selection in step S679. In another embodiment, the search for the program may be performed before step S675, and in step S675, only the data in which the program is detected may be displayed.

Next, FIG. 65 shows an example of a configuration in which one content includes compressed audio data 6303 and a decompression processing program 6302, and further includes reproduction priority information of the content as header information 6301 of the content. This is an example in which reproduction priority information is added as header information to the content configuration of FIG. This is similar to the above-mentioned “(14) Program start processing based on start priority in the handling policy of content data”, and the reproduction order is set based on the reproduction priority set between the contents received by the AV processing unit 109. To decide.

[0511] Fig. 66 is a flow chart showing an example of a process of reproducing data having the content structure shown in Fig. 65. Step S
Reference numeral 681 sets the data stored in the memory 3090 of the AV processing unit 109, that is, the data information of the reproduction target data, in the search list. The search list is set using a partial area of the memory in the AV processing unit 109. Next, in step S682, the content analysis unit 3091 of the AV processing unit 109 selects data having a high priority from the search list, and in step S683, the selected data is reproduced.

Next, FIG. 67 shows an example in which one content is composed of any combination of header information and program data 6402 or header information 6403 and compressed data 6404.
Shows a configuration example in which the reproduction priority information is added only to.

[0513] Fig. 68 is a flow chart showing an example of a process of reproducing data having the content structure shown in Fig. 67. Step S
Reference numeral 691 sets the data stored in the memory 3090 of the AV processing unit 109, that is, the data information of the reproduction target data, in the search list. The search list is set using a partial area of the memory in the AV processing unit 109. Next, in step S692, the content analysis unit 3091 of the AV processing unit 109 selects data with high priority from the search list.

[0514] Next, in step S693, a data reproduction program (for example, MP
3) Search. This program search target is shown in FIG.
Similarly to the processing in the flow of FIG. 4, it is preferable that the range in which the storage of the recording / reproducing device 300 is accessible is set as the maximum search range.
00, the recording device 400, and the like are also set as the search range.

[0515] If a reproduction program is found as a result of the search (Yes in step S694), step S695 is performed.
, The decompression / reproduction processing is executed using the program obtained as a result of searching the selected data.

[0516] On the other hand, if no program is detected as a search result (Yes in step S694), the flow advances to step S696 to use the same program in other data included in the search list set in step S691. Delete those that require playback processing. This is because it is apparent that even if a new reproduction program search for the data is executed, the data is not detected.
Further, in step S697, it is determined whether the search list is empty. If not, the process returns to step S692 to extract the next higher priority data and execute the program search process.

As described above, according to this configuration, the compressed content is composed together with the decryption (decompression) program, or when the content is only compressed data or only the decompression program. Has header information indicating what kind of compressed data the content is, or what kind of processing is to be performed, so that the processing unit (eg, the AV processing unit) that has received the content Executing the decompression / reproduction processing using the decompression processing program attached to the compressed data, or searching for the decompression processing program based on the header information of the compressed data, and performing the decompression / reproduction processing according to the program obtained as a result of the search This eliminates the need for the user to select a data decompression program, search, etc. There is reduced, thereby enabling efficient data reproduction. Further, according to the configuration having the playback priority information in the header, a configuration in which the playback order is automatically set is possible, and the operation of setting the playback order by the user can be omitted.

[0518] In the above-described embodiment, compressed audio data content and MP3 as a program for decompressing audio compressed data have been described as an example. However, content containing compressed data and content having a decompression program for compressed image data have been described. Even in this case, the present configuration is similarly applicable, and has the same effect.

(16) Generation of Save Data, Storage in Recording Device, and Playback Process The data processing device of the present invention executes the game program in the middle, for example, when the content executed by the recording / playback device 300 is a game program or the like. If it is desired to restart the game after a predetermined time, the game state at the time of the interruption can be saved, that is, stored in a recording device, and read out at the time of restart to continue the game. Have.

[0520] The save data storage configuration in a conventional recording / reproducing device such as a game machine or a personal computer can be stored in a storage medium such as a memory card, a floppy disk, a game cartridge, or a hard disk which can be built in or external to the recording / reproducing device. Although it has a configuration for saving data, it does not particularly have a security ensuring configuration for the save data, and for example, has a configuration in which data save processing is performed according to specifications common to game application programs.

[0521] Therefore, for example, a situation occurs in which save data saved using a certain recording / reproducing device A is used or rewritten by another game program. Conventionally, security of save data has been almost taken into consideration. The fact is that they did not.

[0522] The data processing apparatus of the present invention provides a configuration capable of realizing security of such save data. For example, save data of a certain game program is encrypted based on information usable only by the game program and stored in a recording device. Alternatively, the data is encrypted based on the information unique to the recording / reproducing device and stored in the recording device. By these methods, the use of save data can be restricted to only a specific device and a specific program, and security of the save data is ensured. Hereinafter, “generation of save data and storage / reproduction processing on a recording device” in the data processing apparatus of the present invention will be described.

[0523] Fig. 69 is a block diagram for explaining save data storage processing in the data processing apparatus of the present invention. The content is provided to the recording / reproducing device 300 from the medium 500 such as a DVD or a CD, or the communication means 600. The content to be provided is encrypted by the content key Kcon, which is a key unique to the content, as described above, and the recording / reproducing device 300 performs the above-described “(7) Download process from the recording / reproducing device to the recording device”. After obtaining the content key and decrypting the encrypted content in accordance with the process described in
It is stored in the recording device 400. Here, the recording / reproducing device 300 decodes and reproduces and executes the content program from a medium or a communication means. After the execution, the obtained save data is externally attached, or various recording devices such as a built-in memory card and a hard disk. 400A, 400
B, 400C, and after the content is downloaded to the recording device 400A, the content is reproduced from the recording device 400A.
A process of executing the save data and storing the save data in any of various recording devices 400A, 400B, and 400C such as an external memory or a built-in memory card or a hard disk will be described.

[0524] As described above, the recording / reproducing device 300 includes the recording / reproducing device identifier IDdev, the system signature key Ksys, which is a signature key common to the system, and the recording / reproducing device, which is a signature key unique to each recording / reproducing device. It has a signature key Kdev and a master key for generating various individual keys. The master key is a key for generating, for example, a distribution key Kdis or an authentication key Kake, as described in detail in “(12) Configuration of encryption processing key generation based on master key”. Here, MKx is shown as a representative of all the master keys of the recording / reproducing device 300 without limiting the type of the master key. The lower part of FIG. 69 shows an example of the encryption key Ksav of the save data. The save data encryption key Ksav stores the save data in various recording devices 400.
This is an encryption key used for encryption processing when stored in A to C and decryption processing for reproduction from various recording devices 400A to 400C. An example of save data storage processing and reproduction processing will be described with reference to FIG.

[0525] Fig. 70 shows the storage device 4 that stores save data using either a content private key or a system common key.
It is a flowchart of the process stored in any of 00A-C.
The process in each flow is a process executed by the recording / reproducing device 300, and the recording device for storing the save data in each flow may be any of the built-in and external recording devices 400A to 400C, and is limited to any one. Not a thing.

[0526] Step S701 comprises a content identifier,
For example, this is a process in which the recording / reproducing device 300 reads out the game ID. This corresponds to FIGS. 4, 26, 27, 32-
35, which is the data included in the identification information in the content data, and receives the save data storage processing instruction via the input interface 110 shown in FIG.
U106 controls the reading of the content identifier by the control unit 301.
To instruct.

The control unit 301 determines that the execution program is a DV
In the case of a content executed via the reading unit 304, such as D or CD-ROM, the identification information included in the header in the content data is extracted via the reading unit 304,
If the execution program is a content stored in the recording device 400, the recording device controller 30
Then, the identification information is taken out via 3. The recording / reproducing device 30
0 indicates that the content program is being executed and the content identifier has already been stored in the RAM or other accessible recording medium in the recording / reproducing device, and a new reading process is not executed, and the content identifier is included in the read data. May be used.

Next, step S702 is a step of changing the process depending on whether or not the use of the program is restricted. The program use restriction is restriction information for setting whether or not to impose a restriction that save data to be saved can be used only by the program. "Use is restricted", and the case where save data is not restricted by the program is "no program use restriction". This may be set arbitrarily by the user, or may be set by the content creator, and this information may be stored in the content program. The set restriction information is recorded in FIG. The data is stored as a data management file in the devices 400A to 400C.

FIG. 71 shows an example of the data management file.
The data management file is generated as a table including items such as a data number, a content identifier, a recording / reproducing device identifier, and a program use restriction. The content identifier is identification data of a content program for which save data is to be stored. The recording / reproducing device identifier is the identifier of the recording / reproducing device storing the save data, for example, [IDdev] shown in FIG. As described above, the program use restriction is set to “Yes” when save data to be saved is uniquely usable only for that program, and is set to “No” when use is not limited to the corresponding program. Become. The program use restriction may be arbitrarily set by the user of the content program, or may be set by the content creator, and this information may be stored in the content program.

Returning to FIG. 70, description of the flow will be continued. If “Yes” is set for the program use restriction in step S702, step S703 is executed.
Proceed to. In step S703, a content-specific key, for example, the content key Kcon described above is read from the content data and the content-specific key is used as the save data encryption key Ksav, or the save-data encryption key Ksav is generated based on the content-specific key. I do.

[0531] On the other hand, in step S702, if "NO" is set for the program use restriction, the flow advances to step S707. In step S707, the system common key stored in the recording / reproducing device 300,
For example, the system signature key Ksys is read from the internal memory 307 of the recording / reproducing device 300, and the system signature key Ksy is read.
Let s be the save data encryption key Ksav, or generate the save data encryption key Ksav based on the system signature key. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

Next, in step S704, the save data is encrypted using the save data encryption key Ksav selected or generated in step S703 or S707. This encryption processing is executed by the encryption processing unit 302 in FIG. 2 by applying, for example, the above-described DES algorithm.

The save data encrypted in step S704 is stored in the recording device in step S705. When there are a plurality of recording devices capable of storing save data as shown in FIG. 69, the user selects one of the recording devices 400A to 400C in advance as a save data storage destination. Further, in step S706, the writing of the program use restriction information previously set in step S702 into the data management file described above with reference to FIG. 71, that is, the writing of the program use restriction “Yes” or “No” is executed.

[0534] Thus, the save data storage processing ends. In step S702, Yes, that is, "restrict program use" is selected, and step S70
3, the save data encrypted by the save data encryption key Ksav generated based on the content unique key cannot be decrypted by a content program having no content unique key information. Only content programs with information will be available. However, here, the save data encryption key Ksav is not generated based on information unique to the recording / reproducing device, so that the save data stored in a detachable recording device such as a memory card is different from the recording / reproducing device. Can be reproduced as long as it is used together with the corresponding content program.

[0535] In step S702, No, that is, "Do not restrict program use" is selected.
The save data encrypted by the save data encryption key Ksav based on the system common key in step S707 is reproduced and used even when a program with a different content identifier is used or when the recording / reproducing device is different. It is possible to do.

FIG. 72 is a flowchart showing a process of reproducing the save data stored by the save data storing process of FIG.

[0537] Step S711 is a content identifier.
For example, this is a process in which the recording / reproducing device 300 reads out the game ID. This is a process similar to step S701 of the save data storage process of FIG. 70 described above, and is a process of reading data included in the identification information in the content data.

Next, in step S712, the data management file described with reference to FIG. 71 is read from the recording devices 400A to 400C shown in FIG.
Then, the content identifier read in and the used program restriction information set correspondingly are extracted. If the program use restriction set in the data management file is “Yes”, the process proceeds to step S714, and if “no”, the process proceeds to step S717.

In step S714, a content-specific key, for example, the content key Kcon described above, is read from the content data and the content-specific key is used as the save data decryption key Ksav, or the save data is decrypted based on the content-specific key. Generates a key Ksav. In this decryption key generation process, a processing algorithm corresponding to the encryption key generation process is applied, and data encrypted based on a certain content unique key is decrypted by a decryption key generated based on the same content unique key. A decryption key generation algorithm that can be decrypted is applied.

On the other hand, in step S712, if the setting of the data management file is set to “NO” for the program use restriction, in step S717, the system common key stored in the recording / reproducing device 300
For example, the system signature key Ksys is read from the internal memory 307 of the recording / reproducing device 300, and the system signature key Ksy is read.
s is the save data decryption key Ksav, or the save data decryption key Ksa
Generate v. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

Next, in step S715, the save data is decrypted using the save data decryption key Ksav selected or generated in step S714 or S717, and in step S716, the decrypted save data is decrypted. Is reproduced and executed by the recording / reproducing device 300.

[0542] Thus, the save data reproduction processing ends. As described above, if the setting of “restrict program use” is made in the data management file, a save data decryption key is generated based on the content unique key,
If there is a setting of "no program use restriction", a save data decryption key is generated based on the system common key. If "Use program restriction" is set, a decryption key capable of decrypting save data cannot be obtained unless the content identifiers of the content being used are the same, and the security of the save data is reduced. Can be increased.

FIGS. 73 and 74 show a save data storage processing flow (FIG. 73) and a save data reproduction processing flow (FIG. 74) for generating an encryption key and a decryption key for save data using a content identifier.

In FIG. 73, steps S721 to S7
Step 22 is the same processing as steps S701 to S702 in FIG. 70, and the description is omitted.

[0545] The save data storage processing flow in FIG.
In step S722, "Restrict use of program"
In step S723, the content identifier is read from the content data, that is, the content ID, and the content ID is used as the save data encryption key Ksav, or the save data encryption key Ksav is generated based on the content ID. . For example, the encryption processing unit 307 of the recording / reproducing device 300 assigns the recording / reproducing device 3
By applying the master key MKx stored in the internal memory at 00, a save data encryption key Ksav can be obtained by, for example, DES (MKx, content ID).
Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

[0546] On the other hand, in step S722, when the setting of "not use" is set for the program use restriction,
In step S727, the system common key stored in the recording / reproducing device 300, for example, the system signature key Ksys
Is read from the internal memory 307 of the recording / reproducing device 300, and the system signature key Ksys is stored in the save data encryption key K.
sav or a save data encryption key Ksav is generated based on the system signature key. Alternatively, an encryption key different from the other keys, which is separately stored in the internal memory 307 of the recording / reproducing device 300, is stored in the save data encryption key K.
It may be used as sav.

[0547] The processing of step S724 and subsequent steps is the same as the processing of step S704 and subsequent steps in the processing flow of FIG. 70 described above, and a description thereof will be omitted.

FIG. 74 is a processing flow for reproducing and executing save data stored in the recording device in the save data storage processing flow of FIG. 73.
1 to S733 are the same as the corresponding processing in FIG. 72 described above,
Only the step S734 is different. In step S734, the content identifier, that is, the content ID is read from the content data, and the content ID is used as the save data decryption key Ksav, or the save data decryption key Ksav is generated based on the content ID. In this decryption key generation process, a processing algorithm corresponding to the encryption key generation process is applied, and data encrypted based on a certain content identifier can be decrypted with a decryption key generated based on the same content identifier. A decryption key generation algorithm is applied.

The following processing, steps S735, S73
6, S737 is the same as the corresponding process in FIG. 72, and thus the description is omitted. According to the save data storage and reproduction processing of FIGS. 73 and 74, when the setting of program use restriction is performed, the save data encryption key and the decryption key are generated using the content ID. As in the case of the save data storage and reproduction processing using the above-mentioned content unique key, the save data cannot be used unless the corresponding content program matches, so that save with enhanced save data security becomes possible. .

FIGS. 75 and 77 show a save data storage processing flow (FIG. 75) and a save data reproduction processing flow (FIG. 77) for generating an encryption key and a decryption key for save data using the recording / reproducing device unique key. It is.

In FIG. 75, step S741 is the same process as step S701 in FIG. 70, and the description is omitted. Step S742 is a step of setting whether to limit the recording / reproducing device. The recording / reproducing device limit is set to “Yes” when limiting the recording / reproducing device that can use the save data, that is, when only the recording / reproducing device that generates and stores the save data is set to “Yes”. The case where the device can be used is also set to “No”. If "restrict recording / reproducing device" is set in step S742, the process proceeds to step S743, and if "no" is set, the process proceeds to step S747.

FIG. 76 shows an example of the data management file.
The data management file is generated as a table including items such as a data number, a content identifier, a recording / reproducing device identifier, and a recording / reproducing device restriction. The content identifier is identification data of a content program for which save data is to be stored. The recording / reproducing device identifier is the identifier of the recording / reproducing device storing the save data, for example, [IDdev] shown in FIG. The recording / reproducing device limit is set to “Yes” when limiting the recording / reproducing device that can use the save data, that is, when only the recording / reproducing device that generates and stores the save data is set to “Yes”. The case where the device can be used is also set to “No”. The recording / reproducing device restriction information may be arbitrarily set by a user using the content program,
This information may be set by the content creator and stored in the content program.

In the save data storage processing flow shown in FIG. 75, if “recording / reproducing device restriction” is set in step S742, the recording / reproducing device 300 sends a recording / reproducing device unique key, for example, a recording / reproducing device signature in step S743. The key Kdev is stored in the internal memory 3 of the recording / reproducing device 300.
07, the recording / reproducing device signature key Kdev is set as the save data encryption key Ksav, or the save data encrypting key Ksa is generated based on the recording / reproducing device signature key Kdev.
Generate v. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

On the other hand, if the recording / reproducing device restriction is set to “NO” in step S742, the system common key stored in the recording / reproducing device 300, for example, the system signature key Ksys is stored in the recording / reproducing device 300 in step S747. 300 from the internal memory 307, and stores the system signature key Ksys in the save data encryption key Ksav.
Or a save data encryption key Ksav is generated based on the system signature key. Alternatively, separately stored in the internal memory 307 of the recording / reproducing device 300,
An encryption key different from the other keys may be used as the save data encryption key Ksav.

[0555] The processing of steps S744 and S745 is the same as the corresponding processing in the processing flow of Fig. 70 described above, and a description thereof will be omitted.

[0556] In step S746, the content identifier, the recording / reproducing device identifier, and the recording / reproducing device restriction information "Yes / No" set by the user in step 742 are written in the data management file (see Fig. 76).

FIG. 77 is a processing flow for reproducing and executing the save data stored in the recording device in the save data storage processing flow of FIG. 75, and is shown in step S75.
No. 1 reads out the content identifier as in the corresponding processing of FIG. 72 described above. Next, in step S752, the recording / reproducing device identifier (IDdev) stored in the memory in the recording / reproducing device 300 is read.

In step S753, the content identifier, the recording / reproducing device identifier, and the set recording / reproducing device restriction information “Yes / No” from the data management file (see FIG. 76).
Is read. When the recording / reproducing device restriction information is set to “Yes” in the entry where the content identifier in the data management file matches, when the recording / reproducing device identifier of the table entry is different from the recording / reproducing device identifier read in step S752 Ends the processing.

Next, if the setting of the data management file is “limit recording / reproducing device” in step S754, the process proceeds to step S755, and if “no”, the process proceeds to step S758.

In step S755, the recording / reproducing device 300 reads out the recording / reproducing device unique key, for example, the recording / reproducing device signature key Kdev from the internal memory 307 of the recording / reproducing device 300, and replaces the recording / reproducing device signing key Kdev with the save data decryption key. Ksav or the recording / reproducing device signature key Kd
A save data decryption key Ksav is generated based on ev. In this decryption key generation process, a processing algorithm corresponding to the encryption key generation process is applied, and data encrypted based on a certain recording / reproducing device unique key is generated based on the same recording / reproducing device unique key. A decryption key generation algorithm that can be decrypted by the decryption key is applied. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

In step S758, the system common key, for example, the system signature key Ksys stored in the recording / reproducing device 300 is stored in the internal memory 3 of the recording / reproducing device 300.
07, the system signature key Ksys is used as the save data decryption key Ksav, or the save data decryption key Ksav is generated based on the system signature key. Alternatively, the internal memory 30 of the recording / reproducing device 300 is separately provided.
Alternatively, an encryption key stored in the storage device 7 and different from the other keys may be used as the save data encryption key Ksav. The following steps S756 and S757 are the same processing as the corresponding steps in the above-described save data reproduction processing flow.

[0562] Save data storage shown in Figs. 75 and 77,
According to the reproduction processing flow, the save data for which the “recorder / reproducer restriction” is selected is subjected to the encryption / decryption processing using the recording / reproducer unique key. It is possible to decode and use only the recording / reproducing device that has it, that is, the same recording / reproducing device.

Next, FIGS. 78 and 79 show the processing flow for generating, storing and reproducing save data encryption / decryption keys using the recording / reproducing device identifier.

[0564] In Fig. 78, save data is encrypted using the recording / reproducing device identifier and stored in the recording device. Steps S761 to S763 are the same processing as in FIG. In step S764, an encryption key Ksav of the save data is generated using the recording / reproducing device identifier (IDdev) read from the recording / reproducing device. IDdev is applied as the save data encryption key Ksav, or the master key M stored in the internal memory of the recording / reproducing device 300 is used.
Applying Kx to obtain a save data encryption key Ksav by DES (MKx, IDdev);
A save data encryption key ksav is generated based on
Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

The following processing steps S765 to S768
Are the same as the corresponding processing in FIG. 75 described above, and a description thereof will be omitted.

[0566] Fig. 79 is a processing flow for reproducing and executing the save data stored in the recording device by the processing of Fig. 78. Steps S771 to S774 are the same as the corresponding processing in FIG. 77 described above.

[0567] In step S775, a decryption key Ksav for the save data is generated using the recording / reproducing device identifier (IDdev) read from the recording / reproducing device. Applying IDdev as the save data decryption key Ksav, or applying the master key MKx stored in the internal memory of the recording / reproducing device 300, DES (MKx, IDdev)
ID such as obtaining save data decryption key Ksav
A save data decryption key Ksav is generated based on dev. In this decryption key generation process, a processing algorithm corresponding to the encryption key generation process is applied, and data encrypted based on a certain recording / reproducing device identifier is decrypted based on the same recording / reproducing device identifier. A decryption key generation algorithm that can be decrypted by the key is applied.
Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

The following processing steps S776 to S778 are the same as the corresponding steps in FIG. 76 described above.

According to the save data storage and reproduction processing flow shown in FIGS. 78 and 79, “recording / reproducing device is restricted”
The save data for which the selection has been made is subjected to encryption and decryption processing using the recording / reproducing device identifier, so that only the recording / reproducing device having the same recording / reproducing device identifier, that is, the same recording / reproducing device, decrypts and uses the saved data. It is possible to do.

[0570] Next, the save data storage and reproduction processing executed together with the above-mentioned program use restriction and recording / reproducing device use restriction will be described with reference to Figs.

FIG. 80 shows the save data storage processing flow. In step S781, a content identifier is read from the content data, and in step S782, a program use restriction determination is performed.
At 83, a recording / reproducing device restriction judgment is performed.

In the case of “there is a program use restriction” and “the recording / reproducing device is restricted”, in step S785, the saving is performed based on both the content unique key (ex. Kcon) and the recording / reproducing device unique key (Kdev). A data encryption key Ksav is generated. This is, for example, Ksav
= (Kcon XOR Kdev) or Ksav = DES (MKx, Kcon XOR) using the master key MKx stored in the internal memory of the recording / reproducing device 300.
Kdev) and the like. Alternatively, an encryption key different from the other keys, which is separately stored in the internal memory 307 of the recording / reproducing device 300, is stored in the save data encryption key K.
It may be used as sav.

In the case of “there is a program use restriction” and “no recording / reproducing device restriction”, in step S786, the content unique key (ex. Kcon) is set to the save data encryption key Ksav or the content unique key (ex. ex.Kcon), and generates a save data encryption key Ksav.

In the case of “no program use restriction” and “recording / reproducing device restricted”, in step S787, the recording / reproducing device unique key (Kdev) is set to the save data encryption key Ksav or the recording / reproducing device specific Key (K
dev), a save data encryption key Ksav is generated. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

[0575] In the case of "no restriction on program use" and "no restriction on recording / reproducing device", step S787
, A system common key, for example, a system signature key Ks
ys is used as the save data encryption key Ksav, or the save data encryption key Ksav is generated based on the system signature key Ksys. Or, separately, the recording / reproducing device 3
Alternatively, an encryption key that is stored in the internal memory 307 and is different from the other keys may be used as the save data encryption key Ksav.

In step S789, step S785
The save data is encrypted with the save data encryption key Ksav generated in any one of steps S788 to S788 and stored in the recording device.

In step S790, the restriction information set in steps S782 and S783 is stored in the data management file. The data management file has a configuration shown in FIG. 81, for example, and includes data numbers,
Includes content identifiers, recording / reproducing device identifiers, program use restrictions, and recording / reproducing device restrictions.

FIG. 82 is a processing flow for reproducing and executing save data stored in the recording device by the processing in FIG. 80. In step S791, the content identifier and the recording / reproducing device identifier of the execution program are read, and in step S792, the content identifier, the recording / reproducing device identifier, the program use restriction, and the recording / reproducing device restriction information are read from the data management file shown in FIG. In this case, if the program usage restriction is “Yes” and the content identifiers do not match, or if the recording / reproducing device restriction information is “Yes” and the recording / reproducing device identifiers do not match, the process ends.

Next, steps S793, S794, S7
In step 95, the decryption key generation process is set to one of the four modes of steps S796 to S799 according to the recorded data of the data management file.

[0580] In the case of "program use restriction" and "recording / reproducing device restriction", in step S796, saving is performed based on both the content unique key (ex. Kcon) and the recording / reproducing device unique key (Kdev). A data decryption key Ksav is generated. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav. In the case of "there is a program use restriction" and "no recording / reproducing device restriction", in step S797, the content unique key (ex.Kcon) is used as the save data decryption key Ksav or the content unique key (ex.Kcon). ), A save data decryption key Ksav is generated. Or, separately, the recording / reproducing device 3
Alternatively, an encryption key that is stored in the internal memory 307 and is different from the other keys may be used as the save data encryption key Ksav.

In the case of “no program use restriction” and “recording / reproducing device restricted”, in step S798, the recording / reproducing device unique key (Kdev) is set to the save data decryption key Ksav or the recording / reproducing device unique Key (K
dev), a save data decryption key Ksav is generated. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav. Further, in the case of “no restriction on program use” and “no restriction on recording / reproducing device”, in step S799, a system common key, for example, a system signature key Ksys is set as a save data decryption key Ksav or a system signature key Ksys. , And generates a save data decryption key Ksav. Alternatively, an encryption key that is separately stored in the internal memory 307 of the recording and reproducing device 300 and is different from other keys may be used as the save data encryption key Ksav.

In these decryption key generation processes, a processing algorithm corresponding to the encryption key generation process is applied, and data encrypted based on the same content unique key and the same recording / reproducing device unique key is converted to the same content unique key. A decryption key generation algorithm that can be decrypted by a decryption key generated based on the unique key and the recording / reproducing device unique key is applied.

[0583] In step S800, the above-described step S800 is executed.
A decryption process is performed using the save data decryption key generated in any of 796 to S799, and the decrypted save data is reproduced and executed by the recording / reproducing device 300.

According to the save data storage / reproduction processing flow shown in FIGS. 80 and 82, the save data for which “program use restriction” is selected is subjected to encryption / decryption processing using the content unique key. For,
Decryption and use are possible only when content data having the same content unique key is used. Further, the save data for which the “limit recording / reproducing device” is selected is subjected to encryption / decryption processing by using the recording / reproducing device identifier, so that the recording / reproducing device having the same recording / reproducing device identifier, that is, the same recording / reproducing device, Decoding and use can be performed only by the recording / reproducing device. Therefore, it is possible to set the use restriction by both the content and the recording / reproducing device, and it is possible to further enhance the security of the save data.

Although FIGS. 80 and 82 show the configuration for generating the save data encryption key and the decryption key using the content unique key and the recording / reproducing device private key, the content private key is used instead of the content private key. A configuration may be used in which a recording / reproducing device identifier is used instead of an identifier and a recording / reproducing device unique key, and a save data encryption key and a decryption key are generated based on these identifiers.

Next, a configuration for generating an encryption key and a decryption key for save data based on a password input by a user will be described with reference to FIGS.

FIG. 83 is a processing flow for generating an encryption key for save data based on the password input by the user and storing it in the recording device.

[0588] Step S821 is a process of reading a content identifier from the content data, and is the same as the above-described processes. Step S822 is a step of determining whether or not the user sets the program use restriction. The data management file set in this configuration has, for example, the configuration shown in FIG.

As shown in FIG. 84, the data includes a data number, a content identifier, a recording / reproducing device identifier, and program use restriction information by the user. The “user program use restriction information” is an item for setting whether or not to restrict users who use the program.

When the setting of use restriction is made in step S822 in the processing flow in FIG. 83,
In step S823, a user password is input. This input is input from input means such as a keyboard shown in FIG.

[0591] The entered password is stored in the main CPU1.
06, output to the encryption processing unit 302 under the control of the control unit 301, and executed in step S824, that is, the save data encryption key Ks based on the input user password.
av is generated. As the save data encryption key Ksav generation processing, for example, the password itself is converted to the encryption key Ksav.
v or the master key MK of the recording / reproducing device.
x, save data encryption key Ksav = DES
(MKx, password). Also, applying a one-way function with the password as input,
An encryption key may be generated based on the output.

[0591] In step S822, the user limit is N.
If “o”, the save data encryption key is generated based on the system common key of the recording / reproducing device 300 in step S828.

Further, in step S825, step S8
24, or the save data is encrypted using the save data encryption key Ksav generated in step S828, and the encrypted save data is stored in the recording device in step S826.

Further, in step S827, FIG.
The program use restriction information set by the user in step S822 is written in the data management file No. 4 in association with the content identifier and the recording / reproducing device identifier.

FIG. 85 is a diagram showing a flow of a process of reproducing the save data stored by the process of FIG. In step S831, a content identifier is read from the content data.
4 from the data management file shown in FIG.
Read the program use restriction information by the user.

In step S 833, a determination is made based on the data in the data management file. If “restrict program use by user” is set,
In step S834, a password input is requested, and in step S835, a decryption key based on the input password is generated. In this decryption key generation processing, a processing algorithm corresponding to the encryption key generation processing is applied, and data encrypted based on a certain password can be decrypted by a decryption key generated based on the same password. Is set to the decryption key generation algorithm.

If the determination in step S833 is that there is no restriction on program use by the user, the save data decryption key Ksav is used in step S837 using the system common key stored in the internal memory of the recording / reproducing device 300, for example, the system signature key Ksys. Generated. Or separately,
An encryption key different from the other keys stored in the internal memory 307 of the recording / reproducing device 300 is saved data encryption key Ksa
v may be used.

In step S836, step S83
5. The decryption of the save data stored in the recording device is performed using the decryption key Ksav generated in any one of Step S837, and the recording and reproducing device reproduces and executes the save data in Step S836.

According to the save data storage / reproduction processing flow shown in FIGS. 83 and 85, save data for which “restrict program use by user” is selected is encrypted and decrypted using a key based on a user input password. Since the process is executed, it is possible to decrypt and use only when the same password is input, and it is possible to enhance the security of the save data.

[0600] Although some storage data storage and reproduction processing modes have been described above, processing combining the above-described processing, for example, using a password, a recording / reproducing device identifier, a content identifier, and the like in any combination is used. It is also possible to generate a save data encryption key and a decryption key by using the above method.

(17) Configuration for Rejecting (Revoking) Unauthorized Equipment As described above, in the data processing apparatus of the present invention, the medium 500 (see FIG. 3) and the communication means 60
In the recording / reproducing unit 300, various contents data provided from 0 are authenticated, encrypted, etc., and stored in a recording device to enhance the security of the provided contents, and are used only by authorized users. It has a configuration that allows it.

As can be understood from the above description, the input contents include various signature keys stored in the internal memory 307 included in the encryption processing unit 302 of the recording / reproducing device 300.
Authentication processing, encryption processing, and decryption processing are performed using the master key and the check value generation key (see FIG. 18). As described above, the internal memory 307 for storing the key information is basically formed of a semiconductor chip having a structure that is difficult to access from the outside, has a multilayer structure, and has an internal memory such as an aluminum layer. However, it is desirable to adopt a configuration in which data is difficult to be read from the outside illegally, such as being sandwiched between the dummy layers or the lowermost layer, and having a narrow operating voltage and / or frequency range. In the unlikely event that unauthorized reading of the internal memory is performed and these key data etc. leaks out and is copied to a recording / reproducing device that is not properly licensed, unauthorized use of the contents may be made by the copied key information There is.

[0603] Here, a configuration for preventing the illegal use of the content due to the duplication of the key by the illegal copy will be described.

FIG. 86 is a block diagram for explaining the present configuration “(17) Configuration for Excluding Unauthorized Equipment”. Recording / reproducing device 30
0 is the same as the recording / reproducing device shown in FIGS.
It has an internal memory and has the various key data described above (FIG. 18) and the recording / reproducing device identifier. In addition,
Here, the recording / reproducing device identifier, key data and the like copied by a third party are not always stored in the internal memory 307 shown in FIG. 3, and the key data and the like of the recording / reproducing device 300 shown in FIG. It is assumed that the configuration is such that the encryption processing section 302 (see FIGS. 2 and 3) collectively or separately stores the information in a memory section that can be accessed.

[0605] In order to realize a configuration for eliminating unauthorized devices, an unauthorized recording / reproducing device identifier list in the header of content data is stored. As shown in FIG. 86, an illegal recording / reproducing device identifier (IDde
v) It has a revocation list as a list. Further, a list check value ICVrev for checking revocation list tampering is provided. The illegal recording / reproducing device identifier (IDdev) list is
The identifier I of the unauthorized recording / reproducing device that the content provider or the administrator has found out, for example, from the distribution status of the unauthorized copy, etc.
This is a list of Ddev. This revocation list may be stored, for example, after being encrypted by the distribution key Kdis. The decoding process by the recording / reproducing device is the same as, for example, the content download process of FIG.

Here, in order to facilitate understanding,
The revocation list is shown as independent data in the content data of FIG. 86. For example, the revocation list is included in the handling policy (for example, see FIGS. 32 to 35) which is a component of the header part of the content data described above. May be included. In this case, the falsification check of the handling policy data including the revocation list is performed using the check value ICVa described above. If the revocation list is included in the handling policy, check value A: I
The check value generation key Kicv-rev is used instead of the check of the CVa, and the check value A generation key Kicv-rev in the recording / reproducing device is used.

In the case where the revocation list is included in the content data as independent data, the list check value ICVr for falsification check of the revocation list is used.
The revocation list is checked by ev, an intermediate check value is generated from the list check value ICVrev and other partial check values in the content data, and the intermediate check value is verified.

The revocation list check method using the list check value ICVrev for falsification check of the revocation list is executed in the same manner as the check value generation processing for ICVa, ICVb, etc. described above with reference to FIGS. It is possible. That is, the check value generation key Kicv-rev stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 is used as a key, and the revocation list included in the content data is used as a message in FIG.
3. Calculated according to the ICV calculation method described in FIG. Calculated check value ICV-rev 'and check value stored in header: ICV-rev
Are compared, and if they match, it is determined that there is no tampering.

The intermediate check value including the list check value ICVrev is obtained, for example, by using the total check value generation key Kicvt stored in the internal memory 307 of the recording / reproducing device encryption processing unit 302 as a key as shown in FIG. He
The check value A, the check value B, the list check value ICVrev in the ader, and the message string to which the content check value is added according to the format are generated by applying the ICV calculation method described in FIG.

[0610] These revocation lists and list check values are provided to the recording / reproducing device 300 via a medium 500 such as a DVD or CD, a communication means 600, or a recording device 400 such as a memory card. Here, the recording / reproducing device 300 may be a recording / reproducing device holding valid key data, or may have an illegally duplicated identifier ID.

FIG. 87 and FIG. 88 show the processing flow of the processing for eliminating an unauthorized recording / reproducing device in such a configuration.
FIG. 87 is a flowchart of an unauthorized recording / reproducing device exclusion (revocation) process when content is provided from the medium 500 such as a DVD or a CD or the communication means 600.
FIG. 88 is a flowchart of an unauthorized recording / reproducing apparatus exclusion (revocation) process when content is provided from a recording device 400 such as a memory card.

First, the processing flow of FIG. 87 will be described. Step 901 is a step in which a medium is mounted and content is provided, that is, a request for reproduction processing or download is made. The processing shown in FIG.
For example, it is executed as a step before a medium such as a DVD is mounted on a recording / reproducing device and a download process or the like is executed. The download process is the same as that described with reference to FIG. 22, and is performed as a step before execution of the process flow of FIG. 22 or as a process inserted into the process flow of FIG. Is executed.

[0613] If the recording / reproducing apparatus 300 receives the provision of the content via communication means such as a network, a communication session with the content distribution service side is established in step S911, and thereafter, the process proceeds to step S902.

[0614] In step S902, a revocation list (see Fig. 86) is obtained from the header of the content data. This list acquisition processing is performed when the control unit 301 shown in FIG.
4 is read from the media, and when the content is from the communication means, the control unit 301 shown in FIG.

Next, in step S903, the control unit 3
01 transfers the revocation list acquired from the medium 500 or the communication unit 600 to the encryption processing unit 302 and causes the encryption processing unit 302 to execute a check value generation process.
The recording / reproducing device 300 internally has a revocation check value generation key Kicv-rev, and applies the revocation check value generation key Kicv-rev as a received revocation list as a message, for example, as shown in FIGS. Check value I according to the ICV calculation method described in
CV-rev 'is calculated, and the calculation result and the check value stored in the header of the content data: ICV
-Rev is compared, and if they match, it is determined that there is no tampering (Yes in step S904). If they do not match, it is determined that the data has been tampered with, and the process proceeds to step S909.
Then, the processing ends as a processing error.

Next, in step S905, the control section 306 of the recording / reproducing apparatus encryption processing section 302 causes the encryption / decryption section 308 of the recording / reproducing apparatus encryption processing section 302 to calculate the total check value ICVt '. Total check value ICVt '
25, as shown in FIG.
Signature key K stored in the internal memory 307 of the
Using sys as a key, an intermediate check value is encrypted with DES and generated. In addition, each partial check value, for example, ICVa,
Although the verification processing of ICVb and the like is omitted in the processing flow shown in FIG. 87, verification of a partial check value according to each data format similar to the processing flow of FIGS. 39 to 45 described above is performed. It is.

Next, in step S 906, the generated total check value ICVt ′ and the IC in the header
The Vt is compared, and if they match (Yes in step S906), the process proceeds to step S907. If they do not match, it is determined that the data has been tampered with, and the process advances to step S909 to end the process as a processing error.

As described above, the total check value ICV
t checks the entire partial check values included in the content data, such as ICVa, ICVb, and the check value of each content block in accordance with the data format. The list check value ICVrev for checking tampering of the revocation list is added as a partial check value, and all tampering is verified. If the total check value generated by the above process matches the check value: ICVt stored in the header, the IC
Va, ICVb, check value of each content block,
It is determined that all of the list check values ICVrev have not been tampered with.

[0619] Further, in step S907, the revocation list determined not to have been tampered is compared with the recording / reproducing device identifier (IDdev) stored in the recording / reproducing device 300 of the self.

If the list of the unauthorized recording / reproducing device identifiers IDdev read from the content data includes the identifier IDdev of the recording / reproducing device of its own, the recording / reproducing device 300 transmits the illegally copied key data. Is determined, the process proceeds to step S909, and the subsequent procedures are stopped. For example, it is impossible to execute the procedure of the content download process of FIG.

If it is determined in step S907 that the list of the unauthorized recording / reproducing device identifier IDdev does not include the identifier IDdev of its own recording / reproducing device, the recording / reproducing device 300 transmits the valid key data. Then, the process proceeds to step S908, where the subsequent procedures, for example, the program execution process or the content download process shown in FIG.

FIG. 88 shows a process for reproducing content data stored in a recording device 400 such as a memory card. As described above, the recording device 400 such as a memory card and the recording / reproducing device 300 perform the mutual authentication process (step S921) described with reference to FIG. In step S922, only when the mutual authentication is OK, the process proceeds to step S923 and thereafter, and when the mutual authentication fails, an error occurs in step S930, and the subsequent processes are not executed.

In step S923, a revocation list (see FIG. 86) is obtained from the header of the content data. Subsequent processes in steps S924 to S930 are as follows:
This is the same processing as the corresponding processing in FIG. 87 described above. That is, the list is verified using the list check value (S92).
4, S925), verification by total check value (S926, S926)
S927), compares the entry of the list with its own recording / reproducing device identifier IDdev (S928), and executes the invalid recording / reproducing device identifier ID read from the content data.
In the dev list, the identifier IDdev of its own recording / reproducing device
Is included, the recording / reproducing apparatus 300 is determined to have the illegally copied key data, the process proceeds to step S930, and the subsequent procedures are stopped. For example, the content reproduction process shown in FIG. 28 cannot be executed. On the other hand, when it is determined that the list of the unauthorized recording / reproducing device identifiers IDdev does not include the identifier IDdev of the recording / reproducing device, the recording / reproducing device 300 has valid key data. Determined, step S92
Proceeding to step 9, the subsequent procedures become executable.

As described above, in the data processing apparatus of the present invention, data for identifying an unauthorized recording / reproducing device is added to the content provided by the content provider or the administrator.
That is, a revocation list in which an illegal recording / reproducing device identifier IDdev is listed is included as configuration data of a header portion of content data and provided to the recording / reproducing device user. Prior to use, if the recording / reproducing device identifier IDdev stored in the memory of the recording / reproducing device itself is compared with the identifier in the list, and there is data that matches,
Since the subsequent processing is not executed, it is possible to eliminate the use of contents by an unauthorized recording / reproducing device that duplicates the key data and stores it in the memory.

(18) Secure Chip Configuration and Manufacturing Method As described above, the internal memory 307 of the recording / reproducing device encryption processing unit 302 or the internal memory 405 of the recording device 400 holds important information such as an encryption key. Therefore, it is necessary to make a structure that is difficult to read illegally from the outside. Therefore, the recording / reproducing device encryption processing unit 302 and the recording device encryption processing unit 401 are configured by, for example, a semiconductor chip having a structure that is difficult to access from the outside, have a multilayer structure, and the internal memory is a dummy such as an aluminum layer. The tamper-resistant memory is sandwiched between layers or is formed at the lowermost layer, and has a characteristic that it is difficult to read data illegally from the outside, such as a narrow operating voltage and / or frequency range.

However, as understood from the above description, it is necessary to write different data for each recording / reproducing device such as the recording / reproducing device signature key Kdev into the internal memory 307 of the recording / reproducing device encryption processing section 302, for example. Become. Further, after writing individual information for each chip, for example, identification information (ID) and encryption key information in a nonvolatile storage area in the chip, for example, a flash memory, FeRAM, or the like, for example, rewriting and reading of data after product shipment Must be made difficult.

In a conventional technique for making it difficult to read and rewrite write data, for example, a command protocol for writing data is kept secret. Or,
The signal line for receiving the data write command on the chip and the signal line for communication used after commercialization are separated and configured so that the data write command will not be effective unless a signal is directly sent to the chip on the board. There are techniques such as

However, even if such a conventional method is adopted, those having specialized knowledge of the storage element cannot
With the equipment and technology to drive the circuit, it is possible to output signals to the data write area of the chip, and even if the command protocol for writing data is secret, there is always the possibility of analyzing the protocol.

[0629] Such distribution of the encrypted data storage element holding the possibility of alteration of the secret data is as follows.
As a result, the entire cryptographic processing system is threatened. In order to prevent data reading, it is possible to adopt a configuration in which the data read command itself is not mounted. In this case, even if normal data writing is executed, data writing to the memory is actually performed. It is impossible to check whether or not the data has been written correctly, and to determine whether or not the written data has been correctly written, which may result in the supply of chips with bad data written. I do.

In view of these prior arts, here, a secure chip configuration and a secure chip manufacturing method which enable accurate data writing to a nonvolatile memory such as a flash memory or FeRAM and make data reading difficult. I will provide a.

FIG. 89 shows, for example, the recording / reproducing apparatus encryption processing section 302 or the encryption processing section 4 of the recording device 400 described above.
01 shows a security chip configuration that can be applied. FIG.
FIG. 9A shows a security chip configuration in a chip manufacturing process, that is, a data writing process.
(B) shows a configuration example of a product equipped with a security chip into which data is written, for example, a recording / reproducing device 300 and a recording device 400.

In the security chip in the manufacturing process, a processing section 8001 is connected to a mode designation signal line 8003 and various command signal lines 8004.
Indicates the mode set by the mode specifying signal line 8003,
For example, a process of writing data to the storage unit 8002, which is a nonvolatile memory, or a process of reading data from the storage unit 8002 is performed in accordance with the data write mode or the data read mode.

On the other hand, in the security chip-equipped product in FIG. 89B, the security chip is connected to the external connection interface, peripheral devices, other elements, and the like by general-purpose signal lines, but the mode signal line 8003 is not connected. Connected. Specific processing is, for example, the mode signal line 8003
Is grounded, raised to Vcc, the signal line is cut, or sealed with an insulating resin. By such processing, access to the mode signal line of the security chip becomes difficult after the product is shipped, and it is possible to increase the difficulty of reading and writing data of the chip from outside.

Further, the security chip 80 of the present configuration
00 has a configuration that makes it difficult to write data to the storage unit 8002 and to read data written to the storage unit 8002, even if a third party successfully accesses the mode signal line 8003. In addition, illegal data writing and reading can be prevented. FIG. 90 shows a data write or read processing flow in the security chip having this configuration.

[0635] Step S951 is the mode signal line 800
3 is a step of setting a data write mode or a data read mode.

[0636] Step S952 is a step of extracting authentication information from the chip. In the security chip having this configuration, information necessary for the authentication process such as a password, key information for the authentication process in the encryption technology, and the like are stored in advance by, for example, a wire and a mask ROM configuration. A step S952 reads the authentication information and executes an authentication process. For example, when the authentication processing is executed by connecting a regular data writing jig and a data reading device to the general-purpose signal line, the authentication is OK (Yes in step S953).
s) is obtained, but an incorrect data writing jig,
When the authentication process is executed by connecting the data reading device to the general-purpose signal line, the authentication fails (No in step S953), and the process is stopped at that time. The authentication processing can be executed, for example, according to the mutual authentication processing procedure of FIG. 13 described above. Processing unit 8001 shown in FIG. 89
Has a configuration capable of executing these authentication processes. This corresponds to, for example, the recording device 40 shown in FIG.
0 can be realized by the same configuration as the command register incorporated in the control unit 403 of the encryption processing unit 401. For example, the processing unit of the chip in FIG. 89 has the same configuration as the command register incorporated in the control unit 403 of the encryption processing unit 401 of the recording device 400 shown in FIG. When a predetermined command No is input, a corresponding process is executed and an authentication process sequence can be executed.

The processing unit 8001 accepts a data write command or a data read command and performs data write processing (step S955) or data read processing (step S956) only when authentication is performed in the authentication processing. Execute.

As described above, in the security chip of this configuration, the authentication process is executed at the time of writing and reading of data. Therefore, reading of data from the storage unit of the security chip by a third party who does not have a proper right is performed. , Or data writing to the storage unit can be prevented.

Next, FIG. 91 shows an embodiment in which an element configuration with higher security is provided. In this example, the storage unit 8200 of the security chip is separated into two areas,
One is a read / write combined area (RW: ReadWrite area) 8201 where data can be read and written.
The other is a write-only area (WO: Write Only area) 8202 to which only data can be written.

In this configuration, the write-only area (W
O: Write Only area) 8202 is used to write data with high security requirements, such as encryption key data and identifier data, while reading and writing data that is not very high in security, for example, check data.
(RW: ReadWrite area) 8201 is written.

The processing unit 8001 executes the data read process from the read / write combined area (RW: ReadWrite area) 8201 with the authentication process described above with reference to FIG. However, the data writing process is executed according to the flow in FIG.

[0648] Step S961 in Fig. 92 is a step of setting the mode signal line 8003 to the write mode. In step 962, the same authentication processing as that described in Fig. 90 is executed. When authentication is performed in the authentication process,
Proceeding to step S963, writing of information such as key data with high security in the write-only (WO) area 8202 via the command signal line 8004, and the security level is not so high in the read / write combined area (RW: ReadWrite area) 8201 For example, a command to write check data is output to the processing unit 8001.

[0643] In step S964, the processing unit 8001 that has received the command performs data write processing corresponding to the command in a write-only (WO) area 8202 and a combined read / write area (RW: ReadWrite area).
8201.

[0644] A write-only (WO) area 8202
FIG. 93 shows a flow of the verification processing of the data written in.

[0645] Step S971 in FIG.
At 01, an encryption process based on the data written in the write-only (WO) area 8202 is executed. These execution configurations are realized by a configuration that sequentially executes the encryption processing sequence stored in the command register, as in the above-described authentication processing execution configuration. The encryption algorithm executed in the processing unit 8001 is not particularly limited, and may be configured to execute, for example, the DES algorithm described above.

[0646] Next, in step S972, the verification device connected to the security chip receives the encryption processing result from the processing section 8001. Next, in step S973, the result obtained by applying the same encryption processing as the algorithm executed in the processing unit 8001 to the regular write data that has been previously written in the storage unit,
The encryption result from the processing unit 8001 is compared.

If the comparison results are the same, it is verified that the data written in the write-only (WO) area 8202 is correct.

In this configuration, even if the authentication process is broken and the read command can be executed, the data readable area is the read / write combined area (RW: R
(read write area) 8201, and reading of data written in the write-only (WO) area 8202 is impossible, resulting in a configuration with higher security. Further, unlike a chip in which reading is not possible at all, a read / write combined area (RW: ReadWr) is used.
Since the (item area) 8201 is configured, it is possible to check whether the memory access is correct or not.

The present invention has been described in detail with reference to the specific embodiments. However, it is obvious that those skilled in the art can modify or substitute the embodiment without departing from the spirit of the present invention. That is, the present invention has been disclosed by way of example, and should not be construed as limiting. Further, in the above-described embodiment, the recording / reproducing device capable of recording and reproducing the content has been described as an example. However, the configuration of the present invention can be applied to an apparatus capable of only recording data and reproducing data. The present invention can be implemented in personal computers, game machines, and other various data processing devices in general. In order to determine the gist of the present invention, the claims described at the beginning should be considered.

[0650]

As described above, the data processing apparatus, the data processing method, and the content data generation method of the present invention efficiently execute the reproduction process when the content is compressed audio data or image data. can do. That is, the content data has a configuration in which the compressed data and the decompression processing program are combined, so that the decompression process using the decompression processing program attached to the compressed content data can be performed in the reproduction processing device. Can be prevented from being reproduced because there is no decompression processing program.

Further, according to the data processing apparatus, the data processing method and the content data generating method of the present invention, the structure of the content data is a combination of the compressed data and the header section storing the type of the compression processing program.
If the content is a decompression processing program, the reproduction data processing apparatus can use the decompression processing program and the header part storing the program type to combine the content data with the decompression processing program applicable to the compressed content data. The decompression process is performed based on the determination based on a recognizable program from a recording device or the like that can be accessed by the playback processing device. Reproduction processing becomes possible.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a conventional data processing system.

FIG. 2 is a diagram showing a configuration of a data processing device to which the present invention is applied.

FIG. 3 is a diagram showing a configuration of a data processing device to which the present invention is applied.

FIG. 4 is a diagram showing a data format of content data on a medium and a communication path.

FIG. 5 is a diagram showing a handling policy included in a header in content data.

FIG. 6 is a diagram showing block information included in a header in content data.

FIG. 7 is a diagram showing a digital signature generation method using DES.

FIG. 8 is a diagram showing a digital signature generation method using Triple DES.

FIG. 9 is a diagram illustrating an aspect of a triple DES.

FIG. 10 is a diagram illustrating a digital signature generation method partially using Triple DES.

FIG. 11 is a diagram showing a processing flow in digital signature generation.

FIG. 12 is a diagram showing a processing flow in digital signature verification.

FIG. 13 is a diagram illustrating a processing sequence of a mutual authentication process using a symmetric key encryption technique.

FIG. 14 is a diagram illustrating a public key certificate.

FIG. 15 is a diagram illustrating a processing sequence of a mutual authentication process using the asymmetric key encryption technology.

FIG. 16 is a diagram showing a processing flow of encryption processing using elliptic curve encryption.

FIG. 17 is a diagram showing a processing flow of decryption processing using elliptic curve encryption.

FIG. 18 is a diagram showing a data holding state on a recording / reproducing device.

FIG. 19 is a diagram showing a data holding state on a recording device.

FIG. 20 is a diagram showing a flow of a mutual authentication process between a recording / reproducing device and a recording device.

FIG. 21 is a diagram illustrating a relationship between a master key of a recording / reproducing device and a corresponding key block of a recording device.

FIG. 22 is a diagram showing a processing flow in content download processing.

FIG. 23 is a diagram illustrating a method of generating a check value A: ICVa.

FIG. 24 is a diagram illustrating a method of generating a check value B: ICVb.

FIG. 25 is a diagram illustrating a method of generating a total check value and a check value unique to a recording / reproducing device.

FIG. 26 is a diagram showing a format (use restriction information = 0) of content data stored in a recording device.

FIG. 27 is a diagram showing a format (use restriction information = 1) of content data stored in a recording device.

FIG. 28 is a diagram showing a processing flow in content reproduction processing.

FIG. 29 is a diagram illustrating a command execution method in the recording device.

FIG. 30 is a diagram illustrating a command execution method in content storage processing in the recording device.

FIG. 31 is a diagram illustrating a command execution method in content playback processing in the recording device.

FIG. 32 is a diagram illustrating the configuration of format type 0 of the content data format.

FIG. 33 is a diagram illustrating the configuration of format type 1 of the content data format.

FIG. 34 is a diagram illustrating the configuration of format type 2 of the content data format.

FIG. 35 is a view for explaining the configuration of format type 3 of the content data format.

FIG. 36 is a diagram illustrating a generation processing method of a content check value ICVi in format type 0.

FIG. 37 is a diagram illustrating a generation processing method of a content check value ICVi in format type 1.

FIG. 38 is a diagram illustrating a generation processing method of a total check value and a recording / reproducing device-specific check value in format types 2 and 3.

FIG. 39 is a diagram showing a processing flow of content download processing in format types 0 and 1;

FIG. 40 is a diagram showing a processing flow of content download processing in format type 2;

FIG. 41 is a diagram showing a processing flow of content download processing in format type 3;

FIG. 42 is a diagram showing a processing flow of content reproduction processing in format type 0.

FIG. 43 is a diagram showing a processing flow of content reproduction processing in format type 1;

FIG. 44 is a diagram showing a processing flow of content reproduction processing in format type 2;

FIG. 45 is a diagram showing a processing flow of content reproduction processing in format type 3;

FIG. 46 is a view for explaining a method of generating and verifying a check value by a content creator and a content verifier (part 1)
It is.

FIG. 47 is a diagram (part 2) illustrating a method of generating and verifying a check value by a content creator and a content verifier.

FIG. 48 is a diagram (part 3) illustrating a method of generating and verifying a check value by a content creator and a content verifier.

FIG. 49 is a diagram illustrating a method of individually generating various keys using a master key.

FIG. 50 is a diagram (example 1) illustrating an example of processing performed by a content provider and a user regarding a method of individually generating various keys using a master key.

FIG. 51 is a diagram (example 2) illustrating an example of processing performed by a content provider and a user regarding a method of individually generating various keys using a master key.

FIG. 52 is a diagram for describing a configuration in which usage restriction is performed by properly using a master key.

FIG. 53 is a diagram (example 3) illustrating an example of processing performed by a content provider and a user on a method of individually generating various keys using a master key.

FIG. 54 is a diagram (example 4) illustrating an example of processing performed by a content provider and a user for a method of individually generating various keys using a master key.

FIG. 55 is a diagram (example 5) illustrating an example of processing performed by a content provider and a user regarding a method of individually generating various keys using a master key.

FIG. 56 is a diagram showing a processing flow for storing an encryption key to which triple DES is applied using a single DES algorithm.

FIG. 57 is a diagram showing a content reproduction processing flow (example 1) based on priority.

FIG. 58 is a diagram showing a content reproduction processing flow (example 2) based on priority.

FIG. 59 is a diagram showing a content reproduction processing flow (example 3) based on priority.

[Fig. 60] Fig. 60 is a diagram for describing a configuration for executing decoding (decompression) processing of compressed data in content reproduction processing.

FIG. 61 is a diagram illustrating a configuration example (example 1) of content.

FIG. 62 is a diagram illustrating a playback processing flow in Configuration Example 1 of content.

FIG. 63 is a diagram illustrating a configuration example (example 2) of content.

FIG. 64 is a diagram illustrating a playback processing flow in Content Configuration Example 2.

FIG. 65 is a diagram illustrating a configuration example (example 3) of content.

FIG. 66 is a diagram illustrating a playback processing flow in Content Configuration Example 3.

FIG. 67 is a diagram illustrating a configuration example (example 4) of content.

FIG. 68 is a diagram illustrating a playback processing flow in Content Configuration Example 4.

FIG. 69 is a diagram for describing generation and storage processing of save data.

FIG. 70 is a diagram showing a processing flow relating to a save data storage processing example (example 1).

FIG. 71 is a diagram showing a data management file configuration (Example 1) used in storage data storage and reproduction processing.

FIG. 72 is a diagram showing a processing flow relating to an example (example 1) of reproduction processing of save data.

FIG. 73 is a diagram showing a processing flow relating to a save data storage processing example (example 2).

FIG. 74 is a diagram showing a processing flow relating to an example (example 2) of reproduction processing of save data.

FIG. 75 is a diagram showing a processing flow relating to a storage data storage processing example (example 3).

FIG. 76 is a diagram showing a data management file configuration (example 2) used in storage data storage and reproduction processing.

FIG. 77 is a diagram showing a processing flow relating to a save data reproduction processing example (example 3).

FIG. 78 is a diagram showing a processing flow relating to a save data storage processing example (example 4).

FIG. 79 is a diagram showing a processing flow relating to an example (example 4) of reproduction processing of save data.

FIG. 80 is a diagram showing a processing flow relating to a save data storage processing example (example 5).

FIG. 81 is a diagram showing a data management file configuration (Example 3) used in storage data storage and reproduction processing.

FIG. 82 is a diagram showing a processing flow relating to an example (example 5) of reproduction processing of save data.

FIG. 83 is a view showing a processing flow relating to a save data storage processing example (Example 6).

FIG. 84 is a diagram showing a data management file configuration (Example 4) used in storage data storage and reproduction processing.

FIG. 85 is a diagram showing a processing flow relating to a save data reproduction processing example (example 6).

FIG. 86 is a diagram for explaining a configuration of removing (revoking) unauthorized users.

FIG. 87 is a diagram showing a processing flow (example 1) of content unauthorized user exclusion (revocation).

FIG. 88 is a diagram showing a processing flow (example 2) of content unauthorized user exclusion (revocation).

FIG. 89 is a diagram illustrating a configuration (example 1) of a security chip.

FIG. 90 is a view showing a processing flow in the security chip manufacturing method.

FIG. 91 is a diagram illustrating a configuration (example 2) of a security chip.

FIG. 92 is a view showing a processing flow in data writing processing in the security chip (Example 2).

FIG. 93 is a view showing a processing flow in write data check processing in the security chip (Example 2).

[Description of Signs] 106 Main CPU 107 RAM 108 ROM 109 AV processing unit 110 Input processing unit 111 PIO 112 SIO 300 Recording / reproducing device 301 Control unit 302 Encryption processing unit 303 Recording device controller 304 Reading unit 305 Communication unit 306 Control unit 307 Internal Memory 308 Encryption / decryption unit 400 Recording device 401 Encryption processing unit 402 External memory 403 Control unit 404 Communication unit 405 Internal memory 406 Encryption / decryption unit 407 External memory control unit 500 Media 600 Communication means 2101, 2102, 2103 Recording / reproducing device 2104, 2105, 2106 Recording device 2901 Command number management unit 2902 Command register 2903, 2904 Authentication flag 3001 Speaker 3002 Monitor 3090 Memo 3091 content analysis section 3092 data storage section 3093 program storage section 3094 compression / decompression processing section 7701 content data 7702 revocation list 7703 list check value 8000 security chip 8001 processing section 8002 storage section 8003 mode signal line 8004 command signal line 8201 read / write combined area 8202 Write-only area

 ────────────────────────────────────────────────── ─── Continuing on the front page (72) Inventor Taizo Shirai 6-7-35 Kita Shinagawa, Shinagawa-ku, Tokyo Inside Sony Corporation (72) Inventor Tohru 6-7 Kita Shinagawa, Shinagawa-ku, Tokyo No. 35 Sony Corporation F-term (reference)

Claims (26)

[Claims] 1. A data processing device for reproducing content data provided by a storage medium or a communication medium, and executes content data analysis of content data including compressed content and a decompression processing program for the compressed content. And a content data analyzing unit that executes a process of extracting a compressed content and a decompression processing program from the content data; and a decompression processing program included in the content data obtained as an analysis result of the content data analysis unit. A decompression processing unit that performs decompression processing of compressed content included in data. 2. The data processing device further includes: a data storage unit that stores the compressed content extracted by the content data analysis unit; and a program storage unit that stores a decompression processing program extracted by the content data analysis unit. The decompression processing unit has a configuration in which a decompression process is performed on a compressed content stored in the data storage unit by applying a decompression processing program stored in the program storage unit. The data processing device according to claim 1, wherein 3. The content data analysis unit is configured to acquire configuration information of content data based on header information included in the content data and analyze the content data.
A data processing device according to claim 1. 4. The header information includes playback priority information of the compressed content, and when there are a plurality of compressed contents to be subjected to decompression processing in the decompression processing unit, the decompression processing unit includes: 4. The data processing apparatus according to claim 3, wherein, based on the priority information in the header information acquired in the step (a), the content decompression process is sequentially performed according to the priority. 5. The data processing apparatus further comprises: display means for displaying information of compressed content to be subjected to decompression processing; and input means for inputting reproduction content identification data selected from the content information displayed on the display means. And a decompression unit configured to execute decompression processing of compressed content corresponding to the identification data based on the reproduction content identification data input from the input unit. 2. The data processing device according to 1. 6. A data processing device for performing a reproduction process of content data provided by a storage medium or a communication medium, and receives content data containing either a compressed content or a decompression processing program, and includes the content data in the received content data. It is determined whether the content data is a compressed content or a decompression program from the header information to be compressed. If the content data is a compressed content, the compression information applied to the compressed content is determined from the header information of the content data. When the type of processing program is acquired, and the content data is a decompression processing program,
A content data analysis unit that acquires a decompression processing program type from the header information of the content data; and a decompression processing unit that executes decompression processing of the compressed content, wherein the decompression processing unit analyzes the content data analysis unit. A configuration in which a decompression processing program applicable to a compression processing program type of compressed content is selected based on the decompression processing program type analyzed by the content data analysis unit, and decompression processing by the selected decompression processing program is executed. A data processing device comprising: 7. The data processing device further includes: a data storage unit that stores the compressed content extracted by the content data analysis unit; and a program storage unit that stores a decompression processing program extracted by the content data analysis unit. The decompression processing unit has a configuration in which a decompression process is performed on a compressed content stored in the data storage unit by applying a decompression processing program stored in the program storage unit. The data processing device according to claim 6, wherein 8. The content information analysis unit, wherein the header information includes playback priority information of the compressed content, and when there are a plurality of compressed contents to be expanded, the content expansion processing in the expansion processing unit is performed by the content data analysis unit. 7. The data processing apparatus according to claim 6, wherein, based on the priority information in the acquired header information, the data is sequentially executed in accordance with the priority. 9. The data processing apparatus according to claim 1, further comprising: a search unit configured to search for a decompression processing program, wherein the search unit performs a decompression process applicable to a compression processing program type of the compressed content analyzed by the content data analysis unit. 7. The data processing apparatus according to claim 6, wherein the processing program is configured to search for a program storage unit accessible by the data processing apparatus as a search target. 10. The data processing apparatus further comprises: display means for displaying information of the compressed content to be subjected to decompression processing; and input means for inputting reproduction content identification data selected from the content information displayed on the display means. And a decompression unit configured to execute decompression processing of compressed content corresponding to the identification data based on the reproduction content identification data input from the input unit. 7. The data processing device according to 6. 11. A data processing method for performing a reproduction process of content data provided by a storage medium or a communication medium, wherein the content data analysis includes a content data including a compressed content and a decompression processing program of the compressed content. A content data analyzing step of extracting compressed content and a decompression program from the content data; and a decompression processing program included in the content data obtained as an analysis result of the content data analysis step. A decompression processing step of performing decompression processing of compressed content included in the data. 12. The data processing method, further comprising: a data storage step for storing the compressed content extracted in the content data analysis step; and a program storage step for storing a decompression processing program extracted by the content data analysis unit. Wherein the decompression processing step has a configuration in which the decompression processing is executed by applying the decompression processing program stored in the program storage step to the compressed content stored in the data storage step. The data processing method according to claim 11, characterized in that: 13. The data according to claim 11, wherein the content data analyzing step obtains configuration information of the content data based on header information included in the content data and analyzes the content data. Processing method. 14. The header information includes playback priority information of the compressed content, and when there are a plurality of compressed contents to be subjected to decompression processing in the decompression processing unit, the decompression processing step includes: 14. The data processing method according to claim 13, wherein, based on the priority information in the header information obtained in the step (a), the content decompression process is sequentially performed according to the priority. 15. The data processing method further comprises: a display step of displaying on the display means information of the compressed content to be subjected to the decompression processing; and reproducing the reproduced content identification data selected from the content information displayed on the display means. An input step of inputting, wherein the decompression processing step executes, based on the reproduction content identification data input in the input step, decompression processing of the compressed content corresponding to the identification data. Claim 1
2. The data processing method according to 1. 16. A data processing method for performing reproduction processing of content data provided by a storage medium or a communication medium, wherein the method receives content data containing either a compressed content or a decompression program and includes the content data in the received content data. It is determined whether the content data is a compressed content or a decompression program from the header information to be compressed. If the content data is a compressed content, the compression information applied to the compressed content is determined from the header information of the content data. Acquiring a processing program type, and when the content data is a decompression processing program, a content data analysis step of obtaining a decompression processing program type from header information of the content data; A selection step of selecting a decompression processing program applicable to a content compression processing program type based on the decompression processing program type analyzed in the content data analysis step; and decompression by the decompression processing program selected in the selection step. A decompression processing step for performing processing, comprising: 17. The data processing method, further comprising: a data storage step for storing compressed content extracted by the content data analysis unit; and a program storage step for storing a decompression processing program extracted by the content data analysis unit. Wherein the decompression processing step performs decompression processing by applying a decompression processing program stored in the program storage step to the compressed content stored in the data storage step. The data processing method according to claim 16. 18. The header information includes playback priority information of a compressed content. When there are a plurality of compressed contents to be expanded, the expansion processing step includes the step of: obtaining the header acquired in the content data analysis step. 17. The data processing method according to claim 16, wherein the steps are sequentially executed in accordance with the priority order based on the priority order information in the information. 19. The data processing method further includes a search step of searching for a decompression processing program, wherein the search step is applicable to a compression processing program type of the compressed content analyzed in the content data analysis step. 17. The data processing method according to claim 16, wherein the decompression processing program is searched for an accessible program storage unit as a search target. 20. The data processing method, further comprising: a display step of displaying on the display means information of the compressed content to be decompressed; and reproducing the reproduction content identification data selected from the content information displayed on the display means. And an inputting step of inputting, wherein the decompression processing step performs, based on the reproduction content identification data input from the input means, decompression processing of the compressed content corresponding to the identification data. 17. The data processing method according to claim 16, wherein: 21. A content data generation method for generating content data provided by a storage medium or a communication medium, wherein the content data is generated by combining a compressed content and a decompression program for the compressed content. Characteristic content data generation method. 22. The content data generating method according to claim 2, further comprising adding configuration information of the content data as header information of the content data.
2. The content data generation method according to 1. 23. The content data according to claim 21, wherein said content data generating method further comprises adding, as header information of said content data, reproduction priority information of the content included in said content data. Generation method. 24. A content data generation method for performing a process of generating content data provided by a storage medium or a communication medium, wherein a content data type for identifying whether the content data is a compressed content or an expansion processing program is indicated by a header. If the content data is compressed content, the compression processing program type applied to the compressed content is added as header information. If the content data is a decompression processing program, the decompression processing program type is added. A content data to which content data is added as header information. 25. The content data according to claim 24, wherein in the content data generation method, reproduction priority information of the content included in the content data is added as header information of the content data. Generation method. 26. A program providing medium for providing a computer program for causing a computer system to execute a reproduction process of content data provided by a storage medium or a communication medium.
A content data analysis step of executing content data analysis of content data including the compressed content and a decompression processing program for the compressed content, and executing a compressed content and an extraction processing program extraction process from the content data; A decompression processing step of executing decompression processing of compressed content included in the content data using a decompression processing program included in the content data obtained as an analysis result of the content data analysis step. Program providing medium.