JP2002305515A5 - - Google Patents
Download PDFInfo
- Publication number
- JP2002305515A5 JP2002305515A5 JP2002002817A JP2002002817A JP2002305515A5 JP 2002305515 A5 JP2002305515 A5 JP 2002305515A5 JP 2002002817 A JP2002002817 A JP 2002002817A JP 2002002817 A JP2002002817 A JP 2002002817A JP 2002305515 A5 JP2002305515 A5 JP 2002305515A5
- Authority
- JP
- Japan
- Prior art keywords
- content
- address
- transfer destination
- decryption
- decrypting
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Withdrawn
Links
- 239000000284 extract Substances 0.000 claims 3
- 238000007689 inspection Methods 0.000 claims 2
- 238000000034 method Methods 0.000 claims 2
Claims (11)
前記記録媒体に記録されている前記暗号化コンテンツを復号してコンテンツを生成する復号手段と、
コンテンツの転送先としてのコンテンツ出力手段のアドレス空間における位置を示す転送先アドレスを含む転送命令を解読して、前記転送先アドレスを取り出し、前記転送先アドレスをアドレス検査手段に対して出力する命令実行手段と、
コンテンツの出力を許可する転送先を示す許可アドレスを予め記憶しており、前記転送先アドレスが、前記許可アドレスと一致するか否かを判断し、一致する場合にのみ、生成された前記コンテンツを、前記転送先アドレスにより位置が示されるコンテンツ出力手段へ出力するアドレス検査手段と、
前記コンテンツを受け取り、受け取った前記コンテンツを外部の装置へ出力するコンテンツ出力手段と
を備えることを特徴とするコンテンツ復号装置。A content decrypting device that decrypts encrypted content recorded on a recording medium and outputs the decrypted content to an external device,
Decryption means for decrypting the encrypted content recorded on the recording medium to generate content;
Executing an instruction that decodes a transfer instruction including a transfer destination address indicating a position in the address space of the content output means as a content transfer destination, extracts the transfer destination address, and outputs the transfer destination address to the address checking means Means,
A permission address indicating a transfer destination permitted to output the content is stored in advance, and it is determined whether or not the transfer destination address matches the permission address. Address checking means for outputting to the content output means whose position is indicated by the transfer destination address;
Content decrypting apparatus, comprising: content output means for receiving the content and outputting the received content to an external device.
他の外部の装置から、暗号化コンテンツの復号を示す復号命令と、コンテンツ出力手段の位置を示す転送先アドレスを含み前記コンテンツのコンテンツ出力手段への転送を示す転送命令とを含む復号プログラムを取得する取得手段を備え、
前記復号手段は、前記復号プログラムに含まれる復号命令に従って、暗号化コンテンツを復号し、
前記命令実行手段は、前記復号プログラムに含まれる転送命令に従って、転送先アドレスを出力する
ことを特徴とする請求項1に記載のコンテンツ復号装置。The content decryption device further includes:
A decryption program including a decryption instruction indicating decryption of the encrypted content and a transfer instruction including a transfer destination address indicating the position of the content output means and indicating transfer of the content to the content output means is obtained from another external device. Providing acquisition means to
The decrypting means decrypts the encrypted content according to a decryption instruction included in the decryption program,
The content decryption apparatus according to claim 1, wherein the command execution unit outputs a transfer destination address in accordance with a transfer command included in the decryption program.
前記命令実行手段は、前記バスを介して、前記転送先アドレスを出力し、
前記アドレス検査手段は、前記バスを介して、前記転送先アドレスを取得し、前記バスを介して、前記コンテンツを出力し、
前記コンテンツ出力手段は、前記バスを介して、前記コンテンツを受け取る
ことを特徴とする請求項2に記載のコンテンツ復号装置。The decryption means, the instruction execution means, the address inspection means, the content output means, and the program acquisition means are each connected via a bus,
The instruction execution means outputs the transfer destination address via the bus,
The address checking means acquires the transfer destination address via the bus, outputs the content via the bus,
The content decrypting apparatus according to claim 2, wherein the content output unit receives the content via the bus.
前記コンテンツ復号装置は、さらに、前記アドレス検査手段が前記許可アドレスを記憶しているか否かを判断し、否と判断した場合に、前記命令実行手段に対して、前記転送命令の実行を禁止する状態制御手段を備える
ことを特徴とする請求項3に記載のコンテンツ復号装置。The address checking means further has a state in which the permission address is not stored,
The content decryption apparatus further determines whether or not the address checking unit stores the permission address, and prohibits the instruction execution unit from executing the transfer instruction when determining that it is not. The content decrypting apparatus according to claim 3, further comprising a state control unit.
前記復号手段は、前記暗号化許可アドレスを復号して、新たな許可アドレスを生成し、
前記アドレス検査手段は、前記許可アドレスに代えて、生成された新たな許可アドレスを記憶し、次に暗号化コンテンツが復号される際に、転送アドレスと新たな許可アドレスとが一致するか否かを判断する
ことを特徴とする請求項3に記載のコンテンツ復号装置。The acquisition means further acquires an encrypted permitted address obtained by encrypting a new permitted address from an external device,
The decryption means decrypts the encrypted permitted address to generate a new permitted address;
The address checking means stores the generated new permission address instead of the permission address, and whether or not the transfer address matches the new permission address when the encrypted content is decrypted next time The content decrypting apparatus according to claim 3, wherein:
ことを特徴とする請求項5に記載のコンテンツ復号装置。The content decrypting apparatus according to claim 5, wherein the decrypting unit stores a variable variable key in advance, and decrypts the encryption permission address using the variable key.
前記取得手段は、さらに、外部の装置から、前記固定鍵を用いて新たな可変鍵が暗号化された暗号化可変鍵を取得し、
前記復号手段は、前記固定鍵を用いて、前記暗号化可変鍵を復号して、新たな可変鍵を生成し、前記可変鍵に代えて、生成した新たな可変鍵を記憶し、
次に、新たな可変鍵を用いて暗号化された許可アドレスを復号する際に、新たな可変鍵を用いる
ことを特徴とする請求項6に記載のコンテンツ復号装置。The decryption means further stores in advance a fixed key unique to the content decryption device,
The acquisition means further acquires an encrypted variable key obtained by encrypting a new variable key using the fixed key from an external device,
The decryption means decrypts the encrypted variable key using the fixed key, generates a new variable key, stores the generated new variable key instead of the variable key,
7. The content decrypting apparatus according to claim 6, wherein the new variable key is used when decrypting the permitted address encrypted using the new variable key.
前記状態制御手段は、さらに、前記復号手段が前記可変鍵を記憶しているか否かを判断し、否と判断した場合に、前記復号手段に対して、復号を禁止する
ことを特徴とする請求項6に記載のコンテンツ復号装置。The decryption means further has a state in which the variable key is not stored,
The state control means further determines whether or not the decryption means stores the variable key, and when it is determined to be no, the state control means prohibits the decryption means from decrypting. Item 7. The content decrypting device according to Item 6.
前記CPU及び前記記録媒体の間で第1の機器認証を行い、連続して前記CPU及び前記コンテンツ出力手段の間で第2の機器認証を行い、
前記第1の機器認証及び前記第2の機器認証の両方が成功した場合にのみ、前記コンテンツ復号装置は、暗号化コンテンツを復号して外部の装置へ出力する
ことを特徴とする請求項1に記載のコンテンツ復号装置。The decoding means, the instruction execution means and the address checking means constitute one CPU,
Performing a first device authentication between the CPU and the recording medium, continuously performing a second device authentication between the CPU and the content output means,
The content decryption device decrypts the encrypted content and outputs the decrypted content to an external device only when both the first device authentication and the second device authentication are successful. The content decryption apparatus described.
前記復号手段において、前記記録媒体に記録されている前記暗号化コンテンツを復号してコンテンツを生成する復号ステップと、
前記命令実行手段において、コンテンツの転送先としてのコンテンツ出力手段のアドレス空間における位置を示す転送先アドレスを含む転送命令を解読して、前記転送先アドレスを取り出し、前記転送先アドレスをアドレス検査手段に対して出力する命令実行ステップと、
前記アドレス検査手段において、コンテンツの出力を許可する転送先を示す許可アドレスを予め記憶しており、前記転送先アドレスが、前記許可アドレスと一致するか否かを判断し、一致する場合にのみ、生成された前記コンテンツを、前記転送先アドレスにより位置が示されるコンテンツ出力手段へ出力するアドレス検査ステップと、
前記コンテンツ出力手段において、前記コンテンツを受け取り、受け取った前記コンテンツを外部の装置へ出力するコンテンツ出力ステップと
を含むことを特徴とするコンテンツ復号方法。A content decrypting method used in a content decrypting apparatus, comprising a decrypting means, an instruction executing means, an address checking means, and a content output means, for decrypting encrypted content recorded on a recording medium and outputting the decrypted content to an external device. ,
A decrypting step of decrypting the encrypted content recorded on the recording medium to generate content;
The instruction execution means decodes a transfer instruction including a transfer destination address indicating a position in the address space of the content output means as a content transfer destination, extracts the transfer destination address, and uses the transfer destination address as an address checking means. Instruction execution steps to be output to
In the address checking means, a permission address indicating a transfer destination permitted to output content is stored in advance, and it is determined whether or not the transfer destination address matches the permission address. An address checking step of outputting the generated content to content output means whose position is indicated by the transfer destination address;
A content decoding method comprising: a content output step of receiving the content and outputting the received content to an external device in the content output means.
前記復号手段において、前記記録媒体に記録されている前記暗号化コンテンツを復号してコンテンツを生成する復号ステップと、
前記命令実行手段において、コンテンツの転送先としてのコンテンツ出力手段のアドレス空間における位置を示す転送先アドレスを含む転送命令を解読して、前記転送先アドレスを取り出し、前記転送先アドレスをアドレス検査手段に対して出力する命令実行ステップと、
前記アドレス検査手段において、コンテンツの出力を許可する転送先を示す許可アドレスを予め記憶しており、前記転送先アドレスが、前記許可アドレスと一致するか否かを判断し、一致する場合にのみ、生成された前記コンテンツを、前記転送先アドレスにより位置が示されるコンテンツ出力手段へ出力するアドレス検査ステップと、
前記コンテンツ出力手段において、前記コンテンツを受け取り、受け取った前記コンテンツを外部の装置へ出力するコンテンツ出力ステップと
を含むことを特徴とするコンテンツ復号プログラム。A content decryption program used in a content decryption device, comprising a decryption unit, an instruction execution unit, an address inspection unit, and a content output unit, decrypts encrypted content recorded on a recording medium and outputs the decrypted content to an external device. ,
A decrypting step of decrypting the encrypted content recorded on the recording medium to generate content;
The instruction execution means decodes a transfer instruction including a transfer destination address indicating a position in the address space of the content output means as a content transfer destination, extracts the transfer destination address, and uses the transfer destination address as an address checking means. Instruction execution steps to be output to
In the address checking means, a permission address indicating a transfer destination permitted to output content is stored in advance, and it is determined whether or not the transfer destination address matches the permission address. An address checking step of outputting the generated content to content output means whose position is indicated by the transfer destination address;
A content decoding program comprising: a content output step for receiving the content and outputting the received content to an external device in the content output means.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2002002817A JP2002305515A (en) | 2001-01-10 | 2002-01-09 | Content decryption device |
Applications Claiming Priority (3)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2001-2177 | 2001-01-10 | ||
JP2001002177 | 2001-01-10 | ||
JP2002002817A JP2002305515A (en) | 2001-01-10 | 2002-01-09 | Content decryption device |
Publications (2)
Publication Number | Publication Date |
---|---|
JP2002305515A JP2002305515A (en) | 2002-10-18 |
JP2002305515A5 true JP2002305515A5 (en) | 2005-07-21 |
Family
ID=26607450
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
JP2002002817A Withdrawn JP2002305515A (en) | 2001-01-10 | 2002-01-09 | Content decryption device |
Country Status (1)
Country | Link |
---|---|
JP (1) | JP2002305515A (en) |
Families Citing this family (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP2006514321A (en) * | 2003-02-03 | 2006-04-27 | ノキア コーポレイション | Architecture for installing encrypted applications |
JP4969821B2 (en) * | 2005-09-15 | 2012-07-04 | Kddi株式会社 | Program and content decryption method |
US8560863B2 (en) | 2006-06-27 | 2013-10-15 | Intel Corporation | Systems and techniques for datapath security in a system-on-a-chip device |
JP2009070024A (en) * | 2007-09-12 | 2009-04-02 | Panasonic Corp | Image forming apparatus |
JP5106432B2 (en) * | 2009-01-23 | 2012-12-26 | 株式会社東芝 | Image processing apparatus, method, and program |
US10990691B2 (en) * | 2018-05-11 | 2021-04-27 | Arris Enterprises Llc | Secure deferred file decryption |
-
2002
- 2002-01-09 JP JP2002002817A patent/JP2002305515A/en not_active Withdrawn
Similar Documents
Publication | Publication Date | Title |
---|---|---|
JP4865694B2 (en) | Processor device | |
US10102390B2 (en) | Memory authentication with redundant encryption | |
KR100792287B1 (en) | Method for security and the security apparatus thereof | |
JP2006085676A (en) | Encryption instruction processing apparatus | |
JP2006039206A (en) | Ciphering device and deciphering device | |
US20170060775A1 (en) | Methods and architecture for encrypting and decrypting data | |
CN103914662A (en) | Access control method and device of file encrypting system on the basis of partitions | |
JP2009135890A5 (en) | ||
JP2001249901A5 (en) | ||
JP2000122861A (en) | Illegal alteration prevention system for data or the like and enciphering device used with the system | |
JP2005216133A5 (en) | ||
JP2008306395A5 (en) | ||
JP2009159299A5 (en) | ||
JP2002305515A5 (en) | ||
JP2010501895A5 (en) | ||
JP2009187646A (en) | Encrypting/decrypting apparatus for hard disk drive, and hard disk drive apparatus | |
JP6246516B2 (en) | Information processing system | |
JP4592337B2 (en) | Data storage | |
JP2009253490A (en) | Memory system encrypting system | |
JP2004133087A (en) | Block encryption method and block encryption circuit | |
JP2006220748A (en) | Data processor, data recorder, data reproducing device, and data storage method | |
JP2002082732A (en) | System and method for prevention against illegal alternation of program code and recording medium with recorded control program thereof | |
JP2001331380A5 (en) | ||
JP2008003774A (en) | Microcomputer | |
JP4529879B2 (en) | Data recording system |