JP2003123401A - Recording medium, recording method, recording device, reproducing method, and reproducing device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To resolve the problem that the data recording capacity is reduced because an unreproducible area is conventionally formed for protection from copy and the problem that electronic watermarks require special processing for detection thereof when being used because it is difficult to separate electronic watermarks from problems brought about at the time of forming pits. SOLUTION: An ID area 2 is a read only area which cannot be altered by a user, and peculiar ID information different by mediums is preliminarily recorded in the ID area 2. A plurality of enciphering key information, first cryptographic keys, prescribed control, etc., are preliminarily recorded in a read-in area 3. Main information which is content data enciphered by using cryptographic key information and ID information delivered from a copyright holder is modulated in accordance with a prescribed modulation system meeting run length RLL (d, k) limits and is recorded in a user area 4, and the k limit of the RLL (d, k) limits is switched to record auxiliary information, which is a cryptographic key and copy control information, over the modulated main information in the user data area 4.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a recording medium, a recording method, a recording device, a reproducing method, and a reproducing device, and more particularly to a run length characteristic of a modulated signal with run length limitation for recording main information. The present invention relates to a recording medium such as an optical disc on which information necessary for copy protection is recorded, a recording method for a recording medium, a recording device, a reproducing method for reproducing recorded information on the recording medium, and a reproducing device.

[0002]

2. Description of the Related Art A DVD (Digital Versatile Disc) or the like is known as a recording medium having a copy protection function.
According to the DVD, the medium is BCA (Burst Cutting Are).
a), illegal copy is prevented by encrypting ID information and contents unique to the medium by NBCA (Narrow Burst Cutting Area). On the other hand, the amount of information that can be recorded on a disk medium in recent years far surpasses that of a DVD, and it is becoming difficult to sufficiently protect the copyright only by the copy protection function of the DVD.

In order to enhance the copy protect function, for example, Japanese Patent Laid-Open No. 7-235130 discloses a recording medium having a copy protect function by previously configuring an unreadable error area on a disk, and a recording medium thereof. A playback device is disclosed. In addition, JP-A-11-3
JP-A-06675 discloses an attempt to record digital watermark data in a pit string which is different from a pit string of normal data by changing the pit length on a recording medium from a reference value, and to simply copy the disc. In such a case, the invention of the recording medium and the reproducing apparatus is disclosed in which the digital watermark data cannot be copied due to the action of the PLL at the time of reproduction, and therefore it is possible to determine whether or not the disc has been illegally copied by the presence or absence of the digital watermark data. ing.

[0004]

DISCLOSURE OF THE INVENTION Problems to be Solved by the Invention
In the conventional recording medium and reproducing device described in Japanese Patent No. 235130, an unreproducible area is formed due to copy protection, which conflicts with the original request to increase the data recording capacity. Further, according to the conventional recording medium and reproducing apparatus described in Japanese Patent Laid-Open No. 11-306675, it is possible to have a function as a digital watermark, but it is difficult to separate from the problem that occurred during the pit formation, and the detection is performed. There is a problem that requires special processing.

The present invention has been made in view of the above points, and when recording main information by a run-length limited modulation, a copy protection function capable of very strong copyright protection as compared with a DVD is recorded. An object of the present invention is to provide a recording medium, a recording method, a recording device, a reproducing method, and a reproducing device capable of individually restricting use of content data and a medium by auxiliary information recording in which auxiliary information is multiplexed and recorded with run length restriction. And

Another object of the present invention is a recording medium capable of detecting auxiliary information with a simple structure without reducing the recording capacity of the recording medium due to recording auxiliary information. A recording method, a recording device, a reproducing method, and a reproducing device are provided.

[0007]

In order to achieve the above object, the recording medium of the first invention is a read-only first area which cannot be modified by a user, and write-only or rewritable second and third areas. Area, the unique ID information, which is different for each medium, is recorded in advance in the first area, and a plurality of first encrypted data is recorded in the second area. Run length R is key information as main information
The auxiliary information, which is modulated by a predetermined modulation method that satisfies the LL (d, k) restriction, and which includes a first encryption key for protecting the first encryption key information and predetermined control information, is RLL (d , K) The k-limit in the limit is switched, and is recorded in advance by being superimposed on a plurality of modulated first encryption key information, and the third region is a region in which the user can record and reproduce the content. Yes, and is in an unrecorded state in the initialized state.

In order to achieve the above-mentioned object, the recording medium of the second invention shows a usage right of content data for recording a plurality of second encryption key information distributed by a copyright holder. Content data is encrypted or decrypted (first encryption) by the first data decrypted by the first decryption key, and the plurality of first data reproduced from the second area
Information encrypted by the first encryption key reproduced from the second area is used as the second unique information for the recording / reproducing apparatus.
By the third data obtained by encrypting the second data decrypted by the decryption key of No. 1 with the ID information reproduced from the first area,
The content data obtained by further encrypting or decrypting the encrypted content data (second encryption) is used as the main information, and the first
Of the encryption key and the copy control information of the recording medium as auxiliary information, the main information is modulated by a predetermined modulation method that satisfies the run-length RLL (d, k) restriction, and the auxiliary information is RLL (d, k). It is characterized in that the k limit in the limit is switched, and is superimposed on the modulated main information and recorded in the respective third areas.

In both the recording medium in which the user data of the first invention is unrecorded and the recording medium in which the user data of the second invention is recorded, the auxiliary information is RLL (d,
Since the k limit in k) limit is switched and recorded while being superimposed on the modulated main information, the auxiliary information can be recorded without affecting the main information.

Further, in order to achieve the above object, the recording method of the present invention is a first method for indicating a usage right of content data for recording a plurality of second encryption key information distributed by a copyright holder. Encryption or decryption of content data by the first data decrypted by the decryption key (first encryption)
And a second step of encrypting a plurality of first encryption key information reproduced from the second area of the recording medium with the first encryption key reproduced from the second area. , A third step of decrypting the information encrypted in the second step with a second decryption key unique to the recording / reproducing apparatus to obtain second data, and the second data being recorded on the first recording medium. The fourth step of obtaining the third data encrypted with the ID information reproduced from the area of No. 1 and the third content, the encrypted content data obtained in the first step is further encrypted or decrypted (second Encryption) and the content data encrypted or decrypted in the fifth step as main information, and the first encryption key and copy control information of the recording medium as auxiliary information. Run length RLL (d k) while being modulated by a predetermined modulation method that satisfies the restriction, auxiliary information is RLL (d,
k) The sixth step of switching the k limitation in the limitation to generate a signal superimposed on the modulated main information and recording the signal in the third area of the recording medium.

Further, in order to achieve the above object, the recording apparatus of the present invention reproduces the recording signals of the first area and the second area of the recording medium to obtain a plurality of pieces of first encryption key information and The reproducing means for reproducing the first encryption key and the ID information, and the plurality of second encryption key information distributed by the copyright holder are decrypted by the first decryption key indicating the usage right of the content data to be recorded. First encryption means for encrypting or decrypting (first encryption) the content data by the first data, and a plurality of first encryption key information from the reproducing means
Information obtained by encrypting with the second encryption key unique to the recording / reproducing apparatus to obtain second data, and then the second data is encrypted with ID information from the reproducing means. A data generating means for obtaining the encrypted third data, and a second data for further encrypting or decrypting (second encryption) the encrypted content data obtained by the first encryption means. Main information is the encryption means and the content data encrypted or decrypted by the second encryption means,
Using the first encryption key and the copy control information of the recording medium as auxiliary information, the main information is modulated by a predetermined modulation method that satisfies the run-length RLL (d, k) restriction, and
The auxiliary information has a recording signal generating means for switching the k restriction in the RLL (d, k) restriction and generating a recording signal superimposed on the modulated main information, and is generated by the recording signal generating means. The recording signal thus recorded is recorded in the third area of the recording medium.

In the above-described recording method and apparatus of the present invention, the content data can be recorded in the third area of the recording medium of the second invention, and the content usage and the media usage are separated and separately encrypted. Moreover, since the content data is encrypted using the plurality of second encryption key information distributed by the copyright holder, it is possible to reflect whether or not the copyright holder can use the content. . Further, since the first decryption key indicating the usage right of the content data to be recorded is used, it is possible to control the usage of the recording medium.

Further, in order to achieve the above-mentioned object, the recording apparatus of the present invention records the copy control information of the recording medium which is preliminarily defined by the plurality of first encryption key information obtained from the reproducing means, and the recording. It is determined whether the copy control information of the content data to be matched matches a predetermined condition, and only when a result of the determination is obtained, the second encryption unit updates the encrypted content data. Output limiting means for stopping the recording by blocking the transmission of the encrypted content data to the second encryption means when the determination result of the coincidence is not obtained by performing the following encryption or decryption (second encryption). Is further included. According to the present invention, by comparing the copy control information of both the content and the medium (recording medium), the recording can be stopped when they do not match.

Further, in order to achieve the above object, the reproducing method of the present invention comprises a first step of reproducing the recording key information from the first area and the second area of the recording medium respectively, and a first step of the recording medium. The second step of reproducing the data in which the auxiliary information is superimposed on the encrypted content data from the area 3 to separate the encrypted content data and the auxiliary information, and the auxiliary separated by the second step. Unique to the reproducing apparatus, the fourth data obtained by encrypting or decrypting the first encryption key in the information with the plurality of first encryption key information reproduced from the second area in the first step. The third step of decrypting with the third decryption key to obtain fifth data, and the fifth step of encrypting or decrypting the fifth data with the ID information reproduced from the first area in the first step. 4th step to obtain 6 data And flop, by the sixth data, the second
The fifth step of encrypting and decrypting the encrypted content data obtained in the step of 5 and the fourth decryption key indicating the usage right of the content data to be reproduced are used to decrypt the data obtained in the fifth step. The sixth step of encrypting and decrypting the encrypted content data obtained in the fifth step with the seventh data obtained by performing the above.

In order to achieve the above object, the reproducing apparatus of the present invention has a reproducing means for reproducing the recording key information from the first area and the second area of the recording medium, and a third means of the recording medium. In the auxiliary information separated by the reproducing / separating means, which reproduces the data in which the auxiliary information is superimposed on the encrypted content data from the area to separate the encrypted content data and the auxiliary information. The fourth encryption key obtained by encrypting or decrypting with the first encryption key information of the plurality of first encryption key information reproduced from the second area by the reproduction means.
Data is decrypted by a third decryption key unique to the reproducing apparatus to obtain fifth data, and the fifth data is further encrypted or decrypted by the ID information reproduced from the first area by the reproducing means. Data generating means for obtaining the sixth data by means of the first data, first encryption / decryption means for encrypting and decrypting the encrypted content data obtained by the reproducing / separating means by the sixth data, and content for reproduction. The encryption obtained by the first encryption / decryption means with the seventh data obtained by decrypting the data obtained by the first encryption / decryption means with the fourth decryption key indicating the right to use the data. The second encryption / decryption means obtains the content data by encrypting and decrypting the encrypted content data.

In the reproducing method and the reproducing apparatus of the present invention, the auxiliary information is recorded in the third area by switching the k restriction in the RLL (d, k) restriction, superposed on the modulated main information. The auxiliary information can be reproduced from the recording medium, and the content data encrypted and recorded as the main information can also be reproduced.

Further, in order to achieve the above object, the reproducing apparatus of the present invention has the first copy control information of the content data in the data obtained by the first encryption / decryption means, and the second copy control information.
Detection means for detecting the second copy control information of the content data embedded in the content data obtained by the encryption / decryption means and the first and second copy control information are matched under a predetermined condition. The content data from the second encryption / decryption means is output only when the determination result for determining whether or not to perform the determination and the determination result for the determination by the determination unit are obtained. It is characterized by further comprising an output limiting means for stopping the output of the content data from the encryption / decryption means. According to the present invention, the second copy control information embedded in the content data is compared with the first copy control information in the auxiliary information, and if they do not match, the output of the content data can be stopped.

Further, in order to achieve the above-mentioned object, the recording apparatus of the present invention is the recording information in which the first encryption means is recorded in the recording medium or the apparatus in advance, or the portable information possessed by the user. The content data is encrypted or decrypted (first encryption) by an intermediate key obtained by encrypting the first data by the user identification information stored in a possible storage medium or the delivered distribution information. In addition, in the reproducing apparatus of the present invention, the second encryption / decryption means is recorded in the recording information which is recorded in the recording medium or the apparatus in advance, or the portable storage medium owned by the user. Depending on the user identification information or distribution information distributed,
It is characterized in that the encrypted content data obtained in the fifth step is encrypted and decrypted by the intermediate key obtained by encrypting the data of 1.

In the present invention, since an intermediate key unique to each device or user is obtained and encrypted, it is possible to use the content belonging to the device or user, and unique to each medium. Since the intermediate key is obtained and encrypted, it is possible to make the use of the content belonging to the medium such as the illegal use of the data on the medium and the illegal copy of the medium prevented.

In order to achieve the above object, in the reproducing apparatus of the present invention, the reproducing means, the reproducing / separating means, the data generating means and the first encryption / decryption means constitute a media descrambling part, and 2 encryption / decryption means, detection means,
The judging means and the output limiting means constitute the content descrambling portion, and the mutual authentication in the device and the bus between the media descrambling portion and the content descrambling portion perform the authentication of the transfer partner and the bus encryption. It is characterized in that an encryption unit is provided. According to the present invention, the space between the media descrambling portion and the content descrambling portion can be protected by authentication and bus encryption. This structure can be similarly applied to the recording device, and the space between the content scramble portion and the media scramble portion can be protected by authentication and bus encryption.

Further, according to the present invention, alteration of the copy control information can be prevented by encrypting the non-encrypted data using the result of processing with the copy control information as a key.

[0022]

DESCRIPTION OF THE PREFERRED EMBODIMENTS Next, embodiments of the present invention will be described with reference to the drawings. FIG. 1 shows a block diagram of an embodiment of a recording medium according to the present invention. In FIG. 1, an optical disc 1 which is an example of a recording medium records control information such as an ID information area 2 in which different ID information is written for each disc from the innermost circumference side to the outermost circumference side, and control data. A lead-in area 3, a user data area 4 for recording user data, and a lead-out area 5 at the outermost periphery are arranged in this order.

In the ID information area 2, the ID information (unique media ID) different for each optical disk 1 is written by a user when the blank media is shipped by an irreversible recording method such as the destruction of the reflective film by a laser. This is a read-only area that cannot be modified. The control information described later is common to each manufacturing unit of the optical disc 1, whereas the ID information recorded in the ID information area 2 is unique to each disc of the optical disc 1 (unique) I.
This is D information.

The lead-in area 3 is an area in which various control information other than user data is recorded. The control information recorded in the lead-in area 3 includes control information that needs to be rewritten when data is written, for example, data such as position / write session information of the last recording sector and recorded content information, and the medium. There is read-only data that does not need to be rewritten, such as disc type and standard version / manufacturing information, information about content, recording conditions on the medium, and copy protection data that are recorded in advance.

The user data area 4 is a recording area open to the user, and is data for managing files.
This is an area where various user data including (file system) is written in the recording device. Therefore, when the optical disc 1 is shipped as a blank medium, the user data area 4 is all unrecorded, and the content data is sequentially recorded as user data from the inner circumference to the outer circumference by the recording device owned by the user. To be done. If recording has already been performed in the user data area 4, the recording device overwrites the recording portion as necessary.

The lead-out area 5 is an area occupying from the outer peripheral portion of the user data area 4 to the outer periphery of the disc,
A predetermined data pattern for lead-out is recorded.
The lead-in area 3 and the user data area 4 are described as rewritable areas in the following description, but may be write-only areas.

The data of the three areas consisting of the lead-in area 3, the user data area 4 and the lead-out area 5 is recorded with error protection (ECC) on the recording data in the recording device, and then the run length characteristic of the modulated signal is set. The data is recorded on the optical disc 1 after being modulated by a predetermined modulation method based on it. Further, in these areas 3 to 5, the address information used at the time of recording is a read-only recording method such as pre-pit information or wobbling of a recording groove so that the user data can be recorded at a correct position on a disc where no user data is recorded. When a medium is manufactured, it is previously molded and duplicated by a stamper which is a mold.

In addition to the above control information, the lead-in area 3 also includes a plurality of pieces of data generated by encryption, which are data related to copy protection, from media keys and a plurality of key information required for decryption different for each device. Key data (MKB media) consisting of encryption keys is recorded.
However, just by recording encrypted key data as in the past, the encryption method is broken, the key data itself is altered because the medium is rewritable, and it is replaced with fake data different from the original one. With respect to attempts to illegally use the data, the current method of recording the encryption key data almost defensively is vulnerable to security.

Therefore, in the present embodiment, by encrypting and recording the data that needs to be concealed using the auxiliary information (Extra Information) that is superposed and recorded as the data is recorded, the key data itself can be altered or It is characterized in that the confidentiality is enhanced by replacing with data and the above-mentioned problem is solved.

Further, the present embodiment is characterized in that k-limit of RLL (Run Length Limited) limit is used for superimposing recording of auxiliary information on main information. Here, the number of logical values "0" between the logical values "1" and "1" in the codeword is d at the minimum, and the logical values "0" and "0" in the codeword When the number of logical values "1" between them is k at maximum, it is described as run length limiting rule RLL (d, k).
The limit k is a limit on the maximum number of logical values "1" between the logical values "0" and "0" in the above codeword.

Next, a method of recording auxiliary information utilizing the k limit of the RLL limit suitable for implementing the present invention will be described.

FIG. 2 shows a block diagram of an embodiment of the auxiliary information superimposing circuit of the main part of the recording apparatus according to the present invention. In the figure, main information which is a digital information signal is input to a format section 11 in an auxiliary information superimposing circuit 10, where an error correction code or the like is added, and then a signal format adapted to the recording format of a recording medium 18 is added. And is input to the 8-15 modulator 12 as a source code. As will be described later, the 8-15 modulator 12 has a plurality of encoding tables 13 for encoding the source code (input data word) to be input, and every 8 bits of the source code (input data word). Then, the 8-bit source code (input data word) is converted into 15-bit code bits corresponding to a plurality of encoding tables 13 and a sync signal is added and sequentially output.

Further, auxiliary information (Extra Information) is inputted to the 8-15 modulator 12 as a maximum run setting signal, and the RLL limitation of the code word to be outputted is limited to k. For this Extra Information,
It will be described in detail later. The signal (code word) output from the 8-15 modulator 12 is input to the NRZI conversion circuit 14, is NRZI converted here, and is then recorded as a recording signal on the recording medium 18 such as an optical disk by the recording drive circuit 15. It

FIG. 3 shows a block diagram of an example of the 8-15 modulator 12 in FIG. As shown in FIG. 3, the 8-15 modulator 12 includes a codeword option presence / absence detection circuit 121, an address calculator / synchronous word generator 122 including a plurality of encoding tables 13, and first and second paths. Memories 123 and 12
5, and the first and second DSV operation memories 124 and 12
6, a DSV comparison unit 127, and a memory control / code output unit 128.

Here, prior to the description of the operation of FIG. 3, a plurality of coding tables 1 referred to in order for the address calculation unit / sync word generation unit 122 to perform an address calculation and output a code word.
3 will be described first. The coding table 13 is composed of six coding tables of elements 0 to 5 shown in FIGS. 4 to 8, and corresponds to an input word and a code word (that is, an output code word after conversion). , A coding table used to modulate the next input word in order to obtain the next code word which, even if directly coupled to this code word, satisfies a predetermined run length limiting rule (eg maximum run length 11T) And state information S + 1 indicating

Further, a specific coding table element and another specific coding table element among the six coding tables correspond to a predetermined input data word for a predetermined input data word. N for each stored codeword
So that the RZI converted signal has the opposite polarity, that is,
The code words are assigned with evenness so that the number of "1" in each code word can be DSV controlled, and when one is an even number, the other is an odd number.

In FIGS. 4-8, the 8-bit input word is 15
Status "S = 0" to "S" for converting to bit codeword
6 shows an example of six encoding tables of "= 5".
In each coding table element of, the input word is indicated by a decimal number, and the output codeword after conversion is a decimal number and a binary number (15
The number at the right end of each output codeword is the next input word in order to obtain the next codeword that satisfies the predetermined run length restriction rule even if the codewords are directly connected. 3 shows state information S + 1 indicating a coding table element used to modulate a data word.

For example, referring to the coding table element of the state "S = 0" shown in FIG. 4, the state information S + 1 is "4" for the input word "0" and the state information S for the input word "1".
If +1 is "5" and the input word is "2", the status information S +
It can be seen that 1 is “0”. Therefore, the state "S =
When the input word “0” is modulated (encoded) using the coding table of 0 ”, the next input word is modulated using the coding table of the state“ S = 4 ”. It will be.

Also, paying attention to each table of the state "S = 0" and the state "S = 3", the signals obtained by NRZI converting the output code words corresponding to the input words "0" to "38" have opposite polarities. (The oddness and oddness of the number of “1” included in the code word are different). This allows the next codeword to be
It is possible to set different initial values when performing RZI conversion. Further, when the polarities are opposite, in the case of DSV, it is possible to set the increasing direction and the decreasing direction.

Regarding the coding rule, the status "S =" is set as the status information S + 1 for the next transition in each coding table.
When "0" is selected, the zero run length on the previous output codeword LSB side is "0" (that is, the output codeword ends with "1"). In addition, the state "S =
In the encoding table of "3", input words "0" to "3"
The output codewords corresponding to "8" are arranged so that the zero run length on the MSB side is "2". Therefore, the state ”
The output codewords corresponding to the input words “0” to “38” in the coding table of S = 3 ”correspond to the input words“ 0 ”to“ 38 ”in the coding table of the state“ S = 0 ”, respectively. Even if the output codewords are exchanged with each other, the run length restriction rule in which the run length after NRZI conversion is limited to 3T to 11T can be maintained. Input words "0" to "11" and "26" of each coding table of the state "S = 2" and the state "S = 4"
Similarly, about ~ 47, it is arranged so that the run length restriction rule can be maintained even if exchange is performed.

Next, the operation of the 8-15 modulator 12 of FIG. 3 will be described. First, an initial table (initial values of choices of coding table elements) is selected in advance for the sync signal generated and added by the sync word generator in the address calculator / sync word generator 122. Next, when the 8-bit input data word SCt is input, the code word option presence / absence detection circuit 12
1 is the input of this time based on the input data word SCt of this time and the state information determined by the preceding output code word (here, the selected initial value) supplied from the address calculation unit / synchronization word generation unit 122. It is detected whether the output code word corresponding to the data word SCt is uniquely determined or there is an option, and the detection result is output to the address calculation unit / synchronization word generation unit 122 and the DSV value comparison unit 127.

Here, focusing on each table of the state "S = 0" and the state "S = 3" of the encoding table 13 shown in FIGS. 4 to 8, as described above, the state "S = 3". Input data word (input word) among the output code words of the table
The output codewords corresponding to “0” to “38” are in the state “S =
The encoding rule can be maintained and can be decoded even if the table is replaced with the output codeword of the 0 "table. Further, focusing on each table of the state" S = 2 "and the state" S = 4 " , The output codewords corresponding to the input words “0” to “11” and “26” to “47” of the output codewords of the state “S = 4” table are the output codewords of the state “S = 2” table. Coding rules can be maintained and can be decoded even when exchanged with the output codeword.

Further, in the coding tables shown in FIGS. 4 to 8, the output codewords of the tables of state "S = 0" and state "S = 2" are respectively state "S = 3" and state "S". = 4 ”
N in the output codeword corresponding to the input word of the table
Since the polarities after RZI conversion are reversed, the input words "0" to "3" of the table in the state "S = 0" are input.
8 ”and the input word“ 0 ”of the table of the state“ S = 2 ”
When "11" and "26" to "47" occur,
It is possible to take a plurality of output code words, and by selecting the optimum output code word by using the value of DSV (Digital Sum Value) as the path “1” and the path “2”, the DS
V control can be performed.

Therefore, the code word option presence / absence detection circuit 121
Indicates that the state information supplied from the address calculation unit / synchronization word generation unit 122 is the state “S = 0” and the input data word S
When Ct is "0" to "38", the detection result of "there is a choice" is output. At this time, the address calculation unit / synchronization word generation unit 122 determines that the state “S =” in the encoding table 13.
The output code word OC1t corresponding to the input data word SCt of the table of "0" is read, and the output code word OC2 corresponding to the input data word SCt of the table of the state "S = 3" is read.
Read t.

Further, the code word option presence / absence detection circuit 121
Indicates that the state information S + 1 supplied from the address calculation unit / synchronization word generation unit 122 is the state “S = 2” and the input data word SCt is “0” to “11” or “26” to “47”.
Also in the case of, the detection result of "there is a choice" is output. At this time, the address calculation unit / synchronization word generation unit 122 reads the output code word OC1t corresponding to the input data word SCt of the table of the state “S = 2” in the encoding table 23, and also the state “S = 4”. Input data word SCt of table
The output code word OC2t corresponding to is read.

Further, the code word option presence / absence detection circuit 121
Indicates that the state information S + 1 supplied from the address calculation unit / synchronization word generation unit 122 is the state “S = 3”, the zero run length on the LSB side of the previous output codeword is 2 to 6, and the next output Even when the codeword is in a range in which the coding rule is not broken even if the codeword is replaced with the output codeword in the coding table in the state “S = 0”, that is, the maximum run length is 11T (k = 1
Even when the encoding is possible without exceeding 0), the detection result of "there is a choice" is output. At this time, the address calculation unit / synchronization word generation unit 122 reads out the output code word OC1t corresponding to the input data word SCt of the table of the state “S = 3” in the encoding table 13, and the state “S =”.
The output code word OC2t corresponding to the input data word SCt of the table of "0" is read.

In this way, the code word option presence / absence detection circuit 1
When the detection result of 21 is “choice of choice”, the address calculation unit / synchronous word generation unit 122 calculates two addresses, and in this case, the encoding table 13
Outputs two types of code words by time division processing or the like. Then, one of the two types of code words output from the encoding table 13 is input to the first path memory 123 as the output code word OC1t of the path “1”, and the other is output code word OC2t of the path “2”. Is input to the second path memory 125.

The code word option presence / absence detection circuit 121 supplies a detection result of "no option" (uniquely determined) to the address calculation unit / sync word generation unit 122 under conditions other than the above. The address calculation unit / synchronization word generation unit 122 calculates the address of the encoding table 13 based on the detection result from the codeword option presence / absence detection circuit 121.

That is, the code word option presence / absence detection circuit 12
When the detection result of 1 is “no choice (uniquely determined)”, there is one address calculated by the address calculation unit / synchronization word generation unit 122, and therefore the output codeword corresponding to this address is a code. The same output codeword is read into the path memories 123 and 125 and read from the coded table address.

Here, in the path memory 123, the code word strings (OC1t-1, OC1) input to the path memory 123 after the output code word is output from the path memory in the past.
t-2, ..., OC1Tdsvc) and the output codeword OC1t of the path “1” that was input immediately before are accumulated, and the path memory 125 outputs the output codeword after the output codeword from the path memory in the past. , Which are input to the path memory 125 (OC2t-1, OC2t-2, ..., OC2Td).
svc) and the output codeword OC of the path "2" input immediately before
2t is accumulated.

In the first DSV operation memory 124, the DSV value (DSV1t-1) obtained from all the output codewords selected in the past and the output codeword of the path "1" input immediately before is stored. The DSV value (DSV2t-1) obtained from all the output codewords selected in the past and the output codeword of the path “2” input immediately before is stored in the second DSV operation memory 126. Remembered

On the other hand, the DSV value comparing section 127, for example,
The absolute value of the total sum of DSVs from the DSV operation memory 124 up to now | DSV1t-1 | and the DSV operation memory 126.
Absolute value of the total sum of DSVs up to now | DSV2t-1
Is compared with |, and the comparison result is output to the memory control / code output unit 128.

The memory control / code output unit 128 uses the DSV
The comparison result input from the value comparison unit 127 is | DSV1
When t-1 | <| DSV2t-1 |, the past output codeword string (OC
1Tdsvc, ..., OC1t-2, OC1t-1) is output as the selected output codeword and is also output to the path memory 125 for rewriting, and the DSV operation memory 126
Is rewritten to the DSV1t-1 stored in the DSV operation memory 124 having the smaller absolute value of DSV.

On the other hand, the memory control / code output unit 12
When the comparison result input from the DSV value comparison unit 127 is | DSV1t-1 | ≧ | DSV2t-1 |, 8 is a past output codeword string (OC2Tdsvc, ...) Stored in the path memory 125. , OC2t-2, OC2t
-1) is output as the selected output codeword, and
The data stored in the DSV calculation memory 124 is also output to the path memory 123 for rewriting, and the stored content of the DSV calculation memory 124 is changed to D of the smaller absolute value of DSV.
DSV2t-1 stored in the SV calculation memory 126
Rewrite

After that, the output code word OC1t of the path "1"
Is stored in the path memory 123 and the output codeword OC
The DSV including 1t is calculated by the DSV calculation memory 124 and stored. Further, the output codeword OC2t of the path “2” is stored in the path memory 125, and the output codeword OC2t is stored.
The DSV including t is calculated by the DSV calculation memory 126 and stored. When the detection result of the code word option presence / absence detection circuit 121 is “no option”, the output code words of the path “1” and the path “2” are the same.

The above operation is repeated until there are no more input data words, and finally the path memory 123 or the path memory 12
Memory control of all output codewords stored in 5 /
By outputting through the code output unit 128, the NRZ
After I conversion, a predetermined run length limiting rule (here, RLL (2, 1 with minimum run length 3T and maximum run length 11T
It is possible to output a DSV-controlled output codeword that satisfies 0)). Of course, it is also possible to control the output of the output codeword by the buffer.

By the way, it has been shown that the six codeword encoding tables shown in FIGS. 4 to 8 described above can limit the run length from 3T to 11T and generate a codeword sequence in which the DC component can be suppressed. Next, regarding the control of the 8-15 modulator 12 in the auxiliary information superimposing circuit 10 by the auxiliary information input as the maximum run setting signal shown in FIG. 2 or 3, also refer to the flowcharts of FIGS. 9 and 10. explain.

First, the path memories 123 and 12 in FIG.
5, the DSV operation memories 124 and 126, the encoding table state and the like are initialized (step S1 in FIG. 9), the synchronization word is read based on the encoding table state, the path memories 123 and 125, and the DSV operation are performed. The memories 124 and 126 are updated (step S2 in FIG. 9). Next, one input data word is read (step S3 in FIG. 9), condition 1
It is determined whether the input data word is (step S in FIG. 9).
4).

If it is the input data word of condition 1 (Y in step S4), the process proceeds to step S8 of FIG.
If it is not the input data word of condition 1 (N in step S4), the process proceeds to step S5 in FIG. Condition 1 is ((state = 0) && (input data word <39)).

In step S5, it is determined whether the input data word is the condition 2 input data. If the input data word is the condition 2 input data (Y in step S5), the process proceeds to step S8 in FIG. If it is not a word (N in step S5), the process proceeds to step S6 in FIG. Condition 2 is ((state = 2) && ((input data word <12) ||
((Input data word> 25) && (input data word <4
8)))).

In step S6, it is determined whether the input data word is the condition 3 input data. If the input data word is the condition 3 input data (Y in step S6), the process proceeds to step S8 in FIG. If it is not a word (N in step S6), the process proceeds to step S7 in FIG.

Condition 3 is that the leading zero-run lengths 0 and 1 are the lower zero-run length of Oct1 and the lower zero-run length of Oct2, respectively, and when the maximum run setting signal = 0, (leading zero-run length 0, 1> 2). && (state = 3) && (input data word <155)) && k = 10 (that is, maximum run length 11T), and if the maximum run setting signal = 1, then (preceding zero run length) 0,1> 2) &
& (State = 3) && (input data word <155)) &&
The maximum run is 12T (k = 11).

When the maximum run setting signal = 2,
(Leading zero run length 0,1> 2) && (state = 3) &&
(Input data word <155)) && Maximum run is 13T
(K = 12), but does not include 12T,
When the maximum run setting signal = 3, (leading zero run length 0,
1> 2) && (state = 3) && (input data word <15
5)) && Maximum run is 13T.

In addition to the above case, the condition 3 is such that the leading zero run lengths 0 and 1 are the lower zero run length of Oct1 and the lower zero run length of Oct2, respectively, and when the maximum run setting signal = 0, (9 > Leading zero run length 0, 1> 6)
&& (state = 5) && (input 80 <data word <25
5)) && k = 10 is maintained, and when the maximum run setting signal = 1, 9> leading zero run length 0, 1
> 6) && (state = 5) && (input 80 <data word <2
55)) && Maximum run is 12T.

When the maximum run setting signal = 2, 9
> Leading zero run length 0, 1> 6) && (state = 5) &&
(Input 80 <Data word <255)) && Maximum run is 1
It is 3T, but does not include 12T. When the maximum run setting signal = 3, 9> leading zero run length 0, 1>
6) && (state = 5) && (input 80 <data word <25
5)) && Maximum run is 13T.

In condition 3 shown in FIG. 9, when k = 10, that is, when the maximum run length is 11T, a process of selecting an encoding table with a small DSV is performed. This is effective processing when the maximum run setting signal is 0, for example.
When the maximum run setting signal is 1, for example, when the condition 3 is satisfied, the same process is performed. When the code word of the state 0 is selected, the state 0 is unconditionally set when k = 11, that is, the maximum run length is 12T. Set the state to take next.

As a result, when the maximum run setting signal is 0, modulation is performed by the modulation method that satisfies the RLL (2,10) restriction that satisfies k = 10, and the maximum run setting signal is 1
In the case of, it is possible to switch the modulation method so that modulation is performed by the modulation method that satisfies the RLL (2,11) restriction that satisfies k = 11. Similarly, when the maximum run setting signal is 2, k = 12, but the 12T signal is not included. When the maximum run setting signal is 3, the maximum run length is controlled by the maximum run setting signal so that the modulation method is switched so that modulation is performed by the modulation method that satisfies the RLL (2,12) restriction that satisfies k = 12. .

That is, by selecting the maximum run setting signal according to the auxiliary information indicating any one of 0 to 3,
It is possible to generate areas with different modulation methods,
It is possible to superimpose auxiliary information by switching the modulation method on the main information.

Next, when it is determined in the above step S6 that the input data word is not the condition 3, it is determined whether it is an exceptional condition, and if it is an exceptional condition, exception processing is executed and the process proceeds to step S9 in FIG. If it is not an exceptional condition,
The process directly proceeds to step S9 of FIG. 10 (step S7 of FIG. 9).

The above exception processing is (1) ((leading zero run length> 6) && (state = 3) && (input data word = 25
When the exception condition of 5)) is satisfied, the processing is to set the state to 2, or (2) ((leading zero run length = 7 or 8)
&& (state = 4) && (input data word = 255)) when the exceptional condition is satisfied, the state is set to 1.

When the input data word satisfies any one of the above conditions 1 to 3 by the determinations of steps S4, S5 and S6 of FIG. 9, step S of FIG.
8, the memory control / code output unit 128 of FIG. 3 outputs the comparison result input from the DSV value comparison unit 127 to the DSV of the path memories 123 and 125 as described above.
The past output codeword string stored in the smaller path memory of is output as the selected output codeword, and
The data is also output to the path memory with the larger DSV to be aligned with the content of the path memory with the smaller DSV, and the stored content of the DSV operation memories 124 and 126 is also aligned with the DSV operation memory with the smaller absolute value of DSV.

When the processing of step S7 of FIG. 9 is performed, the zone is set by the input data word in step S9 of FIG. Then, step S8 or S
When the processing of 9 is completed, OC1t is input to the path memory 123 (candidate 0) based on the state 1, OC2t is input to the path memory 125 (candidate 1) based on the state 2, and DSV0, 1 is updated ( Step S10 in FIG. 10). Subsequently, it is determined whether or not the next input data word is the synchronization word (step S11 in FIG. 10), and if it is the synchronization word, the path memory 123 is determined.
And 125, the path memory with the smaller DSV is selected, and based on the selection result, the data of the path memory that has already been input is aligned with the data with the smaller DSV and held again (step of FIG. 10). S12). In other words, DSV
Align 0 and 1 with the smaller DSV. Then, the process returns to step S2 of FIG.

On the other hand, if the next input data word is not a synchronization word in step S11, it is determined whether there is no next input data word or whether the input data word has ended (see FIG. 10).
S13) of step S13), the processing is ended when it is completed, and step S3 of FIG. 9 when the input data word is not completed.
Return to.

In the above examples, DV is used for DSV control.
Although the embodiment has been described in which a series having a small DSV absolute value is selected based on the SV absolute value, the signal for DSV control is not limited to the DSV absolute value, but is information for reducing the DSV. It can be implemented if there is one.

Next, an embodiment of the main part of the reproducing apparatus according to the present invention will be described. FIG. 11 shows a block diagram of an embodiment of an auxiliary information reproducing / separating circuit which constitutes a main part of the reproducing apparatus according to the present invention. In FIG. 11, a reproduction signal reproduced from a recording medium or the like (not shown) is binarized by a reproduction signal processing means (not shown) to be an NRZI demodulation circuit 21 as an input code word bit string of an auxiliary information reproduction / separation circuit which is a demodulator. Is input to and is NRZI demodulated.

The input codeword bit string serially extracted from the NRZI demodulation circuit 21 is branched into three,
It is serially input to the parallel converter 22, the other is serially input to the synchronization detection circuit 23, and further serially input to the auxiliary information decoder 24. Auxiliary information decoder 24
The operation of will be described later.

The sync detection circuit 23 detects a fixed pattern sync word inserted in the input code word bit string, generates a word clock at code word string intervals, and inputs the word clock to the serial / parallel converter 22. The serial / parallel converter 22 outputs the code word string converted into the parallel signal using the word clock as the timing signal. This parallel output codeword string is referred to as an input code Ck. This input code Ck is branched into two, one of which is input to the word register 25 and delayed by one code word length, and the other is input to the state calculator 2
6 is input.

The output code Ck-1 of the word register 25 is input to the code word case detection circuit 27, and the case output from the code word case detection circuit 27 and the state calculator 26 to which Ck is input. It is input to the address generation circuit 28 that performs the address calculation together with the state information Sk to be generated, and the address of the decoding table 29 is generated here.
The decoding table 29 outputs the output data word based on the address generated by the address generation circuit 28.

Next, in more detail, reproduction of auxiliary information in FIG.
The description of the separation circuit will be added. The code word strings Ck-1, Ck, Ck + 1, ... Encoded as described above by the encoding tables shown in FIGS. 4 to 8 are LSBs.
The groups can be grouped (hereinafter referred to as cases) according to the zero run length on the side, and the next possible state is determined depending on the case as shown in Table 1.

[0080]

[Table 1] That is, if the Ck-1 case is detected and the Ck encoded state is known, the output data is uniquely determined.

For example, it is assumed that the following code word strings Ck-1 to Ck + 2 are input to the auxiliary information reproducing / separating circuit of FIG. Ck-1: 0000000000000000 Ck: 010010001000100 Ck + 1: 100001000001001 Ck + 2: 00000000000001

At this time, since Ck has the leading zero run length, that is, the lower zero run length of Ck−1 is “5”, it can be seen from Table 1 that it is Case 2. Therefore, it can be seen from Table 1 that Ck is coded in any one of the states S “1”, “3”, “4”, and “5”. Also, when Ck is expressed in decimal notation, it is “9284”.
It can be seen from the arithmetic expression for detecting the state of Sk = 4, that is, the encoding is performed in the state 4. Also, Ck-1 is 1
It is "32" when expressed in a decimal number, the input word is "32" from the encoding table of FIG. 4, and the next state S + 1 is "4".
Since the input word transiting to is "0", it is decoded as "0".

Next, the case of Ck is also 2, the next code word Ck + 1 is "16905" in decimal number, and from the arithmetic expression of the state detection of Equation 1, Sk = 5, that is, encoding is performed in State 5. I understand that. Further, Ck is “9284” when expressed in decimal number, the input word is “9284” from the encoding table of FIG. 4, and the next state S + 1 is “9”.
Since the input word transiting to 5 "is" 1 ", it is decoded as" 1 ". Similarly, Ck + 1 is decoded as "2".
Expression 1 is an example of an arithmetic expression described in C language for detecting the encoded state of Ck.

Formula 1 if ((d == 8224) || (d == 8225) || (d == 8256)) flag = 1; if ((d == 8712) || (d == 8720) || (d == 8736) || (d == 8777)) flag = 2; if (c == 0) {/ * Leading zero run length = 0 * / if ((d <= 1024) || ((d> = 4168) && (d! = 4224))) Sk = 0; if ((1025 <= d) && (d <= 4164) || (d == 4224)) Sk = 1;} else if (c == 1) {/ * Leading zero run length = 1 * / if ((1025 <= d) && (d <= 4164) || (d == 4224)) Sk = 1; if (( d <= 585) || (d> = 8708) && (flag! = 2) || (d == 8704) | | (flag == 1)) Sk = 2; if ((d == 1024) | | ((4168 <= d) && (d <= 8706) && (d! = 4224) && (d! = 8704)) && (flag! = 1) || (flag == 2)) Sk = 3; } else if (c == 2) {/ * Leading zero run length = 2 to 6 * / if ((1025 <= d) && (d <= 4164) || (d == 4224)) Sk = 1 ; if ((d <= 1024) || ((4168 <= d) && (d <= 8706) && (d! = 4224) && (d! = 8704)) || (flag == 2)) Sk = 3; if ((d == 8704) || ((8708 <= d) && (d <= 16900) && (d! = 16896) && (flag! = 2)) || (flag == 1 )) Sk = 4; if ((d == 16896) || (d> = 16904)) Sk = 5;} else if (c == 3) {/ * Leading zero run length = 7 or 8 * / if ((d <= 1024) || (d == 9216) || ((4168 <= d) && (d <= 8706) && (d! = 4224) && (d! = 8704)) || (flag == 2)) Sk = 3; if (((d == 16896) || (d> = 16904)) || ((1025 <= d) && (d <= 41 64) || (d == 4224))) Sk = 5; if ((d == 8704) || ((8708 <= d) && (d <= 16900) && (d! = 9216) && (d! = 16896) && (flag! = 2)) || (flag == 1) || (d == 4224)) Sk = 4;} else if (c == 4) {/ * Leading zero run length = 9 or 10 * / if ( (d == 8704) || ((8708 <= d) && (d <= 16900) && (d! = 16896) && (flag! = 2)) || (flag == 1)) Sk = 4; if ((d == 16896) || (d> = 16904)) Sk = 5; return Sk; As described above, the auxiliary information recording according to the present invention can add the auxiliary information bit without affecting the main information. Therefore, the main information can be decoded without being affected by the auxiliary information.

For the auxiliary information described above, for example, it is possible to multiplex the switching auxiliary information for each sector which is a data unit recorded in the recording area. For example, as shown in FIG. 12, when there are sector 0, sector 1, sector 2, sector 3, and sector 4 as recording sectors, auxiliary information bits “01”, “00”, “10”,
If "11" and "01" are assigned, the maximum run setting is "1", "0", "2", "3", "1",
As described in the condition 3, the k-limit is “k = 1”.
1 ”,“ k = 10 ”,“ k = 12 does not include 12T ”, and“ k = 12 ”.

FIG. 13 is a block diagram showing an example of the auxiliary information decoder 24 shown in FIG. NRZI demodulation circuit 21 in FIG.
The bit string output from the auxiliary information decoder 2 of FIG.
4 is input to the register 241. Register 241
Shifts the input bit string with a bit synchronization clock longer than the k limit shown in FIG. 12 and supplies it to the pattern comparator 242. The pattern comparator 242 uses k of the input bit string.
Is output to the result output 243.
The result output 243 is a pattern in which k is “11” and k is “1”.
When the 2 "pattern appears, the output is sent to the counter 244.

As a result, k is "1" in the counter 244.
The number of appearances of the pattern of 1 "or the pattern of k being" 12 "is counted, and the count result is supplied to the comparator 246 to be compared with a predetermined reference value 245. k = 10
When a codeword restricted to is found, that is, k
= 11 and k = 12 do not appear, the comparator 246 outputs "00". If k = 11, the comparator 246 outputs "01". When k = 12 and k = 11 do not appear, the comparator 246 outputs "10". If k = 12, the comparator 246 indicates “11”.
Is output.

The reference value 245 is the pattern comparator 24.
It is set to an appropriate value in advance in order to prevent erroneous detection in 2.
Further, the count value of the counter 244 is reset by the sector information detected by detecting a specific sync word pattern once in one sector by the sync detection circuit 23 of FIG. 11, for example.

As described above, the recording and reproducing of the auxiliary information using the k-limit of the highly confidential RLL restriction have been described. Next, a recording medium according to the present invention using this auxiliary information, that is, a so-called blank medium will be described. The medium pre-formatter at the time of manufacturing will be described.

The medium is manufactured by the same process as that of the conventional rewritable recording medium. Initially, the address information used at the time of recording is duplicated by a stamper that is a mold when molding the medium, and then it becomes a medium that can be processed by a formatter through the process of attaching a recording film, a reflective film, a protective film, etc. . In this state, no data is recorded over the entire surface, and the entire surface is unrecorded.

FIG. 14 shows a block diagram of an embodiment of the medium formatter. The medium formatter shown in the figure is a lead-in area 3 of a blank disc 30 which is an example of a recording medium.
In addition to various control information, the auxiliary information (Extra Informatio
n) is used as a key to encrypt and record data, and different ID information assigned to each recording medium is written in the ID information area 32 by an irreversible recording method, and the user data area 33 A blank disc (blank medium) 30 on which nothing is recorded is prepared and shipped.

To further explain the configuration and operation of this medium formatter, the media key 35, which is the key for initially using the medium, differs from the device key block 36 for each device (recorder or playback device). Multiple key information (device key) required for encryption / decryption
Key data (MKB of the medium encrypted by the encryption device 37 by
Media) is generated. Here, the device key block 36 is a set in which a plurality of recording device keys are arranged in a matrix, and one media key 35 is separately encrypted by the encryptor 37 with each device key. Therefore, the same number of pieces of encrypted data (medium key data) as the plurality of device keys forming the device key block 36 are extracted from the encryptor 37 and input to the data processing unit 38.

The data processing unit 38 generates a set (MKB media) in which a plurality of input encrypted data are arranged in order, and records / reproduces restriction information among the plurality of encrypted data as necessary. According to 39, it has a function of replacing a part of the encrypted data with dummy data. As a result, even if decryption is performed with the device key possessed by the device side that performs recording or reproduction on the recording medium on which the dummy data is recorded, the obtained data will be different from the original media key, so that In the device, the dummy data recording medium cannot be used, and it is possible to limit the use of this medium in a specific device.

Further, the data processing unit 38 also has a function of invalidating desired encrypted data among a plurality of encrypted data forming the MKB medium. As a result, even if the encryption / decryption key assigned to a specific device was broken by malicious hacking, it was found that it was broken by replacing the encryption key of the broken device with invalid data. For the medium after the point of time, the security can be improved by invalidating the corresponding device key.

The key data (MKB media) of the medium generated by the data processing unit 38 counters an attempted unauthorized use such as alteration of the key data itself or replacement of false data different from the original key data. Therefore, the data is encrypted by the encryption device 45 with the encryption key (Extra Info. Key) 42 and supplied to the auxiliary information superimposing circuit 40. On the other hand, media-invariant information that you do not want to be easily modified (Media Info.)
41, control information such as disc type and standard version / manufacturing information, and highly confidential information such as recording / playback restriction information 39 among copy protection related information used for encryption of the key data (MKB media) of the medium. Key (E
xtra Info. key) 42 is combined with the adder 43 and supplied to the auxiliary information superimposing circuit 40 as auxiliary information (Extra Information).

The auxiliary information superimposing circuit 40 has the configuration shown in FIG. 2 described above and receives the MKB media encrypted by the Extra Info. Key 42 as the main information and the auxiliary information (Extra Information) from the adder 43. ) Is input, and the auxiliary information is superimposed on the MKB medium by the above-mentioned operation by the recording method of the auxiliary information using the k-limit of the RLL limit. The MKB media that has undergone such processing is integrated with other various control information to become lead-in data, which is further modulated with a predetermined modulation method after adding an error code and the like, and is a blank disc before shipment. It is recorded in advance in the lead-in area 32 of 30.

For the disc on which the recording of the lead-in data is completed, the ID information in which a unique value is assigned to each recording medium, that is, the unique media ID 44 is, for example, a destruction of the reflection film by a laser or an irreversible recording method. The blank disc 30 is written on the market as read-only data and then shipped to the market.

Next, a recording device for the user to record content data on the blank disc 30 will be described.

The recording device is roughly divided into a "content scramble" portion for processing the content data and a "media scramble" portion for processing the data to be recorded on the medium. The content scramble portion is mainly WM (watermark). ) Processing, content scrambling, output limitation of encrypted content data, etc. are performed, and in the media scramble portion, the encrypted content data, which is the output data from the content scramble portion, is scrambled again for media recording and is recorded on the medium. .

First, the structure and operation of the content scramble portion of the recording apparatus will be described with reference to the block diagram of FIG. The content scramble portion of the recording apparatus shown in FIG. 15 is mounted on, for example, an encoder board inside a personal computer. In FIG. 15, in the recording device, a content 50 and an unencrypted content (WM C) in which copy management information (copy control) related to the content 50 is embedded as a watermark (WM).
MI) 51, copy control information (CMI) 52 relating to the content having the same content as the WM, a key for descrambling to use the content (content usage key (Ke
y-contents)) 53, key information (content key) for encrypting the content 50, and a plurality of encryption keys (MKB contents; MKB) generated from a plurality of content usage keys.
), And data such as copy management information (CMI) 55 related to the medium used in the media scramble part.

The WM detection section 56 detects WM (watermark) from the unencrypted content data by a known method such as a digital watermark, and embeds the WM, and the remark section 57 performs W detection.
Re-marking of the WM is performed according to a predetermined rule according to the copy control information (CMI) related to the content included in the data detected from M.

On the other hand, the key data of the above contents (MKB contents: MKB contents: a set of a plurality of encryption keys in which the contents key is encrypted by many contents usage keys).
The MKB) 54 is distributed by the copyright holder together with the content 50.

In order to protect the copyrighted work, the copyright holder sets invalid key data of a part corresponding to the encryption key of the device broken by hacking or the like among a plurality of encryption keys constituting the MKB content 54 as invalid data ( Dummy data)
It is also possible to make the content unusable afterwards by a device that is broken by hacking or the like by replacing the content with.

The distributed MKB content 54 is decrypted by the encryptor 58 with the content use key (key content) 53 assigned to each content scrambled portion of the recording device, and is used as a content key for content encryption. It This decryption work cannot be done with an unauthorized device, so the correct content key cannot be obtained, and even if the unauthorized key is used to forcibly record, it does not match the legitimate content key obtained on the playback side, resulting in decryption. Since the data is different, the content cannot be used.

If the obtained content key belongs to a device or a user when the content is used,
It is input to the encrypting device 59 and converted into an intermediate key unique to each device or user by the ID held by the device or the user identification ID recorded in the IC card owned by the user. Further, in order to make the use of the content belong to the medium, for example, in order to prevent the illegal use of the data on the medium, a unique intermediate key is obtained for each medium by the medium-unique ID read in advance from the medium. As a result, copying between media is possible (free), but the device that the user plays, or the recorded media where the user is restricted,
Alternatively, it is possible to realize two recorded media which cannot be copied to other media but whose contents are not restricted by the device or the user.

Next, in order to prevent alteration of the copy control information, the intermediate key is supplied to the encryption device 60, where the above-mentioned content data is transferred to the copy control information (CMI) relating to the content.
) 52, it is converted into a key and supplied to the content scrambler 61, and the non-encrypted content is content scrambled (content encrypted). By processing the intermediate key with copy control information (CMI) and making it part of the key, it is possible to prevent unauthorized use by modifying the copy control information (CMI).

The encrypted content data from the content scramble 61 and the copy control information (CMI) related to the content, which are produced by the above procedure, are input to the adder 62 and combined to form, for example, sector data.
Then, by collecting a plurality of sector data, one content data is completed as one file, for example. This completes the file-level data to be recorded on the medium.

The completed content scrambled data is subjected to the next step "media scramble" for recording on the medium, but the content copy control content detected from the WM included in the non-encrypted content data, Unauthorized use such as inconsistency in the content copy control input from the outside, or inability to unlock the MKB content 54 distributed from the copyright holder with the content usage key (key content) 53 assigned to the user , Or if the data has been tampered with, there is no right to use the content, so the output limiter 64 limits the output of the encrypted content data so that the data is not output from the content scramble part to the media scramble part. Done in.

The file level data passed through the output limiter 64 is processed by the mutual authentication and bus encryption unit 66 in the device.
In order to prevent transfer to an unauthorized party, bus encryption is performed to prevent data leakage such as authentication of the transfer party and stealing of bus data.

When the present invention is applied to electronic distribution or package media, the copyright holder side must complete the procedure of the content scramble portion so far so that encrypted data can be distributed to users or a media manufacturer. It may be supplied as a package medium.

Next, the configuration and operation of the media scramble portion of the recording apparatus will be described with reference to the block diagram of the embodiment shown in FIG. The media scramble portion of the recording device shown in FIG. 16 is, for example, a DVD drive mounted on a personal computer. In the media scramble part, scrambling for media recording is performed again and the result is recorded on the medium. The media scramble part is composed of a "media scramble part", a "recording restriction part on medium", a "superimposing / reproducing part of auxiliary information" and a "recording / reproducing part on medium".

Prior to recording, the media scramble portion of the recording apparatus is the lead-in area 7 on the optical disc 70.
Key data (MKB) encrypted with the key (Extra Info. Key) recorded in various control information data and auxiliary information
While reading the medium), the auxiliary information (Extra Information) superposed by the recording method of the auxiliary information recorded at the same time using the k limit of the RLL limit,
Information which is read by the auxiliary information reproducing / separating circuit 74 having the configuration shown in FIG. 11 and recorded in the auxiliary information (Me
dia Info.) 76, for example, control information such as disc type and standard version / manufacturing information, etc., which is highly confidential among copy protection related information, such as recording / playback restriction information and medium key data (MKB media) protection Extract information such as the encryption key.

Next, the encrypted key data (MKB medium) of the data in the lead-in area 72 is decrypted by the encryptor 77 with the Extra Info. Key 75 extracted from the auxiliary information, and the restored MKB medium is restored. The recording device key 79 is supplied to the encryptor 78, and is uniquely assigned to the media scramble unit of each recorder.
Solve at and get a media key for media scrambling.

The obtained media key is used for encryption of the content output from the content scramble part. At that time, it is possible to illegally use the content data by copying the entire data on the disc to another disc. In order to prevent it, I
The recording medium 1 is shipped to the D information area 71 when the blank disc is shipped.
Unique ID information (read-only), in which the unique ID information assigned to each sheet is written in an irreversible recording method, is supplied to the encryption device 80, and a unique key that differs from media key to media Get the key Furthermore, in order to prevent the modification of the copy control information, this unique key is used as the copy control information (CMI
) To obtain a key for media scrambling.

On the other hand, the content-encrypted data output from the content scramble portion of FIG. 15 is, for example, ATAPI (AT attachment packet interfa).
ce) and SCSI (small computer system interface)
16 is input to the mutual authentication and bus encryption / decryption unit 82 in the device of the media scramble part of FIG. 16, and the authentication of the transfer partner and the bus encryption / decryption are performed here.

Mutual authentication and bus encryption / decryption unit 8 in the device
The encrypted content data taken out from No. 2 is supplied to the media scramble 83, where it is again scrambled (encrypted) with the media scramble key output from the encryptor 81, and finally recorded on the medium. The data will be

The data to be recorded on the disk is now complete. However, first, prior to recording, the recording apparatus may have conflicting recording / playback restriction information and media attributes extracted from the auxiliary information in the lead-in area 72 of the optical disc 70, which is a blank disk, with the conditions to be recorded, or the lead-in area. If the MKB media recorded in 72 cannot be unlocked with the media usage key (Key media) assigned to the recording device, it is determined that there is unauthorized use or data tampering, and the recording limiter 84 sets the media Data output from the scramble 83 to the auxiliary information superimposing circuit 85 is cut off, and data recording is not performed on the disc 70 (recording data output restriction).

If it is judged that recording is possible after the above verification, the recording limiter 84 applies the encrypted content data from the media scramble 83 to the auxiliary information superimposing circuit 85.
Output to.

On the other hand, the copy control information (CMI) relating to the medium from the mutual authentication and encryption / decryption unit 82 in the device.
And a key (Extra Info.) Recorded in various control information data and auxiliary information in the lead-in area 72 on the optical disc 70 read by the auxiliary information reproducing / separating circuit 74.
The key 75 is integrated in the adder 86 as auxiliary information of the user data area and is input to the auxiliary information superimposing circuit 85.

The auxiliary information superimposing circuit 85 has the circuit configuration shown in FIG. 2 and receives the encrypted content data as main information and the media encryption key from the adder 86 as auxiliary information and is encrypted. The content data is added with an error code or the like, then modulated by a predetermined modulation method, and recorded in the user data area 73 of the optical disc 70.
At this time, the auxiliary information in the user data area 73 is recorded over the recording data by the auxiliary information recording method using the k limit of the RLL limit.

Next, the reproducing apparatus of the present invention will be described. The reproducing device reproduces the disc on which the content data has been recorded by the recording device. The playback device is roughly divided into a "media descramble part" and a "content descramble part". In the media descrambling part, reproduction of auxiliary information (Extra Information), media descrambling, and output limitation of media data are performed, and in the content descrambling part, decryption processing of encrypted content data, WM detection, and content data Output is limited.

FIG. 17 is a block diagram of the media descrambling portion of the reproducing apparatus according to the present invention. First, Fig. 1
7, the structure and operation of the media descrambling portion of the reproducing apparatus will be described. The media descrambling portion of the reproducing apparatus is a key (Extra I) recorded in various control information data and auxiliary information (Extra Information) of the user data area 93 on the optical disc 90 which has been recorded first.
The key data (MKB medium) encrypted by the nfo. key) is read and input to the auxiliary information separation circuit 94, and is superimposed by the auxiliary information recording method using the k limit of the RLL limit recorded at the same time. Auxiliary information (Extr
a Information) and the medium-invariant information (Media Info) 95 recorded in the auxiliary information, for example, control information such as the disc type, the version of the standard, the manufacturing information, and the copy protection-related information having high confidentiality, for example. Information such as recording / playback restriction information and an encryption key (Extra Info. Key) 96 used for protection of the key data (MKB medium) of the medium is extracted.

Next, of the data recorded in the lead-in area 92 of the recorded optical disc 90, the encrypted key data (MKB media) is extracted from the auxiliary information by the encryption device 97. (Extra Info. Key) 96
Decrypt with. The restored MKB media is encrypted by the encryption device 9
7 is supplied to the encryption device 99, where one recording device 1
A media key for media scrambling can be obtained by decrypting with the recording device key 98 uniquely assigned to the media scrambling unit of the table.

The obtained media key is supplied to the encryption device 100, where the read-only unique media ID, which is the ID information reproduced from the ID information area 91 of the optical disc 90, is assigned to each recording medium. It is processed by (ID media) and a different unique key is obtained for each same media as when recording. This unique key is supplied to the encryption device 101, where the copy control information (CMI) relating to the medium taken out from the auxiliary information separation circuit 94.
The same key for media descrambling as that at the time of recording is obtained by being processed by.

With this key for media descrambling,
By decrypting the data read from the user data area 93 of the optical disc 90 and input to the media descramble 102 through the auxiliary information separation circuit 94, the same data as the encrypted content data output from the content scramble part of the recording device can be obtained. can get.

Copy control information (CMI) regarding the medium recorded in the auxiliary information and the media descrambling 1
The copy control information (CMI) included in the data encrypted and decrypted in 02 is compared in the comparison determination unit 103, and the output limiter 104 passes or blocks the data from the media scramble 102 according to the comparison result. That is, if the optical disc 90 is a properly recorded disc, copy control information (CM
I) and the copy control information (CMI) included in the data encrypted / decrypted by the media descramble 102 should match. If they do not match, the data may be tampered with or illegally copied in the process. Therefore, when the comparison determination unit 103 obtains a non-coincidence comparison result, the mutual authentication and bus encryption unit 10 of the data reproduced by the media data output limiter 104 in the device.
5 is blocked and is not sent to the content descramble part (reproduction data output restriction).

Next, the structure and operation of the content descrambling portion of the reproducing apparatus according to the present invention will be described with reference to the block diagram of the embodiment shown in FIG. In the content descrambling portion of the reproducing apparatus shown in FIG. 18, decryption processing of encrypted content data output from the media descrambling portion of the reproducing apparatus shown in FIG. 17, WM detection and output limitation of the content data by the WM detection are performed. , Finally, the user can use the content data.

That is, in FIG. 18, the encrypted data transferred from the media descrambling portion of the playback device is input to the mutual authentication and bus encryption / decryption unit 110 in the device to be authenticated and transferred to the bus encryption / decryption device. After being encrypted, the MKB content including a plurality of encryption keys is input to the content descramble 111, the encryption device 112, and the like.

The encryption device 112 decrypts the MKB content with the content usage key (key content) 113 assigned to each playback device to obtain a content key for content decryption. At this time, even if there is no corresponding content usage key (key content) in the device that is subject to the reproduction restriction, and even if an unauthorized device has the content usage key (key content) 113, the copyright holder is already on the recording side. Since the operation for invalidating this key is performed, the decryption operation cannot be performed normally, the correct content key cannot be obtained, and the content encryption performed on the recording side cannot be decrypted and the content cannot be used.

Next, the obtained content key is the encryption device 11 when the use of the content belongs to the device.
ID of device in 4 or I owned by user
It is processed with the user identification ID 115 recorded on the C card or the like and restored to the intermediate key. As a result, even if the data is copied to a different medium, it can be used normally because the device or user is legitimate. Further, when the use of the content belongs to the medium, a unique intermediate key is obtained from the medium-unique ID (ID medium) read in advance from the medium. As a result, it is possible to prevent the reproduction of the medium in which the recorded data is illegally copied.

The obtained unique intermediate key is supplied to the encryption device 116, where it is processed with the copy control information (CMI) relating to the content included in the data that has undergone the media descrambling, and the content encryption / decryption is performed. It is supplied to the content descrambler 111 after being used as the content descramble key of No. 1, and the content data is decrypted. If the copy control information (CMI) related to the content contained in the data of the disc being played back is modified, the content scramble key at the time of recording and the content descramble key at the time of playback will be different, so the content data will be correct. Will not be able to restore.

Although the content data decrypted as described above can be used, the data extracted from the content descramble 111 is WM & CMI detecting / determining section 117.
The copy control information (WM-CMI) related to the content embedded in the WM and the copy control information (CMI) transmitted together with the content are inconsistent in order to verify whether the data decoded here is correct. Determine if there is.

If the disc is a properly recorded disc, the copy control information (CMI) regarding the content in the content data and the copy control information (WM-CM) detected from the WM are detected.
I) should match, and if they do not match, data has been tampered with or illegally copied, so the data reproduced by the media data output restrictor 118 is blocked from being transmitted to the next stage, Is not output to. Similarly, MKB
Even if the content cannot be unlocked with the content usage key (key content) assigned to each playback device, the output is restricted and output of the playback data to the next stage is stopped by the output limiter 118.

The reproduction content data extracted from the output restrictor 118 is supplied to the mutual authentication and bus encryption unit 119 with other equipment, and the authentication and bus encryption are performed with the other equipment to perform reproduction of the reproduction apparatus. Output to external equipment.

The present invention is not limited to the above embodiment, and for example, in FIG. 3, RLL (2,10) is used.
The description has been made by taking the limited coding table of 8-15 modulation as an example, but the application is easy if the similar function can be realized by using another coding table. Further, if the RLL restriction is variable as described above even if the block code is not based on the encoding table, the present invention can be applied.

[0136]

As described above, according to the present invention,
(1) A method of recording auxiliary information using the k-limit of the highly confidential RLL limit, (2) a technique for separating the content use and the media use, and performing separate encryption, (3) content by the copyright holder Content usage key management (MKB content) that can reflect availability, (4) Media usage key management (MK) that enables control over media usage
(B medium), (5) output cutoff and recording stop function on medium by comparing copy control information of both content and medium, (6) compare copy control information embedded in content with copy control information transmitted with content However, if they do not match, the function to stop the output of the content, (7) compare the copy control information in the playback data with the copy control information in the auxiliary information, and if they do not match, to shut off the playback data output from the medium (8) A media key and ID data different for each medium are combined to obtain a unique intermediate key that is different for each medium, and the obtained intermediate key is used for encryption / decryption, so that the entire data on the disc is Technology to prevent illegal use of content data by copying to disk, (9) Device unique ID
/ Copying between media is possible by combining the ID of the right-of-use person to obtain a unique intermediate key for each device or user, and using it for encryption / decryption (free), but the device or user to play (10) Technology for preventing alteration of copy control information by combining the above key with copy control information for encryption / decryption, (11) Authentication between content scrambling and content scrambling Since it uses a technology such as bus protection and bus encryption technology, it is possible to realize both advanced and flexible copyright protection and medium usage restrictions, which are not available in conventional copyright protection methods. .

[Brief description of drawings]

FIG. 1 is a configuration diagram of an embodiment of a recording medium according to the present invention.

FIG. 2 is a block diagram of an embodiment of an auxiliary information superimposing circuit of a main part of the recording apparatus according to the present invention.

FIG. 3 is a block diagram of an example of an 8-15 modulator in FIG.

FIG. 4 is a diagram (No. 1) showing an example of a coding table used in the 8-15 modulator in FIGS. 2 and 3;

FIG. 5 is a diagram (part 2) showing an example of an encoding table used in the 8-15 modulator in FIGS. 2 and 3;

FIG. 6 is a diagram (No. 3) showing an example of the encoding table used in the 8-15 modulator in FIGS. 2 and 3;

FIG. 7 is a diagram (No. 4) showing an example of the encoding table used in the 8-15 modulator in FIGS. 2 and 3;

FIG. 8 is a diagram (No. 5) showing an example of the encoding table used in the 8-15 modulator in FIGS. 2 and 3;

9 is a flowchart (No. 1) for explaining the operation of the 8-15 modulator in FIG.

10 is a flowchart (No. 2) for explaining the operation of the 8-15 modulator in FIG.

FIG. 11 is a block diagram of an embodiment of an auxiliary information reproducing / separating circuit which constitutes a main part of the reproducing apparatus according to the present invention.

FIG. 12 is a diagram showing an example of the relationship between recording sectors and maximum run settings and the like.

13 is a configuration diagram of an example of an auxiliary information decoder in FIG.

FIG. 14 is a configuration diagram of an embodiment of a medium formatter which is a recording device according to the present invention.

FIG. 15 is a block diagram of an embodiment of a content scramble portion of the recording device according to the present invention.

FIG. 16 is a block diagram of an embodiment of a media scramble portion of a recording device according to the present invention.

FIG. 17 is a block diagram of an embodiment of a media descrambling part of the reproducing apparatus according to the present invention.

FIG. 18 is a block diagram showing an embodiment of a content descrambling part of the reproducing apparatus according to the present invention.

[Explanation of symbols]

1,70 Optical disc 2, 31, 71, 91 ID information area 3, 32, 72, 92 Lead-in area 4, 33, 73, 93 User data area 5 Lead-out area 10, 40, 85 Auxiliary information superposition circuit 12 8-15 Modulator 13 Encoding table 14 NRZI conversion circuit 18 recording media 21 NRZI demodulation circuit 24 Auxiliary information decoder 25 word register 26 State calculator 27 Codeword Case Detection Circuit 29 Decryption table 30 blank discs 35 Media key 36 device key block 38 Data processing unit 39 Recording / playback restriction information 42, 75 Extra Info. Key 50 contents 53 Content usage key 56 WM detector 61 Content Scramble 64, 104, 118 Output limiter 74 Auxiliary information reproduction / separation circuit 79 Recording device key 83 Media Scramble 84 Record limiter 90 Recorded optical disc 94 Auxiliary information separation circuit 102 Media Descramble 111 Content Descramble 113 Content usage key 121 Code Word Choice Presence / Absence Detection Circuit 122 Address calculator / sync word generator 123, 125 path memory 124, 126 DSV operation memory 127 DSV value comparison unit 128 memory control / code output section

─────────────────────────────────────────────────── ─── Continuation of front page (51) Int.Cl. ⁷ Identification code FI theme code (reference) G11B 20/10 301 G11B 20/10 301Z 20/12 20/12 H03M 7/14 H03M 7/14 B (72 ) Inventor Takeshi Oki 3-12 Moriya-cho, Kanagawa-ku, Yokohama, Kanagawa F-term (reference) within Victor Company of Japan, Ltd. 5D044 AB05 AB07 BC04 CC04 DE50 DE53 EF05 FG18 GK12 GK17 GL21 GL28 HL02 5D090 AA01 BB04 CC14 DD03 DD05 FF09 GG16

Claims (15)

[Claims] 1. A recording medium provided with a read-only first area that cannot be modified by a user and write-only or rewritable second and third areas, wherein the first area is , Unique ID information different for each medium is recorded in advance, and a plurality of first IDs are recorded in the second area.
Run length RLL as the main information
The auxiliary information, which is modulated by a predetermined modulation method that satisfies the (d, k) restriction, and which includes a first encryption key for protecting the first encryption key information and predetermined control information, is the RLL ( d, k) The k limit in the limit is switched and pre-recorded by being superposed on the plurality of modulated first encryption key information, and the third area can be recorded and reproduced by the user. Recording medium, which is a non-recorded state in the initialized state. 2. The content data is encrypted by the first data obtained by decrypting a plurality of second encryption key information distributed by the copyright holder with a first decryption key indicating the usage right of the content data to be recorded. Encryption or decryption (first encryption) and encryption of the plurality of first encryption key information reproduced from the second area with the first encryption key reproduced from the second area. The encrypted content data is generated by the third data obtained by encrypting the second data obtained by decrypting the obtained information by the second decryption key unique to the recording / reproducing apparatus with the ID information reproduced from the first area. Further, the encrypted or decrypted (second encrypted) content data is used as main information, the first encryption key and copy control information of the recording medium are used as auxiliary information, and the main information is run length RLL (d). , K) is modulated by a predetermined modulation scheme that satisfies the constraint, and the auxiliary information is the RL.
2. The recording medium according to claim 1, wherein the k limit in the L (d, k) limit is switched to be recorded in the third area by being superimposed on the modulated main information. 3. A recording method for recording content data on the recording medium according to claim 1 or 2, wherein a plurality of second encryption key information distributed by the copyright holder is recorded on the content data. A first encryption or a decryption (first encryption) of the content data by the first data decrypted by the first decryption key indicating the usage right
And a second step of encrypting the plurality of first encryption key information reproduced from the second area of the recording medium with the first encryption key reproduced from the second area. , The information encrypted in the second step is decrypted by the second decryption key unique to the recording / reproducing apparatus to obtain the second information.
And a fourth step of obtaining third data obtained by encrypting the second data with the ID information reproduced from the first area of the recording medium, Data, the fifth step of further encrypting or decrypting the encrypted content data obtained in the first step (second encryption); and the fifth step of being encrypted or decrypted in the fifth step. Using the content data as main information and the first encryption key and copy control information of the recording medium as auxiliary information, the main information is modulated by a predetermined modulation method that satisfies a run length RLL (d, k) restriction. At the same time, the auxiliary information switches the k limit in the RLL (d, k) limit to generate a signal superimposed on the modulated main information to generate the third region of the recording medium. Recording method characterized by comprising a sixth step of recording the. 4. The copy control information of the recording medium, which is defined in advance by the plurality of first encryption key information, and the copy control information of the content data to be recorded, match the predetermined condition. It is determined whether or not to match, and only when a match determination result is obtained, further encryption or decryption (second encryption) of the encrypted content data is performed in the fifth step, and the match determination result is obtained. 4. The recording method according to claim 3, further comprising a seventh step of stopping the recording when the above is not obtained. 5. The first step comprises recording information recorded in a recording medium or a device in advance, user identification information stored in a portable storage medium owned by the user, or distributed. 5. The recording method according to claim 3, wherein the content data is encrypted or decrypted (first encryption) by an intermediate key obtained by encrypting the first data with the distributed information. . 6. A recording device for recording content data on the recording medium according to claim 1 or 2, wherein the recording signals of the first area and the second area of the recording medium are reproduced. Utilization of content data for recording the plurality of first encryption key information, the reproduction means for reproducing the first encryption key information and the ID information, and the plurality of second encryption key information distributed by the copyright holder A first encryption or a decryption (first encryption) of the content data by the first data decrypted by the first decryption key indicating the right
And an information obtained by encrypting the plurality of first encryption key information from the reproducing means with the first encryption key, by a second decryption key unique to the recording / reproducing apparatus. The second data, and then obtains the third data by encrypting the second data with the ID information from the reproducing means; and the first data by the third data. Second encryption means for further encrypting or decrypting (second encryption) the encrypted content data obtained by the encryption means, and content encrypted or decrypted by the second encryption means. Using the data as the main information and the first encryption key and the copy control information of the recording medium as auxiliary information, the main information is modulated by a predetermined modulation method that satisfies the run-length RLL (d, k) restriction. , The auxiliary information The RLL (d, k) switches the k limitations in restriction,
A recording signal generating unit for generating a recording signal superimposed on the modulated main information, and the recording signal generated by the recording signal generating unit is applied to the third area of the recording medium. A recording device for recording on. 7. Copy control information of a recording medium, which is specified in advance by the plurality of first encryption key information obtained from the reproducing means, and copy control information of content data to be recorded are set in advance. It is determined whether or not it matches the specified condition, and only when a result of the determination is obtained, the second encryption means further encrypts or decrypts the encrypted content data (second encryption). And an output limiting means for stopping the recording by blocking the transmission of the encrypted content data to the second encryption means when the determination result of the coincidence is not obtained. Item 6. The recording device according to item 6. 8. The first encryption means is recorded information recorded in a recording medium or a device in advance, or user identification information stored in a portable storage medium owned by the user, or 8. The encryption or decryption (first encryption) of the content data is performed with an intermediate key obtained by encrypting the first data with the delivered distribution information. Recording device. 9. A reproducing method for reproducing content data from the recording medium according to claim 2, wherein the first reproducing information is reproduced from each of the first area and the second area of the recording medium. A second step of reproducing data in which auxiliary information is superimposed on encrypted content data from the third area of the recording medium to separate the encrypted content data and the auxiliary information. And encrypted with the plurality of first encryption key information reproduced from the second area in the first step with the first encryption key in the auxiliary information separated in the second step. The third step of decrypting the fourth data obtained by decrypting or decrypting it with a third decryption key unique to the reproducing device to obtain fifth data; and the fifth step of converting the fifth data into the first step. In front A fourth step of obtaining sixth data by encrypting or decrypting with the ID information reproduced from the first area; and by the sixth data, the encrypted data obtained in the second step. The fifth step of encrypting and decrypting the content data, and the seventh decryption of the data obtained in the fifth step by the fourth decryption key indicating the usage right of the content data to be reproduced. And a sixth step of encrypting and decrypting the encrypted content data obtained in the fifth step with the above data. 10. The first copy control information of the content data in the data obtained in the fifth step, and the second copy of the content data embedded in the content data obtained in the sixth step. The seventh step of detecting the control information, the eighth step of determining whether the first and second copy control information match under a predetermined condition, and the seventh step of matching The content data obtained in the sixth step is output only when the determination result is obtained, and the output of the content data obtained in the sixth step is stopped when the determination result of the match is not obtained. The reproducing method according to claim 9, further comprising a ninth step. 11. The sixth step comprises recording information recorded in a recording medium or a device in advance, or user identification information stored in a portable storage medium owned by the user, or distributed. 11. The encrypted content data obtained in the fifth step is encrypted and decrypted by an intermediate key obtained by encrypting the seventh data by the distributed information. How to play. 12. A reproducing apparatus for reproducing content data from the recording medium according to claim 2, further comprising reproducing means for reproducing recording key information from the first area and the second area of the recording medium, respectively. Reproducing / separating means for reproducing data in which auxiliary information is superimposed on encrypted content data from the third area of the recording medium to separate the encrypted content data and the auxiliary information. The first encryption key in the auxiliary information separated by the reproducing / separating unit is encrypted or decrypted by the plurality of first encryption key information reproduced from the second area by the reproducing unit. The fourth data thus obtained is decrypted by a third decryption key unique to the reproducing device to obtain fifth data, and the fifth data is reproduced from the first area by the reproducing means. Data generating means for obtaining sixth data by encrypting or decrypting the encrypted ID information, and decrypting the encrypted content data obtained by the reproducing / separating means by the sixth data. The first encryption / decryption means and the fourth decryption key indicating the usage right of the content data to be reproduced, and the seventh decryption means for decrypting the data obtained by the first encryption / decryption means. And a second encryption / decryption unit that obtains content data by encrypting and decrypting the encrypted content data obtained by the first encryption / decryption unit with data. 13. Content embedded in the first copy control information of the content data in the data obtained by the first encryption / decryption means and the content data obtained by the second encryption / decryption means. Detecting means for respectively detecting the second copy control information of the data, judging means for judging whether or not the first and second copy control information match under a predetermined condition, and the judging means for matching The content data from the second encryption / decryption means is output only when a determination result is obtained, and the content data is output from the second encryption / decryption means when no match determination result is obtained. 13. The reproducing apparatus according to claim 12, further comprising output limiting means for stopping. 14. The second encryption / decryption means is recorded information recorded in a recording medium or a device in advance, or user identification information stored in a portable storage medium owned by the user, Alternatively, depending on the distributed information distributed, the seventh
The intermediate key obtained by encrypting the data of
14. The reproducing apparatus according to claim 12 or 13, characterized in that the encrypted content data obtained in the step is encrypted and decrypted. 15. The reproducing means, the reproducing / separating means,
The data generation means and the first encryption / decryption means constitute a media descramble portion, and the second encryption / decryption means, the detection means, the determination means and the output restriction means are content descramble portions. Configure
The media descrambling part and the content
15. The mutual authentication and bus encryption unit in a device for authenticating a transfer partner and encrypting a bus is provided between the descramble part and the descramble part. Playback device.