JP2005056539A - Information processor, information recording medium, information processing method, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide constitution and a method by which utilizing an information recording medium in which irregular contents are stored can be prevented. <P>SOLUTION: When contents stored in an information recording medium is reproduced, either of first ID information including no intrinsic discrimination information of the information recording medium or second ID information including intrinsic discrimination information of the information recording medium is read, verification of either of (a) data verification processing for the first ID information or (b) the data verification processing for the second ID information, and revoke verification processing of the information recording medium based on discrimination information of intrinsic information recording medium included in the second ID information is performed, contents reproduction processing is performed making conclusion of verification as conditions. Thereby, in a reproducer having no revoke list and also in a reproducer having the revoke list, Contents reproduction propriety determination based on fixed verification processing can be performed. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus, an information recording medium, an information processing method, and a computer program. More specifically, content usage control is performed by storing identification information in various content recording media such as CD, DVD, MD, etc., and verifying the identification information or revocation verification based on a revocation list as a list of unauthorized recording media. The present invention relates to an information processing apparatus, an information recording medium, an information processing method, and a computer program that prevent flooding and use of a recording medium storing illegally copied content.

  Various software data (hereinafter referred to as content) such as audio data such as music, image data such as movies, game programs, and various application programs are recorded on a recording medium such as a DVD (Digital Versatile Disc). , MD (Mini Disc), and CD (Compact Disc) can be stored as digital data. In recent years, a disc capable of high-density recording using a blue laser has been developed, and digital contents are stored in these various information recording media (recording media) and provided to users. A user plays back and uses content on a playback device such as a personal computer (PC) or disc player.

  Many contents, such as music data and image data, generally have distribution rights or the like held by the creator or seller. Therefore, when distributing these contents, it is common to adopt a configuration that restricts the use of the contents, that is, permits the use of the contents only to authorized users and prevents unauthorized copying or the like. It is the target.

  According to digital data recording / playback processing, recording and playback can be repeated without degrading images and sound, and distribution of so-called pirated discs in which content is copied to a data recordable medium such as a CD-R. Such a problem has occurred.

  In particular, a large-capacity recording medium such as a DVD or a recording medium using a blue laser recording method capable of recording a higher capacity can record data for one movie to several movies on one medium. Is possible. As content can easily be recorded as digital information, the problem of flooding of illegal copies often occurs, and the problem of obstructing the interests of copyright holders and distributors of content becomes large. ing. Under such circumstances, how to prevent illegal copying and protect the interests of copyright holders and distribution rights holders is an important issue. When information recording media illegally copied are distributed in the market, the profits of copyright holders of various contents such as music and movies, or legitimate sales rights holders, etc. are harmed.

  The present invention has been made in view of the above-mentioned problems, and an information processing apparatus and an information recording that can restrict the reproduction of content from the information recording medium illegally copied and the execution of content use. It is an object to provide a medium, an information processing method, and a computer program.

  The present invention stores identification information in various content recording media such as CD, DVD, MD, etc., and performs content usage control based on identification information verification processing or a revocation list as a list of unauthorized recording media. Makes it possible to check an information recording medium such as a CD-R storing illegally copied content in an information recording medium having various different data storage modes and an information processing apparatus as a playback device having various different configurations and processing capabilities. Information processing apparatus, information recording medium, information processing method, and computer capable of restricting reproduction of content from information recording medium illegally copied and execution of content usage by controlling usage・ The purpose is to provide a program.

The first aspect of the present invention is:
An information processing apparatus that executes content reproduction processing from an information recording medium storing content,
Read at least one of the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium from the information recording medium,
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
An information processing apparatus having a configuration in which the verification process of any one of a) and b) is executed, and the reproduction process of the content stored in the information recording medium is executed on the condition that either verification is established is there.

  Furthermore, in one embodiment of the information processing apparatus of the present invention, the first ID information not including identification information unique to the information recording medium includes a title specific information part set corresponding to the title of the information recording medium, a dummy Including dummy part information composed of data and an authenticator as a data falsification verification value, wherein the information processing apparatus includes at least a dummy part verification as to whether or not the dummy part is data of a prescribed format, and the authenticator And a configuration for executing reproduction processing of content stored on the information recording medium on condition that both verifications are satisfied.

  Furthermore, in an embodiment of the information processing apparatus of the present invention, the second ID information including identification information unique to the information recording medium includes a title specific information part set corresponding to the title of the information recording medium, and an information recording An information recording medium unique identification information part composed of medium unique identification information and an authenticator as a data falsification verification value, and the information processing apparatus is such that at least the information recording medium unique identification information part is data in a prescribed format Information recording medium unique identification information part verification and data verification based on the authenticator are executed, and the information recording medium unique identification information included in the verified second ID is stored in the information processing apparatus. The revocation verification of whether or not the information is recorded in the information recording medium revocation list is executed. There the condition that it is determined, characterized in that it has a configuration for executing playback processing of content stored in the information recording medium.

  Furthermore, in an embodiment of the information processing apparatus of the present invention, the information processing apparatus has a memory that stores an information recording medium ID revocation list that is a list of information recording medium unique identification information determined to be illegal. The information recording medium unique identification information stored in the information recording medium and the revocation information recording medium ID described in the information recording medium ID revocation list stored in the memory are collated, and the information recording medium is The content reproduction processing is executed on condition that the stored information recording medium unique identification information does not match the revocation information recording medium ID described in the information recording medium ID revocation list.

  Furthermore, in one embodiment of the information processing apparatus of the present invention, the information processing apparatus executes a falsification verification process of the information recording medium ID revocation list stored in the information recording medium, and determines that there is no falsification. The version of the information recording medium ID revocation list stored in the memory is compared, and the version of the information recording medium ID revocation list stored in the information recording medium is the information recording medium ID revocation list stored in the memory. When the version is newer than the above version, the list update process is executed to store the information recording medium ID revocation list stored in the information recording medium in the memory.

Furthermore, in an embodiment of the information processing apparatus of the present invention, the information processing apparatus includes a second ID information stored in the information recording medium set in the information processing apparatus, the second ID information including identification information unique to the information recording medium. Determine whether it is a second generation information medium or a first generation information medium storing only the first ID information that does not include identification information unique to the information recording medium, and based on the determination result,
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
The configuration is characterized in that the verification process of either a) or b) is selected and executed.

Furthermore, the second aspect of the present invention provides
An information recording medium storing content,
As first ID information not including identification information unique to the information recording medium, a title specific information part including title specific information set corresponding to the title of the information recording medium, a dummy information part including dummy data, and data The information recording medium has a configuration in which ID information including an authenticator as a falsification verification value is stored.

  Furthermore, in one embodiment of the information recording medium of the present invention, the dummy information stored in the dummy information part is configured to include dummy information identification data that can be identified as dummy information.

  Furthermore, in one embodiment of the information recording medium of the present invention, the dummy information identification data is identification data that differs for each information recording medium of a different category.

Furthermore, the third aspect of the present invention provides
An information recording medium storing content,
Information recording medium comprising title specific information part including title specific information set corresponding to the title of the information recording medium as second ID information including identification information specific to the information recording medium, and identification information specific to the information recording medium The information recording medium has a configuration in which ID information including a unique identification information part and an authenticator as a data falsification verification value is stored.

  Furthermore, in an embodiment of the information recording medium of the present invention, the information recording medium unique identification information stored in the information recording medium unique identification information part includes identification data that can be identified as information recording medium unique identification information. It is the structure which contains.

  Furthermore, in an embodiment of the information recording medium of the present invention, the information recording medium further includes an information recording medium ID that is an identifier unique to the information recording medium, and a list of information recording medium IDs determined to be illegal. A certain information recording medium ID revocation list is stored.

Furthermore, the fourth aspect of the present invention provides
An information processing method for executing content reproduction processing from an information recording medium storing content,
An ID reading step of reading either the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium from the information recording medium;
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
a verification processing step for executing the verification processing of either a) or b);
A content reproduction step of executing a reproduction process of the content stored in the information recording medium on condition that the verification of either a) or b) in the verification processing step is established;
There is an information processing method characterized by comprising:

  Furthermore, in one embodiment of the information processing method of the present invention, the first ID information not including identification information unique to the information recording medium includes a title specific information part set corresponding to the title of the information recording medium, a dummy Dummy part information including data and an authenticator as a data falsification verification value, and the verification processing step includes dummy part verification of whether or not at least the dummy part is data in a prescribed format, and the authenticator The data verification based on the information recording medium is executed, and the stored content reproduction process of the information recording medium is executed on condition that both verifications are satisfied.

  Furthermore, in one embodiment of the information processing method of the present invention, the second ID information including identification information unique to the information recording medium includes a title specific information part set corresponding to the title of the information recording medium, and an information recording An information recording medium unique identification information part comprising medium unique identification information and an authenticator as a data falsification verification value, and at least the information recording medium unique identification information part is data in a prescribed format in the verification processing step Whether or not the information recording medium unique identification information part verification and data verification based on the authenticator are performed, and the information processing method further includes an information recording medium included in the verified second ID Revocation verification is performed to check whether the unique identification information is recorded in the information recording medium revocation list stored in the information processing apparatus. A revocation verification step, on the condition that validity has been determined the information recording medium based on each verification, and executes the reproduction of content stored in the information recording medium.

  Furthermore, in an embodiment of the information processing method of the present invention, the revocation verification step is described in information recording medium unique identification information stored in the information recording medium and an information recording medium ID revocation list stored in the memory. Further, this is a step of executing a collation process with the revoke information recording medium ID.

  Furthermore, in an embodiment of the information processing method of the present invention, the information processing method further executes a falsification verification process of the information recording medium ID revocation list stored in the information recording medium, and determines that there is no falsification. The information recording medium ID revocation list stored in the memory is subjected to version comparison, and the version of the information recording medium ID revocation list stored in the information recording medium is stored in the memory. The method includes a step of executing a list update process for storing the information recording medium ID revocation list stored in the information recording medium in the memory when the version is newer than the version with the list.

Furthermore, in an embodiment of the information processing method of the present invention, in the information processing method, the information recording medium set in the information processing apparatus further stores second ID information including identification information unique to the information recording medium. Including a step of determining whether the information is a second generation information medium or a first generation information medium storing only the first ID information not including identification information unique to the information recording medium, and the determination result On the basis of the,
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
The verification process of either a) or b) is selected and executed.

Furthermore, the fifth aspect of the present invention provides
A computer program for executing content reproduction processing from an information recording medium storing content,
An ID reading step of reading either the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium from the information recording medium;
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
a verification processing step for executing the verification processing of either a) or b);
A content reproduction step of executing a reproduction process of the content stored in the information recording medium on condition that the verification of either a) or b) in the verification processing step is established;
There is a computer program characterized by comprising:

  The computer program of the present invention is, for example, an information recording medium or communication medium provided in a computer-readable format to a computer system that can execute various program codes, such as a CD, FD, MO, etc. Or a computer program that can be provided by a communication medium such as a network. By providing such a program in a computer-readable format, processing corresponding to the program is realized on the computer system.

  Other objects, features, and advantages of the present invention will become apparent from a more detailed description based on embodiments of the present invention described later and the accompanying drawings. In this specification, the system is a logical set configuration of a plurality of devices, and is not limited to one in which the devices of each configuration are in the same casing.

  According to the configuration of the present invention, either the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium is read from the information recording medium, and a B) data verification processing for the first ID information, or b) data verification processing for the second ID information and information recording medium revoke verification based on the identification information unique to the information recording medium included in the second ID information. Since the verification process of process a) or b) is executed, and the reproduction process of the content stored in the information recording medium is executed on the condition that any verification is satisfied, it does not have a revoke list. Both the player and the player with the revoke list can make it possible to determine whether or not the content can be played based on a certain verification process. Use prevention of pirated disk that contains the Ntsu is possible.

  Further, according to the configuration of the present invention, the information processing apparatus (reproducing device) having the disc ID revocation list (DIRL) executes revocation verification based on the disc ID revocation list (DIRL), and the disc ID In an information processing apparatus (playback device) that does not have a revocation list (DIRL), a data verification process based on the title-specific disc ID is executed, and the validity of the information recording medium is confirmed by these verifications. Therefore, it is possible to prevent the use of a pirated disc storing illegally copied content.

  In addition, according to the configuration of the present invention, a predetermined verification processing sequence is performed for a disc that does not include disc-specific identification information, and content reproduction is determined based on the verification processing. Even when the disc is manufactured according to the above, verification processing can be performed by writing an ID that does not include identification information unique to the information recording medium such as a title unique disc ID.

  The information processing apparatus, information recording medium, information processing method, and computer program of the present invention will be described in detail below.

  Information recording media capable of storing content, such as CDs, DVDs, MDs, and the like, as one basic technique for restricting content reproduction and content usage from illegally copied information recording media. Next, a description will be given of a configuration in which a recording medium identifier (disc ID) is stored and verification based on the ID is executed in an information processing apparatus (reproducing device) as a user device that performs content reproduction.

  A different recording medium identifier (disc ID) is stored for each content storage recording medium manufactured through a legitimate manufacturing route. On the other hand, a list of recording medium identifiers (disc IDs) determined to have been illegally copied (recording medium identifier (disc ID) revocation list) is generated and collated with the list during playback processing by the user playback device. When the process is executed and the recording medium identifier (disc ID) read from the information recording medium to be reproduced matches the ID recorded in the revocation list, the reproduction is not executed.

  The revocation list collation processing program is incorporated in the recording medium reproduction processing program stored in the user's reproduction device, and the program is executed when a content storage recording medium such as a DVD or CD is set and reproduced in the user's reproduction device. Executed.

  For example, when a management center that monitors unauthorized copying of information recording media finds an information recording medium (disk) having the same recording medium identifier (disk ID) from the market, the unauthorized copy is performed based on the disk having the ID. It is determined that the recording has been performed, and a list update process for adding the recording medium identifier (disk ID) to the recording medium identifier (disk ID) revocation list managed by the management center is performed.

  The updated revocation list is provided to a user device that performs content playback via a network or a recording medium, and is stored in a memory in the user device. For example, when an updated revocation list is stored together with content in an information recording medium storing legitimate content, and the content storage recording medium is reproduced on the user device, the revocation list stored in the memory in the user device is updated. It is set as the structure which performs.

  Version data is set in the revocation list, and the version comparison between the revocation list stored in the memory in the user device and the revocation list read from the information recording medium is executed prior to content playback on the user device. If the revocation list read from the information recording medium is a newer version than the revocation list stored in the memory in the user device, information on the revocation list stored in the memory in the user device is displayed. Update to replace with the revocation list read from the recording medium.

  The revocation list update processing program is incorporated into the playback processing program of the recording medium stored in the user's playback device, and the content storage recording medium such as DVD, CD, etc. is stored in the user's playback device, similar to the above-described list matching processing program. It is executed when setting and playing.

  FIG. 1 shows a data recording configuration example of the information recording medium. FIG. 1 is a diagram illustrating data stored in various information recording media 100 such as a CD (Compact Disc), a DVD (Digital Versatile Disk), an MD (Mini Disk), and a flash memory. Although a disk-shaped medium is shown as an example in FIG. 1, the present invention is not limited to a disk-shaped medium, and can be applied to various information recording media such as a flash memory.

  The information recording medium 100 stores information shown in FIG. The disk ID 101 is an identifier unique to the disk, for example, and is stored so that erasure and rewriting are difficult. In the present invention, the disk ID 101 is set as various data structures as well as a structure having an identifier unique to the disk. Specific examples of these will be described later. First, as a basic example, an example in which an identifier unique to a disk is set as the disk ID 101 will be described.

  In the embodiment described below, a disk-shaped medium is shown as an example of a content storage information recording medium, and therefore the identifier will be described as a disk ID. When various information recording media such as a flash memory are used as a content storage information recording medium, an information recording medium ID corresponding to the disc ID is set.

  The information recording medium 100 further stores content 102. The content may be stored as encrypted content, for example. In the case of encrypted content, key information for decrypting the content is stored in the information recording medium 100 or provided via a network.

  The information recording medium 100 further stores a disc ID revocation list (DIRL) 103. A disc ID revocation list (DIRL) 103 is used when a disc that has been certified as having been illegally copied, such as a CD-R storing illegally copied content in the market, is found. This is a list of data obtained by extracting the disc ID copied together with the content on the CD-R. Creation and management of a disk ID revocation list (DIRL) 103, provision of list information to the disk manufacturer, and the like are executed by a specific trusted management authority (CA).

  A data structure of a disc ID revocation list (DIRL) will be described with reference to FIG. As shown in FIG. 2, the disk ID revocation list (DIRL: Disc ID Revocation List) 150 includes a version number 151 that monotonically increases depending on when the list (DIRL: Disc ID Revocation List) is created, and a disk to be excluded. Are included as a revoked disk ID list 152 in which the disk IDs are listed, a version number 151, and an authenticator as a falsification verification value 153 for the revoked disk ID list 152. The falsification verification value 153 is data applied to determine whether or not the target data, in this case, the version number 151 and the revoked disk ID list 152 has been falsified, and is a digital signature using public key cryptography. Alternatively, a message authentication code (MAC) using a common key encryption technique is applied.

  When a digital signature using public key cryptography is used as the falsification verification value 153, the player acquires a signature verification key (public key) of a trusted organization, for example, the above-described management authority (CA), The version number 151 and the revoked disk ID are verified by verifying the signature created using the signature generation key (secret key) of the management authority (CA) with the signature verification key (public key) acquired by each player. It is determined whether the list 152 has been tampered with.

  The MAC generation and verification processing when a message authentication code (MAC) is used as the falsification verification value 153 will be described with reference to FIG. A message authentication code (MAC) is generated as data for falsification verification of data, and various modes are possible for the MAC generation processing and verification processing modes. An example of MAC value generation using the processing configuration is shown in FIG.

  As shown in FIG. 3, the target message, in this case, the version number 151 and the revoked disk ID list 152 shown in FIG. 2 are divided into units of 8 bytes (hereinafter, the divided messages are divided into M1, M2,. First, an initial value (Initial Value (hereinafter referred to as IV)) and M1 are exclusive ORed (the result is assumed to be I1). Next, I1 is put into the DES encryption unit and encrypted using a key (hereinafter referred to as K1) (the output is assumed to be E1). Subsequently, E1 and M2 are exclusively ORed, and the output I2 is input to the DES encryption unit and encrypted using the key K1 (output E2). Thereafter, this is repeated, and encryption processing is performed on all messages. The EN that comes out last is a message authentication code (MAC).

  When the generation data is changed, the MAC value becomes a different value, and the MAC generated based on the data (message) to be verified is compared with the recorded MAC. It is proved that the data (message) to be verified has not been changed or altered.

  FIG. 4 is a block diagram showing a configuration of an embodiment of the information processing apparatus 100 as a playback device that executes content playback, that is, a user device. The information processing apparatus 200 includes a codec 230 that performs generation and decoding of various types of encoded data such as an input / output I / F (Interface) 220 and MPEG (Moving Picture Experts Group), and an A / D and D / A converter 241. And an input / output I / F (Interface) 240, a cryptographic processing means 250, a ROM (Read Only Memory) 260, a CPU (Central Processing Unit) 270, a memory 280, and a recording medium interface 295 of a recording medium 295. These are connected to each other by a bus 210.

  The input / output I / F 220 receives a digital signal supplied from the outside such as a network and outputs the digital signal to the bus 210, and also receives the digital signal on the bus 210 and outputs it to the outside. The codec 230 decodes, for example, MPEG-encoded data supplied via the bus 210, outputs the decoded data to the input / output I / F 240, and encodes a digital signal supplied from the input / output I / F 240 to encode the bus 210. Output above. The input / output I / F 240 includes an A / D and D / A converter 241. The input / output I / F 240 receives an analog signal supplied from the outside, performs A / D (Analog Digital) conversion by the A / D, D / A converter 241, and outputs the digital signal to the codec 230. The digital signal from the codec 230 is D / A (Digital Analog) converted by the A / D / D / A converter 241 to be output to the outside as an analog signal.

  The encryption processing means 250 is composed of, for example, a one-chip LSI (Large Scale Integrated Circuit), encrypts or decrypts a digital signal such as content supplied via the bus 210, and outputs the encrypted signal to the bus 210. Has a configuration. Note that the encryption processing unit 250 is not limited to a one-chip LSI, and can be realized by a configuration in which various types of software or hardware are combined.

  The CPU 270 controls the codec 230, the encryption processing unit 250, and the like by executing a program stored in the memory 280.

  The memory 280 reads and stores the above-described disc recording medium identifier (disc ID) revocation list (DIRL) from the disc. The disk ID revocation list (DIRL) is securely stored in the memory. For example, it is preferable to store the data as tamper-resistant data by performing encryption based on the ID set in the information processing apparatus 200 and storing it in a memory. In this manner, the disk ID revocation list (DIRL) is stored so that it is not easily executed that the disk ID revocation list (DIRL) is deleted from the outside, the contents are altered, or the list is replaced with an old version list.

  The memory 280 further includes an area for storing a program executed by the CPU 270 and data necessary for the operation of the CPU 270. The recording medium interface 290 reads (reproduces) digital data from the recording medium 295 by driving a recording medium 295 capable of recording / reproducing digital data, outputs the digital data to the bus 210, and is supplied via the bus 210. The digital data is supplied to the recording medium 295 and recorded.

  The recording medium 295 is a medium capable of storing digital data, such as an optical disc such as a DVD, CD, or MD, a magneto-optical disc, a magnetic disc, a magnetic tape, or a semiconductor memory such as a RAM. And detachable configuration. However, the recording medium 295 may be built in the information processing apparatus 200.

  The use processing of the information recording medium storage content in the information processing apparatus 200 will be described with reference to the flowcharts of FIGS.

  FIG. 5 is a process executed as a preliminary process when the information recording medium described with reference to FIG. 1 is set in the information processing apparatus and content reproduction is started.

  In step S101, the information processing apparatus reads the disc ID revocation list (DIRL) stored in the information recording medium, and performs a process of determining validity, that is, whether or not tampering has occurred. As described above, this is verified by a signature verification key (public key) when a digital signature using a public key encryption technique is used as a falsification verification value of the disk ID revocation list (DIRL). If a message authentication code (MAC) is assigned as a falsification verification value, the MAC verification process described above with reference to FIG. 3 is executed.

  If it is determined that the disk ID revocation list (DIRL) has been tampered with (step S102: No), the process proceeds to step S106, and the subsequent process, that is, the process is terminated without performing the content reproduction.

  If it is determined that the disk ID revocation list (DIRL) has not been tampered (step S102: Yes), the process proceeds to step S103, the version of the disk ID revocation list (DIRL) read from the information recording medium, and the information processing apparatus Version comparison with the disk ID revocation list (DIRL) stored in the memory is executed. If the version of the disc ID revocation list (DIRL) read from the information recording medium is newer than the disc ID revocation list (DIRL) stored in the information processing device, the information is recorded in the memory of the information processing device in step S105. The disk ID revocation list (DIRL) read from the medium is written and updated. By this processing, the disk ID revocation list (DIRL) updated as needed is stored in the memory of the information processing apparatus.

  When the disk ID revocation list (DIRL) is not stored in the memory of the information processing apparatus, the disk ID read out from the information recording medium whose validity has been confirmed by performing only falsification verification without performing version comparison. A process of writing the revocation list (DIRL) into the memory of the information processing apparatus is executed.

  In the above-described example, the disk ID revocation list (DIRL) is stored on the disk, and the disk ID revocation list (DIRL) in the memory of the player is updated using the disk ID revocation list (DIRL). The information processing apparatus may obtain and update the latest disk ID revocation list (DIRL) from a management station or a server commissioned from the management station via a telephone line or the Internet, or when the information processing apparatus is manufactured. The latest disk ID revocation list (DIRL) at that time may be stored in the memory. Further, for example, the versions of the disk ID revocation list (DIRL) stored in each other between devices constituting the network in the home may be taught, and the old one may be updated using the new one. Furthermore, if the media is writable media, the recording device writes the latest version of the disc ID revocation list (DIRL) and uses it to update the disc ID revocation list (DIRL) of the device that handled the media. You may make it do.

  Next, revocation determination processing executed by the information processing apparatus will be described with reference to FIG. This process is executed following the process of FIG. In step S201, the information processing apparatus reads the information recording medium ID from the information recording medium.

  In step S202, a verification process is executed between the revocation ID list of the disc ID revocation list (DIRL) stored in the memory of the information processing apparatus and the information recording medium ID read from the information recording medium.

  If the revocation ID list in the disc ID revocation list (DIRL) matches the information recording medium ID read from the information recording medium in step S203, the process proceeds to step S204, and the subsequent process, that is, the content reproduction process is executed. The process ends without

  When the revoke ID list matches the information recording medium ID read from the information recording medium, the above-mentioned management station (CA: Central Authority) sets the information recording medium ID copied based on the unauthorized distribution CD-R or the like. It means that the information recording medium ID is extracted and described in the revoke ID list. Therefore, the information recording medium set in the information processing apparatus is an unauthorized distribution CD-R or the like, and is an information recording medium or a copy of which has already lost the right to use the content. The information processing apparatus The process ends without executing the content reproduction from the medium.

  If the revocation ID list in the disc ID revocation list (DIRL) does not match the information recording medium ID read from the information recording medium in step S203, the process proceeds to content reproduction processing.

  As described above, when content replay is performed on the user device by setting the disc ID collation processing based on the revocation list and the revocation list update processing as a part of the content replay program stored in the user device. In addition, the disk ID collation process based on the revocation list and the revocation list update are always executed.

  With such a configuration, reproduction of the information recording medium storing the illegally copied content is prevented, which is an effective measure as a countermeasure against a so-called pirated disc.

  The configuration applying the above-described disc ID revocation list is one effective means for dealing with pirated discs, but the process of writing a unique identifier (ID) for each information recording medium such as a disc is performed by the information recording medium. However, there is a problem that it is labor and cost to execute during the manufacturing process.

  When manufacturing content storage disks such as CDs and DVDs, one master disk is generated, and a large number of copy disks are generated based on the master disk by so-called stamp processing. In order to write the identifier (ID), it is necessary to individually write information to each disk. That is, it is necessary to set a processing process different from the stamp processing and execute an ID assigning process for each information recording medium in the independent processing process.

  On the other hand, in order for the user device to be configured to perform a recording medium identifier (disc ID) matching process based on the revocation list at the time of content playback processing, a non-volatile for storing the revocation list in the user device It is essential to have a memory. This will increase the cost of the user device.

  As described above, in order to reliably execute the processing based on the revocation list using the identifier unique to the information recording medium described above, the manufacturing side of the information recording medium (disk) and the user device side have certain requirements. It is necessary to be satisfied. Therefore, when these requirements cannot be satisfied, that is, when the information recording medium (disc) manufacturing side does not assign different identifiers to individual recording media, or when the user device does not have a revocation storage area. Therefore, the above-described illegal copy content use prevention configuration does not function.

  The configuration of an embodiment that solves such a problem will be described below. In the following embodiment, an information recording medium identifier (disc ID) having two different data formats is applied. One is an ID including different identification information for each information recording medium (disc), as described in the above example. This is referred to as a “disk unique disk ID (Disc Unique Disc ID)” or a second generation ID (Generation 2 ID).

  The other is an ID including identification information unique to each title of the information recording medium (disc). It includes identifier information set for each title of an information recording medium (disc) such as a specific music album or a specific music collection. Information recording media (discs) with the same title are configured such that common title identification information is set and different identification information is not assigned to each disc. This is referred to as a “title unique disc ID (Title Unique Disc ID)” or a first generation ID (Generation 1 ID).

  In addition, a playback apparatus that plays back an information recording medium (disc), that is, an information processing apparatus as a user device, also includes a first generation information processing apparatus and a second generation information processing apparatus corresponding to executable processes. The process corresponding to each generation is executed. Details of these processes will be described later.

  FIG. 7 shows a data format example of the second generation ID, that is, the disc unique disc ID (Disc Unique Disc ID) and the first generation ID, ie, the title unique disc ID (Title Unique Disc ID).

  FIG. 7A shows a disk unique disk ID (Disc Unique Disc ID), that is, a data format of the second generation ID.

  As shown in FIG. 7A, the disc unique disc ID (Disc Unique Disc ID) has a title unique part 311, a disc unique part 312, and an authenticator 313. The title specific part 311 is identification information specific to the title set for each title of the information recording medium (disc). The disk unique part 312 is an identifier of each disk, and is identification information that differs for each disk. The authenticator 313 is data indicating that the disc-specific disc ID is formal information generated by the management center. For example, the authenticator 313 is data generated as signature data for the title-specific part 311 and the disc-specific part 312. For example, it is generated as signature data generated by encrypting the data of the title specific part 311 and the disk specific part 312 using the secret key of the management center. Alternatively, it may be data set as a MAC value for the data of the title specific part 311 and the disc specific part 312.

  The size of the authenticator 313 is determined by the digital signature algorithm to be used. For example, when an algorithm such as DSA (Digital Signature Algorithm) or elliptical DSA is used, it is 320 bits, and when RSA encryption is used, it is about 1024 bits or more. The size is ideal from the viewpoint of safety. The above-mentioned DSA and RSA are introduced in, for example, Tatsuaki Okamoto, Hiroshi Yamamoto, “Contemporary Cryptography”, and industrial books. Ellipse DSA is currently being formulated in the IEEE-P1363 standard.

  At the time of content reproduction from the disc in the user device, verification of the authenticator 313 is executed, and the verification is established, that is, the title specific part 311 and the disc specific part 312 are legitimate data generated by the management center without falsification. After confirming, the process proceeds to a process such as a reproduction process. The processing of the user device will be described later.

  Incidentally, as described above, the production of a content storage information recording medium such as a ROM disk is usually performed by stamping. This is a technique that uses a stamp to make many of the same, and after a master disk is created, a replica of the master disk is created. Therefore, in this stamping, unique information for each disk cannot be recorded. For this reason, in order to record the disc unique information stored in the disc unique disc part 312, it is necessary to add another process.

  In addition, the disc unique information stored in the disc unique part 312 recorded in a separate process in this way is read by a processing program different from the data reading similar to the content reproduction processing in the user device that reproduces the content. It is preferable that In other words, as described above, when revocation status verification is performed as a content playback condition, this disc ID reading process is executed at the time of setting a disc or before content playback starts in response to a content playback start request. It is necessary to make it. Accordingly, it is necessary to perform a data reading process with a sequence and program different from the normal content reproduction process.

  For this reason, in order to reliably execute the reproduction control by the revocation list based on the disc-specific information, the disc having the disc-specific identification information is manufactured, the revocation list is stored on the user device side, It is necessary to execute the verification process with certainty. When these conditions are satisfied, the disk unique disk ID having the configuration shown in FIG. 7A is valid.

  On the other hand, if these conditions are not satisfied, that is, even if the user device does not store the disk ID revocation list in the memory, a certain process with a light load is executed to record illegal contents based on illegal copying, etc. The identification information that can prevent the reproduction of the disc is the title unique disc ID (Title Unique Disc ID) shown in FIG. 7B, that is, the first generation ID.

  Two types of title-specific disc IDs (B-1) and (B-2) are set. (B-1) is a pattern stored in the first generation disk, and (B-2) is a pattern stored in the second generation disk together with the disk unique disk ID of (A). Both (B-1) and (B-2) are composed of a title-specific part, a dummy part, and an authenticator. The data structure of the dummy part is different from that of the dummy part 1 and the dummy part 2.

  As shown in FIGS. 7B-1 and 7B-2, the title-specific disc ID (Title Unique Disc ID) includes the title-specific part 321, the dummy part 1, 322, and the authenticator 323, or the title-specific part. 331, dummy part 2 332, and authenticator 333. The title specific parts 321 and 331 are identification information specific to the title set for each title of the information recording medium (disc), like the title specific part 311 in FIG. The dummy parts 1 and 322 and the dummy parts 2 and 332 are areas for storing dummy data set in the corresponding areas of the disk-specific part 312 in FIG. In this area, no disc unique identifier is stored, and the same data pattern can be set for at least the discs common to the title unique parts 321 and 331. In other words, data can be written by stamping processing as a normal disk manufacturing process.

  The authenticators 323 and 333 are data indicating that the title-specific disc ID is formal information generated by the management center, and for example, signature data for the title-specific part and the dummy part, as in FIG. 7A. Is generated as For example, it is set as a signature using a secret key of the management center or signature data by MAC.

  If the configurations of the title specific part and the dummy part are the same, the authenticators 323 and 333 are the same authenticator data. Therefore, a title-specific disc ID having the configuration shown in FIG. 7B can be manufactured by a normal disc manufacturing process, that is, a stamping process, at least for a disc in which the same title identification information is set.

  FIG. 8A shows a first generation disc storing only a unique disc ID for each title.

  As shown in FIG. 8A, only the title specific disk ID (see FIG. 7B-1) is stored in the first generation disc. On the other hand, as shown in FIG. 8 (2), the second generation disc stores a disc-specific disc ID (see FIG. 7A) and a title-specific disc ID (see FIG. 7B-2). Further, a disk ID revocation list (DIRL) (see FIG. 2) as a list of revoked disk IDs is stored.

  Since the first generation disc in which only the title unique disc ID (see FIG. 7B-1) is stored does not have disc-specific identification information, it is possible to apply a disc manufacturing process only with a normal stamping process. . On the other hand, since the second generation disk storing the disk unique disk ID (see FIG. 7A) has disk unique identification information, data is individually recorded on each disk in addition to the normal stamping process. Processing is required.

  The disc ID revocation list (DIRL) stores a list having the latest version at the time of disc manufacture. The disc ID revocation list (DIRL) can be stored in a common list for a plurality of discs as the latest list at the time of disc manufacture, and can be written by stamping processing. Accordingly, the first generation disk manufactured by the stamping process may be configured to store the disk ID revocation list (DIRL) 412.

As shown in FIGS. 8A and 8B, there are three data formats for the disk ID. That is,
[Title Specific Part (TUP)] [Dummy Part 1 (DP1)] [Authentication]
[Title Specific Part (TUP)] [Dummy Part 2 (DP2)] [Authentication]
[Title Specific Part (TUP)] [Disc Specific Part (DUP)] [Authentication]
It is.

  A player as a user device needs to identify which pattern of ID information is read when reading the ID.

  The first data is [title specific part (TUP)] and is common data, and the second data is [dummy part 1 (DP1)] or [dummy part 2 (DP2)]. Or [disc unique part (DUP)]. By determining which of these data is stored subsequent to [Title Specific Part (TUP)], it is possible to identify which pattern is the ID.

  Specifically, as shown in FIG. 9, the data of [Dummy part 1 (DP1)], [Dummy part 2 (DP2)], and [Disc specific part (DUP)] are assumed to be identifiable data.

FIG. 9 shows examples of two identification patterns. The identification pattern 1 is an example in which the first few bits of [Dummy part 1 (DP1)], [Dummy part 2 (DP2)], and [Disc specific part (DUP)], for example, 4-bit data is used as identification data. is there. In particular,
[Disc unique part (DUP)] = 1000
[Dummy part 1 (DP1)] = 0001
[Dummy part 2 (DP2)] = 0010
As described above, the first 4 bits are set as different data patterns, and when the data is read by the user device, it is possible to determine which data pattern it is.

The identification pattern 2 is also configured to be identifiable using the first few bits of [dummy part 1 (DP1)], [dummy part 2 (DP2)], and [disc specific part (DUP)]. That is,
A disc-specific part with 1st bit set to [1],
Dummy part 1 with the second bit set to [1]
Dummy bart 2 with the third bit set to [1]
Each ID pattern can be identified as

Note that the ID patterns shown in FIGS.
[Title Specific Part (TUP)] [Dummy Part 1 (DP1)] [Authentication]
[Title Specific Part (TUP)] [Dummy Part 2 (DP2)] [Authentication]
[Title Specific Part (TUP)] [Disc Specific Part (DUP)] [Authentication]
Each data of the above may be in the state recorded on the disk, or may be stored as encrypted data, and key information usable on the user device or information stored on the disk may be stored. You may store as data which can be acquired as a result of using and decoding.

  Next, FIG. 10 shows how an information processing apparatus that executes disc playback processing, that is, a player (player), handles the first generation and second generation discs storing the disc IDs as described above. The description will be given with reference.

  There is also a distinction between the first generation and the second generation in the information processing apparatus that executes the disc playback processing, that is, the playback device (player). The first generation player can read the disc-specific disc ID (see FIG. 7B) recorded by stamping, but cannot read the disc-specific disc ID (see FIG. 7A). . Further, the first generation player does not have a non-volatile memory for storing a disc ID revocation list (DIRL).

  On the other hand, the second generation player can read the disk ID unique to the disk and has a nonvolatile memory for storing the disk ID revocation list (DIRL). ID collation processing based on DIRL) and update processing based on disc ID revocation list (DIRL) version comparison can be executed.

  First-generation and second-generation players (players) having different configurations and executable processes set both the first-generation disc and the second-generation disc to play back content. In other words, no matter what generation disc is set, after performing a predetermined verification process and determining whether or not content reproduction is permitted, if it is determined that it is permitted Only content playback will be performed.

  Individual specific processing will be described with reference to the flowchart of FIG. As shown in FIG. 10, in the case of the first generation player (player), when the first generation disc or the second generation disc is set in the player, the title specific disc ID is read in either case, Authenticator verification and dummy part 1 or dummy part 2 verification are executed.

  On the other hand, in the case of a second generation player (player), processing for the first generation disc and processing for the second generation disc are executed in different sequences. When the first generation disc is set in the player, the title unique disc ID is read, and authenticator verification and dummy part 1 verification are executed. When a second generation disc is set in the player, authenticator verification and disc specific part verification are executed, and a disc ID based on a disc ID revocation list (DIRL) stored in the own device is also executed. Revoke verification, i.e., a process for determining whether or not the disk ID of the disk to be reproduced matches the ID registered in the revocation list. Hereinafter, individual specific processing sequences will be described with reference to the flowchart of FIG.

  FIG. 11 is a flowchart of a reproduction process of the first generation disc or the second generation by the first generation player (player). In the reproduction process by the first generation player (player), the same process for the first generation disk and the second generation disk, that is, the process based on the title unique disk ID is executed.

In step S301, the first generation player (player) reads the title specific disc ID from the disc. This can be executed by a process similar to the normal ROM disk data reading process. If the disc is a first generation disc, the title specific disc ID to be read is the data format shown in FIG.
[Title Specific Part (TUP)] [Dummy Part 1 (DP1)] [Authentication]
It is.
If the disc is a second generation disc, the title specific disc ID is the data format shown in FIG.
[Title Specific Part (TUP)] [Dummy Part 2 (DP2)] [Authentication]
It becomes.

  Next, in step S302, the dummy part verification of the title unique disc ID and the authenticator verification are performed. The dummy part verification is executed as a verification process as to whether or not the dummy part 1 or the dummy part 2 included in the title-specific disc ID matches the predetermined format of the dummy part 1 or the dummy part 2. This verification process includes, for example, a verification process of whether or not the identification data of the dummy parts 1 and 2 described above with reference to FIG. 9 is included.

  The verification of the authenticator is, for example, when the authenticator is signature data, that is, signature data as encrypted data based on the secret key of the disc ID setting entity such as the management center for the title specific part and the dummy part. The signature verification is executed by applying the corresponding public key. Note that the public key is acquired from a public key certificate issued by a certificate authority (CA) or is given to all user devices in advance as a common value in the entire system. When the authenticator is set as the MAC value for the title specific part and the dummy part, the MAC verification process (see FIG. 3) is executed.

  If the verification of both the dummy part verification and the authenticator verification is passed, content reproduction processing from the disc is executed in step S303. If any of the verifications fails, the content is not reproduced from the disc. These verification processing programs are programs stored in a playback device as a user device as a configuration program of the content playback processing program. The first generation player (player) executes a process of generating a key to be applied to the decryption process of the encrypted content stored on the disc based on the configuration data of the title specific disc ID, for example, the data of the title specific part. Alternatively, the encrypted content stored on the disc may be decrypted using the generated key.

  FIG. 12 shows a playback processing sequence in the second generation player (player). As described above, the second generation player (player) has a memory that stores a disc ID revocation list (DIRL).

In step S401, the second generation player (player) determines the generation of the disc to be played. As this generation determination process, several methods can be applied. For example,
a) Information indicating the generation of the disc is recorded on the disc by stamping, and the player reads it and determines it.
b) The player reads the disc ID unique to the title from the disc, determines whether the dummy part is in the format of dummy part 1 or dummy part 2, and if it is in the format of dummy part 1, the disc Is determined to be the first generation, and if the format is the dummy part 2, the disk is determined to be the second generation.
c) It is determined whether or not the disk unique disk ID is stored in the disk. If it can be read, it is considered as the second generation, and if it cannot be read, it is determined as the first generation.
The disk generation determination process is performed by any one of the methods a) to c).

  If the second generation player (player) determines that the disc is the first generation in step S401, the process proceeds to the playback process of the first generation disc in step S402, and the second generation player (player) removes the disc. If it is determined that there are two generations, the process proceeds to the reproduction process of the second generation disk in step S403.

  A playback process sequence of the first generation disc by the second generation player (player) will be described with reference to FIG. This processing sequence is almost the same as the playback processing sequence in the first generation player (player) described above with reference to FIG. 11, but the first generation disc playback processing by the second generation player (player). Then, verification is performed as to whether or not the dummy part of the title specific disk ID read from the first generation disk matches the format of the dummy part 1.

In step S501, the second generation player (player) reads the title specific disc ID from the disc. This can be executed by a process similar to the normal ROM disk data reading process. Since the disc is a first generation disc, the title unique disc ID to be read is the data format shown in FIG.
[Title Specific Part (TUP)] [Dummy Part 1 (DP1)] [Authentication]
It is.

  Next, in step S502, dummy part verification of the title unique disc ID and authenticator verification are performed. The dummy part verification is executed as a verification process as to whether or not the dummy part 1 included in the title-specific disc ID matches a predetermined format of the dummy part 1. This verification process includes, for example, a verification process of whether or not the identification data of the dummy parts 1 and 2 described above with reference to FIG. 9 is included.

  Similarly to the description with reference to FIG. 11, the verification of the authenticator is performed by applying the corresponding public key if the authenticator is signature data to which the secret key of the data generator is applied. . If it is a MAC value, a MAC verification process is executed.

  If the verification of both the dummy part 1 verification and the authenticator verification is passed, content playback processing from the disc is executed in step S503. If any of the verifications fails, the content is not reproduced from the disc. These verification processing programs are programs stored in a playback device as a user device as a configuration program of the content playback processing program.

  FIGS. 14 and 15 are flowcharts for explaining a playback process sequence of the second generation disc by the second generation player (player).

  In step S601, the second generation player (player) reads the disc ID revocation list (DIRL) stored on the disc, and performs a process of determining validity, that is, whether or not tampering has occurred. As described above, this is verified by a signature verification key (public key) when a digital signature using a public key encryption technique is used as a falsification verification value of the disk ID revocation list (DIRL). When a message authentication code (MAC) is assigned as a falsification verification value, the MAC verification process described above with reference to FIG. 3 is executed.

  If it is determined that the disk ID revocation list (DIRL) has been tampered with (step S602: No), the process proceeds to step S606, and the subsequent process, that is, the process is terminated without performing content reproduction.

  If it is determined that the disk ID revocation list (DIRL) has not been tampered (step S602: Yes), the process proceeds to step S603, the version of the disk ID revocation list (DIRL) read from the disk, and the second generation player. A version comparison with the disk ID revocation list (DIRL) stored in the (player) memory is executed. If the version of the disc ID revocation list (DIRL) read from the second generation disc is newer than the disc ID revocation list (DIRL) stored in the second generation player (player) (S604: Yes), step In S605, the disk ID revocation list (DIRL) read from the disk is written in the memory of the second generation player (player) and updated. Through this process, the disc ID revocation list (DIRL) updated as needed is stored in the memory of the second generation player (player).

  In the case where the disc ID revocation list (DIRL) is not stored in the memory of the second generation player (player), the second generation in which the validity is confirmed by performing only the falsification verification without performing version comparison. A process of writing the disk ID revocation list (DIRL) read from the disk into the memory of the second generation player (player) is executed.

  The disk ID revocation list (DIRL) may be configured to obtain and update the latest list (DIRL) from a management station or a server commissioned therefrom via a telephone line or the Internet.

  Next, with reference to FIG. 15, the latter half of the content playback processing sequence in the second generation player (player) will be described. In step S701, the second generation player (player) reads the disk unique disk ID (see FIG. 7A) from the second generation disk.

  In step S702, disk-specific part verification of the disk-specific disk ID and authenticator verification are performed. The disk unique part verification is executed as a verification process of whether or not the disk unique part included in the disk unique disk ID matches a predetermined format of the disk unique part. This verification processing includes, for example, verification processing as to whether or not the disc-specific part identification data described above with reference to FIG. 9 is included.

  If the authenticator is signature data to which the private key of the disk unique disk ID creator is applied, the signature verification is executed by applying the corresponding public key. If it is a MAC value, a MAC verification process is executed.

  When both the dummy part verification and the authenticator verification are passed, the disc ID recorded in the disc ID revocation list (DIRL) stored in the memory of the second generation player (player) in step S703 A collation process with the disk unique part information in the disk unique disk ID read from the second generation disk is executed.

  If the revocation ID list in the disc ID revocation list (DIRL) matches the disc unique part information in the disc unique disc ID read from the disc in step S703, the processing is performed without executing the content reproduction processing in step S704. Exit.

  When the disk ID listed in the revocation ID list matches the disk unique part information in the disk unique disk ID read from the disk, the above-mentioned management station (CA: Central Authority) performs unauthorized distribution CD-R, etc. This means that the copied disk ID is extracted based on, and the disk ID is described in the revocation ID list. Accordingly, the disc set in the second-generation player (player) is an illegally distributed CD-R or the like, and is a disc or copy thereof that has already lost the right to use content, and the second-generation player (player). ) Terminates the processing without executing the content reproduction from this disc.

  If the revoke ID list in the disc ID revocation list (DIRL) does not match the disc unique part information in the disc unique disc ID read from the disc in step S703, the process proceeds to content reproduction processing step S704. These verification processing programs are programs stored in a second-generation playback device (player) as a user device as a configuration program of the content playback processing program.

  The second-generation player (player) uses a key applied to the decryption process of the encrypted content stored on the disc based on the title-specific disc ID or the configuration data of the disc-specific disc ID, for example, the title-specific part data. A configuration may be adopted in which the generated processing is executed and the encrypted content stored on the disc is decrypted using the generated key.

  The disk ID verification process based on the revocation list and the revocation list update process are set as part of the content reproduction program stored in the user device, so that revocation is always performed when content is reproduced on the user device. The disk ID matching process based on the list and the revocation list update are executed.

  With such a configuration, reproduction of the information recording medium storing the illegally copied content is prevented, which is an effective measure as a countermeasure against a so-called pirated disc.

  Note that the processing procedure described in the above processing flow is an example, and the above processing is not necessarily performed in this order. For example, the order of format and authenticator verification and disk ID revocation list (DIRL) check It may be replaced.

  FIG. 16 shows a summary of the verification processing executed in the playback processing of the first generation disc and the second generation disc by the first generation playback device or the second generation playback device described above.

  As shown in FIG. 16, in the reproduction process of the first generation disc and the second generation disc by the first generation player, the authenticator verification for the title unique disc ID and the verification process for dummy part 1 or dummy part 2 are performed. Execute.

  In the reproduction process of the first generation disc by the second generation player, the authenticator verification for the title unique disc ID and the verification process of the dummy part 1 are executed.

  In the reproduction process of the second generation disk by the second generation player, the authenticator verification for the disk unique disk ID, the disk unique part verification process, and the revoke verification based on the disk ID revocation list (DIRL) are executed.

  The format of the dummy part 1, the dummy part 2, and the disc specific part is distinguished for the following reason. If the disc is the first generation, individual revocation will not work even if the player is the second generation. For this reason, pirated disc vendors, when duplicating second-generation discs, pretend that they are first-generation discs using only title-specific disc IDs without using disc-specific disc IDs. An attack is assumed in which the disc-specific disc ID of the second generation disc is simply used as the title-specific disc ID to pretend to be a first-generation disc. This duplicate disc is not revoked even by the second generation player.

  As countermeasures against such an attack, the dummy part 1 for the title specific disk ID of the first generation disk, the dummy part 2 for the title specific disk ID of the second generation disk, and the disk specific part of the disk specific disk ID are shown in FIG. As described with reference to FIG. 9, it is possible to discriminate by format or the like, and when the player reproduces the first generation disc, it is discriminated whether it is the title specific disc ID dummy part 1 or dummy part 2 read from the disc. Perform verification to In this way, the player can stop the reproduction of the disc made by the above attack due to the format mismatch of the dummy part.

  As described above, in the configuration of the present invention, each of the information recording medium such as a disc and the information processing apparatus (player) that executes the reproduction process by setting the information recording medium has the concept of generation.

  The first generation disc does not have a disc-specific disc ID including a disc-specific part for each disc, and stores only the title-specific disc ID. Therefore, it can be manufactured by a stamping process. The second generation disk has a disk unique disk ID having a disk unique part of each disk.

  Further, the first generation player does not store the disc ID revocation list (DIRL), and does not execute the disc ID verification processing based on the disc ID revocation list (DIRL) and the disc ID revocation list (DIRL) update processing. . The second generation player stores a disk ID revocation list (DIRL), and executes a disk ID verification process and a disk ID revocation list (DIRL) update process based on the disk ID revocation list (DIRL). To do.

  By adopting such a configuration, the first generation player (player) and the second generation player (player) are mixed, and the first generation information recording medium (disc) and the second generation information are mixed. In an environment where recording media (discs) coexist, the playback device (player) is unique from the information recording medium (disc) to the title for any combination of the playback device (player) and the information recording medium (disc). It is possible to read the disc ID or disc-specific disc ID, verify whether the disc is a disc with a valid ID based on the ID information, and determine whether or not playback is possible based on the verification result. The use of the disk can be prevented.

  In the above-described embodiments, the term “generation” is used for the information recording medium and the playback device. However, this does not necessarily change with the passage of time, and can be used under various conditions such as the purpose of use of the device and medium. It may change. Therefore, the first generation and second generation discs and players can be rephrased as the first category and second category discs and players.

  The present invention has been described in detail above with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiments without departing from the gist of the present invention. In other words, the present invention has been disclosed in the form of exemplification, and should not be interpreted in a limited manner. In order to determine the gist of the present invention, the claims section described at the beginning should be considered.

  The series of processes described in the specification can be executed by hardware, software, or a combined configuration of both. When executing processing by software, the program recording the processing sequence is installed in a memory in a computer incorporated in dedicated hardware and executed, or the program is executed on a general-purpose computer capable of executing various processing. It can be installed and run.

  For example, the program can be recorded in advance on a hard disk or ROM (Read Only Memory) as a recording medium. Alternatively, the program is temporarily or permanently stored on a removable recording medium such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto optical) disk, a DVD (Digital Versatile Disc), a magnetic disk, or a semiconductor memory. It can be stored (recorded). Such a removable recording medium can be provided as so-called package software.

  The program is installed on the computer from the removable recording medium as described above, or is wirelessly transferred from the download site to the computer, or is wired to the computer via a network such as a LAN (Local Area Network) or the Internet. The computer can receive the program transferred in this manner and install it on a recording medium such as a built-in hard disk.

  Note that the various processes described in the specification are not only executed in time series according to the description, but may be executed in parallel or individually according to the processing capability of the apparatus that executes the processes or as necessary. Further, in this specification, the system is a logical set configuration of a plurality of devices, and the devices of each configuration are not limited to being in the same casing.

  As described above, according to the configuration of the present invention, the first ID information that does not include identification information unique to the information recording medium from the information recording medium, or the second ID information that includes identification information unique to the information recording medium. A) data verification processing for the first ID information, or b) data verification processing for the second ID information and identification information unique to the information recording medium included in the second ID information The information recording medium revoke verification process based on the above, the verification process of either a) or b) is executed, and the stored content reproduction process of the information recording medium is executed on the condition that either verification is established Therefore, it is possible to determine whether or not a content can be played back based on a certain verification process on both a playback device that does not have a revoke list and a playback device that has a revoke list. Therefore, it is possible to prevent the use of a pirated disc storing illegally copied content, and as an information recording medium for storing content for which copyright protection is required, or in an information processing apparatus for executing reproduction of a content storage information recording medium Applicable.

  Furthermore, according to the configuration of the present invention, the information processing apparatus (reproducing device) having the disc ID revocation list (DIRL) executes revocation verification based on the disc ID revocation list (DIRL), and the disc ID In an information processing apparatus (playback device) that does not have a revocation list (DIRL), a data verification process based on the title-specific disc ID is executed, and the validity of the information recording medium is confirmed by these verifications. Therefore, it is possible to prevent the use of a pirated disc storing illegally copied content, and as an information recording medium for storing content for which copyright protection is required, or for storing content storage information Applicable to information processing equipment that plays back media It is.

  In addition, according to the configuration of the present invention, a predetermined verification processing sequence is performed for a disc that does not include disc-specific identification information, and content reproduction is determined based on the verification processing. Even when the disc is manufactured according to the above, verification processing can be performed by writing an ID that does not include identification information unique to the information recording medium such as a title unique disc ID. Therefore, the present invention can be applied as a content storage information recording medium that requires copyright protection and requires mass production by a stamper.

It is a figure explaining the example of a data structure stored in an information recording medium. It is a figure explaining the data structure of a disk ID revocation list (DIRL). It is a figure explaining a DES encryption process. It is a figure which shows the structural example of the information processing apparatus (reproducing machine) which performs content reproduction | regeneration. FIG. 10 is a flowchart (No. 1) illustrating a playback processing procedure of an information processing apparatus (playback device) that executes content playback. FIG. 12 is a flowchart (part 2) for explaining the playback processing procedure of the information processing apparatus (playback device) that executes content playback. It is a figure explaining the data format of disk specific disk ID and title specific disk ID. It is a figure explaining the ID information structure stored in a 1st generation disk and a 2nd generation disk. It is a figure explaining the discriminating structure of the 1st generation disk, the disk specific part in the ID information stored in a 2nd generation disk, and the dummy parts 1 and 2. FIG. It is a figure explaining the outline | summary of a process of the 1st generation disc, the 1st generation reproducing | regenerating apparatus (player) which performs the content reproduction | regeneration processing based on a 2nd generation disc, and a 2nd generation reproducing | regenerating apparatus (player). It is a flowchart explaining the process sequence of the 1st generation reproducing | regenerating apparatus (player) which performs the content reproduction | regeneration processing based on a 1st generation disc or a 2nd generation disc. It is a flowchart explaining the process sequence of the 2nd generation player (player) which performs the content reproduction process based on a 1st generation disk or a 2nd generation disk. It is a flowchart explaining the process sequence of the 2nd generation reproducing | regenerating apparatus (player) which performs the content reproduction | regeneration processing based on a 1st generation disc. FIG. 10 is a flowchart (No. 1) illustrating a processing procedure of a second generation player (player) that performs content reproduction processing based on a second generation disc. FIG. 10 is a flowchart (No. 2) for explaining the processing procedure of the second generation player (player) that performs the content reproduction processing based on the second generation disc. It is a figure explaining the process of the 1st generation disc | player, the 1st generation reproducing | regenerating apparatus (player) and the 2nd generation reproducing | regenerating apparatus (player) which perform the content reproduction | regeneration processing based on a 2nd generation disc.

Explanation of symbols

100 Information recording medium (disc)
101 Information recording medium (disc ID)
102 Contents 103 Disc ID revocation list 150 Disc ID revocation list 151 Version number 152 Revoked disc ID list 153 Tamper verification value 200 Information processing device 210 Bus 220 Input / output I / F
230 Codec 240 Input / Output I / F
241 A / D, D / A converter 250 Cryptographic processing means 260 ROM
270 CPU
280 Memory 290 Recording medium I / F
295 Recording medium 311 Title specific part 312 Disc specific part 313 Authenticator 321 Title specific part 322 Dummy part 1
323 Authenticator 331 Title specific part 332 Dummy part 1
333 Authenticator 411 Title Unique Disk ID
412 Disc ID revocation list 421 Title-specific disc ID
422 Disk unique disk ID
423 Disk ID revocation list

Claims (19)

An information processing apparatus that executes content reproduction processing from an information recording medium storing content,
Read at least one of the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium from the information recording medium,
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
An information processing apparatus having a configuration in which the verification process of either a) or b) is executed, and the stored content reproduction process of the information recording medium is executed on the condition that either verification is established. The first ID information not including identification information unique to the information recording medium includes a title specific information part set corresponding to the title of the information recording medium, dummy part information including dummy data, and a data falsification verification value. Including an authenticator,
The information processing apparatus is configured to execute dummy part verification of whether or not at least the dummy part is data in a prescribed format and data verification based on the authenticator, and the information is obtained on condition that both verifications are satisfied. The information processing apparatus according to claim 1, wherein the information processing apparatus is configured to execute a reproduction process of content stored on a recording medium. The second ID information including identification information unique to the information recording medium includes a title unique information part set corresponding to the title of the information recording medium, and an information recording medium unique identification information part comprising identification information unique to the information recording medium And an authenticator as a data falsification verification value,
The information processing apparatus executes verification of information recording medium unique identification information part whether or not at least the information recording medium unique identification information part is data in a prescribed format, and data verification based on the authenticator, The information recording medium unique identification information included in the second ID is configured to perform revoke verification as to whether or not the information recording medium unique identification information is recorded in the information recording medium revocation list stored in the information processing apparatus. The information processing apparatus according to claim 1, further comprising: a reproduction process of content stored on the information recording medium on condition that the validity of the information recording medium is determined. The information processing apparatus includes:
A memory storing an information recording medium ID revocation list, which is a list of information recording medium unique identification information determined to be illegal,
The information recording medium unique identification information stored in the information recording medium and the revocation information recording medium ID described in the information recording medium ID revocation list stored in the memory are collated, and stored in the information recording medium. 4. The content reproduction process is performed on the condition that the information recording medium unique identification information does not match the revoke information recording medium ID described in the information recording medium ID revocation list. The information processing apparatus described. The information processing apparatus includes:
The falsification verification process of the information recording medium ID revocation list stored in the information recording medium is executed, and the version comparison with the information recording medium ID revocation list stored in the memory is executed on the condition that there is no falsification. When the version of the information recording medium ID revocation list stored in the information recording medium is newer than the version of the information recording medium ID revocation list stored in the memory, the information recording medium stored in the information recording medium The information processing apparatus according to claim 4, wherein the information processing apparatus is configured to execute list update processing for storing an ID revocation list in a memory. The information processing apparatus includes:
The information recording medium set in the information processing apparatus is a second generation information medium storing second ID information including identification information unique to the information recording medium, or first information not including identification information unique to the information recording medium To determine whether it is the first generation information medium storing only the ID information, and based on the determination result,
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
The information processing apparatus according to claim 1, wherein the information processing apparatus is configured to select and execute the verification process of either a) or b). An information recording medium storing content,
As first ID information not including identification information unique to the information recording medium, a title specific information part including title specific information set corresponding to the title of the information recording medium, a dummy information part including dummy data, and data An information recording medium having a configuration in which ID information including an authenticator as a falsification verification value is stored.   The information recording medium according to claim 7, wherein the dummy information stored in the dummy information part includes dummy information identification data that can be identified as dummy information.   9. The information recording medium according to claim 8, wherein the dummy information identification data is identification data that differs for each information recording medium of a different category. An information recording medium storing content,
Information recording medium comprising title specific information part including title specific information set corresponding to the title of the information recording medium as second ID information including identification information specific to the information recording medium, and identification information specific to the information recording medium An information recording medium having a configuration storing ID information including a unique identification information part and an authenticator as a data falsification verification value.   11. The information recording medium unique identification information stored in the information recording medium unique identification information part includes identification data that can be identified as information recording medium unique identification information. Information recording media. The information recording medium further includes:
An information recording medium ID that is an identifier unique to the information recording medium;
An information recording medium ID revocation list that is a list of information recording medium IDs determined to be unauthorized;
The information recording medium according to claim 10, wherein the information recording medium is stored. An information processing method for executing content reproduction processing from an information recording medium storing content,
An ID reading step of reading either the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium from the information recording medium;
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
a verification processing step for executing the verification processing of either a) or b);
A content reproduction step of executing a reproduction process of the content stored in the information recording medium on condition that the verification of either a) or b) in the verification processing step is established;
An information processing method characterized by comprising: The first ID information not including identification information unique to the information recording medium includes a title specific information part set corresponding to the title of the information recording medium, dummy part information including dummy data, and a data falsification verification value. Including an authenticator,
The verification processing step includes:
Performing at least a dummy part verification of whether or not the dummy part is data in a prescribed format and data verification based on the authenticator;
14. The information processing method according to claim 13, wherein a reproduction process of content stored in the information recording medium is executed on the condition that both verifications are satisfied. The second ID information including identification information unique to the information recording medium includes a title unique information part set corresponding to the title of the information recording medium, and an information recording medium unique identification information part comprising identification information unique to the information recording medium And an authenticator as a data falsification verification value,
The verification processing step includes:
Performing at least information recording medium unique identification information part verification of whether or not the information recording medium unique identification information part is data in a prescribed format, and data verification based on the authenticator,
The information processing method further includes:
A revocation verification step for performing revocation verification of whether or not the information recording medium unique identification information included in the verified second ID is recorded in the information recording medium revocation list stored in the information processing apparatus; And
14. The information processing method according to claim 13, wherein a reproduction process of content stored on the information recording medium is executed on the condition that the validity of the information recording medium is determined based on each verification. The revocation verification step includes
It is a step of executing a collation process between the information recording medium unique identification information stored in the information recording medium and the revoke information recording medium ID described in the information recording medium ID revocation list stored in the memory. The information processing method according to claim 15. The information processing method further includes:
The falsification verification process of the information recording medium ID revocation list stored in the information recording medium is executed, and the version comparison with the information recording medium ID revocation list stored in the memory is executed on the condition that there is no falsification. When the version of the information recording medium ID revocation list stored in the information recording medium is newer than the version of the information recording medium ID revocation list stored in the memory, the information recording medium stored in the information recording medium The information processing method according to claim 16, further comprising a step of executing a list update process for storing the ID revocation list in a memory. The information processing method further includes:
The information recording medium set in the information processing apparatus is a second generation information medium storing second ID information including identification information unique to the information recording medium, or first information not including identification information unique to the information recording medium Including a step of performing determination processing as to whether or not the first generation information medium stores only the ID information of
Based on the discrimination result,
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
The information processing method according to claim 13, wherein the verification process of either a) or b) is selected and executed. A computer program for executing content reproduction processing from an information recording medium storing content,
An ID reading step of reading either the first ID information not including identification information unique to the information recording medium or the second ID information including identification information specific to the information recording medium from the information recording medium;
a) Data verification processing for the first ID information, or
b) a data verification process for the second ID information and an information recording medium revoke verification process based on identification information unique to the information recording medium included in the second ID information;
a verification processing step for executing the verification processing of either a) or b);
A content reproduction step of executing a reproduction process of the content stored in the information recording medium on condition that the verification of either a) or b) in the verification processing step is established;
A computer program characterized by comprising:

Images