JP2005229604A - Authentication method, system and access control of data processing device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a system and a method that authenticate access of a data storing device to data supplied by a host system. <P>SOLUTION: First and second random numbers are exchanged between the host system and a recording device. An ID of the recording device that has been stored by the host system and an ID of the host system that has been stored by the recording device are encrypted by using the first and second random numbers. The encrypted IDs are exchanged between the host system and the recording device and are each decrypted by using the first and second random numbers. If the ID decrypted by the recording device is identical to the stored ID of the host system, the host system is authenticated in the recording device. If the ID decrypted by the host system is identical to the stored ID of the recording device, the recording device is authenticated in the host system. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a data processing apparatus having a recording medium capable of recording data processed by a host system, and more particularly to an authentication method for a data processing apparatus for judging the legitimacy of a recording apparatus accessing the host system and to the data processing apparatus. The present invention relates to an authentication device and an access control method.

  A video signal receiving device with a recording medium capable of storing a video signal includes a hard disc drive (HDD), a compact disc (CD) recording device, or a set top box having a digital versatile disc (DVD) recording device, a personal video recorder (PVR: Personal Video Recorder), monitor, PC (Personal Computer), VCR (Video Cassette Recorder), and the like.

  The set top box is used for a VOD (Video On Demand) service. VOD is not a one-way service that is transmitted from the broadcasting station to the user as it is now, but when the user directly selects the content stored in MDB (Media Data Base), the user selects the selected program. An interactive service that allows you to watch at any time. A basic system for such a VOD service includes a VSS (Video Source System) in which a video server device is installed, a set top box (STB) as a subscriber terminal, and network equipment. Composed.

  FIG. 1 is a diagram illustrating a general configuration of a VOD service. The VOD service includes at least one MDB 102, at least one video server 104, a backbone communication network 106, a subscriber network 108, an STB 110, and the like.

  Each video server 104 performs a function of receiving, processing, and managing user requests, a function of storing a large amount of digital video data, a multiple input / output function, a database management function, a failure recovery function, and the like.

  The STB 110 performs a function of connecting a subscriber network and a user, a function of restoring video data by decompressing the compressed video data, a security function, a reservation function, and the like.

  In STB that can store VOD service data, the VOD service data provided by the service provider is stored in the HDD, and after the communication connection is completed, the VOD service data stored in the HDD is played back at a convenient time for the user. A method for making this possible has been disclosed (for example, see Patent Document 1).

  FIG. 2 is a diagram illustrating an example of an STB including an HDD. The STB illustrated in FIG. 2 is illustrated in FIG. 1 under the control of the system controller 204, which controls the operation of the STB (200 in FIG. 2) according to a user control command received through the remote control receiver 202. An interface 206 that connects to the video server 104, an MPEG decoder 208 that restores video and audio data by MPEG decoding data transferred from the video server 104 after being compressed by MPEG (Moving Picture Expert Group), and an MPEG decoder 208 A digital-to-analog converter (DAC) 210 that converts the restored video and audio data into an analog signal so that it can be output through a TV or a monitor; and To save the data transferred is MPEG compressed from the video server 104 comprises a HDD212 provided to the MPEG decoder 208 reproduces the stored MPEG compressed data.

  The apparatus illustrated in FIG. 2 stores VOD service data provided from the video server 104 in the HDD 212, and allows the user to reproduce the VOD service data stored in the HDD 212 after the communication connection is completed.

  On the other hand, an apparatus and a method for preventing illegal use of the VOD service have also been conventionally disclosed (for example, see Patent Document 2). The present invention blocks VOD service data provided to billing members so that non-members cannot illegally connect and use them without permission. That is, according to this method, the service member who does not pay the usage fee cannot use the VOD service data.

  FIG. 3 is a diagram showing the configuration of the illegal use prevention device of Patent Document 2. 3 includes a user authentication unit 302, a control device unit 304, a media server connection unit 306, a database 308, and an input device unit 310. The user authentication unit 302 authenticates whether the user is a valid user, and the control device unit 304 controls the path between the media server connection unit 306 and the input device unit 310 according to the authentication result of the user authentication unit 302.

Korean Patent Publication No. 1997-4852 Korean Patent Publication No. 2002-71268

  However, the device disclosed in Patent Document 2 can prevent a non-member who does not pay a usage fee from using the service without permission, but the VOD service data received through a legitimate route is illegally used. It cannot be prevented. For example, in the apparatus shown in FIG. 1, when the HDD 212 can be separated from the STB or replaced with another one, the VOD service data stored in the HDD 212 can be used for other purposes than legitimate viewing. There is a risk of being used.

  In the case of some VOD services, the VOD service data stored in the HDD 212 is retained only for a certain period, and after that, it is automatically deleted to prevent theft of content. However, there is a problem that the HDD cannot be separated from the STB or replaced with another HDD.

  FIG. 4 is a diagram schematically showing a conventional authentication method. According to the authentication method illustrated in FIG. 4, the HDD 212 compares the identifier (Identifier: ID) transferred from the host system with the ID held by itself. If the transferred ID matches its own ID, an authentication success message is transferred to the host system. On the other hand, if the host system receives an authentication success message from the HDD 212, the host system permits access to the HDD 212.

  However, in the conventional authentication method as shown in FIG. 1, the host system must transfer the ID to the HDD 212 every time authentication is performed. Since this ID is a predetermined constant, if an unauthenticated user can read the information transferred between the host system and the HDD 212 or know the ID by another method, the HDD 212 There is a possibility that the above-mentioned problem that the VOD service data stored in the file is used for purposes other than proper viewing may occur.

  On the other hand, since only the HDD 212 is authenticating the host system, an unauthenticated user is programmed to send an authentication success message in response to any authentication request transferred from the host system to the HDD 212. If the HDD 212 is connected, the host system recognizes that the access is from the legitimate HDD 212 and allows the HDD 212 to be accessed. In other words, it becomes possible to store important information and pay information entered through the host system in the unauthorized HDD for theft.

  Therefore, the present invention has been made in view of such a problem, and an object of the present invention is to authenticate access of a data processing apparatus for a data source such as a recording medium and perform unauthenticated data processing. It is an object of the present invention to provide a new and improved data processing apparatus authentication method and authentication apparatus which prevent access to data of the apparatus.

  Another object of the present invention is to provide an authentication apparatus suitable for implementing the authentication method.

  Furthermore, the other object of this invention is to provide the recording medium which recorded the program which performs said authentication method.

  In order to solve at least one of the above problems, according to an aspect of the present invention, there is provided an authentication method for authenticating a host system that processes data and a data processing apparatus that includes a recording device that accesses the host system. The host system and the recording device generate the first random number and the second random number respectively, and the first random number and the second random number are transferred from the host system and the recording device to the recording device and the host system. A transfer process, a process in which the host system encrypts a common ID stored in the host system and the recording device with the first random number, and transfers the encrypted ID to the recording device; The recording device encrypts the common ID with the second random number and transfers the encrypted ID to the host system. A process in which the host system decrypts the encrypted ID transferred from the recording device, and a process in which the recording device decrypts the encrypted ID transferred from the host system. The host system compares the ID decrypted by the host system with the common ID stored in the host system and authenticates the recording device based on the comparison result; and the recording device comprises: There is provided an authentication method including a step of comparing the ID decrypted by the recording device with a common ID stored in the recording device and authenticating the host system based on the comparison result.

  According to another aspect of the present invention, there is provided an authentication device for authenticating a host system for processing data and a data processing device having a recording device for accessing the host system, the authentication device being provided in the host system, A first authentication device having a first random number generation unit for generating a first random number, a first secret key encryption unit, and a first authentication control unit, and the recording device are provided with a second random number. A second authentication device having a second random number generator for generating, a second secret key encryption unit, and a second authentication control unit, wherein the first secret key encryption unit includes the host An ID common to the system and the recording device is encrypted with at least one of values corresponding to the first random number or the second random number, and the encrypted ID transferred from the recording device is the first random number or the second random number. 2 Value according to random number The first authentication control unit controls the first random number generation unit in response to an access request from the recording device, generates a first random number, and transfers the first random number to the recording device. , Generating a second encrypted ID by controlling the first secret key encryption unit based on a second random number transferred from the recording device to the host system, and generating a second encrypted ID Is transferred to the recording device, and when the first encrypted ID is transferred from the recording device, the first secret key encryption unit is controlled to decrypt the first encrypted ID. , Determining whether the recording device is a valid device based on the decrypted ID and the common ID, and authenticating the recording device if the recording device is a valid device; The second secret key encryption unit is connected to the host A second encrypted ID that is encrypted by at least one of a value corresponding to a first random number or a second random number and transferred from the host system to the recording device. Is decrypted with at least one of a value corresponding to the first random number or a second random number, and the second authentication control unit controls the second random number generation unit in response to an authentication request from the host system, A second random number is generated and transferred to the host system. Based on the first random number transferred from the host system to the recording device, the second secret key encryption unit is controlled to perform the first encryption. ID is generated, the first encrypted ID is transferred to the host system, and when the second encrypted ID is transferred from the host system, the second secret key encryption unit is controlled. The second encrypted ID is decrypted, and whether or not the host system is a valid device is determined based on the decrypted ID and the common ID. In the case of an apparatus, an authentication apparatus is provided that authenticates the host system.

  According to another aspect of the present invention, a computer readable recording program that causes a computer to execute authentication processing between a host system that processes data and a data processing device that includes the recording device that accesses the host system. A recording medium, wherein the host system and the recording device respectively generate a first random number and a second random number, and the first random number and the second random number are recorded from the host system and the recording device. A process for transferring to each of the apparatus and the host system, and in the host system, an ID common to the host system and the recording apparatus is encrypted by the generated first random number, and the encrypted ID is stored in the recording apparatus. The common ID is encrypted with the generated second random number in the recording device and the recording device. Processing for transferring the encrypted ID to the host system, processing for decrypting the encrypted ID transferred from the recording device in the host system, and processing for the host system in the recording device The process of decrypting the encrypted ID transferred from the host, the ID decrypted by the host system and the common ID stored in the host system are compared, and the host system is based on the comparison result Compares the process for authenticating the recording device with the common ID decrypted by the recording device and the common ID stored in the recording device, and based on the comparison result, the recording device determines the host system. A computer-readable recording medium recording a program for causing a computer to execute authentication processing is provided.

  According to another aspect of the present invention, there is provided an authentication method for authenticating a data processing apparatus having a recording apparatus that accesses a host system, wherein the recording apparatus uses the random number transferred from the host system to A process of encrypting an ID common to the system and the recording apparatus, transferring an encrypted random number to the host system, and the host system decrypting the encrypted ID transferred from the recording apparatus Comparing the decrypted ID with the common ID stored in the host system to determine whether the decrypted ID corresponds to the ID of the host system; Authenticating the recording device with the host system when the decrypted ID corresponds to a common ID stored in the host system. The law is provided.

  An authentication method for authenticating the host system by a host system that processes data and a data processing device including a recording device that accesses the host system, wherein the host system uses the random number transferred by the recording device to A process of encrypting an ID common to the system and the recording apparatus, transferring the encrypted ID to the recording apparatus, and the recording apparatus decrypting the encrypted ID transferred from the host system; Comparing the decrypted ID with the common ID stored in the recording device to determine whether the decrypted ID corresponds to the ID of the recording device; A process in which the recording device authenticates the host system when the converted ID corresponds to a common ID stored in the recording device. Proof method is provided.

  According to another aspect of the present invention, there is provided an authentication device for authenticating access to data of the host system stored in the recording device and provided in the host system, the random number generator for generating a random number And a secret key encryption unit that encrypts and decrypts the data, and controls the random number generation unit in response to an access request from the recording device to generate a first random number, and the generated first random number The second ID recorded in the host system is transferred to the recording device, and the secret key encryption unit is controlled to obtain a second ID recorded in the host system by a value corresponding to the first random number and the second random number transferred from the recording device. The encrypted ID is transferred to the recording device as a second encrypted ID, and the secret key encryption unit is controlled to transfer the encrypted ID with the encrypted ID transferred from the recording device. A first cipher An authentication control unit that authenticates the recording device when the decrypted ID is decrypted with a value corresponding to the first and second random numbers, and the decrypted ID corresponds to the second ID An apparatus is provided.

  According to another aspect of the present invention, there is provided an authentication device for authenticating access to data of a host system stored in the recording device, the random number generator for generating a random number. A secret key encryption unit for encrypting and decrypting data, and generating a second random number by controlling the random number generating unit in response to an authentication request from the host system, and generating the generated second random number Transfer to the host system and control the secret key encryption unit to encrypt the first ID recorded in the recording device with a value corresponding to the second random number and the first random number transferred from the host system. The encrypted ID is transferred to the host system as a first encrypted ID, and the secret key encryption unit is controlled to transfer the encrypted ID with the encrypted ID transferred from the host system. Authentication for authenticating the host system when the second encrypted ID is decrypted with a value corresponding to the first random number and the second random number, and the decrypted ID corresponds to the first ID And an authentication device including a control unit.

According to another aspect of the present invention, authentication for authenticating access to a recording device storing data provided by a host system storing a given second ID and the given first ID is provided. A method of storing a second value corresponding to the second ID in the host system and storing a first value corresponding to the first ID in the recording device, and the host system And a step of generating first and second random numbers in the recording device, a step of transferring the first random number to the recording device, and a step of transferring the second random number to the host system, respectively, The first ID and the first ID are encrypted with the first and second random numbers, respectively, and the encrypted second ID and the encrypted first ID are transferred to the recording device and the host system, respectively. And the above recording device , Decrypting the encrypted second ID, and decrypting the encrypted first ID in the host system, and the decrypted second ID and second value. If the same, the process by which the host system authenticates the recording device;
When the decrypted first ID and the first value are the same, there is provided an authentication method including the step of the recording device authenticating the host system.

  According to another aspect of the present invention, there is provided an access control method for controlling access by a playback device to data acquired from a host system and recorded in a recording device of the playback device. Only when the host system and the recording device are successfully authenticated at a predetermined time before reproducing the recorded data, and the host system and the recording device are both successfully authenticated by the mutual authentication step. And an access control method including the step of allowing the reproducing device to access the data recorded on the recording device.

  As described above, according to the authentication method of the present invention, in a data processing apparatus having a recording apparatus capable of recording data, the recording apparatus is accessed only when the host and the recording apparatus mutually authenticate, that is, the recording apparatus. It is possible to prevent unauthorized users from illegally using data by recording data on the recording medium or reproducing data from the recording device.

  Also, according to the authentication method of the present invention, each time the recording apparatus is authenticated, the random number is encrypted when the ID is encrypted using the first random number generated in the host system and the second random number generated in the recording apparatus. Therefore, even if data transferred between the host system and the recording device is read between the host system and the recording device, the ID is prevented from being exposed.

  Further, according to the authentication method of the present invention, data can be recorded only in the authenticated recording device or only the data in the recording device can be reproduced. Therefore, the authenticated recording device can be detached from the data processing device. Either use the data recorded on the certified recording device afterwards or replay the data recorded on the non-authenticated recording device with another authentication of the data processing device It is impossible to replace it with an unrecorded recording device. Therefore, illegal use of content is prevented.

  Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In the present specification and drawings, components having substantially the same functional configuration are denoted by the same reference numerals, and redundant description is omitted.

  A data processing apparatus according to an embodiment of the present invention includes an STB including an HDD, a CD, a DVD, a PVR, a monitor, a PC, a VCR, and the like.

  The authentication method of the data processing apparatus according to the present embodiment uses both the public key encryption method and the secret key encryption method. The public key encryption method is used for transferring a first random number generated by the host system to the recording device and transferring a second random number generated by the recording device to the host system.

  The recording device that has received the first random number encrypts the ID using the received first random number. Further, the host system that has received the second random number encrypts the ID using the received second random number.

  The secret key encryption method is used to transfer IDs commonly assigned to the host system and the recording device by the first random number and the second random number to the recording device and the host system, respectively.

  As described above, according to the authentication method according to the present embodiment, since the host system and the recording apparatus exchange random numbers using the public key encryption method and exchange IDs using the secret key encryption method, authentication can be performed more effectively. Can do. An example of a public key encryption method is RSA (devised by three people, Rivest, Shamir, and Adelman). An example of a method for secret key encryption is a DES (Data Encryption Standard) method.

  In the authentication method and authentication apparatus according to the present embodiment, when the recording device is first connected to the host system or when the recording device connected to the host system is first booted, an ID is assigned to the host system and the recording device. It is done.

  The ID is common to the host system and the recording device. Also, when the recording device is first connected to the host system, or when the recording device connected to the host system is first booted, the first public key and recording device of the host system for the public key encryption method Are also assigned to the host system and the recording device, respectively.

  However, if the ID of the host system is known by the recording device, the ID of the recording device is known by the host system, and the processing logic is adjusted accordingly, the IDs of the host system and the recording device are different. Also good.

  According to the authentication method and apparatus according to the present embodiment, data is recorded only in an authenticated recording device, and only data recorded in the authenticated recording device can be reproduced. Accordingly, the recording device of the first data processing device is removed from the first data processing device for use in the second data reproducing device, or the data recorded in the second recording device is reproduced. The recording device of one data reproducing device cannot be replaced with the second recording device. As a result, illegal use of content is prevented.

  For example, when the authentication method of this embodiment is applied to the STB shown in FIG. 2, the STB and the HDD have a pair of public keys that are inseparable from each other. It is possible to mutually authenticate each other using only the random numbers generated in the HDD and the public keys respectively acquired in the STB and the HDD.

  Therefore, the HDD cannot be separated from the STB, and the VOD service data stored in the HDD cannot be reproduced by another data processing apparatus, and the VOD service data cannot be recorded even if another HDD is attached to the STB.

  In addition, the authentication method of the present embodiment can be used in parallel with the illegal use prevention apparatus described with reference to FIG. 3 and can prevent illegally theft of VOD service data acquired through a legitimate route. .

  Hereinafter, the STB including the HDD will be described more specifically as an example. The STB according to the present embodiment is provided to the subscriber by the VOD service provider. The VOD service provider can apply the authentication method according to the present embodiment in order to prevent the theft of the content recorded in the HDD built in the STB. That is, a pair of keys having an inseparable relationship is assigned to the STB and the HDD, respectively, and the STB and the HDD are mutually authenticated by using them. To do.

  FIG. 8 is a block diagram showing the configuration of the authentication device according to this embodiment. The authentication device includes a first authentication device 800 on the host system side and a second authentication device 900 on the HDD side.

  The first authentication device 800 of the host system includes a first random number generation unit 802, a first public key encryption unit 804, a first secret key encryption unit 806, a first memory 808, and a first authentication control unit 810. Is done. Further, the first authentication device 800 of the host system may include a RAM 812, a data transfer module 814, and an ATA interface 816.

  The first random number generator 802 generates a first random number. The first public key encryption unit 804 encrypts the first random number with the first public key assigned to the host system, or decrypts the encrypted second random number provided from the HDD. The first secret key encryption unit 806 encrypts an ID common to the host system and the HDD with the first random number and the decrypted second random number, or decrypts the encrypted ID provided from the HDD. . The first memory 808 stores an ID assigned to the host system.

  If there is an access request from the HDD, the first authentication control unit 810 controls the first random number generation unit 802 and the first public key encryption unit 804 to generate the encrypted first random number, and the data transfer module If the encrypted second random number is transferred from the HDD, the first public key encryption unit 804 is controlled to generate the decrypted second random number, and the first secret The key encryption unit 806 is controlled to generate an encrypted ID and transferred to the HDD through the data transfer module 814. If the encrypted ID is transferred from the HDD, the first secret key encryption unit In step 806, the encrypted ID is decrypted, and if the decrypted ID is the same as the ID, the HDD is authenticated.

  Examples of the first authentication control unit 810 include a central processing unit (CPU), a microprocessor, and a digital signal processor. The RAM 812 stores a program and data for controlling the operation of the first authentication control unit 810.

  On the other hand, the second authentication device 900 of the HDD includes a second random number generation unit 902, a second public key encryption unit 904, a second secret key encryption unit 906, a second memory 908, and a second authentication control unit 910. Composed. Further, the second authentication device 900 of the HDD may include a RAM 912, a data transfer module 914, and an ATA interface 916.

  The second random number generator 902 generates a second random number. The second public key encryption unit 904 encrypts the second random number with the second public key assigned to the HDD, or decrypts the encrypted first random number provided from the host system. The second secret key encryption unit 906 encrypts an ID common to the host system and the HDD with the second random number and the decrypted first random number, and decrypts the encrypted ID provided from the host system.

  The second memory 908 stores an ID assigned to the HDD, and preferably serves as a maintenance cylinder for the HDD. If there is an authentication request from the host system, the second authentication control unit 910 controls the second random number generation unit 902 and the second public key encryption unit 904 to generate an encrypted second random number and transfer the data. Transfer to the host system through the module 914. If the encrypted first random number is transferred from the host system, the second public key encryption unit 904 is controlled to generate the decrypted first random number, The second secret key encryption unit 906 is controlled to generate an encrypted ID and transferred to the host system through the data transfer module 914. If the encrypted ID is transferred from the host system, the second ID is transferred. The secret key encryption unit 906 is controlled to decrypt the ID, and if the decrypted ID and the ID are the same, the host system is authenticated.

  Examples of the second authentication control unit 910 include a CPU, a microprocessor, and a digital signal processor. The RAM 912 stores a program and data for controlling the operation of the second authentication control unit 910. The data transfer modules 814 and 914 transfer data by the ATAPI method.

  FIG. 5 is a diagram schematically showing assignment of an ID and a public key encryption key used in the authentication method according to the present embodiment. The allocation process is performed when the recording device is first connected to the host system or when the recording device connected to the host system is first booted. First, an ID, a first public key of the host system, and a second public key of the recording device are generated (S502). Next, the host system acquires the generated ID and the first public key (S504). Next, the host system stores the acquired ID and first public key in the first memory (S506). The host system can be encrypted and stored using any encryption method to prevent the ID and the first public key from being exposed. At the time of authentication, the encrypted ID and the first public key are decrypted by an appropriate decryption method in order to use the original ID and the original first public key.

  On the other hand, the HDD acquires the generated ID and the second public key (S508). Next, the HDD stores the acquired ID and second public key in the maintenance cylinder (S510). The maintenance cylinder stores important information for operating the HDD, and the information stored in the maintenance cylinder is accessed only by the HDD and is not accessed by the host system. Similar to the host system, the HDD can encrypt and store the provided ID and second public key.

  FIG. 6 is a diagram schematically showing the authentication method according to the present embodiment. In this embodiment, an example in which an authentication procedure is first started on the HOST side will be described. However, for example, the authentication procedure may be started first on the HDD side which is an example of the medium.

First, the host system generates a first random number _{N h} (S602). Here, the first random number N _h is generated by the first random number generator 802 of the host system. Meanwhile, HDD generates a second random number _{N m} (S604). Here, the second random number N _m is generated by the second random number generator 902.

Host system (first public key encryption unit 804) encrypts the first random number _{N h.} Here, the encryption method used is a public key encryption method. The first random number is encrypted with the first public key K _h given to the host system, and the encrypted first random number M _hk is generated as a result of the encryption. Next, the host system transfers the encrypted first random number M _hk to the HDD via the ATA interface 816 (S606).

The HDD (second secret key encryption unit 906) decrypts the encrypted first random number M _hk transferred from the host system with the second public key K _m assigned to itself and decrypts the encrypted first random number M _hk . One random number N _h ′ is obtained (S608). If the second public key K _m with the HDD is, if consistent with the first public key K _h with the host system, the same as the first random number N _{h 'that} is decrypted first random number N _h . However, if the same is the second public key K _m with the HDD is an if not coincident with the first public key K _h with the host system, the first random number N _h which is decrypted first random number N _{h '} It will not be.

HDD (the second public key encryption unit 904) encrypts the second random number _{N m.} The HDD transfers the encrypted second random number M _mk to the host system via the ATA interface 916 (S610). Here, the encryption method used is a public key encryption method. The second random number N _m is encrypted with the second public key K _m given to the HDD, and an encrypted second random number M _mk is generated as a result of the encryption. The HDD transfers the encrypted second random number M _mk to the host system through the ATA interface 916.

The host system (first secret key encryption unit 806) decrypts the encrypted second random number M _mk transferred from the HDD with the first public key K _h assigned to itself, and decrypts the first Two random numbers N _m ′ are obtained (S612). If the second public key possessed by the HDD matches the first public key possessed by the host system, the second random number N _m is the same as the decrypted second random number N _m ′. If the second public key of the HDD does not match the first public key of the host system, the second random number N _m and the decrypted second random number N _m ′ are not the same.

The host system (first secret key encryption unit 806) uses the first random number N _h generated by itself and the decrypted second random number N _m ′ to identify the ID (common stored in the host system and HDD). Or the second ID), and the encrypted ID (second encrypted ID) is transferred to the HDD (S614). Here, the encryption method used is a secret key encryption method.

When the general DES method is used as the secret key encryption method, the host system encrypts the ID using the decrypted second random number N _m ′, and transfers the encrypted ID to the HDD. Since the decrypted second random number N _m ′ is generated based on the second random number N _m generated in the HDD, the decrypted second random number N _m ′ is different from the second random number N _m. In this case, authentication fails.

However, for more efficient authentication, the ID is encrypted and transferred using two secret keys as a 3DES (triple DES) method, and at this time, the first random number _Nh becomes the first secret key. , The decrypted second random number N _m ′ becomes the second secret key.

  FIG. 7 is a diagram schematically showing the 3DES system. Referring to FIG. 7, in the 3DES encryption process, the transfer text P is encrypted with two secret keys K1 and K2. First, the first ciphertext A is generated by encrypting the transfer text P with the first secret key K1, the second ciphertext B is generated by decrypting the first ciphertext A with the second secret key K2, and finally , The second ciphertext B is encrypted again with the first secret key K1 to generate the final third ciphertext C. In this way, the third ciphertext C is generated by the 3DES method.

  Referring to FIG. 7, in the decryption process of the 3DES method, the ciphertext C is decrypted with the same two secret keys K1 and K2 used at the time of encryption. First, the ciphertext C is decrypted with the first secret key K1 to generate the second ciphertext B, the second ciphertext B is encrypted with the second secret key K2 to generate the first ciphertext A, and finally , The first ciphertext A is decrypted again with the first secret key K1 to generate the final transfer text P. In this way, the transfer sentence P is generated by the 3DES method.

The HDD (second secret key encryption unit 906) decrypts the encrypted ID transferred from the host system with the decrypted first random number N _h ′ and the second random number N _m . Get the assigned ID. The HDD (second authentication control unit 910) authenticates the host system by comparing the decrypted ID with its own ID (S616). Here, the decrypted first random number N _h ′ becomes the first secret key, and the second random number N _m becomes the second secret key.

If the decrypted first random number N _h ′ possessed by the HDD is the same as the first random number N _h possessed by the host system, the decrypted ID and ID are the same and the authentication succeeds. If the authentication is successful, the next authentication process is performed. On the other hand, if the decrypted first random number N _h ′ possessed by the HDD is not the same as the first random number N _h possessed by the host system, the decrypted ID and ID will be different. , Authentication fails.

The host system (first secret key encryption unit 806) decrypts the encrypted ID transferred from the HDD with the first random number N _h and the decrypted second random number N _m ′, and decrypts the decrypted ID. Get. The host system (first authentication control unit 810) authenticates the HDD by comparing the decrypted ID with its own ID (S620). Here, the decrypted second random number N _m ′ becomes the first secret key, and the first random number N _h becomes the second secret key.

If the decrypted second random number N _m ′ possessed by the host system is the same as the second random number N _m possessed by the HDD, the decrypted ID and ID are the same and the authentication succeeds. On the other hand, if the decrypted second random number N _m ′ possessed by the host system is not the same as the second random number N _m possessed by the HDD, the decrypted ID and ID are different. Therefore, authentication fails.

  Before the authentication method shown in FIG. 6 is performed, the HDD is first set to a locked state. If the locked state changes to the unlocked state after authentication fails, it is possible to prevent the information from being exposed by deleting all information in the HDD.

  The STB shown in FIG. 8 allows the VOD service data to be recorded on the HDD and the VOD service data to be reproduced only when the host system and the HDD have succeeded in mutual authentication. If the authentication of either one of the host system and the HDD fails, the STB does not allow the VOD service data to be recorded on the HDD and the VOD service data to be reproduced.

  Similarly, the HDD allows the VOD service data to be recorded on the HDD and the VOD service data to be reproduced only when the host system and the HDD succeed in mutual authentication. If the authentication of one of the host system and the HDD fails, the HDD does not allow the VOD service data to be recorded on the HDD and the VOD service data to be reproduced.

  Note that various time points can be set as the authentication time points of the respective authentication devices in FIG. For example, the authentication may be performed before starting a recording session or a playback session, or may be performed during an initialization process after the STB is turned on. It is of course effective to perform the authentication process by the apparatus shown in FIG. 8 before starting the recording session or the playback session. However, in consideration of the fact that the HDD cannot be attached or detached after the STB starts operating once. For example, authentication is preferably performed only once in the initialization process.

  In step S614, the first secret key encryption unit 806 of the host system sets an ID common to the host system and the recording device (HDD) as at least one of the first random number and the second random number (the decrypted second random number). In step S620, the encrypted ID transferred from the recording device may be decrypted with at least one of the first random number and the second random number (the decrypted second random number). Good.

  In step S618, the second secret key encryption unit 906 of the recording device (HDD) uses at least a first random number (decrypted first random number) or a second random number as an ID common to the host system and the recording device. And the second encrypted ID transferred from the host system to the recording device is decrypted with at least one of the first random number (decoded first random number) and the second random number. May be.

  According to this embodiment, only when the host system and the HDD authenticate each other, data is recorded on the HDD or data on the HDD is reproduced. This prevents unauthorized users from using data illegally.

  The present invention can be implemented in a method, an apparatus, and a system. That is, in the above-described embodiment, the operations of the respective units are related to each other, and can be replaced as a series of operations in consideration of the relationship between each other. And it can be set as embodiment of method invention by replacing in this way.

  Further, by replacing the operation of each unit with the processing of each unit, the program can be implemented. Further, by storing the program in a computer-readable recording medium in which the program is recorded, an embodiment of a computer-readable recording medium recorded in the program can be obtained.

  Each processing in the embodiment of the program and the embodiment of the computer-readable recording medium on which the program is recorded is achieved by the computer executing the program. In the case of a program embodiment, the constructing means of the present invention is a code segment that necessarily performs the necessary work. The program or code segment may be stored on a computer readable recording medium or transferred by a computer data signal combined with a carrier wave on a transfer medium or communication network. Computer-readable recording media include any media that can store or transfer information.

  Examples of computer-readable recording media include electronic circuits, semiconductor memory devices, ROM, flash memory, EROM (Erasable ROM), floppy (registered trademark) disks, optical disks, hard disks, optical fiber media, and radio frequency (Radio Frequency): RF) network. Computer data signals include any signal that can be transmitted over a transfer medium such as an electronic network channel, optical fiber, air, electronic system, RF network.

  As mentioned above, although preferred embodiment of this invention was described referring an accompanying drawing, it cannot be overemphasized that this invention is not limited to the example which concerns. It will be apparent to those skilled in the art that various changes and modifications can be made within the scope of the claims, and these are naturally within the technical scope of the present invention. Understood.

  The present invention is applicable to data processing devices such as STB, PCR, monitor, PC, and VCR having recording devices such as HDDs, CD recording devices, or DVDs.

2 is a diagram illustrating a general configuration of a VOD service. 2 is a diagram illustrating an example of an STB including an HDD. It is drawing which shows the structure of an illegal use prevention apparatus. It is drawing which shows an authentication method typically. 6 is a diagram schematically illustrating assigning an ID and a public key encryption key used in an authentication method according to an embodiment of the present invention. It is drawing which shows typically the authentication method by the same embodiment. It is drawing which shows typically the 3DES system in the embodiment. It is a block diagram which shows the structure of the authentication apparatus in the embodiment.

Explanation of symbols

800 First authentication device 802 First random number generation unit 804 First public key encryption unit 806 First secret key encryption unit 808 First memory 810 First authentication control unit 812 RAM
814 Data transfer module 816 ATA interface 900 Second authentication device 902 Second random number generating unit 904 Second public key encryption unit 906 Second secret key encryption unit 908 Second memory 910 Second authentication control unit 912 RAM
914 Data transfer module 916 ATA interface

Claims (28)

An authentication method for authenticating a host system that processes data and a data processing device that includes a recording device that accesses the host system:
A process in which the host system and the recording device generate a first random number and a second random number, respectively;
Transferring the first random number and the second random number from the host system and the recording device to the recording device and the host system, respectively;
A process in which the host system encrypts a common ID stored in the host system and the recording device with the first random number, and transfers the encrypted ID to the recording device;
The recording device encrypting the common ID with the second random number and transferring the encrypted ID to the host system;
The host system decrypting the encrypted ID transferred from the recording device;
The recording device decrypting the encrypted ID transferred from the host system;
A process in which the host system compares an ID decrypted by the host system with a common ID stored in the host system and authenticates the recording device based on the comparison result;
A method in which the recording device compares the decrypted ID by the recording device with a common ID stored in the recording device and authenticates the host system based on the comparison result. The authentication method further includes:
Encrypting the first random number and the second random number with a first public key and a second public key respectively assigned to the host system and the recording device;
The process of transferring the first random number and the second random number from the host system and the recording device to the recording device and the host system, respectively.
The authentication method according to claim 1, wherein the encrypted first random number and the second random number are respectively transferred. The host system and the recording device respectively encrypt IDs common to the host system and the recording device with the first random number and the second random number,
The host system and the recording device encrypt the common ID with either a random number obtained by decrypting the encrypted second random number or a random number obtained by decrypting the encrypted first random number. The authentication method according to claim 2, wherein: The process of encrypting each common ID includes:
The authentication method according to claim 1, wherein the authentication method is executed using a DES encryption method. The host system and the recording device respectively encrypt IDs common to the host system and the recording device with the first random number and the second random number,
The host system and the recording device respectively decrypting the encrypted second random number and the encrypted first random number;
The host system and the recording apparatus further include a step of encrypting the common ID using the decrypted second random number and the decrypted first random number, respectively. The authentication method as described in any one of Claims 2-4. The process of encrypting each common ID includes:
The authentication method according to claim 1, wherein the authentication method is executed using a 3DES encryption method. The authentication method further includes:
Setting the recording device in a locked state before the authentication begins;
The method according to any one of claims 1 to 6, further comprising: when the authentication fails, setting the recording device in an unlocked state and deleting data recorded in the recording device. Authentication method. An authentication device for authenticating a host system that processes data and a data processing device that includes a recording device that accesses the host system:
A first authentication device provided in the host system and having a first random number generation unit for generating a first random number, a first secret key encryption unit, and a first authentication control unit;
A second authentication device provided in the recording device, the second authentication device having a second random number generation unit for generating a second random number, a second secret key encryption unit, and a second authentication control unit;
The first secret key encryption unit
An ID common to the host system and the recording device is encrypted with at least one of a value corresponding to a first random number or a second random number, and the encrypted ID transferred from the recording device is a first random number. Or decrypting with at least one of the values corresponding to the second random number,
The first authentication control unit
Based on the second random number transferred from the recording device to the host system, controlling the first random number generator in response to an access request from the recording device, generating a first random number, and transferring the first random number to the recording device. The first secret key encryption unit is controlled to generate a second encrypted ID, the second encrypted ID is transferred to the recording device, and the first encryption is performed from the recording device. When the received ID is transferred, the first secret key encryption unit is controlled to decrypt the first encrypted ID, and the recording is performed based on the decrypted ID and the common ID. Determine whether the device is a valid device, and if the recording device is a valid device, authenticate the recording device;
The second secret key encryption unit
An ID common to the host system and the recording device is encrypted with at least one of a value corresponding to a first random number or a second random number, and a second encrypted data transferred from the host system to the recording device. The received ID is decrypted with at least one of a value corresponding to the first random number and a second random number,
The second authentication control unit
Responsive to an authentication request from the host system, the second random number generator is controlled to generate a second random number, transfer the second random number to the host system, and based on the first random number transferred from the host system to the recording device The second secret key encryption unit is controlled to generate a first encrypted ID, the first encrypted ID is transferred to the host system, and the second encryption is performed from the host system. When the encrypted ID is transferred, the second secret key encryption unit is controlled to decrypt the second encrypted ID, and the host is based on the decrypted ID and the common ID. An authentication apparatus that determines whether or not a system is a legitimate apparatus and authenticates the host system when the host system is a legitimate apparatus. The first authentication device further includes:
A first public key encryption unit for encrypting the first random number generated by the first random number generation unit with a first public key assigned to the host system;
The second authentication device further includes:
The authentication according to claim 8, further comprising a second public key encryption unit that encrypts the second random number generated by the second random number generation unit with a second public key assigned to the recording device. apparatus. The first public key encryption unit and the second public key encryption unit are:
The authentication apparatus according to claim 9, wherein the first random number and the second random number are each encrypted by an RSA method. The first secret key encryption unit
Generating a value corresponding to the second random number for encrypting the common ID by decrypting the encrypted second random number transferred from the second authentication device;
The second secret key encryption unit
The value according to the first random number for encrypting the common ID is generated by decrypting the encrypted first random number transferred from the first authentication device. The authentication device according to any one of 10. The first secret key encryption unit and the second secret key encryption unit are:
The authentication apparatus according to any one of claims 8 to 11, wherein the common ID is encrypted by a DES encryption method. The first secret key encryption unit and the second secret key encryption unit are:
The authentication apparatus according to claim 8, wherein the common ID is encrypted by a 3DES encryption method. The first secret key encryption unit
Encrypting the common ID with a second random number obtained by decrypting the first random number generated by the first random number generator and the second random number transferred from the second authentication device;
The second secret key encryption unit
9. The common ID is encrypted using a first random number obtained by decrypting a first random number transferred from the first authentication device and a second random number generated by the second random number generation unit. 14. The authentication device according to any one of 13. A computer-readable recording medium recording a program that causes a computer to execute authentication processing between a host system that processes data and a data processing device that includes the recording device that accesses the host system:
Processing for generating a first random number and a second random number respectively in the host system and the recording device;
Processing for transferring the first random number and the second random number from the host system and the recording device to the recording device and the host system, respectively;
A process of encrypting an ID common to the host system and the recording device with the generated first random number and transferring the encrypted ID to the recording device in the host system;
A process of encrypting the common ID with the generated second random number in the recording device and transferring the encrypted ID to the host system;
A process of decrypting the encrypted ID transferred from the recording device in the host system;
A process of decrypting the encrypted ID transferred from the host system in the recording device;
A process of comparing the ID decrypted by the host system with the common ID stored in the host system, and authenticating the recording device by the host system based on the comparison result;
A process of comparing the common ID decrypted by the recording device with the common ID stored in the recording device, and causing the recording device to authenticate the host system based on the comparison result. A computer-readable recording medium on which a program is recorded. An authentication method for authenticating a data processing device having a recording device for accessing a host system;
A process in which the recording device encrypts an ID common to the host system and the recording device with a random number transferred from the host system, and transfers the encrypted random number to the host system;
The host system decrypting the encrypted ID transferred from the recording device;
Comparing the decrypted ID with a common ID stored in the host system to determine whether the decrypted ID corresponds to the ID of the host system;
Authenticating the recording device with the host system when the decrypted ID corresponds to a common ID stored in the host system. The authentication method further includes:
The authentication method according to claim 16, further comprising: encrypting a random number generated by the host system using a public key assigned to the host system. An authentication method for authenticating the host system by a host system that processes data and a data processing device that includes a recording device that accesses the host system:
A process in which the host system encrypts an ID common to the host system and the recording device using a random number transferred by the recording device, and transfers the encrypted ID to the recording device;
The recording device decrypting the encrypted ID transferred from the host system;
Comparing the decrypted ID with a common ID stored in the recording device to determine whether the decrypted ID corresponds to the ID of the recording device;
An authentication method comprising: a step of authenticating the host system by the recording device when the decrypted ID corresponds to a common ID stored in the recording device. The authentication method further includes:
19. The authentication method according to claim 18, further comprising: encrypting a random number generated by the recording device with a public key assigned to the recording device. An authentication device provided in a host system for authenticating access to data of the host system stored in a recording device:
A random number generator for generating random numbers;
A secret key encryption unit for encrypting and decrypting data;
In response to an access request from the recording device, the random number generation unit is controlled to generate a first random number, the generated first random number is transferred to the recording device, and the secret key encryption unit is controlled. , The second ID recorded in the host system is encrypted with a value corresponding to the first random number and the second random number transferred from the recording device, and the encrypted ID is converted into a second encrypted ID. To the recording device, and controls the secret key encryption unit to transfer the first encrypted ID, which is the encrypted ID transferred from the recording device, to the first and second random numbers. And an authentication control unit that authenticates the recording device when the decrypted ID corresponds to the second ID. An authentication device provided in a recording device for authenticating access to host system data stored in the recording device:
A random number generator for generating random numbers;
A secret key encryption unit for encrypting and decrypting data;
In response to an authentication request from the host system, the random number generation unit is controlled to generate a second random number, the generated second random number is transferred to the host system, and the secret key encryption unit is controlled, The first ID recorded in the recording device is encrypted with a value corresponding to the second random number and the first random number transferred from the host system, and the encrypted ID is used as the first encrypted ID. A value corresponding to the first random number is transferred to the host system and the second encrypted ID, which is an encrypted ID transferred from the host system, is controlled by the secret key encryption unit. And an authentication control unit that authenticates the host system when the decrypted ID corresponds to the first ID. An authentication method for authenticating access to a recording device that stores data provided by a host system that stores a given second ID and a given first ID:
Storing a second value corresponding to the second ID in the host system and storing a first value corresponding to the first ID in the recording device;
Generating first and second random numbers in the host system and the recording device, respectively;
Transferring the first random number to the recording device and transferring the second random number to the host system;
The second ID and the first ID are encrypted with the first and second random numbers, respectively, and the encrypted second ID and the encrypted first ID are stored in the recording device and the host system. Each transfer process;
Decrypting the encrypted second ID in the recording device and decrypting the encrypted first ID in the host system;
A process in which the host system authenticates the recording device when the decrypted second ID and the second value are the same;
And a step of authenticating the host system by the recording device when the decrypted first ID and the first value are the same. The process of encrypting the second ID and the first ID with the first and second random numbers, respectively,
The authentication method according to claim 22, wherein the authentication method is executed by using a DES encryption method. The process of encrypting the second ID and the first ID with the first and second random numbers, respectively,
The authentication method according to claim 22, wherein the authentication method is performed using a 3DES encryption method. The process of transferring the first random number and the second random number, respectively,
Encrypting the first and second random numbers with a public key before transferring the first and second random numbers;
25. The method further comprising: decrypting the first and second random numbers after transferring the first random number and the second random number encrypted based on the public key. The authentication method described in the section. An access control method for controlling access by a playback device to data obtained from a host system and recorded in a recording device of the playback device:
A step of mutually authenticating the host system and the recording device at a predetermined time before reproducing the data recorded on the recording device;
An access control method including a step of permitting the playback device to access data recorded in the recording device only when the host system and the recording device are both successfully authenticated by the mutual authentication process. The mutual authentication process includes:
The host system and the recording device exchange encrypted information corresponding to the IDs of the host system and the recording device, respectively, and the exchanged information is decrypted by the host system and the recording device, respectively. Process,
Determining whether the information decrypted by the host system and the recording device respectively corresponds to a given ID of the host system and the data recording device, respectively. The access control method according to claim 26. The access control method further includes:
28. The method according to claim 26, further comprising a step of deleting data recorded in the recording device when authentication of any one of the host system and the recording device is not successful. The access control method described in 1.

Images