JP2006140623A - Information processor - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To realize an information processor in which broadcast program data can be handled securely on an open system architecture, without using a B-CAS card. <P>SOLUTION: The copyright protection LSI203 of a computer creates a key (Ks) for descrambling (decrypting) a scrambled program content, using ECM and EMM included in broadcast program data, and a device key (Kd) stored in the copyright protection LSI203. The copyright protection LSI203 descrambles the program content with the scramble key (Ks) and then re-encrypting that program content. The copyright protection LSI203 outputs the encrypted program content over a PCI bus. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus such as a personal computer, and more particularly to an information processing apparatus capable of receiving broadcast program data.

  In recent years, personal computers having the same AV function as audio / video (AV) devices such as DVD (Digital Versatile Disc) players and TV devices have been developed. Many personal computers of this type have a TV function for receiving and reproducing broadcast program data such as TV.

  Recently, with the digitization of broadcasting, a mechanism for protecting the copyright of broadcast program data has begun to be requested.

Patent Document 1 discloses an apparatus that descrambles broadcast program data such as a scrambled pay broadcast program using an IC card called a B-CAS (BS Conditional Access System) card. The B-CAS card is an IC card that stores contract information with a broadcasting business type. The scrambled broadcast program data can be reproduced by inserting the B-CAS card into the receiver.
JP 2001-45432 A

  However, the B-CAS card is a card distributed only to contractors. For this reason, in the conventional content protection system using the B-CAS card, the broadcast programs that can be protected are basically only pay broadcast programs, and it is difficult to protect other broadcast programs. Since digital broadcast broadcast program data is not deteriorated by copying, a new copyright protection mechanism is required for all broadcast program data as well as pay broadcast programs.

  Further, since the B-CAS card is a removable medium, there is a risk that the B-CAS card is inserted into an unauthorized receiver. In this case, unauthorized use of broadcast program data cannot be prevented.

  In addition, since an information processing apparatus such as a personal computer employs an open system architecture, a dedicated card slot and a dedicated card controller are required in order to make it possible to safely use the B-CAS card in a personal computer. It is necessary to provide This is a major cause of increasing the cost of the personal computer. Further, in a portable personal computer such as a notebook type, it is difficult to provide a card slot dedicated to a B-CAS card due to a limitation in mounting space.

  The present invention has been made in view of the above circumstances, and is an information processing apparatus that can safely handle broadcast program data on an open system architecture such as a personal computer without using a B-CAS card. The purpose is to provide.

  In order to solve the above-described problem, the present invention provides an information processing apparatus capable of receiving broadcast program data, wherein the program content encrypted with the first encryption key and the first encryption key are used as the second encryption key. 1st information obtained by encrypting with an encryption key, and 2nd information obtained by encrypting said 2nd encryption key with device identification information which identifies a legitimate receiving terminal A reception unit that receives broadcast program data, a bus that transfers various data, a storage unit that is built in the information processing apparatus and stores device identification information that identifies the information processing apparatus, and received by the reception unit The first encryption key is generated using the first information and the second information included in the broadcast program data and the device identification information stored in the storage unit, and the generated first A decrypting unit that decrypts the encrypted program content included in the received broadcast program data with the encryption key, and encrypts the decrypted program content with a predetermined encryption key, And an encryption unit for outputting the program content encrypted by the encryption key onto the bus.

  According to the present invention, it is possible to safely handle broadcast program data on an open system architecture such as a personal computer without using a B-CAS card.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
First, the configuration of an information processing apparatus according to an embodiment of the present invention will be described with reference to FIG. 1 and FIG. This information processing apparatus is realized as, for example, a notebook personal computer 10.

  FIG. 1 is a perspective view of the notebook personal computer 10 with the display unit opened. The computer 10 includes a computer main body 11 and a display unit 12. The display unit 12 incorporates a display device composed of a TFT-LCD (Thin Film Transistor Liquid Crystal Display) 17, and the display screen of the LCD 17 is positioned substantially at the center of the display unit 12.

  The display unit 12 is attached to the computer main body 11 so as to be rotatable between an open position and a closed position. The computer main body 11 has a thin box-shaped housing, and has a keyboard 13 on its upper surface, a power button 14 for powering on / off the computer 10, an input operation panel 15, a touch pad 16, and a speaker. 18A, 18B, etc. are arranged.

  The input operation panel 15 is an input device that inputs an event corresponding to a pressed button, and includes a plurality of buttons for starting a plurality of functions. These button groups also include a TV start button 15A and a DVD / CD start button 15B. The TV start button 15A is a button for starting a TV function for reproducing and recording TV broadcast program data. When the TV activation button 15A is pressed by the user, a TV application program for executing the TV function is activated.

  In the computer 10, in addition to a general-purpose main operating system, a dedicated sub-operating system for processing AV (audio / video) data is installed. The TV application program is a program that operates on the sub-operating system.

  When the power button 14 is pressed by the user, the main operating system is activated. On the other hand, when the TV activation button 15A is pressed by the user, the sub operating system is activated instead of the main operating system, and the TV application program is automatically executed. The sub-operating system has only a minimum function for executing the AV function. For this reason, the time required for booting up the sub operating system is much shorter than the time required for booting up the main operating system. Therefore, the user can immediately watch / record TV by simply pressing the TV start button 15A.

  The computer 10 can receive and play back both terrestrial digital TV broadcasts and terrestrial analog TV broadcasts. An antenna terminal 19 for terrestrial digital TV broadcasting and an antenna terminal 20 for terrestrial analog TV broadcasting are provided on the right side of the computer main body 11. In terrestrial digital TV broadcasting, the content of broadcast program data is scrambled (encrypted). In order to handle the scrambled broadcast program data, the computer main body 11 includes a storage unit in which device identification information is stored in advance. This storage unit is included in a dedicated LSI for copyright protection of digital broadcast program data. The device identification information is used as a device key (Kd) necessary for descrambling the scrambled broadcast program data. The device identification information is an ID for identifying the computer 10 and includes information for identifying the model of the computer 10 or information for identifying the manufacturer of the computer 10. Specifically, the device identification information includes a pair of a model ID for identifying the model of the computer 10 and a device key Kd corresponding to the model ID, or a manufacturer ID for identifying the manufacturer of the computer 10 and its manufacture. It consists of a pair with a device key Kd corresponding to the manufacturer ID. Hereinafter, the model ID and the manufacturer ID are referred to as a device ID.

  In terrestrial digital TV broadcasting, a stream obtained by multiplexing a plurality of broadcast program data is broadcast by broadcast waves. This stream includes program content encrypted (scrambled) with a scramble key (Ks), and common information (ECM: Entitlement Control Message) obtained by encrypting Ks with a work key (Kw: second encryption key). ) And some individual information (EMM: Entitlement Management Message) obtained by encrypting Kw with device identification information corresponding to a legitimate individual receiver (in a mimetic manner, a device key (Kd)). Including. Each EMM also includes a corresponding device ID.

  The computer 10 uses the ECM and EMM included in the broadcast program data and the device key (Kd) built in the computer main body 11 to scramble a key for descrambling (decrypting) the scrambled program content. (Ks) is generated. In this case, the device key (Kd) is used for decrypting the EMM including the device ID of the computer 10 and generating Kw. The generated Kw is used to decode the ECM and generate Ks.

  As described above, in the computer 10, the device key (Kd) is stored in the storage unit in the dedicated LSI built in the computer 10. The dedicated LSI cannot be accessed from the outside. For this reason, it is possible to easily prevent the device key (Kd) from leaking without using a special tamper resistant technique. Therefore, copyright protection of broadcast program data can be realized without using a B-CAS card.

  The DVD / CD start button 15B is a button for playing back video content recorded on a DVD or CD. When the DVD / CD activation button 15B is pressed by the user, a video reproduction application program for reproducing video content is activated. This video playback application program is also an application program that runs on the sub-operating system. When the DVD / CD start button 15B is pressed by the user, the sub operating system is started instead of the main operating system, and the video playback application program is automatically executed.

  Next, the system configuration of the computer 10 will be described with reference to FIG.

  As shown in FIG. 2, the computer 10 includes a CPU 101, a north bridge 102, a main memory 103, a south bridge 104, a graphics controller 105, a sound controller 106, a TMDS (Transition Minimized Differential Signaling) circuit 107, and a video processor 108. BIOS-ROM 109, LAN controller 110, hard disk drive (HDD) 111, DVD drive 112, card controller 113, wireless LAN controller 114, IEEE 1394 controller 115, embedded controller / keyboard controller IC (EC / KBC) 116, digital TV broadcast A reception processing unit 117 and an analog TV broadcast reception processing unit 118 are provided.

  The CPU 101 is a processor that controls the operation of the computer 10 and executes various application programs such as a main operating system / sub operating system and a TV application program loaded from the hard disk drive (HDD) 111 to the main memory 103. . The CPU 101 also executes a system BIOS (Basic Input Output System) stored in the BIOS-ROM 109. The system BIOS is a program for hardware control.

  The north bridge 112 is a bridge device that connects the local bus of the CPU 101 and the south bridge 104. The north bridge 102 also includes a memory controller that controls access to the main memory 103. The north bridge 102 also has a function of executing communication with the graphics controller 105 via an AGP (Accelerated Graphics Port) bus, a PCI express standard serial bus, or the like.

  The graphics controller 105 is a display controller that controls the LCD 17 used as a display monitor of the computer 10. Video data generated by the graphics controller 105 is sent to the video processor 108 via the TMDS circuit 107. The video processor 108 executes video processing (image quality adjustment processing) for improving the image quality of the video data from the graphics controller 105. The video data whose image quality has been improved by the video processor 108 is sent to the LCD 17. In addition, the video data with high image quality by the video processor 108 can be sent to the external TV 1 and the external HDMI monitor via the interfaces 3 and 4 provided in the computer main body 11, respectively.

  The south bridge 104 controls each device on an LPC (Low Pin Count) bus and each device on a PCI (Peripheral Component Interconnect) bus. The south bridge 104 incorporates an IDE (Integrated Drive Electronics) controller for controlling the HDD 111 and the DVD drive 112. Further, the south bridge 104 has a function of executing communication with the sound controller 106.

  The sound controller 106 is a sound source device and outputs audio data to be reproduced to the speakers 18A and 18B or an external 5.1 channel speaker system.

  The card controller 113 controls cards such as a PC card and an SD (Secure Digital) card. The wireless LAN controller 114 is a wireless communication device that performs wireless communication of, for example, IEEE 802.11 standard. The IEEE 1394 controller 115 executes communication with an external device via an IEEE 1394 standard serial bus. The embedded controller / keyboard controller IC (EC / KBC) 116 is a one-chip microcomputer in which an embedded controller for power management and a keyboard controller for controlling the keyboard (KB) 13 and the touch pad 16 are integrated. . The embedded controller / keyboard controller IC (EC / KBC) 116 has a function of powering on / off the computer 10 in accordance with the operation of the power button 14 by the user. Further, the embedded controller / keyboard controller IC (EC / KBC) 116 can also power on the computer 10 in response to the user's operation of the TV start button 15A and the DVD / CD start button 15B.

  The digital TV broadcast reception processing unit 117 is a device that receives a digital broadcast program such as terrestrial digital TV broadcast, and is connected to the antenna terminal 19. The digital TV broadcast reception processing unit 117 includes a digital TV tuner 201, an OFDM (Orthogonal Frequency Division Multiplexing) demodulator 202, and a copyright protection LSI 203 as shown in the figure. The digital TV tuner 201 and the OFDM demodulator 202 function as a tuner module that receives broadcast program data of terrestrial digital TV broadcasting. In terrestrial digital TV broadcasting, MPEG2 is used as a compression encoding method for each broadcast program data (video, audio). As the video format, standard definition SD (Standard Definition) and high resolution HD (High Definition) can be used.

  A tuner module including the digital TV tuner 201 and the OFDM 202 receives a broadcast signal of a specific channel from the TV broadcast signals input from the antenna terminal 19, and generates a transport stream (TS) from the received TV broadcast signal. Take out. The transport stream is a stream obtained by multiplexing a plurality of broadcast program data that have been compression-encoded. In terrestrial digital TV broadcasting, a plurality of programs are multiplexed for each channel (physical channel).

  The transport stream includes EMM, ECM, and the like in addition to broadcast content scrambled with a scramble key (Ks). The transport stream is composed of a plurality of continuous TS packet groups. Each TS packet is a 188-byte fixed-length packet as shown in FIG. A TS packet is composed of a header and a payload. The header size is a fixed length of 4 bytes. The header includes a 13-bit packet ID (PID). The PID is a packet identifier for identifying the corresponding TS packet. This PID is used to identify information included in the payload of the corresponding TS packet. Specifically, it is used for program identification, content type (audio / video) identification, EMM / ECM identification, and control information identification such as a program guide. Each TS packet group belonging to the same broadcast program has a PID specified by the PID table for the broadcast program.

  The copyright protection LSI 203 is a dedicated LSI for realizing copyright protection (RMP: Lights Management and Protection) of broadcast contents. In the copyright protection LSI 203, a device ID and a device key Kd corresponding to the computer 10 are stored in advance. The copyright protection LSI 203 uses the ECM and EMM included in the transport stream and the device key (Kd) to generate a scramble key (Ks). Then, the copyright protection LSI 203 descrambles (decrypts) the broadcast content with the scramble key (Ks), and decrypts the broadcast content.

  The copyright protection LSI 203 has a PID filtering function that extracts a TS packet group including a PID corresponding to a target broadcast program from a descrambled transport stream. With this PID filtering function, only the TS packet group corresponding to the broadcast program to be viewed / recorded can be sent to the TV application program. This eliminates the need for the PID filtering process on the TV application program side, thereby reducing the load on the TV application program. In addition, by performing the PID filtering process by the copyright protection LSI 203, the amount of data flowing through the PCI bus can be significantly reduced.

  The copyright protection LSI 203 has a function of re-encrypting the TS packet group extracted by the PID filtering function. This encryption is executed by using encryption keys respectively held by the copyright protection LSI 203 and the TV application program as a common key. This encryption key is a key different from the scramble key. With this encryption, the encrypted program content can be transferred to the main memory 103 via the PCI bus. Therefore, even if the program content is illegally extracted via the PCI bus, it is possible to prevent the extracted program content from being reproduced.

  The analog TV broadcast reception processing unit 118 is a device that receives an analog broadcast program such as a terrestrial analog TV broadcast, and is connected to the antenna terminal 20. The analog TV broadcast reception processing unit 118 includes an analog TV tuner 301 and an MPEG2 encoder 302 as shown in the figure. The analog TV tuner 301 is a tuner module that receives an analog broadcast program, and receives a broadcast signal of a specific channel from TV broadcast signals input from the antenna terminal 20. Broadcast program data received by the analog TV tuner 301 is sent to the MPEG2 encoder 302. The MPEG2 encoder 302 compresses and encodes broadcast program data using an MPEG2 standard encoding method, and generates a program stream (PS) in which the compression-encoded video data and the compression-encoded audio are multiplexed.

  Next, referring to FIG. 4, a mechanism for scrambling / descrambling broadcast content will be described.

  In the broadcasting station, a scramble processing unit 401 and encryption units 402 and 403 are provided. In the broadcasting station, a device ID and a device key Kd are managed for each valid receiver model or manufacturer. The scramble processing unit 401 encrypts (scrambles) broadcast program data (program content) with a scramble key Ks. The encryption unit 402 encrypts the scramble key Ks with the work key Kw, and generates an ECM including the encrypted scramble key Ks. The encryption unit 403 encrypts the work key Kw with a plurality of device keys Kd corresponding to a plurality of device IDs, respectively, and generates a plurality of EMMs each including the plurality of encrypted work keys Kw. In this case, a corresponding device ID is added to each EMM. The encryption of the scramble key Ks and the encryption of the work key Kw are executed using, for example, AES (Advanced Encryption Standard).

  The copyright protection LSI 203 of the computer 10 includes an EMM decryption unit 411, an ECM decryption unit 412, and a descrambling unit 413. The EMM decryption unit 411 decrypts the EMM with the device key Kd stored in the copyright protection LSI 203 to generate a work key Kw. In this case, the EMM decryption unit 411 identifies an EMM corresponding to the device ID of the computer 10 from the plurality of EMMs, and decrypts the identified EMM with the device key Kd. The ECM decryption unit 412 decrypts the ECM using the generated work key Kw to generate a scramble key Ks. The descrambling unit 413 decrypts (descrambles) the program content with the generated scramble key Ks.

  Next, an example of a specific configuration of the copyright protection LSI 203 will be described with reference to FIG.

  The copyright protection LSI 203 includes an RMP controller 501, a flash EEPROM 502, a RAM 503, a descrambler 504, a time stamp adding unit 505, a PID filter unit 506, an encryption unit 507, and a PCI interface unit 508, as shown in the figure. .

  The RMP controller 501 is a microcomputer that controls the operation of the copyright protection LSI 203, and executes processing for generating a scramble key Ks. The flash EEPROM 502 is a nonvolatile memory that stores a device key Kd together with a device ID. The RAM 503 is used as a working memory for the RMP controller 501.

  The descrambler 504 descrambles each scrambled transport stream (TS) packet with the scramble key Ks generated by the RMP controller 501. The descrambled TS packet is sent to the time stamp adding unit 505. The time stamp adding unit 505 adds a 4-byte time stamp to the head of the descrambled 188-byte TS packet to generate a 192-byte packet. The time stamp indicates a temporal order between TS packets. By converting the TS packet into a 192-byte packet with a time stamp by the time stamp adding unit 505, it becomes possible to efficiently execute an encryption process by the encryption unit 507 described later.

  The PID filter unit 506 is a filter circuit that extracts only the TS packet group necessary for reproducing the program to be viewed by monitoring the PID of the TS packet. That is, the PID filter unit 506, based on the PID of each TS packet group included in the descrambled transport stream, from among the TS packet groups included in the transport stream, TS corresponding to the broadcast program data to be viewed. Extract packets. The program to be viewed is instructed by the CPU 101. Each packet extracted by the PID filter unit 506 is sent to the encryption unit 507.

  The encryption unit 507 executes encryption processing for each 192-byte packet. This encryption is executed using the same AES method as that of ECM and EMM. The encryption unit 507 encrypts a 192-byte packet for each 128-bit block using an encryption key having a block size of 128 bits. That is, a 192-byte packet is divided into 12 blocks each having a 128-bit length, and is encrypted for each block. Each encrypted TS packet with a time stamp is sent to the PCI interface unit 508.

  The arithmetic circuit of the encryption unit 507 corresponding to the AES method is also used for arithmetic operations for decrypting ECM and EMM. That is, the RMP controller 501 receives the EMM from the PID filter unit 506. Then, the RMP controller 501 inputs the EMM and the device key Kd to the encryption unit 507, and causes the encryption unit 507 to execute the EMM decryption process. As a result, the RMP controller 501 can acquire the work key Kw from the encryption unit 507. Further, the RMP controller 501 receives the ECM from the PID filter unit 506. Then, the RMP controller 501 inputs the ECM and the work key Kw to the encryption unit 507, and causes the encryption unit 507 to execute the ECM decryption process. Thereby, the RMP controller 501 can acquire the scramble key Ks from the encryption unit 507.

  As described above, the RMP controller 501 executes the process for decrypting the EMM and the ECM using the encryption unit 507. Thereby, it is not necessary to mount an arithmetic circuit for AES encryption in the RMP controller 501, and the circuit can be simplified.

  Next, a series of processing procedures from reception to reproduction of terrestrial digital TV broadcast will be described with reference to FIG.

  A tuner module including a digital TV tuner 201 and an OFDM demodulator 202 receives broadcast program data of terrestrial digital TV broadcasting. The received broadcast program data is composed of the scrambled transport storm as described above. This transport storm is sent to the copyright protection LSI 203.

  In the copyright protection LSI 203, the transport storm is descrambled by the descrambler 504. As described above, the descrambling is executed using the scramble key Ks generated from the ECM, EMM, and device key Kd. Each descrambled TS packet is sent to the PID filter unit 506. The PID filter unit 506 has a PID table having 48 entries, and refers to this PID table to determine whether or not each TS packet from the descrambler 504 is a TS packet to be extracted. .

  The PID table includes a PID table 601A that holds a plurality of specified PID values and a PID table 601B that holds a plurality of designated PID values. The prescribed PID value is a PID value for identifying a TS packet including various control information defined by the terrestrial digital TV broadcast standard. The PID table 601A holds 16 defined PID values as shown in FIG. The designated PID value is a PID value for identifying a TS packet related to a broadcast program to be viewed, and is set in the PID table 601B by the RMP controller 501.

  The PID filter unit 506 refers to the PID tables 601A and 601B, and includes a TS packet group that includes a PID value that matches one of the PID value groups set in the PID tables 601A and 601B from among the descrambled TS packet groups To extract. That is, the PID filter unit 506 compares the PID value included in the descrambled TS packet with each PID value set in the PID tables 601A and 601B, and the PID value included in the descrambled TS packet is PID. It is determined whether or not it matches any of the PID values set in the tables 601A and 601B. If they match, the PID filter unit 506 sends the descrambled TS packet to the encryption unit 507.

  In this way, by performing the PID filtering process with reference to the PID tables 601A and 601B in which the PID values are set, the PID filtering process can be executed at high speed.

  The encryption unit 507 encrypts each TS packet sent from the PID filter unit 506 and outputs it on the PCI bus. As a result, the partial transport stream including only the encrypted TS packet group related to the broadcast program to be viewed is transferred to the main memory 103 via the PCI bus.

  The TV application program includes a software decoder 701. The software decoder 701 is a program that causes the CPU 101 to execute reception and reproduction of the partial transport stream from the copyright protection LSI 203. The software decoder 701 includes a decoding unit 711, a demultiplexer 712, a video decoder 713, and an audio decoder 714 as functional modules.

  The decryption unit 711 decrypts each TS packet included in the partial transport stream using an encryption key shared with the copyright protection LSI 203. The decoded partial transport stream is sent to the demultiplexer 712. The demultiplexer 712 separates the decoded partial transport stream into TS packets including video data and TS packets including audio data. Each TS packet containing video data is sent to the video decoder 713, and each TS packet containing audio data is sent to the audio decoder 714. The video decoder 713 decodes (decompresses) the video data. The decoded video data is displayed on the LCD 17. The audio decoder 714 decodes (expands) the audio data. The decoded audio data is output from the speakers 18A and 18B.

  As described above, by transferring the partial transport stream including only the encrypted TS packet group related to the broadcast program to be viewed from the copyright protection LSI 203 to the software decoder 701, the load on the CPU 101 required for decoding and reproduction of the broadcast content. Can be reduced. In addition, the amount of data flowing on the PCI bus can be greatly reduced.

  As described above, in this embodiment, it is possible to safely handle broadcast contents of terrestrial digital TV broadcasting on an open system architecture without using a B-CAS card. Therefore, it is possible to realize copyright protection of broadcast contents with a simple configuration.

  Note that the present invention is not limited to the above-described embodiment as it is, and can be embodied by modifying the constituent elements without departing from the scope of the invention in the implementation stage. In addition, various inventions can be formed by appropriately combining a plurality of components disclosed in the embodiment. For example, some components may be deleted from all the components shown in the embodiment. Furthermore, you may combine a component suitably in different embodiment.

The perspective view showing the general view of the computer concerning one embodiment of the present invention. The block diagram which shows the system configuration | structure of the computer of FIG. The figure which shows the structure of TS packet which comprises the broadcast program data received by the computer of FIG. The figure for demonstrating the descrambling process of the broadcast content performed in the computer of FIG. FIG. 2 is a block diagram showing a configuration of a copyright protection LSI provided in the computer of FIG. 1. The figure for demonstrating the procedure of a series of processes from reception of the terrestrial digital TV broadcast performed by the computer of FIG. 1 to reproduction | regeneration. The figure which shows the example of the regulation PID value group set to the PID table provided in the computer of FIG.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 10 ... Computer, 101 ... CPU, 117 ... Digital TV broadcast reception processing part, 118 ... Analog TV broadcast reception processing part, 203 ... Copyright protection LSI, 501 ... RMP controller, 502 ... Flash EEPROM, 504 ... Descrambler, 505 ... Time stamp adding unit, 506... PID filter unit, 507.

Claims (10)

In an information processing apparatus capable of receiving broadcast program data,
Program content encrypted with a first encryption key, first information obtained by encrypting the first encryption key with a second encryption key, and the second encryption key Receiving the broadcast program data including the second information obtained by encrypting the device with the device identification information for identifying the legitimate receiving terminal;
A bus for transferring various data,
A storage unit built in the information processing apparatus for storing device identification information for identifying the information processing apparatus;
The first encryption key is generated using the first information and the second information included in the broadcast program data received by the receiving unit and the device identification information stored in the storage unit. A decrypting unit for decrypting the encrypted program content included in the received broadcast program data with the generated first encryption key;
And an encryption unit for encrypting the decrypted program content with a predetermined encryption key and outputting the program content encrypted with the predetermined encryption key onto the bus. Processing equipment. Each of the first information and the second information is encrypted using a first encryption method,
2. The encryption unit includes means for encrypting the decrypted program content with the predetermined encryption key using the same encryption method as the first encryption method. Information processing device.   The information processing apparatus according to claim 2, wherein the decryption unit includes means for executing processing for decrypting each of the first information and the second information using the encryption unit.   The decryption unit is configured to generate the second encryption key by decrypting the second information using the device identification information stored in the storage unit, and the generated second Means for generating the first encryption key by decrypting the first information with an encryption key; and means for decrypting the encrypted program content with the generated first encryption key. The information processing apparatus according to claim 1, further comprising: The device identification information stored in the storage unit includes manufacturer identification information for identifying a manufacturer of the information processing apparatus and a device key corresponding to the manufacturer identification information,
The information processing apparatus according to claim 1, wherein the second information includes a second encryption key encrypted with the device key and the manufacturer identification information. The device identification information stored in the storage unit includes model identification information for identifying a model of the information processing apparatus and a device key corresponding to the model identification information,
The information processing apparatus according to claim 1, wherein the second information includes a second encryption key encrypted with the device key and the model identification information.   The information processing apparatus according to claim 1, wherein the storage unit, the decryption unit, and the encryption unit are included in one LSI built in the information processing apparatus. In an information processing apparatus capable of receiving broadcast program data,
Program content encrypted with a first encryption key, first information obtained by encrypting the first encryption key with a second encryption key, and the second encryption key Receiving the broadcast program data including the second information obtained by encrypting the device with the device identification information for identifying the legitimate receiving terminal;
A bus for transferring various data,
An LSI built in the information processing apparatus and protecting broadcast program data received by the receiving unit from unauthorized use, a storage unit for storing device identification information for identifying the information processing apparatus, and the receiving unit The first encryption key is generated using the first information and the second information included in the received broadcast program data and the device identification information stored in the storage unit, and the generated Decrypting the encrypted program content included in the received broadcast program data with the first encryption key; encrypting the decrypted program content with a predetermined encryption key; An LSI including an encryption unit that outputs program content encrypted with a predetermined encryption key onto the bus;
Reproduction means for receiving and reproducing the encrypted program content output on the bus, and comprising reproduction means including means for decrypting the encrypted program content Processing equipment. Each of the first information and the second information is encrypted using a first encryption method,
9. The encryption unit includes means for encrypting the decrypted program content with the predetermined encryption key using the same encryption method as the first encryption method. Information processing device.   The information processing apparatus according to claim 9, wherein the decryption unit includes means for executing processing for decrypting each of the first information and the second information using the encryption unit.

Images