JP2006173853A - Information processing apparatus, information recording medium and information processing method, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a configuration whereby utilization of contents can strictly be managed on the basis of encrypted contents. <P>SOLUTION: Data stored in an information recording medium are configured to be data subjected to encryption processing of two different modes comprising a first encryption process and a second encryption process that is applied to a particular region. In the case of reproducing contents, a drive side executes decryption processing for the second encryption processing data applied to the particular region and thereafter provides the processed data to a host, and a host side executes the decryption processing with respect to the first encryption processing for reproduction of the contents. Through the configuration above, in the case of reproducing the contents, it is a requirement that the drive side executes key generating processing and decryption processing according to a legitimate data processing sequence and legitimately processed data are provided to the host, the contents can be reproduced only by a combination of a drive with a legitimate license and the host so as to realize the strict contents utilization management. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an information processing apparatus, an information recording medium, an information processing method, and a computer program. More specifically, the present invention relates to an information processing apparatus, an information recording medium, an information processing method, and a computer program that realize strict content use management based on content encryption processing.

  Various software data such as audio data such as music, image data such as movies, game programs, and various application programs (hereinafter referred to as “Content”) are recorded on a recording medium such as a blue laser using a blue laser. -It can be stored as digital data on a ray disc, DVD (Digital Versatile Disc), MD (Mini Disc), or CD (Compact Disc). In particular, a Blu-ray disc using a blue laser is a disc capable of high-density recording, and can record a large volume of video content as high-quality data.

  Digital contents are stored in these various information recording media (recording media) and provided to users. A user plays back and uses content on a playback device such as a personal computer (PC) or disc player.

  Many contents, such as music data and image data, generally have distribution rights or the like held by the creator or seller. Therefore, when distributing these contents, it is common to adopt a configuration that restricts the use of the contents, that is, permits the use of the contents only to authorized users and prevents unauthorized copying or the like. It is the target.

  According to the digital recording device and the recording medium, for example, recording and reproduction can be repeated without deteriorating images and sound, and illegally copied content is distributed via the Internet, and the content is copied to a CD-R or the like. Problems such as the distribution of so-called pirated discs and the use of copy contents stored on hard disks such as PCs have become widespread.

  A large-capacity recording medium such as a DVD or a recording medium using a blue laser that has been developed in recent years can record a large amount of data, for example, one movie to several movies as digital information on one medium. Is possible. Thus, when video information and the like can be recorded as digital information, it is an increasingly important issue to prevent unauthorized copying and protect the copyright holder. In recent years, in order to prevent such illegal copying of digital data, various techniques for preventing illegal copying on digital recording devices and recording media have been put into practical use.

  For example, a DVD player employs a content scramble system. In a content scramble system, video data, audio data, etc. are encrypted and recorded on a DVD-ROM (Read Only Memory), and the key used to decrypt the encrypted data is licensed. To a DVD player. The license is given to a DVD player designed to comply with a predetermined operation rule such as not performing illegal copying. Therefore, a licensed DVD player can reproduce images and sounds from the DVD-ROM by decrypting the encrypted data recorded on the DVD-ROM using a given key.

  On the other hand, an unlicensed DVD player does not have a key for decrypting encrypted data, and therefore cannot decrypt encrypted data recorded on a DVD-ROM. As described above, in the content scramble system configuration, a DVD player that does not satisfy the conditions required at the time of license cannot reproduce a DVD-ROM on which digital data is recorded, so that unauthorized copying is prevented. It has become.

  However, such a cryptographic processing system and scramble system are not perfect, and there is a problem that key information is illegally acquired by various analysis processes, and the illegally acquired key is distributed via the Internet. Has also occurred. Due to the occurrence of such a situation, illegal reproduction or duplication of content has spread, causing infringement problems of copyright and usage rights of content.

  The present invention has been made in view of such a situation, and in the use of content of an information recording medium in which various contents required for use management such as copyright management are stored, the contents stored in the recording medium are stored. It is an object to provide an information processing apparatus, an information recording medium, an information processing method, and a computer program that devise the encryption configuration, make it difficult to obtain unauthorized key information, and realize strict content usage management To do.

The first aspect of the present invention is:
A drive device that is mounted with an information recording medium and executes data reading processing from the information recording medium,
A data processing unit that executes encryption key generation processing based on information stored in the information recording medium and that performs decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key ,
In the drive device, the data processing unit outputs the data that has been subjected to the specific area decoding process to a host device that executes the reproduction process.

  Furthermore, in an embodiment of the drive device of the present invention, the data processing unit is configured to execute encryption key generation processing based on physical index configuration data stored in the information recording medium as information recording medium supplementary information. It is characterized by that.

  Furthermore, in an embodiment of the drive device of the present invention, the data processing unit is configured to store the specific region data in specific region position information stored in a memory in the drive device or a specific region position stored in an information recording medium. The selection is performed according to the information or the specific region position information acquired from the outside, or the data selection is performed according to a preset pattern to perform the extraction process.

  Furthermore, in one embodiment of the drive device of the present invention, the specific area includes a management data area in which a reading process prior to content reading executed when reproducing content stored in an information recording medium is requested, and the data The processing unit is configured to execute data decoding processing of a specific area including the management data area.

Furthermore, in one embodiment of the drive device of the present invention, the data processing unit is included in the recording data of the information recording medium. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
An area including at least one of the data a to e is selected as a specific area, and decoding processing of the selected specific area data is executed.

  Furthermore, in one embodiment of the drive device of the present invention, the specific area is an area including anchor information in the UDF file system, and the data processing unit executes a data decoding process of the specific area including the anchor information. It is the structure.

  Furthermore, in one embodiment of the drive device of the present invention, the specific area is an area including AIA information in a BDFS file system, and the data processing unit executes data decoding processing of the specific area including the AIA information. It is the structure.

Furthermore, the second aspect of the present invention provides
An information processing apparatus comprising a drive that mounts an information recording medium and executes data reading processing from the information recording medium, and a host that executes data processing on input data from the drive,
The drive is
A data processing unit that executes encryption key generation processing based on information stored in the information recording medium and that performs decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key ,
The data processing unit has a configuration for outputting data subjected to a specific area decoding process to the host,
The host is
An information processing apparatus having a configuration in which a unit key corresponding to each content management unit stored in the information recording medium is generated and content decryption is executed based on data processing to which the unit key is applied .

Furthermore, in one embodiment of the information processing apparatus of the present invention, the host generates the unit key,
a. Configuration data of copy / playback control information set corresponding to the content management unit;
b. A content hash that is a hash value based on the configuration data of the content management unit;
c. A recording seed corresponding to the content management unit;
It is the structure which performs the data processing which applied the data of at least any one of said a-c.

  Furthermore, in an embodiment of the information processing apparatus of the present invention, the data processing unit of the drive executes encryption key generation processing based on the configuration data of the physical index stored in the information recording medium as the information recording medium supplementary information. It is the structure.

  Furthermore, in one embodiment of the information processing apparatus of the present invention, the data processing unit of the drive stores the specific area data in specific area position information stored in a memory in the drive apparatus or in an information recording medium. The selection is performed according to the specific region position information or the specific region position information acquired from the outside, or the data selection is performed according to a preset pattern to perform the extraction process.

  Furthermore, in one embodiment of the information processing apparatus of the present invention, the specific area includes a management data area in which a reading process prior to content reading executed when reproducing content stored in an information recording medium is requested, The data processing unit of the drive is configured to execute data decoding processing of a specific area including the management data area.

Furthermore, in one embodiment of the information processing apparatus of the present invention, the data processing unit of the drive is included in the recording data of the information recording medium. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
An area including at least one of the data a to e is selected as a specific area, and decoding processing of the selected specific area data is executed.

Furthermore, the third aspect of the present invention provides
An information recording medium manufacturing method,
A content encryption processing step for executing a first encryption processing of content to be recorded on the information recording medium;
A specific area encryption processing step for executing a second encryption process on the selected specific area for the processing data in the content encryption step;
Recording the data subjected to the first and second encryption processing on an information recording medium;
An information recording medium manufacturing method characterized by comprising:

  Furthermore, in an embodiment of the information recording medium manufacturing method of the present invention, the information recording medium manufacturing method further includes an encryption key generation process based on the configuration data of the physical index stored in the information recording medium as the information recording medium supplementary information. A key generation step for executing the second encryption process for the specific region to which the encryption key based on the configuration data of the physical index generated in the key generation step is applied. It is characterized by being.

  Furthermore, in one embodiment of the information recording medium manufacturing method of the present invention, the specific area encryption processing step includes a reading process preceding content reading executed when reproducing the content stored in the information recording medium as the specific area. This is a step of selecting a required management data area and executing a second encryption process on a specific area including the management data area.

Furthermore, in one embodiment of the information recording medium manufacturing method of the present invention, the specific area encryption processing step is included in the recording data of the information recording medium. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
An area including at least one of the data a to e is selected as a specific area, and a second encryption process is executed on the selected specific area data.

  Furthermore, in one embodiment of the information recording medium manufacturing method of the present invention, the specific area encryption processing step selects an area including anchor information in the UDF file system as the specific area, and for the selected specific area data It is a step for executing the second encryption processing.

  Furthermore, in an embodiment of the information recording medium manufacturing method of the present invention, the specific area encryption processing step selects an area including AIA information in the BDFS file system as the specific area, and selects the specific area data for the selected specific area data. It is a step for executing the second encryption processing.

Furthermore, the fourth aspect of the present invention provides
An information recording medium,
Store data including encrypted content as recorded data,
The recorded data is recorded data including encrypted content subjected to a first encryption process, and the specific area constituting a part of the recorded data is further added to the first encryption process, The information recording medium is characterized in that the data is subjected to the second encryption processing.

  Furthermore, in an embodiment of the information recording medium of the present invention, the information recording medium further stores a physical index as information accompanying the information recording medium, and the second encryption processing for the specific area includes the physical recording It is an encryption process using an encryption key based on index configuration data.

  Furthermore, in one embodiment of the information recording medium of the present invention, the specific area subjected to the second encryption process is subjected to a reading process prior to the content reading executed when reproducing the content stored in the information recording medium. It is an area including a required management data area.

Furthermore, in one embodiment of the information recording medium of the present invention, the specific area subjected to the second encryption processing is included in the recording data of the information recording medium a. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
The region includes at least one of the data a to e.

  Furthermore, in one embodiment of the information recording medium of the present invention, the specific area subjected to the second encryption processing is an area including anchor information in the UDF file system.

  Furthermore, in one embodiment of the information recording medium of the present invention, the specific area subjected to the second encryption processing is an area including AIA information in a BDFS file system.

Furthermore, the fifth aspect of the present invention provides
An information processing method for executing reproduction processing of content stored in an information recording medium,
Drive-side data for executing encryption key generation processing based on information stored in the information recording medium and performing decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key in the drive Processing steps;
A host-side data processing step of generating a unit key corresponding to each content management unit stored in the information recording medium in the host and executing content decryption based on data processing to which the unit key is applied;
There is an information processing method characterized by comprising:

Furthermore, in an embodiment of the information processing method of the present invention, the host-side data processing step includes generating the unit key,
a. Configuration data of copy / playback control information set corresponding to the content management unit;
b. A content hash that is a hash value based on the configuration data of the content management unit;
c. A recording seed corresponding to the content management unit;
Data processing to which at least one of the data a to c is applied is executed.

  Furthermore, in an embodiment of the information processing method of the present invention, the drive-side data processing step executes encryption key generation processing based on physical index configuration data stored in the information recording medium as information recording medium supplementary information. Including steps.

  Furthermore, in an embodiment of the information processing method of the present invention, the drive side data processing step stores the specific area data in specific area position information stored in a memory in the drive device or in an information recording medium. It includes a step of executing a process of selecting and extracting according to specific area position information or specific area position information acquired from outside, or executing data selection according to a preset pattern.

  Furthermore, in an embodiment of the information processing method of the present invention, the drive-side data processing step includes a management data area in which a reading process preceding a content reading executed when reproducing the content stored in the information recording medium is requested. It is a step of selecting a region to be included as a specific region and executing a data decoding process for the selected specific region.

Furthermore, in one embodiment of the information processing method of the present invention, the drive side data processing step is included in the recording data of the information recording medium. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
A region including at least one of the data a to e is selected as a specific region, and decoding processing of the selected specific region data is executed.

Furthermore, the sixth aspect of the present invention provides
A computer program that causes a computer to execute reproduction processing of content stored in an information recording medium,
A drive-side data processing step for executing encryption key generation processing based on information stored in the information recording medium, and executing decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key; ,
A host-side data processing step of generating a unit key corresponding to each content management unit stored in the information recording medium and executing content decryption based on data processing to which the unit key is applied;
There is a computer program characterized by comprising:

  The computer program of the present invention is, for example, a storage medium or communication medium provided in a computer-readable format to a computer system capable of executing various program codes, such as a CD, FD, or MO. It is a computer program that can be provided by a recording medium or a communication medium such as a network. By providing such a program in a computer-readable format, processing corresponding to the program is realized on the computer system.

  Other objects, features, and advantages of the present invention will become apparent from a more detailed description based on embodiments of the present invention described later and the accompanying drawings. In this specification, the system is a logical set configuration of a plurality of devices, and is not limited to one in which the devices of each configuration are in the same casing.

  According to the configuration of the present invention, the data stored in the information recording medium is configured as data that has been subjected to encryption processing of two different modes, the first encryption processing and the second encryption processing for the specific area. When reproducing the content, the decryption processing of the second encryption processing data for the specific area is executed on the drive side, the processing data is provided to the host, and the decryption processing of the first encryption processing is performed on the host side. Since the content reproduction is performed by executing, it is defined as the content reproduction condition that the key generation process and the decryption process according to a valid data processing sequence are executed on the drive side. Therefore, even if content reading processing using an unauthorized drive device whose license is not permitted and data output to the host cannot be performed, content reproduction cannot be executed on the host side, and the drive and host with a valid license cannot be executed. Content can be reproduced only by the combination, and strict content usage management is realized.

  Furthermore, according to the configuration of the present invention, the specific area to be subjected to the second encryption is set as an area including a management data area in which a reading process prior to content reading executed at the time of content reproduction is required. For example, since an area including anchor information in the UDF file system and an area including AIA information in the BDFS file system are set, in order to read these management data correctly, the decoding process of the specific area according to the correct sequence must be successful. Therefore, the data in the management area can be decrypted only by data processing that can be executed only by a drive having a valid license, and content reproduction when an unauthorized drive device is present can be prevented.

  Further, according to the configuration of the present invention, since the decryption process for the second encryption is executed by the drive, the decryption process corresponding to the first encryption is executed on the host side, and the second encryption is performed. There is no need to execute processing for conversion. Therefore, there is an advantage that even if the content is subjected to the second encryption, the content can be handled without changing the function on the host side. That is, if a host having a function for executing the decryption process corresponding to the first encryption applies a drive for executing the decryption process corresponding to the second encryption, the host performs the first and second encryptions. Even when a combination of a host capable of playing back the content and having a function of executing a decryption process corresponding to the first encryption and a drive that does not execute the decryption process of the second encryption, the second It is possible to reproduce content that has not been encrypted. As described above, by applying the function of the same host, it is possible to process contents in various encryption modes stored in the information recording medium.

The details of the information processing apparatus, information recording medium, information processing method, and computer program of the present invention will be described below with reference to the drawings. The description will be made according to the following description items.
1. 1. Data storage structure of information recording medium 2. Details of information recording medium manufacturing and data storage processing 3. Data subject to specific area encryption processing 4. Content reproduction processing in information processing apparatus 5. Details of content decryption processing in the host 6. Detailed configuration of copy / playback control information (CCI) Configuration example of information processing device

[1. Storage data structure of information recording medium]
First, the storage data structure of the information recording medium will be described. FIG. 1 shows an example of an information recording medium storing content to which the processing of the present invention can be applied. Here, an example of storing information on a ROM disk as a content stored disk is shown.

  This ROM disk is, for example, an information recording medium such as a Blu-ray disk or a DVD, and is a legitimate content manufactured at a disk manufacturing factory with the permission of a so-called content rights holder who has a valid content copyright or distribution right. An information recording medium storing content. In the following embodiments, a disk-type medium will be described as an example of the information recording medium. However, the present invention can be applied to configurations using information recording media of various modes.

  As shown in FIG. 1, the information recording medium 100 stores a data storage area 101 for storing data such as content, supplementary information corresponding to the disc and stored content, key information applied to content decryption processing, and the like. It has an in area 102.

  In the data storage area 101, the encrypted content 111, a recording seed (REC SEED) 112 as information necessary for generating a key applied to the decryption process of the encrypted content, and copy / reproduction control information of the content are stored. A CCI (Copy Control Information) 113 and a content hash 114 as a hash value of the content are stored. Note that the recording seed (REC SEED) 112, the CCI (Copy Control Information) 113, and the content hash 114 are used as generation information of an encryption key (unit key) applied to content encryption and decryption. The detailed configuration will be described later.

  The lead-in area 102 stores encryption key information 120 necessary for generating a key to be applied to the decryption process of the encrypted content 111. The encryption key information 120 includes an EKB (Enabling Key Block) 121 as an encryption key block generated based on a tree-structured key distribution method known as one aspect of the broadcast encryption method. Further, the information recording medium 100 records a physical index 131. Hereinafter, an overview of these various types of information will be described.

(1) Encrypted content 111
Various contents are stored in the information recording medium 100. For example, it consists of an AV (Audio Visual) stream of moving image content such as HD (High Definition) movie content which is high-definition moving image data, a game program of a format defined by a specific standard, an image file, audio data, text data, etc. The main content. These contents are specific AV format standard data and are stored according to a specific AV data format. Specifically, for example, it is stored as Blu-ray disc ROM standard data according to the Blu-ray disc ROM standard format.

  Furthermore, for example, a game program as service data, an image file, audio data, text data, or the like may be stored as sub-contents. The sub-content is data having a data format that does not conform to a specific AV data format. In other words, the data can be stored in any format that does not conform to the Blu-ray disc ROM standard format as non-Blu-ray disc ROM standard data.

  Along with main content and sub-content, the content types include various data such as music data, video data, image data such as still images, game programs, WEB content, and the like. Various types of information are included such as content information that can be used in combination with content information that can be used only by data, data from the information recording medium 100, and data provided from a server connected to a network.

(2) Recording seed 112
Each content or a set of a plurality of content is encrypted by applying an individual encryption key (unit key) and stored in the information recording medium 100 for use management of the content. That is, AV (Audio Visual) stream, image data such as music data, moving image, still image, game program, WEB content, etc. constituting the content are divided into units as management units for content use. Are assigned different recording seeds: Vu112.

  When using the content, an encryption key (unit key) corresponding to each unit is assigned according to a predetermined encryption key generation sequence to which recording seed: Vu 112 and encryption key information 120 are applied. A unit for assigning one unit key is called a content management unit (CPS unit). That is, the encrypted content 111 is divided into CPS unit units, encrypted with a unit key corresponding to each CPS unit, and stored in the information recording medium 100.

(3) Copy / reproduction control information (CCI) 113
The copy / reproduction control information (CCI) 113 is copy restriction information and reproduction restriction information for use control corresponding to the encrypted content 111 stored in the information recording medium 100. The copy / reproduction control information (CCI) 113 can be set in various ways, for example, when it is set as individual CPS unit information or when it is set corresponding to a plurality of CPS units. Details of this information will be described later.

(4) Content hash 114
The content hash 114 is a hash value based on the configuration data of content or encrypted content stored in the information recording medium 100, and is data used as information for generating an encryption key applied to content encryption processing and decryption processing. . The generation and usage of the content hash 114 will be described later.

(5) Physical index 131
In the physical index 131, category information of the information recording medium, for example, disc incidental information such as a disc type, content incidental information corresponding to the content stored in the data area 101, and the like are recorded. Further, as with the recording seed 112, key information (key generation information) for generating a key to be applied to the decryption process of the encrypted content stored in the data storage area 101 of the information recording medium is recorded. The physical index 113 may be recorded in the lead-in area 102.

(6) Encryption key information 120
The encryption key information 120 obtains key information (key generation information) for generating a key to be applied to the decryption processing of the encrypted content stored in the data storage area 101 of the information recording medium, as with the recording seed 112 described above. In other words, an EKB (Enabling Key Block) 121 as an encryption key block generated based on a tree-structured key distribution method known as one aspect of the broadcast encryption method is included.

  The EKB 121 is a key that makes it possible to acquire a media key (Km), which is a key necessary for content decryption, only by processing (decryption) based on a device key stored in an information processing apparatus of a user having a valid license. Information block. This is an information distribution method according to a so-called hierarchical tree structure, which enables key acquisition only when the user device (information processing device) has a valid license, and has been revoked (revoked) The acquisition of the key (media key) of the user device can be prevented. By changing the key information stored in the EKB, the management center can generate an EKB having a configuration that cannot be decrypted with the device key stored in the specific user device, that is, the media key necessary for content decryption cannot be obtained. Accordingly, it is possible to provide an encrypted content that can be decrypted only to a device having a valid license by removing (revoking) an unauthorized device at an arbitrary timing.

[2. Details of information recording medium manufacturing and data storage processing]
As described above, the information recording medium 100 includes the encrypted content 111 and various key information necessary for decryption and reproduction of the encrypted content 111, that is, key generation information necessary for generating a unit key. . With reference to FIG. 2, the manufacturing route of the information recording medium will be described.

  As shown in FIG. 2, the content stored in the information recording medium is edited in a content editing entity (AS: Authoring Studio) 330, and then in an information recording medium manufacturing entity (DM: Disc Manufacturer) 350, for example, a CD, A large number of DVDs, Blu-ray discs, and the like are replicated (replicated), and the information recording medium 100 is manufactured and provided to the user. The information recording medium 100 is reproduced on the user device (information processing apparatus) 400.

  A management center (TC: Trusted Center) 310 performs management of the entire disk manufacturing, sales, and use processes. The management center (TC: Trusted Center) 310 has a media key Km set for an information recording medium manufacturing entity (DM: Disc Manufacturer) 350 corresponding to various management information, for example, a medium (information recording medium), An EKB as an encryption key block storing the media key Km as encrypted data is provided, and an information recording medium manufacturing entity (DM: Disc Manufacturer) 350 receives management information received from a management center (TC: Trusted Center) 310. Based on the content editing entity (AS: Authoring Studio) 330, editing, encryption, generation of key information, storage processing, and the like are performed. A management center (TC) 310 also manages and provides device keys stored in the user information processing apparatus 400.

  Two processing examples executed by the management center 310, the content editing entity 330, and the information recording medium manufacturing entity 350 will be described with reference to FIGS.

  FIG. 3 is a diagram showing an example of processing executed by the management center 310, the content editing entity 330, and the information recording medium manufacturing entity 350.

  The pre-editing content 303 is brought into the content editing entity 330, and becomes the edited content 331 after being encoded into MPEG data or the like by the encoder (step S12) and edited by the authoring system (step S13).

  During the editing process (step S13) by the authoring system, copy restriction information corresponding to the content, CCI information (copy / playback control information) 332 as playback restriction information, and a recording seed Vu333 used for content encryption are also generated. Is done. As described above, the recording seed 333 can be set for each CPS unit. When the edited content 331 has a plurality of content management units (CPS units), the number of recording seeds Vu 333 is also generated by the number of CPS units. Is done. The value of the recording seed Vu 333 is a random number having a length of 128 bits, for example. The CCI information 332 can be set in various ways, such as when it is set as individual CPS unit information or when it is set corresponding to a plurality of CPS units. The edited content 331 shown in the figure includes CCI information and the recording seed Vu, and the edited content 331 is sent to the information recording medium manufacturing entity 350.

  The information recording medium manufacturing entity 350 acquires information (management information) necessary for content encryption from the management center 310.

  The management center 310 generates a media key Km 311, and further executes an EKB generation process (step S 11) for storing the media key Km 311 as encrypted data in an EKB as an encryption key block, thereby generating an EKB 312.

  As described above, the EKB 312 stores encrypted data that can be decrypted only by decryption processing using a device key stored in a playback device that holds a license as a valid content usage right. Only a playback device that holds a license as a valid content usage right can acquire the media key Km.

  The management center 310 sends management information including the EKB 312 storing the media key Km and the media key Km 311 to the information recording medium manufacturing entity 350.

  The information recording medium manufacturing entity 350 that has received the information encrypts the content in the following procedure.

  First, in step S14, a unit key generation key Ke (Embedded Key) that is a key that is a generation source of a unit key corresponding to the CPS unit is generated. The unit key generation key Ke (Embedded Key) is generated by encryption processing (for example, AES encryption processing) using the media key Km acquired from the management center 310 and the physical index Ve 351 that is securely generated in the information recording medium manufacturing entity 350. Is done.

  In step S15, a hash value (content hash) for the edited content acquired from the content editing entity 330 is generated. The generated hash value is a hash value generated based on the configuration data of the CPS unit or a part of the data. As the hash generation process, for example, a hash value generation process using an AES-based hash function is performed.

  In step S16, a unit key Ku used for content encryption is generated using the content hash, the unit key generation key Ke (Embedded Key), the CCI information acquired from the content editing entity 330, and the recording seed Vu. To do. This unit key Ku generation process is also executed by an AES encryption process, for example.

  As described above, the content stored in the information recording medium is divided into content management units (CPS units), and a recording seed Vu is set for each CPS unit. For example, when n CPS units 1 to n are set corresponding to the content stored in the information recording medium, recording seeds Vu1 to Vun are also generated, and the information recording medium manufacturing entity 350 is generated from the content editing entity 330. Provided to.

  The information recording medium manufacturing entity 350 includes a unit key generation key Ke (Embedded Key), a content hash generated based on the edited content acquired from the content editing entity 330, CCI information, and n recording seeds Vu1 to Vun. The unit keys Ku1 to Kun are generated individually by applying them sequentially. The recording seeds Vu1 to Vun have different values depending on the content (CPS unit), and the generated unit keys Ku1 to Kun are also different key data.

  Next, the information recording medium manufacturing entity 350 performs encryption of the edited content provided from the content editing entity 330 to the information recording medium manufacturing entity 350 in step S17. That is, for each CPS unit, encryption using the corresponding unit keys Ku1 to Kun is executed to generate encrypted content. Although the content encryption may be executed by directly applying the unit key, the content is further divided into blocks, a block key is generated for each block, and the content is encrypted and recorded. A configuration is preferred. An example of an encryption configuration to which this block key is applied will be described later.

  Further, in step S18, the information recording medium manufacturing entity 350 follows a key generation process to which at least a part of configuration data of the physical index Ve 351 that is securely generated in the information recording medium manufacturing entity 350 is applied, for example, AES encryption. A key generation process is executed to generate a specific area encryption key Kp. Further, in step S19, the specific area encryption key Kp is applied to perform encryption processing on the encrypted content generated in step S17 and a part of the data selected from the content hash generated in step S15, that is, the specific area data. Execute. The data part to be processed in the specific area encryption process will be described later.

  Finally, in step S20, the information recording medium manufacturing entity 350 executes a format process in which each data such as physical index information 351, information to be recorded in the lead-in area, and EKB is set to a predetermined recording format, Finally, all the information described in FIG. 1 is recorded on the information recording medium 100. The recorded data includes an encrypted content encrypted by applying a unit key and a content hash. The encrypted content includes CCI information and a recording seed, and some of the encrypted content may be non-encrypted data. A specific content structure will be described later. A processing example to which AES encryption is applied as a specific example of various key generation processing executed by the information recording medium manufacturing entity 350 will be described in detail later.

  Next, a processing example in which the content hash is not applied to the generation of the unit keys Ku1 to Kun will be described with reference to FIG. The processes of the management center 310 and the content editing entity 330 are the same as those described with reference to FIG. The information recording medium manufacturing entity 350 performs content encryption in the following procedure.

  First, in step S21, a unit key generation key Ke (Embedded Key) that is a key that is a generation source of a unit key corresponding to the CPS unit is generated. The unit key generation key Ke (Embedded Key) is generated by encryption processing (for example, AES encryption processing) using the media key Km acquired from the management center 310 and the physical index Ve 351 that is securely generated in the information recording medium manufacturing entity 350. Is done.

  In step S22, a unit key Ku used for content encryption is generated using the unit key generation key Ke (Embedded Key), the CCI information acquired from the content editing entity 330, and the recording seed Vu. This unit key Ku generation process is also executed by an AES encryption process, for example. In this example, the content hash is not applied as unit key generation information.

  The information recording medium manufacturing entity 350 applies n unit keys by sequentially applying a unit key generation key Ke (Embedded Key), CCI information acquired from the content editing entity 330, and n recording seeds Vu1 to Vun. Ku1 to Kun are generated. The recording seeds Vu1 to Vun have different values depending on the content (CPS unit), and the generated unit keys Ku1 to Kun are also different key data.

  In step S23, the edited content provided from the content editing entity 330 to the information recording medium manufacturing entity 350 is encrypted. That is, for each CPS unit, encryption using the corresponding unit keys Ku1 to Kun is executed to generate encrypted content.

  In step S24, a hash value (content hash) is generated based on the encrypted content. Unlike the previous example described with reference to FIG. 3, the generated content hash is generated based on the encrypted content. For example, an AES-based hash function is applied to the hash generation process.

  Next, in step S25, the information recording medium manufacturing entity 350 follows a key generation process to which at least a part of the configuration data of the physical index Ve 351 securely generated in the information recording medium manufacturing entity 350 is applied, for example, AES encryption. The key generation process is executed to generate the specific area encryption key Kp. Further, in step S26, by applying the specific area encryption key Kp, encryption processing is performed on the encrypted content generated in step S23 and a part of the data selected from the content hash generated in step S24, that is, specific area data. Execute. The data part to be processed in the specific area encryption process will be described later.

  Finally, in step S27, the information recording medium manufacturing entity 350 executes a format process in which each data such as physical index information 351, information to be recorded in the lead-in area, and EKB is set to a predetermined recording format. Finally, all the information described in FIG. 1 is recorded on the information recording medium 100. The recorded data includes an encrypted content encrypted by applying a unit key and a content hash. The encrypted content includes CCI information and a recording seed, and some of the encrypted content may be non-encrypted data.

  The processing example described with reference to FIGS. 2 to 4 is a processing example for providing management information from the management center, that is, the media key Km and EKB to the information recording medium manufacturing entity. Next, a processing example for providing management information from the management center, that is, the media key Km and EKB, to the content editing entity will be described with reference to FIGS.

  FIG. 5 shows a flow of information in a processing example for providing management information from the management center, that is, media keys Km and EKB to the content editing entity. The content stored in the information recording medium is edited in a content editing entity (AS: Authoring Studio) 330, and then in an information recording medium manufacturing entity (DM: Disc Manufacturer) 350, for example, a CD, DVD, Blu-ray disc, or the like. Are copied (replicated) in large quantities, and the information recording medium 100 is manufactured and provided to the user. The information recording medium 100 is reproduced on the user device (information processing apparatus) 400.

  A management center (TC: Trusted Center) 310 performs management of the entire disk manufacturing, sales, and use processes. In the present embodiment, a management center (TC: Trusted Center) 310 is a media key that is set to a content editing entity (AS: Authoring Studio) 330 corresponding to various management information, for example, media (information recording medium). The content editing entity (AS: Authoring Studio) 330 provides management information received from the management center (TC: Trusted Center) 310, providing an EKB as an encryption key block storing the Km and the media key Km as encrypted data. The content editing process is executed based on the information and provided to an information recording medium manufacturing entity (DM: Disc Manufacturer) 350. An information recording medium manufacturing entity (DM: Disc Manufacturer) 350 performs encryption processing of content received from a content editing entity (AS: Authoring Studio) 330, generation of key information, storage processing, and the like. A management center (TC) 310 also manages and provides device keys stored in the user information processing apparatus 400.

  Two processing examples executed by the management center 310, the content editing entity 330, and the information recording medium manufacturing entity 350 will be described with reference to FIGS.

  FIG. 6 is an example of processing executed by the management center 310, the content editing entity 330, and the information recording medium manufacturing entity 350, and shows an example of executing content encryption and content hash generation processing in the content editing entity 330. It is a figure.

  The pre-editing content 303 is brought into the content editing entity 330, and becomes the edited content 331 after being encoded into MPEG data or the like by the encoder (step S32) and edited by the authoring system (step S33).

  During the editing process (step S33) by the authoring system, copy restriction information corresponding to the content, CCI information (copy / playback control information) 332 as playback restriction information, and a recording seed Vu333 used for content encryption are also generated. Is done. As described above, the recording seed 333 can be set for each CPS unit. When the edited content 331 has a plurality of content management units (CPS units), the number of recording seeds Vu 333 is also generated by the number of CPS units. Is done. The value of the recording seed Vu 333 is a random number having a length of 128 bits, for example. The CCI information 332 can be set in various ways, such as when it is set as individual CPS unit information or when it is set corresponding to a plurality of CPS units.

  In this example, the content editing entity 330 executes content encryption. The content editing entity 330 acquires information (management information) necessary for content encryption from the management center 310.

  The management center 310 generates a media key Km 311, and further executes an EKB generation process (step S 31) for storing the media key Km 311 as encrypted data in an EKB as an encryption key block, thereby generating an EKB 312. As described above, the EKB 312 stores encrypted data that can be decrypted only by decryption processing using a device key stored in a playback device that holds a license as a valid content usage right. Only a playback device that holds a license as a valid content usage right can acquire the media key Km. The management center 310 sends the management information including the EKB 312 storing the media key Km and the media key Km 311 to the content editing entity 330.

  The content editing entity 330 that receives these pieces of information encrypts the content according to the following procedure.

  First, in step S34, a unit key generation key Ke (Embedded Key) that is a key that is a generation source of a unit key corresponding to the CPS unit is generated. The unit key generation key Ke (Embedded Key) is generated by encryption processing (for example, AES encryption processing) using the media key Km acquired from the management center 310 and the physical index Ve 351 that is securely generated in the content editing entity 330. .

  Furthermore, in step S35, a unit key Ku used for content encryption is generated by, for example, AES encryption processing using a unit key generation key Ke (Embedded Key), CCI information, and a recording seed Vu.

  The content editing entity 330 applies unit key generation key Ke (Embedded Key), CCI information, and n recording seeds Vu1 to Vun individually and sequentially to generate n unit keys Ku1 to Kun.

  Next, in step S36, the edited content is encrypted. That is, for each CPS unit, encryption using the corresponding unit keys Ku1 to Kun is executed to generate encrypted content. In step S37, a hash value (content hash) is generated based on the encrypted content. The generated content hash is generated based on the encrypted content. For example, an AES-based hash function is applied to the hash generation process.

  Next, in step S38, the content editing entity 330 applies key generation processing to which at least part of the configuration data of the physical index Ve 351 that is securely generated in the content editing entity 330 is applied, for example, key generation processing according to AES encryption. To generate a specific area encryption key Kp. Further, in step S39, the specific area encryption key Kp is applied to perform encryption processing on the encrypted content generated in step S36 and a part of data selected from the content hash generated in step S37, that is, specific area data. Execute. The data part to be processed in the specific area encryption process will be described later.

  Next, the content editing entity 330 provides the information recording medium manufacturing entity 350 with the encrypted content subjected to the specific area encryption processing, the content hash, the physical index, and the EKB received from the management center 310. In step S40, the information recording medium manufacturing entity 350 executes a format process of various information received from the content editing entity 330 and records it on the information recording medium 100. The EKB is recorded in the lead-in area, and the encrypted content and content hash are recorded in the user data area. The encrypted content includes CCI information and a recording seed, and some of the encrypted content may be non-encrypted data.

  FIG. 7 is a diagram showing a processing example in which the content editing entity 330 encrypts content and the information recording medium manufacturing entity 350 executes content hash generation processing based on the encrypted content.

  The processes in steps S31 to S36 shown in FIG. 7 are the same as the processes described with reference to FIG. The content editing entity 330 generates the n unit keys Ku1 to Kun by sequentially applying the unit key generation key Ke (Embedded Key), the CCI information, and the n recording seeds Vu1 to Vun, respectively, in step S36. When the encrypted content is encrypted by applying the unit keys Ku1 to Kun, the encrypted content, the physical index, and the EKB received from the management center 310 are provided to the information recording medium manufacturing entity 350.

  In step S37, the information recording medium manufacturing entity 350 generates a hash value (content hash) based on the encrypted content received from the content editing entity 330. For example, an AES-based hash function is applied to the hash generation process.

  Next, in step S38, the information recording medium manufacturing entity 350 receives the physical index Ve351 securely generated in the content editing entity 330, and applies a key generation process to which at least part of the configuration data of the physical index Ve351 is applied. For example, a key generation process according to AES encryption is executed to generate a specific area encryption key Kp. Further, in step S39, by applying the specific area encryption key Kp, encryption processing for the encrypted content generated in step S36 and some data selected from the content hash generated in step S37, that is, specific area data Execute.

  Next, in step S 40, the information recording medium manufacturing entity 350 receives various information received from the content editing entity 330, the encrypted content subjected to the specific area encryption process, the content hash, the physical index, and the management center 310. The received EKB is formatted and recorded on the information recording medium 100. The EKB is recorded in the lead-in area, and the encrypted content and content hash are recorded in the user data area. The encrypted content includes CCI information and a recording seed, and some of the encrypted content may be non-encrypted data.

[3. Data subject to specific area encryption processing]
As described above, the content recorded on the information recording medium is subjected to encryption processing and specific area encryption processing. That is, the specific area is recorded after being subjected to double encryption of normal encryption processing and specific area encryption processing.

  The data configuration recorded on the information recording medium and the encryption configuration will be described with reference to FIGS. UDF (Universal Disc Format) applied as a file system for data files recorded on an information recording medium, and BDFS (Blu-ray Disc File System) applied as a Blu-ray Disc file format, An example of application will be described.

  First, a data configuration and an encryption configuration when performing data recording to which a UDF (Universal Disc Format) file system is applied will be described with reference to FIGS. In the configuration shown in FIG. (LSN) = 0 to N corresponds to the area corresponding to the user area of the information recording medium.

The following data is recorded in this volume space.
Volume structure (Volume Str.)
Anchor
File system (FS (Metadata))
File (File (BD management information))
File (File (AV stream data)

  The drive first reads an anchor attached to the drive. The anchor stores initial information necessary for reading the data of the information recording medium, for example, directory analysis information such as pointer information. The drive reads the anchor information, so that the basic configuration of the storage data of the information recording medium is established. I can know. As shown in the figure, the anchor is a logical sector No. In addition to (LSN) = 256, it is recorded at three locations, the end of the volume space and the position ahead of the end by a fixed interval. These are the same anchor information, and are recorded as backup data for use when one of the information recording media becomes unreadable due to scratches or the like. As shown in the figure, similarly to the anchor, a plurality of similar data is recorded as backup data in the volume structure (Volume Str.), The file system (FS (Metadata)), and the like.

  After reading the anchor information, the drive reads the volume structure, confirms the positions of the management file and data file recorded on the information recording medium, reads the file system (FS (Metadata)), and then reads the file according to the playback sequence. (File (AV stream data) reading processing is executed.

  FIG. 8 shows an example of an encryption configuration when a UDF (Universal Disc Format) file system is applied. Almost the entire volume space is data subject to content encryption processing according to a normal encryption system. That is, for example, encryption is performed in the encryption process in step S17, the encryption process in step S23 in FIG. 4, and the encryption process in step S36 in FIGS. 6 and 7 in the information recording medium manufacturing process in FIG. It is data. However, as will be described later, a part of data such as seed information applied as encryption key generation data may not be an encryption target.

  Furthermore, the specific area shown in the figure is an area where the specific area encryption process is executed in addition to the content encryption process according to the normal encryption system. That is, for example, in the specific area encryption process of step S19, the specific area encryption process of step S26 of FIG. 4, and the specific area encryption process of step S39 of FIGS. Data to be encrypted.

  The configuration shown in FIG. 8 is an example in which only anchor information is set as target data for specific area encryption processing. All anchor information including data recorded as backup data is set as a specific area, and a specific area encryption process is performed. In the content reproduction process, as described above, it is essential that the drive first reads the anchor information. In the configuration example illustrated in FIG. 8, the anchor information decoding process is performed in order to execute the anchor information reading process. Must be executed first and decryption succeeded. Details of these reproduction processes will be described later.

Next, with reference to FIG. 9, different encryption configuration examples when a UDF (Universal Disc Format) file system is applied will be described. In the processing example of FIG. 9, the target data of the specific area encryption process, that is, the specific area is
Volume structure (Volume Str.)
Anchor
File system (FS (Metadata))
These three types of data areas are set. These backup data are also subjected to specific area encryption processing.

FIG. 10 is a diagram showing still another example of an encryption configuration when a UDF (Universal Disc Format) file system is applied. In the processing example of FIG. 10, the target data of the specific area encryption process, that is, the specific area is
Volume structure (Volume Str.)
Anchor
File system (FS (Metadata))
File (File (BD management information))
These four types of data areas are set. These backup data are also subjected to specific area encryption processing.

  8 to 10, the data area subjected to the specific area encryption process is data that needs to be read correctly at the time of content reproduction. In the reproduction process, the data area is stored in these specific areas. It is necessary that the corresponding data is decrypted correctly. As described above, the specific area includes a management data area in which a reading process prior to content reading executed when reproducing the content stored in the information recording medium is required. In the drive device, the specific area includes the management data area. Data decryption processing is executed. Details of the reproduction process will be described later.

  Next, an example of processing when a BDFS (Blu-ray Disc File System) applied as a Blu-ray Disc file format is applied as a file system will be described with reference to FIGS. First, a data recording configuration according to a BDFS (Blu-ray Disc File System) file system will be described with reference to FIG. The BDFS file system can manage recording files in groups, and each group is arranged according to a specific rule.

  FIG. 11 shows the data structure recorded in the user area of the information recording medium according to the BDFS file system. At the head and tail, there are provided areas for data margins, which are indicated as “reserved”. A portion indicated by AIA (Allocation Information Area) 1 to 4 in the drawing corresponds to the anchor information in the UDF file system described above. A fixed area is allocated to the AIA as anchor information, and information that is read first when information recorded on the recording medium is read is recorded.

  Addresses in which file system information (MIA (Management Information Area)) is stored are recorded in the AIA1 to AIA4. By analyzing the AIA, it is possible to access the MIA. In the AIA, information on a main MIA (Main MIA) and a reserved MIA (Reserved MIA) (for backup) is recorded.

  The MIA stores file system information (information on directories and files on a recording medium) and is variable. This file system information includes information on file grouping and a method for arranging the grouped files. In the Blu-ray Disc Rewritable standard, as shown in FIG. 11, the MIA has gathered file areas (MainG1, ResG1, MainG2, ResG2, G3 in the figure) together with the following file groups 1 to 3 (MainG1, ResG1, MainG2, ResG2, G3). Gathered block in the area indicated by LB Region for gathered files in the figure). These are managed by grouping IDs called allocation classes set for each group. For example, MainG1 is allocated class 1 (AC1), MainG2 is AC2, G3 is AC3, and G4 is AC4. Has been.

  Specific allocation class values are: AC0 is a general data file, AC1 is a file belonging to group 1, AC2 is a file belonging to group 2, AC3 is a file belonging to group 3, and AC4 is Files belonging to group 4, AC5 to 15 are unused, AC16 is real-time file type 1 (low rate), AC17 is real-time file type 2 (high rate), and AC18 to 255 are unused It has become.

  In the MIA, information related to the recording area allocated for each group is recorded, and is described as an Allocation Rule Set Table (ARST) in the file system information shown in FIG. In ARST, the start address and end address of the area allocated for each group are described. When data is read with this information, it is possible to read the files belonging to the group as a whole instead of reading the file alone. Thus, the reading time is shortened.

In the ARST example shown in FIG. 11 (A), the MainG1 each file group, S _MG1 is recorded as the start address, E _MG1 is recorded as the end address, the ResG1, S as the starting address _RG1 Is recorded, E _RG1 is recorded as the end address, S _MG2 is recorded as the start address in MainG2, E _MG2 is recorded as the end address, S _RG2 is recorded as the start address in ResG2, and the end address E _RG2 is recorded, G3 is recorded with S _G3 as the start address, E _G3 is recorded as the end address, _G4 is recorded with S _G4 as the start address, and E _G4 is recorded as the end address MainG1 is recorded in the range from the start address S _MG1 to the end address E _MG1 , ResG1 is recorded in the range from the start address S _RG1 to the end address E _RG1 , and MainG2 is recorded from the start address S _MG2 Recorded in the range from end address E _MG2 , ResG2 is recorded in the range from start address S _RG2 to end address E _RG2 , G3 is recorded in the range from start address S _G3 to end address E _G3 , G4 _Shows an example recorded in the range from the start address S _G4 to the end address E _G4 .

  As a result, on the recording medium on which information is recorded according to the Blu-ray Disc Rewritable standard, the file system information and the file groups of groups 1 to 3 can be acquired by one continuous area reading.

  Groups 1 to 3 (G1, G2, G3 in the figure) are application management data in the Blu-ray Disc Rewritable standard. These files need to be read collectively from the recording medium at a high speed, and are recorded together in the gathered file area together with the MIA described above. Further, the files belonging to group 1 and group 2 are files essential for content reproduction, and even when a defective sector occurs on the recording medium, a mechanism for losing the file data as much as possible is necessary. For the files belonging to group 2, the same file is recorded in two places, the main area and the reserved area.

  Group 4 (G4 in the figure) is thumbnail information for marks. The files need to be recorded together, but are less frequently used than the groups 1 to 3, and are less likely to be read at the start of access to the recording medium. Therefore, although it is recorded in a continuous recording area as a single group, it is not recorded in the gathered file area together with other groups.

  The AV stream file has an attribute of “guaranteeing the rate at the time of reproduction”, and it is necessary to follow an arrangement rule for guaranteeing the rate at the time of reproduction when the file is arranged on the recording medium. In the case of AV stream files, it is not necessary to group and record in a specific area as in groups 1 to 4 above. Therefore, although the attributes of the file are defined, they are not arranged together. Also, when recording general files that are not defined in the Blu-Ray Disc standard, neither the guarantee of the playback rate nor the arrangement method of recording in a specific area is required, so general files (Data in the figure) File) is recorded in another location. Note that the area indicated as “Free Area” in the figure is an area in which no file is recorded.

  FIG. 12 is a diagram showing an example of an encryption configuration to which the present invention is applied in the BDFS file system described with reference to FIG. The configuration example of FIG. 12 is an example in which the anchor information in the figure, that is, the portion indicated by AIA (Allocation Information Area) 1 to 4 is set as the target data for the specific area encryption process. In the content reproduction process, as described above, addresses where file system information (MIA (Management Information Area)) is stored are recorded in the AIA1 to AIA4, and by analyzing the AIA, Access to the MIA becomes possible. Therefore, in the reproduction process, it is necessary to first read AIA information (allocation information area) as anchor information. In the example of the encryption configuration shown in FIG. 12, in order to execute the process of reading AIA information, it is necessary to first execute the decryption process of AIA information and succeed in the decryption. Details of these reproduction processes will be described later.

  Next, with reference to FIG. 13, a description will be given of different encryption configuration examples when the BDFS file system is applied. The processing example of FIG. 13 is an example in which, in addition to AIA information as an anchor area, a file system information, that is, an area including file system information including an Allocation Rule Set Table (ARST) is set as a specific area.

  In the encryption processing configuration of FIG. 13, AIA information as an anchor area and file system information are set as target areas for specific area encryption processing. In the figure, an example is shown in which the free area is also included in the specific area, but the free area may be set not to be included in the specific area.

  12 and 13, the data area subjected to the specific area encryption process is data that needs to be read correctly at the time of content reproduction. In the reproduction process, the data area is stored in these specific areas. It is necessary that the corresponding data is decrypted correctly. As described above, the specific area includes a management data area in which a reading process prior to content reading executed when reproducing the content stored in the information recording medium is required. In the drive device, the specific area includes the management data area. Data decryption processing is executed. Details of the reproduction process will be described later.

  As described above, [2. Details of manufacturing of information recording medium and data storage processing], [3. In the processing data for specific area encryption processing], the information recording medium manufacturing process and the data structure of the information recording medium have been described.

  As understood from the above description, in the manufacturing process of the information recording medium, the content encryption processing step for executing the first encryption processing of the content to be recorded on the information recording medium, and the processing data in the content encryption step On the other hand, a specific area encryption processing step for executing the second encryption process for the selected specific area, and a step of recording the data subjected to the first and second encryption processes on the information recording medium. Have. In the specific area encryption processing step, the specific area encryption key Kp is generated based on the configuration data of the physical index stored in the information recording medium as the information recording medium supplementary information, and the generated specific area encryption key Kp is applied to the encryption Execute the process.

  In the specific area encryption processing step, as the specific area, a management data area that requires read processing prior to content reading executed when reproducing the content stored in the information recording medium is selected, and the specific data including the management data area is selected. A second encryption process is executed for the area. The data encrypted in the specific area encryption processing step is an area including anchor information in the UDF file system and an area including AIA information in the BDFS file system. Specifically, a. Included in the recording data of the information recording medium. Encrypted content, b. Copy / playback control information, c. A content hash that is a hash value based on the content configuration data; d. An encryption unit key to be applied to the decryption process of the encrypted content; e. A scramble rule as scramble mode information applied to the content and an area including at least one of the data a to e are selected as a specific area, and a specific area encryption process is executed.

  The information recording medium manufactured by this information recording medium manufacturing method has a configuration in which data including encrypted content is stored as recorded data, and the recorded data is encrypted content that has been subjected to the first encryption process. The specific area that constitutes a part of the recorded data is configured as data subjected to a second encryption process in addition to the first encryption process.

  The information recording medium stores a physical index as information accompanying the information recording medium, and the second encryption processing for the specific area is stored as encryption processing data to which an encryption key based on the configuration data of the physical index is applied. Is done. In addition, the specific area subjected to the second encryption process is an area including a management data area that requires a read process preceding the content read executed when reproducing the content stored in the information recording medium, for example, UDF. It is set as an area including anchor information in the file system and an area including AIA information in the BDFS file system. Specifically, the specific area subjected to the second encryption process includes a. Encrypted content, b. Copy / playback control information, c. A content hash that is a hash value based on the content configuration data; d. An encryption unit key to be applied to the decryption process of the encrypted content; e. The scramble rule is an area including at least one of the data a to e.

[4. Content playback processing in information processing apparatus]
Next, details of the content reproduction process in the information processing apparatus that executes the reproduction process of the information recording medium storing the encrypted content and other information subjected to the encryption process including the encryption of the specific area described above will be described.

  As shown in FIG. 14, the information processing apparatus 400 includes a drive 380 and a host 400, and data reading from the information recording medium 100 is executed by the drive 380, and the drive data processing unit 381 in the drive 380 performs a predetermined process. Data processing, specifically, the above-described decryption processing of the encrypted data in the specific area is executed, and the processing data is transferred to the host 400. In the host data processing unit 410, the host 400 mainly executes decryption processing of the encrypted content, outputs the decrypted content as a processing result to the reproduction control unit 420, and reproduces the content under the reproduction control in the reproduction control unit 420. Is done.

  An example of data processing executed in each data processing unit of the drive and the host will be described with reference to FIG.

  FIG. 15 shows the processing of the data processing unit of each of the drive 380 and the host 400. First, the drive 380 reads the physical index 402 stored in the information recording medium 100 attached to the drive, and generates a specific area encryption key Kp in step Sa.

  In step Sa, the drive 380 executes a key generation process to which at least a part of the configuration data of the physical index 402 stored in the information recording medium 100 is applied, for example, a key generation process based on the AES cipher to execute the specific area encryption key Kp. Is generated. Furthermore, in step Sb, the specific area decryption process is executed by applying the specific area encryption key Kp. This decryption process is executed, for example, as a data decryption process using an AES encryption process. As described above with reference to FIGS. 8 to 13, the specific area has various settings. The specific area is set by any of these settings, and the specific area is encrypted.

The drive 380 needs to acquire which part is the specific area, that is, the position information of the specific area by some method. As a method for acquiring the specific region position information, for example, any one of the following methods is applied.
(1) A standardized fixed position is set, and the fixed position information is stored in advance in a nonvolatile memory such as a ROM in the drive. The drive acquires specific area position information from the memory during reproduction of the information recording medium.
(2) A table in which specific area position information is recorded is stored in the information recording medium. The drive acquires specific area position information from the information recording medium during reproduction of the information recording medium. In the case of this configuration, it is preferable that the table has a configuration that prevents easy reading and falsification, such as encryption and signature.
(3) A specific area is set with a specific pattern of recording data of the information recording medium. For example, the first sector is set as the specific area for every 32 sectors. The drive sequentially acquires one sector for every 32 sectors from the head from the information recording medium, and discriminates this sector data as a specific area.
(4) Specific area information is acquired from the outside. For example, the drive acquires specific area information from a server such as a content management server connected via a communication unit of the host.

  The drive 380 applies any one of the above-described methods (1) to (4) to acquire the specific area position information, and applies the specific area encryption key Kp generated in step Sa in step Sb of FIG. Then, the decoding process for the specific area is executed. That is, the data processing unit of the drive 380 obtains the specific area data from the specific area position information stored in the memory in the drive device, the specific area position information stored in the information recording medium, or the specific area acquired from the outside. The selection is performed according to the position information, or data extraction is performed according to a preset pattern.

  In the example shown in FIG. 15, the EKB 401 and the physical index 402 are transferred to the host 400 without being subjected to the specific area decoding process. The copy / playback control information 403, the content hash 404, the encryption unit key 405, and the encrypted content 406 are the target data for the specific area decryption process, and the specific area position information in any one of the above (1) to (4) A part of these data is selected as a specific area by the acquisition process, and in step Sb, a decryption process is performed by applying the specific area encryption key Kp generated in step Sa to the selected data. Data subjected to the specific area decoding process in the data processing unit of the drive 380 is output to the host 400 that executes the reproduction process.

  In this processing example, the specific area decryption process is executed on the specific area data selected from the configuration data of the copy / playback control information 403, the content hash 404, the encryption unit key 405, and the encrypted content 406 in the drive 380. Process data is output to the host 400.

  Next, data processing in the host 400 will be described. In the content transferred from the drive 380 to the host 400, the specific area encryption has been canceled by the specific area decryption process in the drive described above, but the content encryption process has been performed. A key to be applied to content decryption is generated, and content decryption processing to which the generation key is applied is executed.

  In the content decryption process, first, the host 400 reads the device key 411 stored in the memory. The device key 411 is a secret key stored in an information processing apparatus that has received a license for content use.

  Next, in step S41, the host 400 applies a device key 411 to execute decryption processing of the EKB 401 that is an encryption key block storing the media key Km stored in the information recording medium 100, and obtains the media key Km. get.

  Next, in step S42, a unit key generation key Ke (embedded key) is generated by encryption processing (AES_H) based on the media key Km acquired by the EKB processing in step S41 and the physical index 402 read from the information recording medium 100. To do. This key generation process is executed as a process according to the AES encryption algorithm, for example. In FIG. 15, AES_D is a data decryption process applying AES encryption processing, AES_H is an AES-based hash function, for example, and AES_GE is a key generation accompanied by a data encryption process applying AES encryption processing (Key Generation) ) Shows the process. These specific processes will be described later.

  Next, in step S43, a control key Kc is generated by encryption processing (AES_H) based on the unit key generation key Ke (embedded key) and the copy / playback control information (CCI) 403 read from the information recording medium 100. In step S44, the content hash key Kh is generated by encryption processing (AES_H) based on the control key Kc and the content hash 404 read from the information recording medium 100.

  Next, in step S45, the encrypted unit key Enc (Ku) 405 read from the information recording medium 100 is decrypted by applying the content hash key Kh (AES_D) to obtain the unit key Ku. In this example, the unit key stored in the information recording medium 100 is stored as encrypted data by the content hash key Kh generated by the same process as steps S41 to S44 in FIG.

  The encryption unit key Enc (Ku) 405 recorded in the information recording medium 100 is defined for each CPS unit as the content management unit, and the unit key Ku generated in S45 is also the same for each CPS unit. Defined. Ku (i) of the CPS unit key to be generated is set corresponding to the CPS unit corresponding to the content to be reproduced, that is, the CPS unit (i) selected from the CPS units 1 to n stored in the information recording medium 100. CPS unit key Ku (i).

  When decrypting the encrypted content, first, in S46, a block seed is extracted from the encrypted content 406 read from the information recording medium 100, a decryption processing unit (encrypted data) that requires decryption processing, and no decryption processing is required. Data selection of the non-decryption processing unit (plaintext data) is performed.

  The block seed is encryption key generation information set corresponding to a block as an encryption processing unit. The content data as the CPS unit is encrypted by applying a different block key Kb for each block of a predetermined data length, and when decrypting, the block key Kb as a decryption processing key for each block is assigned to each block data. The data is generated by encryption processing (S47: AES_GE) based on the corresponding block seed and CPS unit key Ku, and decryption processing (S48) is performed using the generated block key Kb.

  The block key Kb is a key used for decrypting the encrypted content in an encryption processing unit of a specific size. As the size of the encryption processing unit, for example, a size including 6144 bytes of User Data or a size including 2048 bytes of User Data is assumed. Details of generation of the block key Kb and decryption processing based on the block key Kb will be described later.

  Step S49 is a process of combining the non-encrypted data such as the block seed part included in the encrypted content with the data decrypted in step S48. As a result, the decrypted content (CPS unit) 412 is reproduced from the host 400. It is output to the control means 420.

  In this example, the content hash is used for generating the encryption key. In this case, the content hash is generated from plaintext content data. Specifically, for example, it is executed as processing for the information recording medium 100 on which data recording manufactured by the process described above with reference to FIG. 3 is performed.

  A specific example of the encryption process executed in steps S42 to S45 and S47 will be described with reference to FIGS. In FIG. 16, an AES decryption unit (AES_D) 431 is a decryption processing unit in AES or ECB mode having a key length of 128 bits, for example, and an AES encryption unit (AES_E) 433 has a key length of 128 bits, for example. It is an encryption processing unit using AES and ECB modes. The exclusive OR unit 432 represents an arithmetic unit that performs an exclusive OR (XOR) process between two bit strings having the same length.

  Specifically, the unit key generation key Ke generation process (AES_H) in step S42 in FIG. 15 is obtained from the physical index stored in the information recording medium 100 and the EKB as shown in FIG. The media key Km is input to the AES_H process, and the result obtained by executing the AES_H process is used as the unit key generation key Ke.

  The generation of the control key Kc in step S43 in FIG. 15 and the generation of the content hash key in step S44 are also performed by AES_H processing as shown in FIGS.

  As shown in FIG. 17, the specific configuration of the AES hash process (AES_H) is a combination of a key generation process execution unit (AES_GD) accompanied by a data decryption process to which an AES encryption process is applied and an exclusive OR unit. Consists of.

  As shown in FIG. 17, the AES_GD unit is composed of a combination of an AES decoding unit and an exclusive OR unit. Note that the content hash to be recorded on the information recording medium described above with reference to FIGS. 3, 4, 6, and 7 is also generated by applying the hash calculation unit 434 similar to that shown in FIG. Can do. Note that either of two input values for AES_H may be assigned to the inputs indicated by X and h in FIG. For example, in the case of FIG. 16B, both the case where X is a unit key generation key Ke and h is CCI and the case where X is CCI and h is Ke can be set. In this case, the process is executed by selecting how to allocate.

  The unit key Ku is generated as a process in which the AES decryption unit 431 decrypts the encrypted unit key eKh (Ku) acquired from the information recording medium 100 using the content hash key Kh, as shown in FIG. Executed. The generation of the block key Kb in step S47 in FIG. 15 is performed by calculation by the AES decryption unit 431 and the exclusive OR unit 432 as shown in FIG.

  In this embodiment, an example of generating key data having a 128-bit key length by applying the AES encryption algorithm is shown, but the algorithm and key length are not limited to these examples, and other It is also possible to apply this algorithm and key length.

  Next, another processing example of content reproduction processing will be described with reference to FIG. In the processing example shown in FIG. 18, the processing in the drive 380 is the same processing as described above with reference to FIG. 15, and the EKB 401 and the physical index 402 are not targeted for the specific area decoding processing, and the host 400 Forwarded to The copy / playback control information 403, the content hash 404, the encryption unit key 405, and the encrypted content 406 are the target data for the specific area decryption process. In the drive, the specific area is determined based on the configuration data of the physical index 402. The encryption key Kp is generated and is output to the host after the specific area decryption process is executed in step Sb.

  In the example shown in FIG. 18, during the data processing in the host 400, the unit key generation key Ke (embedded key) generation processing in step S42, the control key Kc generation processing in step S43, and the content hash key Kh in step S44. The generation process is not an AES encryption process but a process example in which a hash function (HASH) is applied and is different from the process example described with reference to FIG.

  A specific configuration of these processes will be described with reference to FIG. In FIG. 19, a hash calculation unit (HASH) 441 executes a process using a hash function to calculate a hash value based on two input data. The output of the hash calculation unit (HASH) 441 is fixed length data with high uniqueness.

  The hash calculation unit (HASH) 441 is a hash function such as SHA1, for example. When two values are input to the hash function and one output is obtained, one output can be obtained by successively inputting two values to be input to the hash function. For example, in the case of FIG. 19A, a unit key generation key Ke (embedded key) can be obtained by continuously inputting a media key (Km) and a physical index to a hash function. At this time, which of the two inputs is input first can be in two ways: the order of Km → physical index and the order of physical index → Km. The description and usage of the hash function are the same for FIGS. 19B and 19C.

  Returning to FIG. 18, the description of the generation processing of various key data in the content reproduction processing will be continued. The unit key generation key Ke (embedded key) generation process in step S42 in FIG. 18, the control key Kc generation process in step S43, and the content hash key Kh generation process in step S44 are shown in FIGS. As shown in c), the result that is executed by applying the hash calculation unit (HASH) 441 and output by the hash calculation becomes key data. The unit key generation in step S45 and the block key generation in step S47 are the same processes as those described with reference to FIGS. 15 and 16 as shown in FIGS. .

  Next, another processing example of content reproduction processing will be described with reference to FIG. The example illustrated in FIG. 20 illustrates a processing example in which the content hash is not applied to key generation.

  In the processing example illustrated in FIG. 20, the drive 380 transfers the EKB 401 and the physical index 402 to the host 400 without being subjected to the specific area decoding process. Further, the specific area decryption process in the drive is executed using the copy / reproduction control information 403, the encryption unit key 405, and the encrypted content 406 as the target data of the specific area decryption process. The drive 380 generates a specific area encryption key Kp based on the configuration data of the physical index 402 in step Sa, and is selected from the copy / playback control information 403, the encryption unit key 405, and the encrypted content 406 in step Sb. The specific area decoding process is executed for the partial configuration data and output to the host. The location information regarding the specific area is acquired in the same manner as in the processing example described above. (1) The fixed area information stored in the memory in the drive is acquired. (2) The information is acquired from the table stored in the information recording medium. The specific area is acquired according to a certain pattern, or (4) acquired from the outside.

  Processing steps S51 to S53 on the host 400 side in FIG. 20 are the same as steps S41 to S43 in FIG. In this example, the process of step S44 in FIG. 15 is omitted. That is, the encryption unit key Enc (Ku) read from the information recording medium 100 based on the control key Kc is decrypted in step S54 without generating a content hash key based on the control key Kc generated in step S53. (AES_D) to obtain the unit key Ku. In this example, the unit key stored in the information recording medium 100 is stored as encrypted data using the control key Kc generated by the same process as steps S51 to S53 in FIG.

  The encrypted unit key Enc (Ku) 405 recorded on the information recording medium 100 is defined for each CPS unit, and the unit key Ku generated in S54 is similarly defined for each CPS unit. Ku (i) of the CPS unit key to be generated is set corresponding to the CPS unit corresponding to the content to be reproduced, that is, the CPS unit (i) selected from the CPS units 1 to n stored in the information recording medium 100. CPS unit key Ku (i). The process of steps S55 to S58 is executed as the same process as the process of steps S46 to S49 in FIG. In this embodiment, the content hash key generation process is omitted, and the key generation process is simplified.

  Details of the key generation process in steps S51, S52, S53, and S56 of FIG. 20 will be described with reference to FIG. 21 (a) and (b) correspond to (a) and (b) in FIG. 16, and (c) and (d) in FIG. 21 correspond to (d) and (e) in FIG. To do. In the key generation process shown in FIG. 21, the point that the AES decryption process of the encrypted unit key by the control key Kc is performed in the unit key generation process of FIG. 21C has been described with reference to FIGS. 15 and 16. It is different from the process.

  FIG. 22 is a processing example in which the content hash is not applied to key generation, as in FIG. 20, and the processing of the drive 380 is the same processing described with reference to FIG. A hash function (HASH) is applied to the generation processing of the unit key generation key Ke (embedded key) in the processing step S52 on the host 400 side and the generation processing of the control key Kc in step S53, not processing using AES encryption. The point of execution is different.

  A specific configuration of these processes will be described with reference to FIG. In FIG. 23, a hash calculation unit (HASH) 441 executes a process using a hash function to calculate a hash value based on two input data. As described above, the output of the hash calculation unit (HASH) 441 is fixed-length data with high uniqueness. The hash calculation unit (HASH) 441 is a hash function such as SHA1, for example.

  (A) and (b) in FIG. 23 correspond to (a) and (b) in FIG. 19 described above, and (c) and (d) in FIG. 23 are (d) and (d) in FIG. corresponding to e). In the key generation process shown in FIG. 23, the point that the AES decryption process of the encrypted unit key by the control key Kc is performed in the unit key generation process of FIG. 23C has been described with reference to FIGS. It is different from the process.

  Furthermore, another example of content reproduction processing will be described with reference to FIGS. In the processing shown in FIG. 24, the processing on the drive side is the same processing as described above with reference to FIG. 15, and the EKB 401 and the physical index 402 are not subject to the specific area decoding processing, and Transferred. The copy / playback control information 403, the content hash 404, the encryption unit key 405, and the encrypted content 406 are the target data for the specific area decryption process. In the drive, the specific area is determined based on the configuration data of the physical index 402. The encryption key Kp is generated and is output to the host after the specific area decryption process is executed in step Sb.

  In the processing on the host 400 side, in the processing described above with reference to FIG. 15, the control key Kc generation processing is executed in step S43, and in step S44, the content hash key Kh generation processing is performed based on the control key Kc. In the example shown in FIG. 24, the order is changed. In step S63, the content hash 404 is read from the information recording medium 100, and the unit key generation key Ke (embedded key) generated in step S62 is used. A content hash key Kh is generated by processing according to the AES encryption algorithm based on the content hash 404, and then, in step S64, the copy / reproduction control information (CCI) 403 is read from the information recording medium 100 to obtain the content hash key. By processing in accordance with h and the copy and reproduction control information (CCI) 403 and AES encryption algorithm based on a processing example in which a structure for generating a control key Kc. The other processes in steps S61 to S62 and S65 to S69 are the same as the processes in steps S41 to S42 and S45 to S49 described with reference to FIG.

  According to this configuration, the content hash key Kh can be generated regardless of the copy / playback control information (CCI) 403. Therefore, it is not necessary to perform a process of submitting the CCI file from the content editing entity to the management center, generating the content hash key Kh based on the CCI file, and providing it to the content editing entity. The management center only needs to issue an EKB, a recording seed Ve, and an arbitrary content hash key Kh that does not depend on the CCI file to the content editing entity, and the processing is simplified.

  The processing example illustrated in FIG. 25 is an example in which an arbitrary content hash key Kh that does not depend on the CCI file can be applied, similarly to the processing illustrated in FIG. 24, but further, the generation step of the content hash key Kh in the host 400 is delayed. The unit key Ku generated in step S74 is applied, and the content hash key Kh is generated in step S75 by processing according to the AES encryption algorithm with the content hash 404. The process of the drive 380 is the same process as described with reference to FIG. 15 as in FIG.

  As described above, the encryption unit key Enc (Ku) 405 recorded on the information recording medium 100 is defined for each CPS unit, and the unit key Ku generated in S74 is also for each CPS unit. Defined. Ku (i) of the CPS unit key to be generated is set corresponding to the CPS unit corresponding to the content to be reproduced, that is, the CPS unit (i) selected from the CPS units 1 to n stored in the information recording medium 100. CPS unit key Ku (i).

  Therefore, the content hash key Kh generated in step S75 is also the content hash key Kh (i) set corresponding to the CPS unit (i). In step S77, the block key Kb is generated by applying the content hash key Kh (i). Other processes are described with reference to FIG. 15 and are the same as the other processes.

  In this configuration example, the content hash applied to the generation of the content hash key Kh (i) is also a content hash for each CPS unit. Therefore, it is necessary to acquire a content hash in finer units. As a result, the effect of preventing content tampering is further increased.

  Next, referring to FIG. 26, the content stored in the information recording medium is scrambled, the scramble rule information as information relating to the applied scramble is stored in the information recording medium, and the scramble rule is also subjected to the specific area encryption process. An example of processing that is the target of the above will be described.

  In the processing example shown in FIG. 26, a scramble rule 407 is stored in the information recording medium 100. The scramble rule 407 is scramble processing mode information applied to data including encrypted content stored in the information recording medium. For example, a scramble process for performing a shuffle process on a predetermined data unit, a scramble process for changing the record data by executing an exclusive OR of the data in the selected data area in the record data and a preset value, or in the record data A scramble process for changing the recording data by executing a rotation process of the data bit array in the selected data area is applicable. The scramble rule 407 stores a scramble rule as information necessary for canceling the scramble process actually performed on the recording data such as contents.

  In the processing configuration of FIG. 26, this scramble rule is also set as the target data for the specific area encryption, and the drive 380 at least a part of the configuration data of the physical index 402 stored in the information recording medium 100 in step Sa. A specific area encryption key Kp is generated by executing a key generation process to which is applied, for example, a key generation process based on AES encryption. Furthermore, in step Sb, the specific area decryption process is executed by applying the specific area encryption key Kp. This decryption process is executed, for example, as a data decryption process using an AES encryption process. In the processing example of FIG. 26, the copy / playback control information 403, the encryption unit key 405, the encrypted content 406, and the scramble rule 407 are the target data for the specific area decryption process, and the partial configuration data selected from these data The specific area decoding process is executed on the target and output to the host. The location information regarding the specific area is acquired in the same manner as in the processing example described above. (1) The fixed area information stored in the memory in the drive is acquired. (2) The information is acquired from the table stored in the information recording medium. A specific area is acquired according to a certain pattern, (4) acquired from the outside, and acquired by any of these methods.

  In the processing at the host 400, the processing from step S81 to S88 is the same as the processing from step S51 to S55 described with reference to FIG. In step S89, the descrambling process of the decrypted content is executed. The descrambling process in step S89 includes a scramble rule acquisition process in step S89a and a descrambling process in step S89b.

  The content is stored in the information recording medium 100 after being subjected to a scramble process to which a different scramble rule is applied for each content management unit or content. The scramble rule acquisition process of step S89a is a process of acquiring the scramble rule 407 stored in the information recording medium 100 and analyzing the scramble rule corresponding to the content to be reproduced. The descrambling process in step S89b executes a descrambling process corresponding to the scramble rule analyzed in step S89a.

  The scramble rule acquisition step in S89a and the descrambling process in step S89b must be executed as secure data processing so that the scramble rule does not leak. The scramble rule 407 stored in the information recording medium is recorded with a secure Java code, and the host 400 performs, for example, a scramble rule acquisition process in step S89a and a scramble release process in step S89b as processes in the Java virtual machine realized by Java. And the content 412 is output.

[5. Details of content decryption processing in the host]
Next, details of content decryption processing in the host will be described. As described above, the content is recorded on the information recording medium after being subjected to two different encryption processes: content encryption and specific area encryption. In content reproduction on the information recording medium, the specific area encrypted data is decrypted by the drive and output to the host. Therefore, the host executes the decryption process of the encrypted content whose specific area encryption process is released.

  First, with reference to FIG. 27, the outline of the data recording configuration stored in the information recording medium and the decoding process of the recorded data will be described. Data stored in the information recording medium is encrypted in units of blocks with a block key Kb generated based on a unit key Ku in units of CPS units that are content management units. Further, for example, specific area data such as anchor information is subjected to specific area encryption processing using a specific area encryption key Kp generated based on the configuration data of the physical index.

  In the case of reproduction, as described above, the specific area decryption process is executed in the drive, and then the CPS unit key Ku is based on various key generation information stored in the information recording medium in the host. Furthermore, the block key Kb is generated based on the block seed set for each block data unit and the CPS unit key Ku, and the block-unit decryption process based on the block key Kb is performed.

  FIG. 27A shows data stored in an information recording medium and a recording data configuration before encryption. 18-byte control data (UCD: User Control Data) and 2048-byte user data (User Data) including actual AV content data are configured as one sector data. For example, data of 6144 bytes for three sectors is one It is set as an encryption processing unit, that is, a block. The setting unit of the block is not limited to the method of making data of 6144 bytes for 3 sectors, and various settings such as a method of setting 2048 bytes of data for 1 sector as one encryption processing unit, that is, a block are possible. is there. Specific examples of these will be described later.

  FIG. 27B shows a configuration of one unit (1 AU: Aligned Unit) as an encryption processing unit when data of 6144 bytes for three sectors is set as one block. The 18-byte control data (User Control Data) is removed from the encryption target, and only user data that is actual AV content data is set as an encryption processing unit. An information processing apparatus that reproduces encrypted data stored in an information recording medium discriminates and extracts 1 AU (Aligned Unit), which is an encryption processing unit, based on a flag in control data.

  Therefore, when data of 6144 bytes for 3 sectors is set as one block, the information processing apparatus (host) that performs reproduction of the encrypted data is an encryption processing unit 6144 based on the flag in the control data. The byte data is determined as 1 AU, the block key Kb is generated in units of 6144 bytes, and decryption processing is executed. In addition, when 2048 bytes of data for one sector are set as one block, the information processing apparatus that performs reproduction of encrypted data uses 2048 byte units, which are encryption processing units, based on the flag in the control data. The block key Kb is generated and the decryption process is executed.

  When 6144 bytes of data for 3 sectors are set as one block, one unit (1 AU), which is an encryption processing unit, is encrypted with the block key Kb as shown in FIG. 27 (c) Content Encryption Configuration Example. Included. In order to generate a block key, a block seed is required as described above. The block seed is key generation information in units of blocks necessary for generating the block key Kb together with the CPS unit key Ku.

  The content encryption configuration data shown in FIG. 27C generated by the encryption process to which the block key is applied further includes the specific area encryption based on the specific area encryption key Kp generated based on the configuration data of the physical index. Is recorded on the information recording medium. The specific area is a specific area including the data portion such as the anchor portion described above with reference to FIGS. 8 to 13, and these partial data areas are selected and encrypted with the specific area encryption key Kp. Thereafter, it is stored in an information recording medium.

  FIG. 28 shows a detailed configuration of user data to be subjected to block encryption. FIG. 28A shows a data structure in a case where 3 sectors are block data (encryption processing unit (6144 bytes = 32 source packets)).

  When the AV stream has a data structure defined in the Blu-ray Disc Rewriteable format or the Blu-ray Disc ROM format, and 6144 bytes of data for three sectors are set as one block, as shown in FIG. , 6144-byte encryption processing units (blocks) are continuously set to form one CPS unit. The 6144-byte data is composed of 32 source packets having a length of 192 bytes.

  Each source packet is composed of a header part of 4 bytes and a TS packet part of 184 bytes, as shown in FIG. The encrypted content stored in the information recording medium is configured as a transport stream (TS) as encoded data defined (ISO / IEC13818-1) in the MPEG-2 system, for example. A transport stream can constitute a plurality of programs in one stream, and an ATS (Arrival Time Stamp) is set as appearance timing information of each transport packet.

  FIG. 28C shows a detailed configuration of 4 bytes of the header part of the source packet. In the 4 bytes of the header part, the first 2 bits are copy / reproduction control information CCI (Copy Control Information), and then an ATS (Arrival Time Stamp) as the appearance timing information of each transport packet is set. Yes. The time stamp is determined at the time of encoding so that the T-STD (Transport Stream System Target Decoder), which is a virtual decoder defined in the MPEG-2 system, does not break down. The appearance timing is controlled by the added ATS, and decoding and reproduction are performed.

  For example, when a transport stream packet is recorded on a recording medium, it is recorded as a source packet with the intervals between the packets reduced. However, by storing the appearance timing of each transport packet together on the recording medium, It becomes possible to control the output timing of each packet.

Hereinafter, specific examples of encryption processing and decryption processing in block data units to which the block key Kb is applied will be described with reference to FIGS.
(1) Processing example 1
An encryption processing unit (block) 500 shown in FIG. 29 is a configuration of one encryption processing unit (block) constituting encrypted content (CPS unit) stored in the information recording medium. An encryption processing unit (block) 500 shown in FIG. 29 shows a data configuration after the specific area is not encrypted, that is, after the specific area decryption process is executed by the drive. This encryption processing unit (block) 500 is output from the drive to the host.

  The encryption processing unit 500 includes user data for 3 sectors (6144 bytes) and user control data (UCD) 501 of 18 bytes corresponding to the first sector of the user data. A block seed 511 is set in the first 16 bytes (128 bits) of user data for 3 sectors (6144 bytes), and a data portion encrypted by the block key Kb is a decryption processing unit 502 shown in the figure.

  The information processing apparatus (host) that executes content reproduction sequentially acquires the encryption processing units. For example, in the selector processing execution step S46 described with reference to FIG. 15, the block seed (16 bytes) 511 and the other A process of separating the decryption processing unit 502 is executed.

  The process of step S91 in FIG. 29 is a block key Kb generation process. In step S91, an AES encryption process or a hash process to which the unit key Ku is applied is executed on the block seed 511 to generate a block key Kb.

  The process in step S92 in FIG. 29 is a process corresponding to the decoding process in step S48 in FIG. 15, for example. In step S92, the decryption processing unit 502 is input, and AES decryption processing using the block key Kb generated in step S91 is executed.

  As a result of the decryption process in step S92, decrypted user data 503 is generated, and this data is output to the reproduction control processing means 420 shown in FIG.

(2) Processing example 2
Processing example 2
Encryption processing unit (block): User data for one sector (2048 bytes) Encryption target data: Part excluding the first 16 bytes (128 bits) of user data for one sector (2048 bytes) (2032 bytes)
Block seed: The first 16 bytes (128 bits) of user data in one sector (2048 bytes)
It is an example.
An example of the recording data generation process in Process Example 2 is shown in FIG. 30, and an example of the decoding process is shown in FIG.

  First, a recording data generation processing example in Processing Example 2 will be described with reference to FIG. FIG. 30A shows user data of one sector (2048 bytes) and user control data 18 bytes corresponding to the sector.

  As shown in FIG. 30B, user data of one sector (2048 bytes) is set as one encryption processing unit (block).

  As shown in FIG. 30C, the block seed is the first 16 bytes (128 bits) of user data of one sector (2048 bytes).

  Note that the content of the content data to be encrypted is arbitrary, and the data corresponding to the block seed may also be an arbitrary byte string. Depending on the content of the content data, there is a possibility that a byte string of a specific pattern is arranged in the block seed part, and the value of the block key Kb generated using the block seed is different for each encryption processing unit. Is not guaranteed.

  The content encryption configuration data shown in FIG. 30 (c) generated by the encryption process to which the block key is applied further includes a specific area encryption based on the specific area encryption key Kp generated based on the physical index configuration data. Is recorded on the information recording medium. The specific area is a specific area including a data portion such as the anchor portion described above with reference to FIGS. 8 to 13, and these partial data areas are selected and encrypted with the specific area encryption key Kp. .

  As shown in FIG. 30, as an advantage of the method of setting user data of one sector (2048 bytes) as one encryption processing unit (block), if data of one sector (2048 bytes) is obtained, the block seed Acquiring, generating a block key, and decrypting content data are possible, and there is an advantage of high affinity for a system that uses 2048-byte data as a general-purpose processing unit, such as a drive connected to a PC.

  Next, a recording data decoding process sequence in the present processing example will be described with reference to FIG. The encryption processing unit (block) 520 shown in FIG. 31 is data after the specific area decryption processing is executed in the drive, that is, one encryption constituting the encrypted content (CPS unit) provided from the drive to the host. This is a configuration of a processing unit (block).

  The encryption processing unit 520 includes user data 522 for one sector (2048 bytes) and 18-byte user control data (UCD) 521 corresponding to the first sector of the user data. In this example, the block seed 523 is set as the first 16 bytes (128 bits) of the user data 522 for one sector (2048 bytes).

  The information processing apparatus (host) that executes the content reproduction sequentially acquires the encryption processing units. For example, in the selector processing execution step S46 described with reference to FIG. 15, the block seed (16 bytes) 523 and the other encryption A process for separating the data portion (2032 bytes) is executed. The user control data (UCD) 521 is separated as unencrypted data.

  The process of step S95 in FIG. 31 is a block key Kb generation process. In step S95, an AES key generation algorithm or a hash process using the unit key Ku is executed on the block seed 523 constituted by the first 16 bytes (128 bits) of user data of one sector (2048 bytes). A block key Kb is generated.

  The process in step S96 in FIG. 31 is a process corresponding to the decoding process in step S48 in FIG. 15, for example. In step S96, user data of encrypted data (2032 bytes) excluding the first 16 bytes (128 bits) of user data of one sector (2048 bytes) is input, and AES to which the block key Kb generated in step S95 is applied. Perform decryption processing.

  Further, for example, in the selector step S49 shown in FIG. 15, the decryption result of the encrypted data part excluding the block seed 523 of the first 16 bytes (128 bits) of the user data of 2048 bytes and the block seed 523 are decrypted. Data 531 is generated and the result is output to the reproduction control processing means 420 shown in FIG.

[6. Detailed configuration of copy / playback control information (CCI)]
Next, a detailed configuration of copy / playback control information (CCI) will be described. A configuration example of a copy / playback control information (CCI) file corresponding to one content management unit (CPS unit) will be described with reference to FIG.

  Copy / playback control information (CCI) corresponding to each CPS unit is divided and stored in a 2048-byte user data area constituting block data. FIG. 32 shows a first block 701 as a 2048-byte user data area constituting block data storing copy / playback control information (CCI), and a succeeding block 702. The subsequent block 702 is composed of one or more blocks. The succeeding block 702 is user data of N blocks, and is 2048 × N bytes of data.

The first block 701 is the total number of bytes of user data: 2048 bytes,
a. First header part: 16 bytes b. First control information (CCI) area: 2032 bytes of data are stored.

  a. In the first header part (16 bytes), information on the number of loops of copy / reproduction control information (CCI) (reproduction / copy control information) included in the first control information (CCI) area and an additional control information area are set. Is done.

  The additional information area set in the first header portion is, for example, a copy / reproduction control information such as a flag for prohibiting reproduction based only on the basic control information for a reproduction apparatus that supports only basic control information. It is an area used for adding / extending.

  B. Following the header part. The first control information (CCI) area (2032 bytes) stores copy / reproduction control information (CCI) (reproduction / copy control information) corresponding to each CPS unit.

In FIG. 32, as copy / playback control information (CCI) (playback / copy control information) of the first block 701,
Basic control information 1 (Basic CCI-1),
Extended control information 2 (Basic CCI-2)
An example including these two types of control information is shown. The example shown in the figure shows an example in which five basic control information (Basic CCI-1 to 5) blocks are stored.

  The basic control information (Basic CCI) is data composed of basic minimum copy / playback control information (CCI) (playback / copy control information), and executes content playback processing according to a predetermined content playback processing program. This information is read by almost all information processing apparatuses and is requested to execute processing according to control information. On the other hand, the extended control information (Extended CCI) is extended copy / playback control information (extended CCI) to be applied to an information processing apparatus having processing functions such as advanced content usage processing, for example, network transfer and data streaming transmission / reception. CCI) (playback / copy control information).

  The basic control information (Basic CCI) is required to be quickly extracted from the reproduction / copy control information storage file. The extended control information (Extended CCI) employs a storage method with a limited size and the like for future expansion. A specific example of basic control information (Basic CCI) and extended control information (Extended CCI) is shown in FIG.

As shown in FIG. 33, the basic control information (Basic CCI) includes, for example, the following control information.
Copy enable / disable information: Copy enable / disable / only 1 generation allowed Video output resolution restriction information: Output restricted / not available Analog copy control information: Allowed / not allowed (specify analog copy prevention technology to be used)
Information indicating presence / absence of encryption: With / without encryption Information indicating presence / absence of right claim: With / without right claim

Further, the extended control information (Extended CCI) includes, for example, the following control information.
Information reproducibility information on the information recording medium (Disc) alone: Indicates whether or not the content can be reproduced only with the information on the information recording medium (Disc). Reproduction method of content that cannot be reproduced on the information recording medium (Disc) alone: “Key distribution “Connect to server”, “Insert memory card with key”, etc. Server specification: Index value to server list Copy / Streaming compatibility information: Compatibility information for playing content on other devices in the network Data conversion method for streaming: A method that can be used when converting content for other devices

further,
Copy restriction information and other copy restriction information to the same type of recording media in the network,
Copy restriction information for copying to mobile devices, etc. Information such as whether streaming or remote playback is possible Control information for download processing,
It consists of information for obtaining operation control information from the server.
Arbitrary control information can be set as extended control information (Extended CCI).

Returning to FIG. 32, the description of the block data storing the copy / reproduction control information (CCI) will be continued. The subsequent block 702 shown in FIG. 32 is N blocks of user data, and is composed of 2048 × N bytes of data.
The user data of the subsequent block 702 stores the following data.
a. Second header part: 16 bytes b. Second control information (CCI) area: Any byte data is stored.

  a. Second header portion: 16 bytes are the first 16 bytes of the user data of the second block following the first block 701, and this area includes copy / playback control information (CCI) area included in the second control information (CCI) area. CCI) (reproduction / copy control information) information about the number of loops and a reserved area are set. The data of the second header part (16 bytes) is used as seed information for generating a block key corresponding to the first 2048 bytes of the second block.

  b. Second control information (CCI) area: Arbitrary bytes are a plurality of copy / reproduction controls within a range not exceeding (2048 × N-16) bytes excluding the header portion from the data size (2048 × N) bytes of the subsequent block 702 It is set as an area for storing information (CCI) (playback / copy control information). The example shown in FIG. 32 shows an example in which a total of four information blocks of extended control information (Extended CCI-1 to 4) are stored.

  With the configuration described above, a playback device that uses only basic control information can read out the first 2048 bytes of the CCI file, extract basic control information, and control playback and copy operations.

  FIG. 34 is a syntax diagram corresponding to the example of storing copy / playback control information (CCI) shown in FIG. There is first block area data 721 consisting of the first 2048 bytes, and subsequent block area data 722 arranged after that and having a size that is an integral multiple of 2048 bytes.

The first block area data 721 is as header information.
[Number_of_Primary_CCI_loop] as information indicating the number of information blocks (loops) constituting copy / reproduction control information (CCI) (reproduction / copy control information) described in the first block area: 16 bits Control information [Used for control info] area: 112 bits are set. The data is 16-byte data in the header part.

Further, as the first control information (CCI) area information,
[CCI_and_other_info_type]: 16 bits as data type information of copy / playback control information (CCI) (playback / copy control information)
[CCI_and_other_info_data_length]: 16 bits as data length information of copy / playback control information (CCI) (playback / copy control information)
[CCI_and_other_info_data_length]: (CCI_and_other_info_data_length × 8) bits as data value information of copy / playback control information (CCI) (playback / copy control information)
Reserved area: X bit,
Is set.

  The subsequent block area data 722 is also substantially the same in data structure as the first block area, and includes a header composed of information indicating the number of loops and a control information area, data type, data length, and data value. A control information (CCI) (playback / copy control information) section is set.

[7. Configuration example of information processing apparatus]
Next, a configuration example of an information processing apparatus that performs the above-described content recording process or reproduction process will be described with reference to FIG.

  The information processing apparatus 800 drives the information recording medium 891, drives a drive 890 for obtaining data recording / playback signals, a CPU 870 for executing data processing according to various programs, a ROM 860 as a storage area for programs, parameters, and the like, Memory 880, input / output I / F 810 for inputting / outputting digital signals, input / output I / F 840 for inputting / outputting analog signals and having A / D and D / A converters 841, MPEG for encoding and decoding MPEG data The block includes a codec 830, TS / PS processing means 820 for executing TS (Transport Stream) / PS (Program Stream) processing, and cryptographic processing means 850 for executing various cryptographic processing, and each block is connected to the bus 801. . The drive 890 includes a data processing unit 891 that executes specific area decoding processing, data recording / playback control, data transfer control, and the like, and a memory 892 that stores specific area position information, a data processing program, and the like.

  First, the operation during data recording will be described. Two cases of digital signal input and analog signal input are assumed as data to be recorded.

  In the case of a digital signal, data input from the digital signal input / output I / F 810 and subjected to appropriate encryption processing by the encryption processing means 850 as necessary is stored in the information recording medium 891. When the data format of the input digital signal is converted and stored, the data is converted into a data format for storage by the MPEG codec 830, the CPU 870, and the TS / PS processing means 820, and then the encryption processing means 850 selects an appropriate data format. Encryption processing is performed and the information recording medium 891 is stored. When data is recorded, both content encryption and specific area encryption may be executed by the encryption processing means 850. Alternatively, the content encryption may be executed by the encryption processing means 850, and then the specific area encryption may be performed by the data processing unit 891 in the drive 890.

  In the case of an analog signal, the analog signal input to the input / output I / F 840 is converted into a digital signal by the A / D converter 841 and converted into a codec used during recording by the MPEG codec 830. Thereafter, the data is converted into AV multiplexed data, which is the format of the recording data, by the TS / PS processing means 820, and appropriate encryption processing is performed in the encryption processing means 850 and the data processing unit 891 in the drive 890 as necessary. The recorded data is stored in the recording medium 891.

  For example, when recording content composed of AV stream data composed of MPEG-TS data, the content is divided into content management units (CPS units), and then encryption processing using a unit key is performed by the encryption processing means 850. The specific area encryption key Kp is generated based on the encrypted and securely generated physical index information or the physical index information read from the information recording medium 893, and after the specific area encryption is performed, via the drive 890 Are recorded on the recording medium 893. In the case of data recording, the generation of the specific area encryption key Kp and the specific area encryption processing are performed by either the encryption processing means 850 or the data processing unit 891 of the drive 890.

  Next, a process for reproducing data from an information recording medium will be described. For example, when reproducing AV stream data composed of MPEG-TS data as content, the data read from the information recording medium 891 in the drive 890 is subjected to a specific area decoding process in the data processing unit 891 of the drive 890. The The specific area encryption key Kp is generated based on the physical index information read from the information recording medium 893, and the specific area decryption process is executed. Specific area position information acquisition processing includes (1) acquisition of fixed area information stored in the memory 892 in the drive, (2) acquisition from a table stored in the information recording medium, and (3) identification according to a certain pattern. Acquire the region, (4) Acquire from the outside, any one of these methods.

  The data after the specific area decryption process in the drive 890 is then subjected to a content decryption process in the encryption processing means 850. When the content management unit is identified by the encryption processing unit 850, a unit key acquisition process corresponding to the content management unit is executed. Based on the acquired unit key, the encryption processing unit 850 performs a decryption process, and then , TS (Transport Stream) / PS (Program Stream) processing means 820 divides the data into data such as Video, Audio, and caption.

  The digital data decoded by the MPEG codec 830 is converted into an analog signal by the D / A converter 841 in the input / output I / F 840 and output. When digital output is performed, the MPEG-TS data decrypted by the encryption processing means 850 is output as digital data through the input / output IF 810. The output in this case is made to a digital interface such as IEEE 1394, an Ethernet cable, or a wireless LAN. When the network connection function is supported, the input / output IF 810 has a network connection function. In addition, when data is converted into a format that can be received by the output destination device in the playback apparatus and output, the video codec 830 once converts the video, audio, subtitles, etc. separated by the TS / PS processing means 820. Conversion and codec conversion processing are added, and data multiplexed in MPEG-TS or MPEG-PS again by the TS / PS processing means 820 is output from the digital input / output I / F 810. Alternatively, the CPU 870 can be used to convert to a codec other than MPEG or a multiplexed file and output from the digital input / output I / F 810.

  As described above, one unit key is associated with the content management unit (CPS unit). A playback application program that comprehensively executes playback control of content playback detects the occurrence of switching of content management units (CPS units), and executes switching of keys to be applied in accordance with the switching. If the key has not been acquired, a process for presenting a message prompting the key acquisition is executed.

  When information necessary for the recording / reproducing apparatus is acquired via a network outside the apparatus, the acquired data is stored in the memory 880 inside the recording / reproducing apparatus. The stored data includes key information necessary for content playback, subtitles to be played back at the time of content playback, audio (Audio) information, still image data, content management information, and playback device corresponding to the content management information There is an operation rule (Usage Rule). Further, when the specific area position information necessary for the specific use area decoding process in the drive is acquired from the outside, the acquired information is stored in the memory 892 of the drive 890.

  A program for executing the reproduction process and the recording process is stored in the ROM 860, and the memory 880 is used as a parameter and data storage and work area as needed during the program execution process. A program for executing the specific area decoding process in the drive 890 is stored in the memory 892 of the drive 890. In FIG. 35, a description has been given of a device configuration capable of recording and reproducing data. However, a device having only a reproduction function and a device having only a recording function can be configured, and the present invention can be applied to these devices. Is possible.

  The present invention has been described in detail above with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiments without departing from the gist of the present invention. In other words, the present invention has been disclosed in the form of exemplification, and should not be interpreted in a limited manner. In order to determine the gist of the present invention, the claims should be taken into consideration.

  The series of processes described in the specification can be executed by hardware, software, or a combined configuration of both. When executing processing by software, the program recording the processing sequence is installed in a memory in a computer incorporated in dedicated hardware and executed, or the program is executed on a general-purpose computer capable of executing various processing. It can be installed and executed.

  For example, the program can be recorded in advance on a hard disk or ROM (Read Only Memory) as a recording medium. Alternatively, the program is temporarily or permanently stored on a removable recording medium such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto optical) disk, a DVD (Digital Versatile Disc), a magnetic disk, or a semiconductor memory. It can be stored (recorded). Such a removable recording medium can be provided as so-called package software.

  The program is installed on the computer from the removable recording medium as described above, or is wirelessly transferred from the download site to the computer, or is wired to the computer via a network such as a LAN (Local Area Network) or the Internet. The computer can receive the program transferred in this manner and install it on a recording medium such as a built-in hard disk.

  The various processes described in the specification are not only executed in time series according to the description, but may be executed in parallel or individually as required by the processing capability of the apparatus that executes the processes. Further, in this specification, the system is a logical set configuration of a plurality of devices, and the devices of each configuration are not limited to being in the same casing.

  As described above, according to the configuration of the present invention, the data stored in the information recording medium is encrypted in two different modes: the first encryption process and the second encryption process for the specific area. When the content is played back, the second encrypted data is decrypted for the specific area on the drive side, and then the processed data is provided to the host. Since the content reproduction is performed by executing the decryption process of the encryption process, it is defined as the content reproduction condition that the key generation process and the decryption process according to the valid data processing sequence are executed on the drive side. Therefore, even if content reading processing using an unauthorized drive device whose license is not approved and data output to the host cannot be performed, content playback cannot be executed on the host side. Content can be reproduced only by the combination, and strict content usage management is realized.

  Furthermore, according to the configuration of the present invention, the specific area to be subjected to the second encryption is set as an area including a management data area in which a reading process prior to content reading executed at the time of content reproduction is required. For example, since an area including anchor information in the UDF file system and an area including AIA information in the BDFS file system are set, in order to read these management data correctly, the decoding process of the specific area according to the correct sequence must be successful. Therefore, the data in the management area can be decrypted only by data processing that can be executed only by a drive having a valid license, and content reproduction when an unauthorized drive device is present can be prevented.

  Further, according to the configuration of the present invention, since the decryption process for the second encryption is executed by the drive, the decryption process corresponding to the first encryption is executed on the host side, and the second encryption is performed. There is no need to execute processing for conversion. Therefore, there is an advantage that even if the content is subjected to the second encryption, the content can be handled without changing the function on the host side. That is, if a host having a function for executing the decryption process corresponding to the first encryption applies a drive for executing the decryption process corresponding to the second encryption, the host performs the first and second encryptions. Even when a combination of a host capable of playing back the content and having a function of executing a decryption process corresponding to the first encryption and a drive that does not execute the decryption process of the second encryption, the second It is possible to reproduce content that has not been encrypted. As described above, by applying the function of the same host, it is possible to process contents in various encryption modes stored in the information recording medium.

It is a figure explaining the storage data structure of an information recording medium. It is a figure explaining the process in the manufacturing process of an information recording medium, and an example of an information management structure. It is a figure explaining the example of a process which a management center, a content edit entity, and an information recording medium manufacture entity perform. It is a figure explaining the example of a process which a management center, a content edit entity, and an information recording medium manufacture entity perform. It is a figure explaining the process in the manufacturing process of an information recording medium, and an example of an information management structure. It is a figure explaining the example of a process which a management center, a content edit entity, and an information recording medium manufacture entity perform. It is a figure explaining the example of a process which a management center, a content edit entity, and an information recording medium manufacture entity perform. It is a figure explaining the example of a setting of the specific area | region used as the object of a specific area encryption process at the time of applying a UDF file system in the recording content with respect to an information recording medium. It is a figure explaining the example of a setting of the specific area | region used as the object of a specific area encryption process at the time of applying a UDF file system in the recording content with respect to an information recording medium. It is a figure explaining the example of a setting of the specific area | region used as the object of a specific area encryption process at the time of applying a UDF file system in the recording content with respect to an information recording medium. It is a figure explaining the recording data structure at the time of recording the recording content with respect to an information recording medium, applying a BDFS file system. It is a figure explaining the example of a setting of the specific area | region used as the object of a specific area encryption process at the time of applying a BDFS file system in the recording content with respect to an information recording medium. It is a figure explaining the example of a setting of the specific area | region used as the object of a specific area encryption process at the time of applying a BDFS file system in the recording content with respect to an information recording medium. It is a figure explaining the outline | summary of the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the detail of encryption processes, such as key generation applied to the content reproduction in an information processing apparatus. It is a figure explaining the AES hash process applied at the time of the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the detail of encryption processes, such as key generation applied to the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the detail of encryption processes, such as key generation applied to the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the detail of encryption processes, such as key generation applied to the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the detailed example of the one aspect | mode of the content reproduction in an information processing apparatus. It is a figure explaining the outline | summary of the data recording structure stored in an information recording medium, and the decoding process of recording data. It is a figure explaining the detailed structure of the user data used as the object of block encryption. It is a figure explaining the example of a decoding and reproduction | regeneration processing of encryption content. It is a figure explaining the example of a recording data structure of encryption content. It is a figure explaining the example of a decoding and reproduction | regeneration processing of encryption content. It is a figure explaining the copy / reproduction control information (CCI) file structure corresponding to a content management unit (CPS unit). It is a figure which shows the specific example of basic control information (Basic CCI) and extended control information (Extended CCI). FIG. 33 is a syntax diagram corresponding to the example of storing copy / playback control information (CCI) illustrated in FIG. 32. FIG. 11 is a diagram for describing a configuration example of an information processing apparatus that mounts an information recording medium and executes content recording / playback.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Information recording medium 101 User data area 102 Lead-in area 111 Encrypted content 112 Recording seed 113 Copy / reproduction control information 114 Content hash 120 Encryption key information 121 EKB (Enabling Key Block)
131 Physical Index 310 Management Center 311 Media Key 312 EKB
330 Content editing entity 331 Edited content 332 CCI information 333 Recording seed Vu
350 Information recording medium manufacturing entity 351 Physical index 400 Information processing device 401 EKB
402 Physical index 403 Copy / playback control information 404 Content hash 405 Encryption unit key 406 Encrypted content 407 Scramble rule 410 Encryption processing means 420 Playback control processing means 431 AES decryption section 432 Exclusive OR section 433 AES encryption section 441 hash Arithmetic unit 500 Encryption processing unit (block)
501 User control data (UCD)
502 Decryption Processing Unit 503 User Data 511 Control Data 520 Encryption Processing Unit (Block)
521 Control data 522 User data 523 Block seed 531 Decoded data 701 First block 702 Subsequent block 721 First block area data 722 Subsequent block area data 800 Information processing device 801 Bus 810 I / O I / F
820 TS / PS processing means 830 MPEG codec 840 I / O I / F
841 A / D, D / A converter 850 Encryption processing means 860 ROM
870 CPU
880 Memory 890 Drive 891 Data processing unit 892 Memory 893 Information recording medium

Claims (32)

A drive device that is mounted with an information recording medium and executes data reading processing from the information recording medium,
A data processing unit that executes encryption key generation processing based on information stored in the information recording medium and that performs decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key ,
A drive apparatus comprising: a data processing unit configured to output data subjected to a specific area decoding process to a host apparatus that executes a reproduction process. The data processing unit
2. The drive device according to claim 1, wherein the drive device is configured to execute encryption key generation processing based on configuration data of a physical index stored in an information recording medium as information accompanying the information recording medium. The data processing unit
The specific area data is selected according to specific area position information stored in a memory in the drive device, specific area position information stored in an information recording medium, or specific area position information acquired from the outside, or 2. The drive device according to claim 1, wherein the drive device is configured to execute a data selection and extraction process according to a preset pattern. The specific area is
Including a management data area in which a reading process prior to content reading executed when reproducing the content stored in the information recording medium is requested,
The data processing unit
The drive device according to claim 1, wherein the drive device is configured to execute data decoding processing of a specific area including the management data area. The data processing unit
Included in recorded data of information recording medium a. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
The drive device according to claim 1, wherein an area including at least one of the data a to e is selected as a specific area, and decoding processing of the selected specific area data is executed. The specific area is
An area containing anchor information in the UDF file system,
The data processing unit
The drive apparatus according to claim 1, wherein the drive apparatus is configured to execute a data decoding process for a specific area including the anchor information. The specific area is
An area containing AIA information in the BDFS file system,
The data processing unit
The drive apparatus according to claim 1, wherein the drive apparatus is configured to execute a data decoding process for a specific area including the AIA information. An information processing apparatus comprising a drive that mounts an information recording medium and executes data reading processing from the information recording medium, and a host that executes data processing on input data from the drive,
The drive is
A data processing unit that executes encryption key generation processing based on information stored in the information recording medium and that performs decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key ,
The data processing unit has a configuration for outputting data subjected to a specific area decoding process to the host,
The host is
An information processing apparatus having a configuration in which a unit key corresponding to each content management unit stored in the information recording medium is generated, and content decryption is executed based on data processing to which the unit key is applied. The host is
In generating the unit key,
a. Configuration data of copy / playback control information set corresponding to the content management unit;
b. A content hash that is a hash value based on the configuration data of the content management unit;
c. A recording seed corresponding to the content management unit;
The information processing apparatus according to claim 8, wherein the information processing apparatus is configured to execute data processing to which at least one of the data a to c is applied. The data processing unit of the drive
9. The information processing apparatus according to claim 8, wherein the information processing apparatus is configured to execute encryption key generation processing based on configuration data of a physical index stored in the information recording medium as supplementary information of the information recording medium. The data processing unit of the drive
The specific area data is selected according to specific area position information stored in a memory in the drive device, specific area position information stored in an information recording medium, or specific area position information acquired from the outside, or The information processing apparatus according to claim 8, wherein the data selection is performed according to a preset pattern to perform extraction processing. The specific area is
Including a management data area in which a reading process prior to content reading executed when reproducing the content stored in the information recording medium is requested,
The data processing unit of the drive
The information processing apparatus according to claim 8, wherein the information decoding apparatus is configured to execute data decoding processing of a specific area including the management data area. The data processing unit of the drive
Included in recorded data of information recording medium a. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
The information processing apparatus according to claim 8, wherein an area including at least one of the data a to e is selected as a specific area, and decoding processing of the selected specific area data is executed. An information recording medium manufacturing method,
A content encryption processing step for executing a first encryption processing of content to be recorded on the information recording medium;
A specific area encryption processing step for executing a second encryption process on the selected specific area for the processing data in the content encryption step;
Recording the data subjected to the first and second encryption processing on an information recording medium;
An information recording medium manufacturing method comprising: The information recording medium manufacturing method further includes:
A key generation step for executing encryption key generation processing based on the configuration data of the physical index stored in the information recording medium as the information recording medium auxiliary information;
The specific area encryption processing step includes:
15. The method of manufacturing an information recording medium according to claim 14, wherein the second encryption process is performed on a specific area to which an encryption key based on physical index configuration data generated in the key generation step is applied. . The specific area encryption processing step includes:
As the specific area, a management data area that requires a reading process prior to content reading executed when reproducing the content stored in the information recording medium is selected, and a second area is selected with respect to the specific area including the management data area. The information recording medium manufacturing method according to claim 14, wherein the information recording medium is a step of executing an encryption process. The specific area encryption processing step includes:
Included in recorded data of information recording medium a. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
15. The information recording according to claim 14, wherein an area including at least one of the data a to e is selected as a specific area, and a second encryption process is performed on the selected specific area data. Medium manufacturing method. The specific area encryption processing step includes:
15. The information according to claim 14, which is a step of selecting an area including anchor information in the UDF file system as the specific area and executing a second encryption process on the selected specific area data. A recording medium manufacturing method. The specific area encryption processing step includes:
15. The information according to claim 14, which is a step of selecting an area including AIA information in a BDFS file system as the specific area and executing a second encryption process on the selected specific area data. A recording medium manufacturing method. An information recording medium,
Store data including encrypted content as recorded data,
The recorded data is recorded data including encrypted content subjected to a first encryption process, and the specific area constituting a part of the recorded data is further added to the first encryption process, An information recording medium, which is data subjected to a second encryption process. The information recording medium further includes:
Stores the physical index as information accompanying the information recording medium,
The information recording medium according to claim 20, wherein the second encryption process for the specific area is an encryption process using an encryption key based on configuration data of the physical index. The specific area subjected to the second encryption process is:
21. The information recording medium according to claim 20, wherein the information recording medium is an area including a management data area in which a reading process prior to reading of contents executed when reproducing contents stored in the information recording medium is requested. The specific area subjected to the second encryption process is:
Included in recorded data of information recording medium a. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
21. The information recording medium according to claim 20, wherein the information recording medium is an area including at least one of the data a to e. The specific area subjected to the second encryption process is:
21. The information recording medium according to claim 20, wherein the information recording medium is an area including anchor information in a UDF file system. The specific area subjected to the second encryption process is:
21. The information recording medium according to claim 20, wherein the information recording medium is an area including AIA information in a BDFS file system. An information processing method for executing reproduction processing of content stored in an information recording medium,
Drive-side data for executing encryption key generation processing based on information stored in the information recording medium and performing decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key in the drive Processing steps;
A host-side data processing step of generating a unit key corresponding to each content management unit stored in the information recording medium in the host and executing content decryption based on data processing to which the unit key is applied;
An information processing method characterized by comprising: The host side data processing step includes:
In generating the unit key,
a. Configuration data of copy / playback control information set corresponding to the content management unit;
b. A content hash that is a hash value based on the configuration data of the content management unit;
c. A recording seed corresponding to the content management unit;
27. The information processing method according to claim 26, wherein data processing to which at least one of the data a to c is applied is executed. The drive side data processing step includes:
27. The information processing method according to claim 26, further comprising a step of executing an encryption key generation process based on the configuration data of the physical index stored in the information recording medium as the information recording medium supplementary information. The drive side data processing step includes:
The specific area data is selected according to specific area position information stored in a memory in the drive device, specific area position information stored in an information recording medium, or specific area position information acquired from the outside, or 27. The information processing method according to claim 26, further comprising a step of executing a process of performing data selection and extracting according to a preset pattern. The drive side data processing step includes:
In the step of selecting an area including a management data area that requires a reading process prior to content reading executed when reproducing content stored in an information recording medium as a specific area, and executing data decoding processing of the selected specific area 27. The information processing method according to claim 26, wherein: The drive side data processing step includes:
Included in recorded data of information recording medium a. Encrypted content,
b. Copy / play control information,
c. A content hash, which is a hash value based on the content composition data,
d. An encryption unit key to be applied to decryption of encrypted content,
e. Scramble rules,
27. The information processing method according to claim 26, wherein an area including at least one of the data a to e is selected as a specific area, and decoding processing of the selected specific area data is executed. A computer program that causes a computer to execute reproduction processing of content stored in an information recording medium,
A drive-side data processing step for executing encryption key generation processing based on information stored in the information recording medium, and executing decryption processing of specific area data selected from the information recording medium recording data based on the generated encryption key; ,
A host-side data processing step of generating a unit key corresponding to each content management unit stored in the information recording medium and executing content decryption based on data processing to which the unit key is applied;
A computer program characterized by comprising:

Images