JP2012016053A - Digital signal processing device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To protect copyright of a content without awareness of a user by achieving ease of operation as in a conventional analog connection because, when the content is transmitted or received through a digital signal bus, the protection of copyright can be a problem due to no deterioration in quality, requiring an authentication processing with large processing amount and long processing time.SOLUTION: Digital signal processing devices can protect copyright of a content by performing authentication processing for copyright management between the devices connected to a digital signal bus and allowing the devices to share a key for encryption when the devices are powered on, are connected to the digital signal bus, and when input terminals connected to the digital signal bus are selected.

Description

The present invention relates to a digital signal processing apparatus that connects a plurality of digital signal processing apparatuses via a digital signal bus and transmits / receives copyrighted content.

If content is transmitted / received via a digital signal bus, video signals, audio signals, data, and the like can be transmitted / received without quality degradation, which is a great advantage for the user. However, copyright protection is a problem because there is no deterioration in quality. As a technique for encrypting contents transmitted and received through a digital signal bus, there is a technique described in pages 47 to 53 of Nikkei Electronics 1998.3.23 (no. 712). As described in this technology, authentication processing is performed on the transmission side and the reception side, and content can be transmitted and received only between devices that have been authenticated. By performing such processing, the copyright is protected so that the content cannot be illegally copied.

The digital signal bus described above can transfer not only contents but also information for controlling each device, and all devices connected by the digital signal bus can be controlled from one device.

Nikkei Electronics 1998.3.23 (no. 712) pages 47-53

Although the copyright of content can be protected by using the above-described technology, authentication processing and encryption processing between devices are complicated, and the amount of information to be processed is large, and processing takes time. Furthermore, since the number of devices to be connected increases, the amount of processing further increases, causing a problem in operability. As described above, when content is transmitted / received through the digital signal bus, it becomes a problem to realize operability comparable to that of a conventional analog signal and to protect the copyright of the content without the user being aware of it.

In addition, by using the above technology, it is possible to control all devices from any one device, but there are several operation methods for one purpose, and the operation method can be used by the user. It can be confusing.

SUMMARY OF THE INVENTION An object of the present invention is to provide a digital signal processing apparatus that solves the above problems and improves the operability and connection method of the digital signal processing apparatus that protects the copyright of the content without the user's awareness. It is in.

The above object can be realized by providing an interface means for performing an authentication process between devices connected to the digital signal bus when the power is turned on.

Further, when connected to the digital signal bus, it can be realized by providing an interface means for performing an authentication process between devices connected to the digital signal bus.

Further, when an input terminal connected to the digital signal bus is selected, it can be realized by providing an interface means for performing an authentication process between devices connected to the digital signal bus.

Further, it can be realized by providing a storage means for storing a key used between devices connected to the digital signal bus.

Further, it can be realized by providing an interface means for changing the transfer channel of the digital signal bus according to the copyright management information accompanying the content.

Further, this can be realized by providing means for defining the name of each device connected to the digital signal bus.

According to the digital signal processing apparatus of the present invention, since authentication processing for copyright management is performed between devices connected to the digital signal bus when the power is turned on or when connected to the digital signal bus, there is a limitation. Even if content that requires authentication is sent, it can be received immediately.

In addition, when the input terminal connected to the digital signal bus is selected, the connection processing is performed only when necessary by performing an authentication process for copyright management between the devices connected to the digital signal bus. Less processing burden.

Further, by storing a key used between devices connected to the digital signal bus, it is necessary to perform an authentication process because the key is stored even when the copy management information of the content from the transmitting device is switched. No image is interrupted on the way.

Also, even if only one key can be set in one transfer channel by changing the transfer channel of the digital signal bus according to the copyright management information accompanying the content, the copy management information of the content from the transmitting device Even if the key is switched, the key is stored, so there is no need to perform authentication processing, and the image is not interrupted.

Further, by defining the names of the respective devices connected to the digital signal bus, it is possible to provide a user-friendly interface.

It is a block diagram of the Example explaining the connection method of the digital signal processing apparatus of this invention. FIG. 6 is a timing diagram of a digital signal bus. It is a figure which shows the flow which shows an authentication process. It is a figure which shows the structure of the digital video disc of FIG. FIG. 5 is a diagram illustrating a configuration of the IF circuit of FIG. 4. It is a figure which shows the flow which shows the authentication process between apparatuses. It is a figure which shows the flow which shows the authentication process between apparatuses. It is a figure which shows the flow which shows the authentication process between apparatuses.

  Hereinafter, an embodiment of the present invention will be described with reference to the drawings.

First, examples will be described. FIG. 1 is a configuration example for explaining an example of a connection method of a digital signal processing apparatus according to the present invention. In FIG. 1, 100 is a digital tuner, 102
Is a digital signal bus, 103 and 104 are digital VTRs, 105 is a digital video disk, and 106 is a digital display.

First, the digital signal bus 1 is connected to the digital signal bus 102 of FIG.
02 initial setting operation is started. Here, the device that becomes the route of the bus is determined, and the device that becomes the route performs management so that a signal does not collide with the transfer channel or timing of the bus. Devices other than the route query the route device about the transfer channel and timing of the bus, and are permitted to use the bus when there is no collision.

Here, the transfer operation of the digital signal bus 102 will be described. FIG. 2 shows how the digital signal bus 102 is transferred. Reference numeral 200 denotes a cycle start packet, 201 denotes AV data A, 202 denotes AV data B, and 203 denotes asynchronous transfer data.
AV data is data in which audio and video are mixed, and FIG. 2 shows an example in which two AV data streams are transferred. In this way, the two streams are transferred while securing separate channels that are time-divided. Asynchronous transfer data 203 is data relating to commands of each device and settings of each device.

The time from the dotted line to the dotted line in FIG. 2 is called a cycle, and in one cycle period, the AV data A201
The bus is controlled so that the determined transfer bandwidth of the AV data B202 is always ensured. Asynchronous transfer data 203 is transferred after the transfer of AV data A201 and AV data B202 is completed. Specifically, the AV data A following the cycle start packet 200
201, AV data B202, and asynchronous transfer data 203 are transferred. However, when the cycle period cannot be observed, the transfer of asynchronous transfer data 203 is weighted.

Next, authentication processing is performed between the devices. There are two types of authentication processing: full authentication and limited authentication, and they are used properly depending on copyright management information and the contents of the device. Complete authentication is established only when the sending and receiving devices have public keys. When complete authentication is established, transfer is permitted even for copy-prohibited content. Those having a public key on the receiving side include those that do not have a recording device such as a digital display, and those that have a recording device that is permitted to record by charging or the like. Restricted authentication is authentication for a device having only a common key, and is intended for a device having a recording device such as a digital VTR. Restricted authentication does not allow the transfer of copy-prohibited content. These operations are summarized in FIG.

In step 301 of FIG. 3, the authentication method is selected depending on what authentication method the device has and what the content copy management information is. Since the content that can be copied any number of times is neither authenticated nor encrypted, the process ends. After selecting the authentication method in step 301, the authentication process is performed in step 302 when complete authentication is performed, and in step 303 when limited authentication is performed. Thereafter, in step 304, the encryption key used when encrypting the content is shared, and the authentication process ends.

The above processing is required for transmission / reception of copy-restricted content, but the authentication processing requires a large amount of calculation and takes a long time to process, so it becomes a problem when to perform these processing.

Next, the inside of the device connected to the digital signal bus 102 will be described. Here, for example, the inside of the digital video disc 105 will be described with reference to FIG. In FIG. 4, 401 is a digital signal bus input / output terminal, 402 is an analog output terminal, 403 is an analog input terminal, 404 is an interface (hereinafter IF) circuit, 405 is a decoder, 406 is an encoder, 407 is a stream conversion circuit, and 410 is Input switching circuit, 411 is output switching circuit, 412 is recording signal processing circuit, 413 is reproduction signal processing circuit, 414 is microcomputer, 415
There is a disk, 416 pickup.

Bus control and authentication processing are mainly processed by the IF circuit 404. First, basic operations will be described.

In the recording operation, the input switching circuit 410 is controlled by an input control signal from the microcomputer 414. When an analog input is selected, the analog signal input from the analog input terminal 403 is encoded by the encoder 406 in a so-called MPEG format. In addition, the digital signal bus 102
Can be decoded by the decoder 405, so that the monitor of the recorded stream can be confirmed.

In the reproducing operation, a signal recorded on the disk 415 is read out by a pickup 416 and reproduction data is read out by a reproduction signal processing circuit 413. The output switching circuit 411 is controlled by the output control signal from the microcomputer 414 to select the monitor output or the reproduction output of the input signal. The output of the output switching circuit 411 is output to the decoder 405 and the stream conversion circuit 407. The decoder 405 converts the compressed digital signal into an analog signal,
An analog signal is output from the analog signal output terminal 402, and the stream conversion circuit 407 converts the analog signal into a transport stream for transfer via a digital signal bus, and the IF circuit 40
4 and output from the digital signal bus input / output terminal 401.

In this way, by using the stream conversion circuit 407, a signal reproduced from the disc can also be converted into a transport stream, so that it can be transferred to the digital signal bus.

Next, the operation of the IF circuit 404 will be described with reference to FIG. 5, 501 is a stream input / output terminal, 503 is an IF control signal input / output terminal, 504 is an encryption processing circuit, 505 is an asynchronous transfer processing circuit, 506 is a microcomputer, 507 is a synchronous transfer processing circuit, 508 is a packet processing circuit, Reference numeral 509 denotes a bus control circuit, and 510 denotes a digital signal bus input / output terminal.

The bus initial setting operation described above is performed by the bus control circuit 509. The initial setting operation is performed by communication between bus control circuits of digital devices connected to the digital signal bus. When the initial setting operation is completed and the root device is determined, the microcomputer 506 recognizes the configuration information of each digital device via the packet processing circuit 508. After recognizing the configuration of each digital device, the microcomputer 506 performs connection processing on the connectable device and performs authentication processing. These processes are performed by converting a command from the microcomputer 506 into a transfer packet by the packet processing circuit 508 via the asynchronous transfer processing circuit 505 and transmitting / receiving on the digital signal bus 102 by the bus control circuit 509.

After these processes, the connection information of each digital device is transferred to the microcomputer 414 in FIG. The microcomputer 414 displays the device configuration for the user based on the connection information, displays whether the connection is possible and whether the transfer is possible, and the user uses it to select the connection of the device. By displaying the connection information to the user in this way, there is no doubt as to whether or not the user can connect.

Here, there are cases where it is difficult for the user to identify the device, such as when there are two digital VTRs as shown in FIG. 1 or when more devices are connected. Therefore, the names of these devices can be freely defined by the user. For example, two digital VTRs
“DVTR1” and “DVTR2” are defined, and the digital tuner 100 is defined by a broadcast service name, for example, “BS-D”. By making such a definition, a user-friendly interface can be provided.

After completing the connection and authentication processing, the stream can be transmitted and received. In order to receive the stream on the digital signal bus 102, the bus control circuit 509 first receives the received packet, converts the received transfer packet by the packet processing circuit 508, and reproduces the time interval by the synchronous transfer processing circuit 507 to transport the stream. To reproduce. The transport stream is decrypted by the encryption processing circuit 504 using the key shared in the authentication processing, and the stream input / output terminal 50
1 to output the stream. In order to output a stream to the digital signal bus 102, first, the stream from the stream input / output terminal 501 is encrypted by the encryption processing circuit 504 using the key shared in the authentication process. Whether or not the stream is encrypted by the encryption processing circuit 504 is determined by the microcomputer 414 in FIG. 4 based on the copy information recorded on the video disk, and is controlled by communicating with the microcomputer 506. A time stamp for reproducing the time interval is added by the synchronous transfer processing circuit 507, converted into a transfer packet by the packet processing circuit 508, transmitted by the bus control circuit 509, and a stream is output on the digital signal bus 102.

Next, how and when the authentication process is performed will be described. First, when there is a controller for overall control, for example, a case where the digital display 106 is a controller will be described.

Since the authentication process is started by a request on the receiving side, it is conceivable to send a command to authenticate the device received from the controller. The devices that can be received in FIG. 1 are the digital VTRs 103 and 104, the digital display 106,
All devices other than the digital display 106 transmit. A command is sent from the digital display 106 as a controller to each receiving device so as to authenticate each transmitting device.

The processing procedure at this time is shown in FIG. In step 601, a transmitting device such as the digital tuner 100 is selected, and in step 602, complete authentication is performed with a device that can be fully authenticated. In FIG. 1, for example, the digital display 106 is used, an authentication request is sent from the digital display 106 to the digital tuner 100, an authentication process is performed, and a key is shared and stored. In step 603, a receiving device capable of limited authentication, here a digital display 106.
The digital VTRs 103 and 104 perform limited authentication between the digital tuner 100, the digital tuner 100, the digital display 106, and the digital VTR.
A key is shared between 103 and 104 and stored. In step 604, it is confirmed whether or not the authentication process has been completed for all the transmitting / receiving devices. If not, the process returns to step 601 to select another transmission device, for example, the digital video disc 105, and repeat the same authentication process. . Here, the device that does not have the authentication process itself is excluded from the process.

As described above, by performing authentication processing at the time of power-on or connection before content transmission / reception, encrypted content can be received without interruption. Also, by sharing and storing the key, the digital display 106 does not need to perform an authentication process because the key is stored even when the copy management information of the content from the transmitting device is switched, so that the authentication process is not required. The image will not be interrupted. Since the digital tuner 100, the digital display 106, and the digital VTRs 103 and 104 share a key, even if content that requires restricted authentication is transmitted, it can be received by all devices. There is no sense of incongruity.

The above processing is a case where the devices connected to the digital signal bus 102 are turned on at the same time, but even when each device is turned on separately, the device that became the controller is turned on. Devices are detected and processed sequentially.

Even if the main power is turned off, the connection state can be maintained as long as the power of the IF circuit 404 is supplied in a standby state or the like, so that it is not necessary to newly perform an authentication process.

Even when the power is turned on, the digital signal bus 102 may be connected later. Also in this case, the controller detects the connection of the bus and performs an authentication process so that the key can be shared.

These new connection devices may be detected by a device other than the controller, resetting the bus, and reconnecting from the initial setting operation.

Here, there is a case where only one encryption key is assigned to one transfer channel. In this case, if the copy management information of the content is switched halfway, it is necessary to perform the authentication process again. However, a transfer channel is prepared for each copy management information of the content, the authentication process is performed, and the key is stored. The same effect can be obtained.

Next, a case where the controller is not particularly set will be described. Since the receiving device basically requests authentication, the operation of the receiving device will be mainly described. As an example, processing of the digital VTR 103 as a receiving device in FIG. 1 will be described. First, a search is made for a transmitting device, and when there are a plurality of devices, one of them is selected. In FIG. 1, the digital video disc 105
Select. Next, the selected digital video disc 105 and digital VTR 103
Authentication process is performed between. In this authentication process, the limited authentication and the one that can be fully authenticated are fully authenticated. Then, it is confirmed whether or not the digital video disc 105 has already been connected to another receiving device. If the digital video disc 105 is already connected to the digital display 106, for example, it means that the authentication process is completed and the key is shared, so the digital VTR 103 also shares the same key and stores it. To do. If not connected, a new key is shared. The above processing is repeated until the authentication processing is completed between all transmitting devices.

In addition, as a key at this time, a key that is a seed of the encryption key is shared at the time of authentication, and the encryption key is used as a key of that seed and is calculated by a mutually determined calculation method for a certain period of time. In some cases, the data is sequentially updated at intervals.

The above procedure is shown in FIG. In step 701 of FIG. 7, first, a transmission device is searched and selected. In step 702, authentication processing is performed with the selected transmission device. In step 703, it is confirmed whether or not the selected transmitting device is already connected to another receiving device. If it is already connected, it means that the authentication process is completed and the key is shared. If it is already connected, in step 704, the same key as that of the connected receiving device is shared. If not connected, a new key is shared in step 706. The above processing is repeated until authentication processing is completed between all the transmitting devices in step 706.

The processing in FIG. 7 is for a case where a receiving device is connected or powered on, but this transmitting device is also detected when a transmitting device is newly connected or powered on. The authentication process is performed by the same process. Further, even if the content is being transferred because it is already connected to another receiving device, authentication processing is performed in the same manner.

As described above, even when the controller is not particularly set, each receiving device performs the above-described processing, so that a key is stored for each copy management information. Even if is switched, there is no need to perform authentication processing, and the image is not interrupted. In addition, since each receiving device can share a key for one transmitting device, even if content that requires restricted authentication is transmitted, it can be received by all devices, compared to the case where it is connected with an analog signal. There is no sense of incongruity.

In the above embodiment, it is described that connection processing and authentication processing are performed with all devices. However, when an extremely large number of devices are connected, a case in which the processing time becomes too large to be ignored is applied to a device registered in advance. The same effect can be obtained even if it is performed only for a device or only for a device that has been transferred in the past.

Further, there are cases where a plurality of connection forms as shown in FIG. 1 are connected via a bridge. In this case, the same effect can be obtained even if the connection is made to a device connected in the bridge and the connection is made via the bridge even if the authentication process is performed each time the data is transferred.

Next, a case where authentication processing is performed when input is switched will be described. Since the digital video disc 105 has an analog input and a digital input, an authentication process may be performed when the digital input is selected. In this case, processing time is required at the time of input switching. However, since connection processing is performed only when necessary, the processing load is reduced.

The processing at this time is shown in FIG. In step 801, a transmitting device that transmits content is searched, and a target transmitting device is selected. In step 802, authentication processing is performed, and step 803 is performed.
In step 804, the key is shared with the connected device, and if not connected, a new key is shared. As described above, since connection processing is performed only when necessary, the processing load is small. In this embodiment, a device having an analog input and a digital input has been described, but the same applies to a device having two or more digital inputs. Although the digital video disc has been described here, the same processing is performed in other digital devices.

The authentication process described above can be similarly processed even if it is used other than copy information and copyright information.

DESCRIPTION OF SYMBOLS 100 ... Digital tuner, 102 ... Digital signal bus, 103 and 104 ... Digital VTR, 105 ... Digital video disk, 106 ... Digital display, 2
00 ... cycle start packet, 201 ... AV data A, 202 ... AV data B, 20
3 ... Asynchronous transfer data, 401 ... Digital signal bus input / output terminal, 402 ... Analog output terminal, 403 ... Analog input terminal, 404 ... IF circuit, 405 ... Decoder, 406 ... Encoder, 407 ... Stream conversion circuit, 410 ... Input switching Circuit, 411... Output switching circuit,
412 ... Recording signal processing circuit, 413 ... Reproduction signal processing circuit, 414 ... Microcomputer, 415 ... Disc, 416 ... Pickup, 501 ... Stream input / output terminal, 503 ... IF control signal input / output terminal, 504 ... Encryption processing circuit, 505 ... Asynchronous transfer processing circuit, 506... Microcomputer,
507 ... Synchronous transfer processing circuit, 508 ... Packet processing circuit, 509 ... Bus control circuit, 510
... Digital signal bus input / output terminal.

Claims (6)

In a digital signal processing apparatus that connects a digital signal processing apparatus and another digital signal processing apparatus via a digital signal bus and transmits / receives a digital signal,
An interface means for requesting an authentication process from the other digital signal processing apparatus when the digital signal processing apparatus is powered on is provided. In a digital signal processing apparatus that connects a digital signal processing apparatus and another digital signal processing apparatus via a digital signal bus and transmits / receives a digital signal,
An interface means for requesting an authentication process from the other digital signal processing apparatus when the digital signal processing apparatus is connected to the digital signal bus is provided. In a digital signal processing device that connects a digital signal processing device having at least two or more input terminals and another digital signal processing device by a digital signal bus and transmits / receives a digital signal,
Switching means for selecting at least two or more of the input terminals;
An interface means for requesting an authentication process to the other digital signal processing apparatus when the input means connected to the digital signal bus is selected by the switching means. In a digital signal processing device that connects a digital signal processing device and one or more other digital signal processing devices via a digital signal bus, encrypts the digital signal, and performs transmission / reception,
Interface means for requesting authentication processing from the digital signal processing device and each of the other digital signal processing devices;
A digital signal processing apparatus comprising storage means for storing each key for decrypting the cipher. In a digital signal processing apparatus that connects a digital signal processing apparatus and another digital signal processing apparatus by a digital signal bus having a plurality of transfer channels, encrypts the digital signal according to copyright management information of the digital signal, and transmits / receives the digital signal ,
Interface means for changing the transfer channel of the digital signal bus according to the copyright management information when requesting an authentication process to the digital signal processing device and each of the other digital signal processing devices. A digital signal processing device. In a digital signal processing apparatus that connects two or more digital signal processing apparatuses via a digital signal bus and transmits / receives digital signals,
A digital signal processing apparatus comprising means for defining a name of each of the digital signal processing apparatuses connected to the digital signal bus.

Images