JP2015181054A - Information processing device and information processing method, and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a device and method for controlling content use in accordance with content types of contents stored in a medium.SOLUTION: A playing apparatus holds a device certificate corresponding to an available content type according to content types, e.g., a high value-added content, such as a movie soon after being released to the public, and a normal content other than that. The playing apparatus discriminates the type of the content to be played selected by a user, and obtains a device certificate corresponding to the content type thereof according to the discriminated content type, to transmit to a medium. The medium confirms corresponding content type information recorded in the device certificate, and permits readout of a title key only if the title key that is an encryption key requested by the playing apparatus corresponds to a content matching the corresponding content type recorded in the device certificate.

Description

  The present disclosure relates to an information processing device, an information processing method, and a program. In particular, the present invention relates to an information processing apparatus, an information processing method, and a program that effectively prevent unauthorized use of content recorded on a recording medium such as a memory card.

  Recently, various media such as a DVD (Digital Versatile Disc), a Blu-ray Disc (registered trademark), or a flash memory are used as information recording media. In particular, recently, the use of a memory card such as a USB memory equipped with a large-capacity flash memory has become popular. The user can record content such as music and movies on such various information recording media (media) and attach the content to a playback device (player) to play back the content.

  However, many contents such as music data and image data have copyrights, distribution rights, etc. owned by their creators or distributors. Therefore, when providing content to the user, the usage is restricted to a certain usage restriction, that is, only the user having a regular usage right is allowed to use the content, and the unauthorized use such as copying is not performed. It has become common to do.

  For example, AACS (Advanced Access Content System) is known as a standard for content usage control. The AACS standard defines, for example, a usage control configuration for recorded content of Blu-ray Disc (registered trademark). Specifically, for example, an algorithm that allows content recorded on a Blu-ray Disc (registered trademark) to be encrypted content and restricts only users who can obtain the encryption key to authorized users.

  However, in the current AACS regulations, there are regulations on the use control configuration for disc recording contents such as Blu-ray Disc (registered trademark), but for contents recorded in a flash memory such as a memory card, for example, There is not enough provisions. Therefore, there is a risk that copyright protection will be insufficient for the recorded contents of such a memory card, and it is required to construct a usage control configuration for the use of contents using media such as these memory cards. .

For example, the AACS rules include the following rules as a usage control configuration for disc recording contents such as Blu-ray Disc (registered trademark).
(A) Usage rules for content copied from a medium (for example, ROM disc) on which content has already been recorded to a disc such as Blu-ray Disc (registered trademark);
(B) Usage rules for content downloaded from a server and recorded on a disc such as Blu-ray Disc (registered trademark);
For example, such usage control of content is defined.

  In the AACS, for example, when content copying between media (a) is executed, managed copy (MC) is defined on the condition that copy permission information is acquired from the management server.

In addition, as a process for downloading content from the server (b) above, in AACS,
EST (Electric Cell Through) using user equipment such as PC,
MoD (Manufacturing on Demand) using shared terminals installed in convenience stores, etc.
Even when these various download forms are defined and content is recorded on a disc by each of the download processes and used, processing according to a predetermined rule is obliged.
In addition, about these processes, it describes in patent document 1 (Unexamined-Japanese-Patent No. 2008-98765), for example.

  However, as described above, the AACS standard assumes a disc recording content such as Blu-ray Disc (registered trademark) as a usage control target, and a memory card such as a flash memory type including a USB memory. There is a problem that there is no provision for sufficient usage control for the content recorded in the.

JP 2008-98765 A

  The present disclosure has been made in view of the above problems, for example, and establishes a usage control configuration in the case of recording and using content on an information recording medium (media) such as a flash memory to prevent unauthorized use of the content. An object of the present invention is to provide an information processing apparatus, an information processing method, and a program that realize the configuration to be performed.

The first aspect of the present disclosure is:
Media that contains the content to be played,
A playback device for playing back content stored in the media;
The playback device
Determine the content type of the content selected for playback,
Select and obtain a device certificate associated with the determined content type from the storage unit,
It is a configuration for transmitting the selected device certificate to the media,
The device certificate is a device certificate corresponding to a content type in which usable content type information of the device certificate is recorded.
The media is
If the encryption key requested to be read from the playback device is an encryption key for decrypting encrypted content that matches the available content type recorded in the device certificate, and if they match, Only in an information processing system that allows reading of an encryption key.

  Furthermore, in an embodiment of the information processing system of the present disclosure, the playback device executes a content playback program that does not depend on the content type, and determines the type of content selected as a playback target according to the content playback program.

  Furthermore, in an embodiment of the information processing system according to the present disclosure, the device certificate records at least one of high value-added content and normal content other than high value-added content as a content type that can be used by the device certificate. The medium is an encrypted content in which the encryption key requested to be read from the playback device matches a high-value-added content that is an available content type recorded in the device certificate or a normal content. It is determined whether or not the encryption key is a decryption encryption key, and reading of the encryption key is permitted only when they match.

  Furthermore, in one embodiment of the information processing system of the present disclosure, the playback device transmits an acquired device certificate to the medium to execute an authentication process, and the medium is subject to the establishment of the authentication process, A process for determining whether or not an encryption key read request is received from the playback apparatus is executed.

  Furthermore, in an embodiment of the information processing system of the present disclosure, the playback device determines the type of the selected content according to the attribute information associated with the content selected as the playback target, and corresponds to the determined content type The attached device certificate is selected and acquired from the storage unit.

  Further, in an embodiment of the information processing system according to the present disclosure, the medium stores an encryption key in a protected area that allows access based on confirmation of the access right of the playback device, and receives the device certificate from the playback device. Based on the protected area access right information recorded in the certificate, the access right of the protected area in which the encryption key is stored is confirmed. When the access right of the playback apparatus is confirmed, the encryption key of the playback apparatus is confirmed. Allow reading.

  Furthermore, in an embodiment of the information processing system according to the present disclosure, the device certificate is configured to record playback device type information that can use the device certificate, and the media is recorded in the device certificate. According to the encoding algorithm selected according to the playback device type information, the media ID that is the media identification information is encoded and transmitted to the playback device, and the playback device receives the code received from the media. The decrypted media ID is decrypted according to the decryption algorithm corresponding to the device type of the device itself, and the content accompanying the data processing using the acquired media ID is decrypted and reproduced.

Furthermore, the second aspect of the present disclosure is:
It has a data processing unit that executes reading and playback processing of content stored on media,
The data processing unit
Determine the content type of the content selected for playback,
Select and obtain a device certificate associated with the determined content type from the storage unit,
Sending the selected and acquired device certificate to the medium, and outputting to the medium an encrypted content and a request for reading an encryption key applied to decrypting the encrypted content,
On the condition that the encryption key requested for reading is the encryption key of the content that matches the available content type recorded in the device certificate, the encryption is performed from the media. The information processing apparatus acquires a key and applies the acquired encryption key to decrypt the encrypted content.

  Furthermore, in an embodiment of the information processing apparatus according to the present disclosure, the data processing unit executes a content reproduction program that does not depend on a content type, and determines the type of content selected as a reproduction target according to the content reproduction program.

  Furthermore, in an embodiment of the information processing device according to the present disclosure, the device certificate records at least one of high value-added content and normal content other than high value-added content as a content type that can be used by the device certificate. This is the configuration.

  Furthermore, in an embodiment of the information processing apparatus according to the present disclosure, the data processing unit transmits the acquired apparatus certificate to the medium to execute an authentication process.

  Furthermore, in an embodiment of the information processing apparatus according to the present disclosure, the data processing unit determines the type of the selected content according to attribute information associated with the content selected as a reproduction target.

  Furthermore, in an embodiment of the information processing apparatus according to the present disclosure, the device certificate is configured to record playback device type information that can use the device certificate, and the media is recorded in the device certificate. According to the encoding algorithm selected according to the playback device type information, the encoding processing of the media ID that is the identification information of the media is executed and transmitted to the information processing device, and the data processing unit of the information processing device is The encoded media ID received from the media is decoded in accordance with a decoding algorithm corresponding to the device type of the own device, and content accompanying data processing using the acquired media ID is decoded and reproduced.

Furthermore, the third aspect of the present disclosure is:
An information processing method to be executed in an information processing system having a medium storing content to be played back and a playback device for playing back the content stored in the medium,
The playback device is
Determine the content type of the content selected for playback,
Select and obtain a device certificate associated with the determined content type from the storage unit,
Send the selected device certificate to the media,
The device certificate is a device certificate that records available content type information of the device certificate,
The media is
If the encryption key requested to be read from the playback device is an encryption key for decrypting encrypted content that matches the available content type recorded in the device certificate, and if they match, There is only an information processing method that permits reading of an encryption key.

Furthermore, the fourth aspect of the present disclosure is:
An information processing method executed in an information processing apparatus,
The data processor
Determine the content type of the content selected for playback,
Select and obtain a device certificate associated with the determined content type from the storage unit,
Sending the selected and acquired device certificate to the medium, and outputting to the medium an encrypted content and a request for reading an encryption key applied to decrypting the encrypted content,
On the condition that the encryption key requested for reading is the encryption key of the content that matches the available content type recorded in the device certificate, the encryption is performed from the media. There is an information processing method for acquiring a key and decrypting the encrypted content by applying the acquired encryption key.

Furthermore, the fifth aspect of the present disclosure is:
A program for executing information processing in an information processing apparatus;
In the data processor,
Determine the content type of the content selected for playback,
Select and acquire a device certificate associated with the determined content type from the storage unit,
Sending the selected and acquired device certificate to the medium, and outputting the encrypted content and a request for reading the encryption key applied to the decryption of the encrypted content to the medium,
On the condition that the encryption key requested for reading is the encryption key of the content that matches the available content type recorded in the device certificate, the encryption is performed from the media. It is in a program for acquiring a key and applying the acquired encryption key to decrypt the encrypted content.

  Note that the program of the present disclosure is a program that can be provided by, for example, a storage medium or a communication medium provided in a computer-readable format to an information processing apparatus or a computer system that can execute various program codes. By providing such a program in a computer-readable format, processing corresponding to the program is realized on the information processing apparatus or the computer system.

  Other objects, features, and advantages of the present disclosure will become apparent from a more detailed description based on embodiments of the present disclosure described below and the accompanying drawings. In this specification, the system is a logical set configuration of a plurality of devices, and is not limited to one in which the devices of each configuration are in the same casing.

According to the configuration of an embodiment of the present disclosure, content usage control according to the content type of content stored in a medium is realized.
Specifically, the playback device holds a device certificate corresponding to the content type that can be used according to the type of content, for example, high value-added content such as a movie that has just been released, and other content types such as normal content. To do. The playback device determines the type of playback content selected by the user, acquires a device certificate corresponding to the determined content type, and transmits it to the medium. When the media confirms the corresponding content type information recorded in the device certificate, and the title key that is the encryption key requested by the playback device corresponds to the content that matches the corresponding content type recorded in the device certificate Only allows reading of the title key.
With these processes, title key read control according to the content type is possible, and as a result, content usage control according to the content type is realized.

It is a figure explaining the outline | summary of a content provision process and a utilization process. It is a figure explaining the utilization form of the content recorded on the memory card. It is a figure explaining the specific structural example of the storage area of a memory card. It is a figure explaining a host certificate (Host Certificate). It is a figure explaining the example of a specific structure of the memory area of a memory card, and an example of access control processing. It is a figure explaining an example of the storage data of a memory card. It is a figure explaining the data structural example of the host certificate (Host Certificate) which recorded the type information of the apparatus type and corresponding content type. It is a figure explaining the specific example of the type information of an apparatus type recorded on a host certificate (Host Certificate) and a corresponding content type. It is a figure which shows the flowchart explaining the content utilization sequence performed using the host certificate (Host Cert) matched with the activated reproduction | regeneration program, selecting and starting the reproduction | regeneration program according to a content type. It is a figure which shows the flowchart explaining the content utilization sequence performed using the host certificate (Host Cert) matched with the activated reproduction | regeneration program, selecting and starting the reproduction | regeneration program according to a content type. It is a figure which shows the flowchart explaining the content utilization sequence performed using the host certificate (Host Cert) matched with the activated reproduction | regeneration program, selecting and starting the reproduction | regeneration program according to a content type. It is a figure which shows the flowchart explaining the sequence in which a reproduction | regeneration program selects and uses a host certificate (Host Cert) according to a content type. It is a figure which shows the flowchart explaining the sequence in which a reproduction | regeneration program selects and uses a host certificate (Host Cert) according to a content type. It is a figure which shows the flowchart explaining the sequence in which a reproduction | regeneration program selects and uses a host certificate (Host Cert) according to a content type. It is a figure explaining an example of the storage data of a memory card. It is a figure explaining the content decoding and reproduction | regeneration sequence using media ID (MID). It is a figure explaining the process which varied the conversion aspect of media ID (MID) according to the kind of host (reproduction | regeneration apparatus). It is a figure explaining the content decoding and reproduction | regeneration processing at the time of changing the conversion aspect of media ID (MID) according to the kind of host (reproduction | regeneration apparatus). It is a figure which shows the flowchart explaining the process sequence in the case of performing the content decoding and reproduction | regeneration processing, varying the conversion aspect of media ID (MID) according to the kind of host (reproduction | regeneration apparatus). It is a figure which shows the flowchart explaining the process sequence in the case of performing the content decoding and reproduction | regeneration processing, varying the conversion aspect of media ID (MID) according to the kind of host (reproduction | regeneration apparatus). It is a figure which shows the flowchart explaining the process sequence in the case of performing the content decoding and reproduction | regeneration processing, varying the conversion aspect of media ID (MID) according to the kind of host (reproduction | regeneration apparatus). FIG. 3 is a diagram for explaining an example of the hardware configuration of a host (playing device). It is a figure explaining the hardware structural example of a memory card.

Hereinafter, the details of the information processing apparatus, the information processing method, and the program of the present disclosure will be described with reference to the drawings. The description will be made according to the following items.
1. 1. Overview of content provision processing and usage processing 2. Configuration examples and usage examples of memory cards 3. Certificate with access permission information for protected area 4. Example of access processing to a memory card to which the certificate of each device is applied Example of processing between host (playback device) and media (memory card) 5-1. (Example 1) Example of host-media processing using a device certificate corresponding to a content type 5-2. (Example 2) Processing example for selecting a device certificate to be applied by a reproduction program 5-3. (Example 3) Processing example of changing the conversion mode of the identifier (media ID) of a medium (memory card) according to the type of the playback device 6. Hardware configuration example of each device Summary of composition of this disclosure

[1. Overview of content provision processing and usage processing]
Hereinafter, the details of the information processing apparatus, the information processing method, and the program of the present disclosure will be described with reference to the drawings.

First, the outline of the content providing process and the usage process will be described with reference to FIG.
In FIG. 1, from the left
(A) Content provider (b) Content recording / playback apparatus (host)
(C) Content recording media These examples are shown.

  (C) A content recording medium is a medium on which a user records content and is used for content reproduction processing. Here, a memory card 31 which is an information recording device such as a flash memory is shown.

  The user records various contents such as music and movies on the memory card 31 for use. These contents include contents that are subject to usage control, such as contents that are subject to copyright management.

  The content that is subject to usage control is, for example, content for which random copying or copy data distribution is prohibited. Note that when usage control content is recorded in the memory card 31, usage control information (Usage Rule) corresponding to the content, specifically, usage restrictions specifying copy restriction information such as the allowable number of copies, etc. Control information (Usage Rule) is also recorded.

(A) A content provider is a provider of content such as music and movies. In FIG. 1, as an example, a broadcast station 11 and a content server 12 are shown as content providers.
The broadcast station 11 is, for example, a television station, and provides various broadcast contents to a user apparatus [(b) content recording / playback apparatus (host)] on a terrestrial wave or a satellite wave via a satellite.
The content server 12 is a server that provides content such as music and movies via a network such as the Internet.

  The user, for example, (c) inserts a memory card 31 that is a content recording medium into (b) a content recording / playback apparatus (host), and (b) a reception unit of the content recording / playback apparatus (host) itself, or a content recording / playback The content provided by the broadcast station 11 or the content server 12 can be received and recorded in the memory card 31 via a receiving device connected to the device (host).

  (B) The content recording device (host) is mounted with (c) a memory card 31 that is a content recording medium, and (a) the content received from the broadcast station 11 or content server 12 that is the content provider is stored in the memory card 31. To record.

  (B) As a content recording / reproducing apparatus (host), for example, there is a recording / reproducing device (CE device: Consumer Electronics device) 21 having a hard disk or a disk such as a DVD or a BD, such as a DVD player. further. There are a PC 22, a mobile terminal 23 such as a smartphone, a mobile phone, a mobile player, and a tablet terminal. These are all (c) devices that can be loaded with a memory card 31 as a content recording medium.

  The user receives contents such as music and movies from the broadcast station 11 and the content server 12 using the recording / playback device 21, the PC 22, the portable terminal 23, and the like, and records them in the memory card 31.

The usage form of the content recorded on the memory card 31 will be described with reference to FIG.
The memory card 31 is a recording medium that can be attached to and detached from a content player such as a PC, for example. The memory card 31 can be freely detached from a device that has performed content recording and can be attached to other user devices.

That is, as shown in FIG.
(1) Recording process (2) Reproduction process It is not essential that the execution devices of these processes are the same, and the user can freely select and use a recording device and a reproduction device.

  In many cases, the usage control content recorded on the memory card 31 is recorded as encrypted content, and the content playback devices such as the recording / playback device 21, the PC 22, and the portable terminal 23 follow a predetermined sequence. After executing the decryption process, the content is reproduced.

[2. Memory card configuration example and usage example]
Next, a configuration example and a usage example of a memory card such as a flash memory used as a content recording medium will be described.
A specific configuration example of the storage area of the memory card 31 is shown in FIG.
The storage area of the memory card 31 is as shown in FIG.
(A) Protected Area (Protected Area) 51,
(B) General Purpose Area 52,
It consists of these two areas.

  (B) A general purpose area 52 is an area that can be freely accessed by a recording / playback apparatus used by a user, and records content, general content management data, and the like. For example, it is an area where data can be freely written and read by a server or a user's recording / playback apparatus.

On the other hand, (a) protected area 51 is an area where free access is not allowed.
For example, when data is to be written or read by a recording / playback device used by a user or a server connected via a network, the data processing unit of the memory card 31 stores a program stored in the memory card 31 in advance. Accordingly, whether or not reading (Read) or writing (Write) is possible is determined according to each device.

  The memory card 31 includes a data processing unit for executing a program stored in advance and an authentication processing unit for executing authentication processing. The memory card 31 first writes or reads data to or from the memory card 31. The authentication process is performed with the device that intends to execute.

At the stage of this authentication process, a device certificate such as a public key certificate is received from the counterpart device, that is, the access requesting device.
For example, when the access request device is a server, the server certificate (Server Certificate) held by the server is received, and information on each of the divided areas of the protected area (Protected Area) 51 is received using the information described in the certificate. It is determined whether access is permitted.
Further, when the access requesting device is a host device, for example, a recording / reproducing device (host) as a user device for executing content recording / reproducing, a host certificate (Host Certificate) possessed by the recording / reproducing device (host) is received. Using the information described in the certificate, it is determined whether or not access to each partitioned area of the protected area 51 is permitted.

  This access right determination process is performed in units of partitioned areas (areas # 0, # 1, # 2,..., Shown in the figure) in the protected area 51 shown in FIG. The server or host is allowed to execute only the processing permitted in the divided area (processing such as data reading / writing).

The read / write restriction information (PAD Read / PADWrite) for this medium is set, for example, in units of devices to be accessed, for example, content servers or recording / playback devices (hosts). These pieces of information are recorded in a server certificate (Server Certificate) corresponding to each device and a host certificate (Host Certificate).
In the following, “Certificate” is simply described as “Cert”.

  As described above, the memory card 31 verifies the recorded data of the server certificate (Server Cert) and the host certificate (Host Cert) according to a prescribed program stored in the memory card 31 in advance, and is granted access permission. A process that allows access only to the specified area is performed.

[3. About certificates with access permission information for protected areas]
Next, a configuration example of a certificate that needs to be presented to the memory card when the protected area (Protected Area) 51 of the memory card 31 is accessed will be described with reference to FIG.

  As described above, the memory card 31 performs an authentication process with a device that attempts to write or read data to the memory card 31. At the stage of this authentication process, a device certificate such as a public key certificate (for example, a server certificate (Server Cert) or a host certificate (Host Cert)) is received from the counterpart device, that is, the access request device, and described in the certificate. It is determined whether to permit access to each partitioned area of the protected area 51 using the information thus obtained.

  As an example of a device certificate used for this authentication process, a configuration of a host certificate (Host Cert) stored in a user device (host device) such as the recording / playback device 21, the PC 22, or the portable terminal 23 shown in FIG. An example will be described with reference to FIG.

The host certificate (Host Cert) is provided to each user device (host device) by a certificate authority that is a public key certificate issuing entity, for example. For example, a host certificate (Host Cert) is a certificate of a user device issued to a user device (host device) approved by the certificate authority for content use processing, and is a certificate storing a public key or the like. The host certificate (Host Cert) is configured as data in which a signature is set by a certificate authority private key and tampering is prevented.
The device certificate can be stored in advance in a memory in the device based on device confirmation such as the type of device when the device is manufactured. When acquiring after purchase by the user, perform confirmation processing such as device type and available content type according to a predetermined sequence between the device and the certificate authority or other management station, and issue to each device However, the data may be stored in a memory in the apparatus.

  The server that accesses the protected area of the memory card 31 holds a server certificate (Server Cert) in which the server public key having the same configuration as the host certificate and the memory card access permission information are recorded.

FIG. 4 shows a specific example of a host certificate (Host Cert) provided by the certificate authority to each host device (user device).
The host certificate (Host Cert) includes the following data as shown in FIG.
(1) Type information (2) Host ID (user device ID)
(3) Host public key
(4) Protection area access right information (read / write restriction information (PAD Read / PAD Write) on the protection area of the media)
(5) Other information (6) Signature

Hereinafter, each data of said (1)-(6) is demonstrated.
(1) Type information The type information is information indicating the type of certificate and the type of user device. For example, data indicating that the certificate is a host certificate, the type of device, for example, a PC, Information indicating the type of device such as a music player is recorded.

(2) Host ID
The host ID is an area for recording a device ID as device identification information.
(3) Host public key
The host public key is a public key of the host device. A key pair according to the public key cryptosystem is configured together with a secret key provided to the host device (user device).

(4) Protection area access right information (read / write restriction information (PAD Read / PAD Write) on the protection area of the media)
The protected area access right information is data read (Read) or write (Write) in a protected area (PDA: Protected Area) 51 set in the storage area of the medium on which the content is recorded, for example, the memory card 31 shown in FIG. ) Is recorded for the section area that is allowed.

(5) Other information, (6) Signature (Signature)
In addition to the above (1) to (4), various information is recorded in the host certificate, and signature data for the information of (1) to (5) is recorded.
The signature is performed with the private key of the certificate authority. When extracting and using information recorded in the host certificate, for example, the host public key, first execute signature verification processing using the public key of the certificate authority to confirm that the host certificate has not been tampered with. On the condition that the confirmation is made, the certificate storage data such as the host public key is used.

  FIG. 4 shows a host certificate in which access permission information of a user device (host device) to the protected area of the memory card is recorded. For example, access to the protected area such as a content providing server that provides content to the memory card is possible. For the required server, a certificate in which access permission information for the protected area of the memory card is recorded [server certificate (for example, public key certificate storing a server public key), as in the host certificate shown in FIG. ] Is provided.

[4. Example of access processing to a memory card to which the certificate of each device is applied]
As described with reference to FIG. 4, when accessing the protected area 51 of the memory card 31, it is necessary to present a certificate as shown in FIG. 4 to the memory card. Become.
The memory card checks the certificate shown in FIG. 4 and determines whether or not it can access the protected area 51 (Protected Area) 51 of the memory card 31 shown in FIG.

  For example, the host device holds the host certificate (Host Certificate) described with reference to FIG. 4, and the server that provides the content holds the certificate corresponding to the server (Server Certificate: Server Certificate). ing.

  When each of these devices accesses the protected area (Protected Area) of the memory card, it is determined whether the access is possible based on verification on the memory card side by providing a certificate held by each device to the memory card. It is necessary to receive.

  With reference to FIG. 5, an example of setting access restrictions when the access requesting device for the memory card is a host device such as a recording / reproducing device will be described.

FIG. 5 shows, from the left, a host (recording / reproducing device) 70 that is an access request device for the memory card, and the memory card 31.
The host (recording / reproducing apparatus) 70 is, for example, a user device such as the recording / reproducing device 21, the PC 22, or the mobile terminal 23 shown in FIG. This is an apparatus for executing content reproduction.

  The host (recording / reproducing device) 70 performs content encryption / decryption processing when content received from a broadcasting station or server or content stored in the storage unit of the host device 70 is output to the memory card 31 and recorded. A process of writing the title key to be applied, or encryption or conversion data of the title key in the protected area 51 of the memory card 31 is executed.

When the host (recording / playback apparatus) 70 plays back using the encrypted content recorded on the memory card 31, the title key or title key written in the protected area (Protected Area) 51 of the memory card 31 is used. Execute the process to obtain the encrypted or converted data.
Thus, the host (recording / reproducing apparatus) 70 needs to access the protected area (Protected Area) 51 of the memory card 31 in the content recording / reproducing process.

The memory card 31 has a protected area (Protected Area) 51 and a general purpose area (General Purpose Area) 52, and encrypted content and the like are recorded in the general purpose area (General Purpose Area) 52.
A title key, which is a key required for content reproduction, is recorded in a protected area 51.

As described above with reference to FIG. 3, the protected area 51 is divided into a plurality of areas.
In the example shown in FIG.
Partition area # 0 (Protected Area # 0) 61,
Partition area # 1 (Protected Area # 1) 62,
An example having these two divided regions is shown.

Various settings can be made as setting modes of these divided areas.
FIG. 5 shows protected area access right information of a host certificate (Host Cert) held by the host (recording / reproducing apparatus) 70.
The access control information of the host certificate shown in FIG.
For the partitioned area # 0 (Protected Area # 0), both data recording (Write) and reading (Read) processing are permitted.
Only read processing is permitted for the partitioned area # 1 (Protected Area # 1).
These settings are made.

In the host certificate (Host Cert) shown in FIG. 5, the write permission for the partitioned area # 1 (Protected Area # 1) is not set.
For example, a certificate in which such protected area access right information is recorded is provided to the user device.

  A device that attempts to access the protected area (Protected Area) 51 of the memory card 31 outputs a certificate in which the protected area access right information is recorded to the memory card. The memory card determines whether or not access is possible based on a certificate verification process in a data processing unit in the memory card. The host (recording / reproducing apparatus) 70 accesses the protected area (Protected Area) 51 of the memory card 31 according to the determination information.

  As described above, the protected area (Protected Area) of the memory card is a data write (Write) and a read (Read) in units of access request devices and in units of partitioned areas (# 0, # 1, # 2...). It is configured as an access control area in which permission or non-permission is set.

As described with reference to FIG. 4, the protection area access right information is recorded in the certificate (server certificate, host certificate, etc.) of each access request device, and the memory card receives the certificate received from the access request device. First, signature verification is performed on the certificate, and after verifying the validity, the access control information described in the certificate, that is, the following information is read.
Readable area information (PAD Read),
Write allowable area information (PAD Write),
Based on these pieces of information, only the processing permitted for the access requesting device is allowed and executed.

There are various types of host devices such as CE devices such as recorders and players, and PCs.
The device certificate is a certificate individually held by each of these devices, and can be set differently depending on the type of these devices.
In addition, the data processing unit of the memory card has the following information recorded in the device certificate, that is,
Readable area information (PAD Read),
Write allowable area information (PAD Write),
For example, based on the type information (Type) included in the certificate described with reference to FIG.

[5. Example of processing between host (playback device) and media (memory card)]
Next, an example of processing between a host (playback apparatus) that executes playback processing of content stored in a medium (memory card) and the media (memory card) will be described.

[5-1. (Example 1) Example of host-media processing using device certificate according to content type]
First, as a first example of a process example between a host (playback apparatus) and a medium (memory card), a process example using a device certificate corresponding to a content type will be described.
There are various types of content provided to user devices from broadcast stations and content servers. For example,
Movie content Music content Video content Still image content There are various types of such content.
Further, for example, among movie contents, there are movie contents that have just been released and movie contents that have passed time since release.

If an illegal copy of new content such as a new movie, which has just been released, is distributed, the value of the content will drop rapidly, and the profits of the copyright owner and distribution right will be severely impaired.
On the other hand, with regard to old content such as old movies that have passed several years after the release and have passed the sales peak of DVDs, the profit level of copyright owners and distribution rights has already declined, and illegal copies have been generated. However, the impact is relatively small.

In this way, the value varies depending on the type of content, and there are high-value-added content that should be more strongly prevented from unauthorized use and other content.
In the following description:
High value-added content (enhanced content)
Content other than high value-added content is called normal content (Basic Content).

As an example of measures for strengthening the protection of high value-added content (Enhanced Content) in response to the current situation in which various types of content exist, a processing example using a device certificate corresponding to the content type explain.
The device certificate is, for example, the host certificate (Host Cert) described above with reference to FIG.
As described with reference to FIGS. 4 and 5, the device certificate includes an access right for each divided area (# 0, # 1, # 2...) Of the protected area (Protected Area) of the memory card, Specifically, various pieces of access right information such as reading only (Read), writing (Write) only, and reading / writing (Read / Write) are recorded.

  A plurality of device certificates are issued according to the content type, and one content certificate is a content certificate that can be used only for a specific type of content.

FIG. 6 shows an example of storing the encrypted content recorded in the memory card 100 and the title key applied to decrypting the encrypted content.
As described above, the memory card 100 is
Protected area 101,
General purpose area (General Purpose Area) 102,
It is divided into these two areas.

The encrypted content is recorded in a general purpose area (General Purpose Area) 102.
As shown, the content is
(A) Normal content (Basic Content)
(B) High value-added content (Enhanced Content)
These are divided into two types of contents.
Each content is recorded as a setting in which a content type, for example, (a) normal content (Basic Content) or (b) high value-added content (Enhanced Content) can be discriminated. For example, it is recorded together with metadata that records these content types.
These contents are encrypted contents, and it is necessary to perform a decryption process using a title key corresponding to each content (title) when reproducing the content.

The title key is recorded in a protected area 101.
Note that the title key may be recorded as encrypted or converted data. This is one of measures against leakage.

As shown in FIG. 6, the title keys recorded in the protected area 101 are roughly divided into the following two types, similar to the types of encrypted content.
(A) Title key for regular content (Title Key for Basic Content)
(B) Title key for Enhanced Value Added Content (Title Key for Enhanced Content)
Each title key is recorded as a setting in which the type of content decrypted by the title key, for example, (a) normal content (Basic Content) or (b) high value-added content (Enhanced Content) can be discriminated. . For example, it is recorded together with metadata that records these content types.
These two types of title keys may be set to be stored in different divided areas for each type, and may be set so that the corresponding content type can be determined based on the recorded division. In this case, it is possible to execute access control under different access rights for each division unit.

A playback device (host) that executes content playback processing, for example, a playback device such as a recording / playback device, a PC, or a portable terminal, reads a title key corresponding to the playback content from the protected area of the memory card when performing content playback. It will be necessary.
For the title key reading process, the playback device (host) presents the device certificate (Cert) on the memory card.

Here, as described above, the device certificate is set as a device certificate corresponding to the content type.
FIG. 7 shows a configuration example of the host certificate (Host Cert) corresponding to the content type.

In FIG.
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
Examples of these two types of host certificates (Host Cert) are shown.

The host certificate (Host Cert) shown in FIG. 7 is a certificate in which the following data is recorded, as described above with reference to FIG.
(1) Type information (2) Host ID (user device ID)
(3) Host public key
(4) Protection area access right information (read / write restriction information (PAD Read / PAD Write) on the protection area of the media)
(5) Other information (6) Signature

However, the host certificate shown in FIG. 7 is different in that (1) type information records the following information.
(1a) Device type information (1b) Corresponding content type information

“(1a) Device type information” is information indicating the type of device that holds the host certificate (Host Cert). Specifically, for example, the host
* Recording / playback device,
* PC,
* Mobile devices (Tablet type devices, etc.)
This is information indicating which type of device.

“(1b) Corresponding content type information” is information indicating the content type of the title key permitted to be acquired from the memory card using the host certificate (Host Cert). That is,
* High value-added content (Enhanced Content),
* Normal content (Basic Content)
It is information indicating whether it can be used to acquire a title key corresponding to either one of the above contents or both contents.

In this way, the device certificate records the device type indicating the device type of the device itself and the corresponding content type information indicating the content type corresponding to the title key that can be acquired by applying the device certificate.
Referring to FIG.
(1a) Device type information (1b) Corresponding content type information An example of a combination of these pieces of information will be described.

As shown in FIG.
(1a) As device type information,
Recording / playback device (code: 0x0001)
PC / portable terminal (tablet type terminal, etc.) (code: 0x0002)
They are classified into these two types.
Note that this classification is an example, and the classification may be further finely classified.

Also,
(1b) As corresponding content type information,
Compatible with normal content only (code: 0x0001)
Compatible with high value-added content only (Code: 0x0002)
Supports both high value-added content and normal content (code: 0x0003)
They are classified into these three types.
Note that this classification is an example, and the classification may be further finely classified. For example, classifications according to various types of content such as moving image content, movie content, still image content, and moving image content may be set.

Next, a sequence of content reproduction processing using a device certificate corresponding to the content type will be described with reference to the flowcharts shown in FIGS.
The flowcharts shown in FIGS.
On the left side is a host (playing device) that performs content playback,
Media (memory card) with encrypted content and title key stored on the right
The processes executed by these two devices are shown in order.
Details of the processing of each step will be described.

The host (playback apparatus) attaches a medium (memory card), and inputs playback content selection information in step S111.
For example, a list of contents stored in the memory card is displayed on the display of the host, and when the user selects a reproduction content from the displayed content list, the host data processing unit identifies the selected content specified by the user.

In step S112, the host activates a reproduction program corresponding to the type of selected content.
In this processing example, the content type is
(A) normal content,
(B) high value-added content,
One of the above (a) and (b).

For each content, information indicating the content type is recorded in attribute information (metadata) associated with the content, and the content type is determined based on the attribute information. Alternatively, the content file may be recorded as a setting having a different extension depending on the content type, and the determination may be made with reference to this extension.
Alternatively, the mobile program may be automatically selected according to the extension.

The host has a normal content playback program that executes normal content playback processing and a high-value-added content playback program that executes high-value-added content playback processing, and supports the type of content selected for playback. Start the playback program.
Note that some hosts may have only a normal content reproduction program, but such a host cannot execute a high-value-added content reproduction process.
Further, the high value-added content reproduction program may be set so that only high value-added content can be reproduced, or may be set as a program capable of reproducing both high value-added content and normal content.

Next, in step S113, the host acquires a device certificate (Host Cert) associated with the playback program activated according to the type of content from the memory of the host device.
This device certificate (Host Cert) is the host certificate (Host Cert) described above with reference to FIG.
(1a) Device type information (1b) Corresponding content type information Each of these pieces of information is a certificate recorded as type information.

For example, the normal content reproduction program can acquire only the host certificate corresponding to only the normal content shown in FIG.
The high value-added content reproduction program can acquire only the host certificate corresponding to the high value-added content and the normal content shown in FIG.
For example, only information (address) corresponding to one of the host certificates shown in FIGS. 7A and 7B is recorded in the host certificate acquisition information (for example, memory address) recorded in each reproduction program. Each playback program can obtain a unique host certificate that it can use.

Next, in steps S114a and S114b, a mutual authentication process between the host (reproducing device) and the medium (memory card) is executed.
In this mutual authentication process, the host (playback apparatus) transmits a host certificate (Host Cert) acquired from the host memory to the medium (memory card).
On the other hand, the media (memory card) transmits a media-compatible device certificate (Media Cert) stored in the memory in the media (memory card) to the host (playing device).
This authentication process is executed, for example, as a mutual authentication process of a public key cryptosystem applying both public key certificates.

Next, the processing after step S115 shown in FIG. 10 will be described.
In step S115, it is determined whether or not mutual authentication between the host (playback apparatus) and the medium (memory card) has been established.
If mutual authentication is not established, it is determined that the reliability of both devices cannot be confirmed, the process proceeds to step S130, and the content reproduction process is stopped.

If mutual authentication is established, the process proceeds to step S116.
In step S116a, the host (playing apparatus) transmits a title key reading request corresponding to the played content to the medium (memory card).
In step S116b, the medium (memory card) receives this title key read request.

  Next, in step S117, the medium (memory card) is received from the host (reproducing device) with reference to the type information of the host certificate (Host Cert) received from the host (reproducing device) in the previous authentication processing. It is determined whether or not the host certificate (Host Cert) is a host certificate (Host Cert) in which the corresponding content type information corresponding to the type of content corresponding to the title key requested by the host is recorded.

For example, it is assumed that the two types of host certificates (Host Cert) shown in FIG. 7 are usable.
If the content to be played is normal content and the title key requested by the host is the title key corresponding to the normal content,
The host certificate received from the host is the following two certificates shown in FIG.
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
In any of these two types of host certificates (Host Cert), the determination in step S117 is Yes.

Also, if the content to be played is high value-added content and the title key requested by the host is the title key corresponding to the high value-added content,
The host certificate received from the host is shown in FIG.
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
Only in the case of this type of host certificate (Host Cert), the determination in step S117 is Yes.
The host certificate received from the host is shown in FIG.
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
In the case of this type of host certificate (Host Cert), the determination in step S117 is No.
If the determination in step S117 is No, the process proceeds to step S130, and the content reproduction is stopped. That is, provision of the title key to the host is not executed.

  The host certificate (Hosr Cert) received from the host (playing device) is the host certificate (Hosr Cert) in which the corresponding content type information corresponding to the type of content corresponding to the title key requested by the host is recorded. If it is determined, the determination in step S117 is Yes, and the process proceeds to step S118.

  Next, in step S118, the medium (memory card) refers to the protection area access right information of the host certificate (Hosr Cert) received from the host (playback apparatus) in the previous authentication process, and requests the title requested by the host. It is confirmed whether or not the key storage area, that is, the protection area division area, is set as a data reading allowable area.

As described above with reference to FIGS. 4 and 5, the access right (read / write) of the protection area of the memory card in the protection area access right information area of the host certificate (Host Cert). The permissible information is recorded.
The medium (memory card) refers to the protection area access right information, and determines whether the title key storage area requested by the host, that is, the protection area division area, is set as the data reading allowable area.

In step S119 shown in FIG. 11, when the divided area of the protected area in which the title key requested by the host is stored is not recorded as the data reading allowable area in the host certificate (Host Cert), the determination in step S119 is No.
In this case, the process proceeds to step S130, and the content reproduction is stopped. That is, provision of the title key to the host is not executed.

  On the other hand, if the protected area classification area storing the title key requested by the host is recorded as a data reading allowable area in the host certificate (Host Cert), the determination in step S119 is Yes, and the process returns to step S120. move on.

  In step S120a, the medium (memory card) acquires the title key requested from the host (playing apparatus) from the protection area, and further acquires the encrypted content from the general-purpose area and transmits it to the host.

In step S120b, the host (playing apparatus) receives the title key and the encrypted content from the medium (memory card).
Next, in step S121, the host (playing apparatus) applies the acquired title key to execute decryption processing of the encrypted content and starts content playback.

[5-2. (Example 2) Processing example for selecting a device certificate to be applied by a reproduction program]
In the content reproduction sequence according to the first embodiment with reference to the flowcharts shown in FIGS. 9 to 11, a reproduction program to be activated is selected according to the type of content selected as the reproduction content, and the reproduction program that has been activated selectively is selected. The configuration is such that the processing is executed using the set host certificate (Host Cert), that is, one host certificate (Host Cert) set to be accessible by the selectively activated playback program.

That is, the playback program is
Normal content compatible playback program,
Playback program for high value-added content,
As described above, it is assumed that a host certificate (Host Cert) that is set as a dedicated program according to the type of content and that can be used for each reproduction program is assigned one by one.

Next, a second embodiment that performs processing different from the first embodiment will be described with reference to the flowcharts shown in FIGS.
In the second embodiment, a playback program executed in the host (playback apparatus) is a single playback program, that is, playback processing is performed by the same program regardless of whether the playback content is normal content or high value-added content.
In this processing example, the playback program itself determines the type of content selected as the playback content, and selects and uses a host certificate (Host Cert) to be used according to the determination result.

That is, as the processing of the reproduction program, the content type is determined, and according to the determined content type,
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
One of these two types of host certificates (Host Cert) is selected and used.

Processing in each step of the flowcharts shown in FIGS. 12 to 14 will be described.
The flowcharts shown in FIGS. 12 to 14 are the same as the flowcharts shown in FIGS.
On the left side is a host (playing device) that performs content playback,
Media (memory card) with encrypted content and title key stored on the right
The processes executed by these two devices are shown in order.

The host (playback apparatus) attaches a medium (memory card) and inputs playback content selection information in step S211.
For example, a list of contents stored in the memory card is displayed on the display of the host, and when the user selects a playback content from the displayed content list, the host data processing unit identifies the selected content. For example, the content reproduction program stored in the host memory is started by the selection of the reproduction content as a trigger.

In the processing of the flow shown in FIGS. 9 to 11 , the activation program differs depending on the type of content (high added value / normal). However, in this processing example, the activation program represents the selected content. It is not changed according to the type (high added value / normal).

In step S212, the playback program determines the type of content selected by the user. Also in this processing example, the content type is
(A) normal content,
(B) high value-added content,
One of the above (a) and (b).

  For each content, information indicating the content type is recorded in attribute information (metadata) associated with the content, and the content type is determined based on the attribute information. Alternatively, the content file may be recorded as a setting having a different extension depending on the content type, and the determination may be made with reference to this extension.

Next, in step S213, the host selects and acquires a device certificate (Host Cert) to be used from its own memory according to the determined content type.
This device certificate (Host Cert) is the host certificate (Host Cert) described above with reference to FIG.
(1a) Device type information (1b) Corresponding content type information Each of these pieces of information is a certificate recorded as type information.

In this processing example, the playback program itself selects a host certificate (Host Cert) corresponding to the type of content to be played back.
When the content selected as the playback content is a high value-added content, for example, the high value-added content is added to the content type information corresponding to (1b) of the host certificate (Host Cert) described with reference to FIG. A host certificate (Host Cert) as available content is selected and acquired.
Specifically, for example, the host certificate shown in FIG.

On the other hand, when the content selected as the playback content is a normal content, the normal content can be used as the usable content in the (1b) compatible content type information of the host certificate (Host Cert) described with reference to FIG. A host certificate (Host Cert) is selected and acquired.
Specifically, for example, the host certificate shown in FIG. In this case, since the certificate shown in FIG. 7A can also be used for reproduction of normal content, the certificate shown in FIG. 7A may be selected.

  However, for example, when the host (playback apparatus) holds only the host certificate (Host Cert) corresponding to the normal content shown in FIG. Since a possible host certificate (Host Cert) cannot be obtained, content reproduction is not performed.

In this way, the host (reproducing device), for example, in step S213, for example, the following two certificates shown in FIG.
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
One of these two types of host certificates (Host Cert) is selected and acquired according to the content type.

Next, in steps S214a and S214b, a mutual authentication process between the host (reproducing device) and the medium (memory card) is executed.
In this mutual authentication process, the host (playback apparatus) transmits a host certificate (Host Cert) selected according to the content type from the host memory to the medium (memory card).
On the other hand, the media (memory card) transmits a media-compatible device certificate (Media Cert) stored in the memory in the media (memory card) to the host (playing device).
This authentication process is executed, for example, as a mutual authentication process of a public key cryptosystem applying both public key certificates.

Next, the processing after step S215 shown in FIG. 13 will be described.
The processing in steps S215 to S221 shown in FIGS. 13 to 14 is basically the same as the processing in steps S115 to S121 in the flow described above with reference to FIGS.
In steps S215a and S215b, it is determined whether or not mutual authentication between the host (reproducing device) and the medium (memory card) has been established.
If mutual authentication is not established, it is determined that the reliability of both devices cannot be confirmed, the process proceeds to step S230, and the content reproduction process is stopped.

If mutual authentication is established, the process proceeds to step S216.
In step S216a, the host (playing apparatus) transmits a title key reading request corresponding to the playback content to the medium (memory card).
In step S216b, the medium (memory card) receives this title key read request.

  Next, in step S217, the medium (memory card) is received from the host (reproducing device) with reference to the type information of the host certificate (Host Cert) received from the host (reproducing device) in the previous authentication processing. It is determined whether or not the host certificate (Host Cert) is a host certificate (Host Cert) in which the corresponding content type information corresponding to the type of content corresponding to the title key requested by the host is recorded.

For example, it is assumed that the two types of host certificates (Host Cert) shown in FIG. 7 are usable.
If the content to be played is normal content and the title key requested by the host is the title key corresponding to the normal content,
The host certificate received from the host is the following two certificates shown in FIG.
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
In any of these two types of host certificates (Host Cert), the determination in step S217 is Yes.

Also, if the content to be played is high value-added content and the title key requested by the host is the title key corresponding to the high value-added content,
The host certificate received from the host is shown in FIG.
(A) Host certificate (Host Cert) that can be used for content playback of both high value-added content and normal content
Only in the case of this type of host certificate (Host Cert), the determination in step S217 is Yes.
The host certificate received from the host is shown in FIG.
(B) Host certificate that can be used for content playback of normal content only (Host Cert)
In the case of this type of host certificate (Host Cert), the determination in step S217 is No.
If the determination in step S217 is No, the process proceeds to step S230, and the content reproduction is stopped. That is, provision of the title key to the host is not executed.

  The host certificate (Host Cert) received from the host (playing apparatus) is the host certificate (Host Cert) in which the corresponding content type information corresponding to the type of content corresponding to the title key requested by the host is recorded. Is determined as Yes, the process proceeds to Step S218.

  Next, in step S218, the medium (memory card) refers to the protection area access right information of the host certificate (Host Cert) received from the host (playback apparatus) during the previous authentication process, and requests the title requested by the host. It is confirmed whether or not the key storage area, that is, the protection area division area, is set as a data reading allowable area.

As described above with reference to FIGS. 4 and 5, the access right (read / write) of the protection area of the memory card in the protection area access right information area of the host certificate (Host Cert). The permissible information is recorded.
The medium (memory card) refers to the protection area access right information, and determines whether the title key storage area requested by the host, that is, the protection area division area, is set as the data reading allowable area.

In step S219 shown in FIG. 14, when the divided area of the protected area storing the title key requested by the host is not recorded as the data reading allowable area in the host certificate (Host Cert), the determination in step S219 is No.
In this case, the process proceeds to step S230, and the content reproduction is stopped. That is, provision of the title key to the host is not executed.

  On the other hand, if the protected area classification area storing the title key requested by the host is recorded as a data reading allowable area in the host certificate (Host Cert), the determination in step S219 is Yes, and the process returns to step S220. move on.

  In step S220a, the medium (memory card) acquires the title key requested from the host (playback apparatus) from the protection area, and further acquires the encrypted content from the general-purpose area and transmits it to the host.

In step S220b, the host (playing apparatus) receives the title key and the encrypted content from the medium (memory card).
Next, in step S221, the host (playing apparatus) applies the acquired title key to execute decryption processing of the encrypted content and starts content playback.

[5-3. (Example 3) Processing example of changing the conversion mode of an identifier (media ID) of a medium (memory card) according to the type of playback device]
Next, as a third example of a process example between the host (playback apparatus) and the medium (memory card), a process example of changing the conversion mode of the identifier (media ID) of the medium (memory card) according to the type of the playback device Will be described.

A medium (memory card) that stores an encrypted content and a title key applied to decrypting the encrypted content holds a media ID (MID) that is identification information of the media itself.
As shown in FIG. 15, the medium (memory card) 300 includes a protected area 311 that is permitted to be accessed based on access right information recorded in each device certificate, and a general-purpose area 312. The title key is stored in the protected area 311 and the encrypted content is stored in the general purpose area 312.

  In the general purpose area (General Purpose Area) 312, in addition to the encrypted content, content usage control information (Usage Rule), as shown, a media ID (MID) 315 and a media ID as its verification value are also shown. -A MAC (Message Authentication Code) 316 is recorded.

The media ID (MID) 315 is an identifier of a medium (memory card), and is set as a different value (medium specific value) for each medium.
The media ID-MAC 316 is a falsification verification value of the media ID (MID) 315, and is configured, for example, as data in which an administrator's electronic signature is set.

  The media ID (MID) 315 and the media ID-MAC 316 are read by the playback device (host) when the content recorded on the media (memory card) 300 is played back, and verification processing using the MAC is executed. . On the condition that the validity of the media ID (MID) 315 is confirmed by this verification process, the process can proceed to decryption of the encrypted content using the title key.

  The content reproduction program stored in advance in the reproduction apparatus (host) executes verification of the media ID (MAC) and decryption of the encrypted content to which the title key is applied in accordance with the reproduction processing sequence that is set in advance as described above.

With reference to FIG. 16, an example of the sequence of verification processing of the media ID (MAC) and decryption processing of the encrypted content to which the title key is applied will be described.
FIG. 16 shows a medium (memory card) 320 that stores encrypted contents and the like, and a host (reproducing device) 350 that performs decryption and reproduction of the encrypted contents stored in the medium (memory card) 320. .

The medium (memory card) 320 stores the following data as shown in the figure.
Media ID-MAC 321
Media ID (MID) 322,
Conversion title key (XORed Title Key) 323,
Usage control information (Usage Rule) 324,
Encrypted content 325,
The media (memory card) 320 stores various other data, but is applied in the sequence of media ID (MAC) verification and decryption processing of encrypted content using a title key. Only data is shown.

  The usage control information (Usage Rule) 324 is usage control information corresponding to the encrypted content (Encrypted Content) 325. Specifically, the usage control information (Usage Rule) 324 is, for example, data in which usage permission information such as content copy permission information is recorded. When using the encrypted content 325, the host (playing device) uses the content in accordance with the rules of the usage control information (Usage Rule) 324.

The conversion title key (XORed Title Key) 323 is title key conversion data, and is stored in a protected area (Protected Area) of the memory card.
Specifically, an exclusive OR (XOR) result between the title key data and the hash value of the usage control information (Usage Rule) 324 is stored as a converted title key.

A processing sequence of the host (reproducing device) 350 will be described.
Processing executed by the host (reproducing device) 350 will be described in the order of steps S301 to S305 shown in FIG.
First, in step S301, the host (playing device) 350 reads the usage control information (Usage Rule) 324 from the medium (memory card) 320 and calculates its hash value. For example, a hash value is calculated according to the AES encryption algorithm.

  Next, in step S302, the conversion title key (XORed Title Key) 323 read out from the protected area (Protected Area) of the medium (memory card) 320 according to a predetermined procedure such as access right confirmation, and the usage control information (Usage) Rule) Exclusive OR (XOR) with the hash value of 324 is calculated. By this process, a title key is generated.

  Next, in step S303, MAC calculation is performed by applying the title key generated in step S302 to the media ID (MID) 322 read from the medium (memory card) 320.

Next, in step S304, collation processing between the media ID-MAC 321 read from the medium (memory card) 320 and the MAC value calculated in step S303 is executed.
In this verification process, if the media ID-MAC 321 read from the media (memory card) 320 matches the calculated MAC value calculated in step S303, the MAC verification is established, and the validity of the media (memory card) 320 is confirmed. The process proceeds to the decryption process of the encrypted content to which the title key is applied.
On the other hand, if the media ID-MAC 321 read from the media (memory card) 320 does not match the calculated MAC value calculated in step S303 in the verification process, the MAC verification is not established, and the validity of the media (memory card) 320 is confirmed. It is determined not to be confirmed, and the decryption process of the encrypted content to which the title key is applied is not executed.

  Note that FIG. 16 shows a switch 351 for explaining execution and non-execution of processing based on this determination processing. This switch 351 is shown for explaining the processing algorithm, and is not necessary as an actual hardware configuration.

In the MAC verification process in step S304, if the media ID-MAC 321 read from the medium (memory card) 320 matches the calculated MAC value calculated in step S303, and the validity of the medium is confirmed, the process proceeds to step S305.
In step S305, a decryption process using the title key generated from the converted title key 323 in step S302 is executed on the encrypted content 325 read from the medium (memory card) 320 to generate content 371. Then, content use processing such as content playback is executed.
This content usage is required to be performed as a usage mode in accordance with the rules of the usage control information (Usage Rule) 372 read from the medium (memory card) 320.

  As described above, when the content stored in the medium (memory card) is decrypted and reproduced, it is necessary to check the validity of the medium using the medium ID (MID) which is the medium identifier.

On the other hand, there are various types of content devices that execute content reproduction. For example, as described above with reference to FIGS.
* Recording / playback device (CE equipment) 21, such as a DVD player or a BD player,
* PC22,
* Mobile terminals 23 such as smartphones and tablet terminals,
For example, these various devices exist.

The embodiment described below is a configuration example in which the conversion mode of the identifier (media ID) of a medium (memory card) is changed according to the types of these various playback devices.
That is, when a medium (memory card) outputs a media ID (MID) to a host (playback apparatus) that executes content playback, the medium (memory card) executes different data conversion processing (Encode) depending on the type of the host (playback apparatus). To the host (playing device).
The host (playing device) acquires a media ID (MID) by executing a restoration process (Decode) corresponding to the type of the device for the converted media ID (MID) received from the media (memory card).

A specific example will be described with reference to FIG.
FIG. 17 shows an example in which a device (host) that executes content reproduction is classified into two types.
(1) Host = dedicated recording / reproducing device (2) Host = PC and portable terminal These are classified into these two types, and an example is shown in which different processing is executed for each type.

The media (memory card) stores a media ID (MID) 401 in the memory.
The medium (memory card) is loaded with the medium (memory card), and the type of the host (reproducing device) that reproduces the content in the medium is checked as follows.
(1) Host = dedicated recording / reproducing device (2) Host = PC and portable terminal It is confirmed which type is described above.

  The host type (playback device type) confirmation process is performed, for example, when the media (memory card) is sent from the host (playback device) in the mutual authentication process executed between the host (playback device) and the medium (memory card). This can be executed by confirming the type information (see FIGS. 7 and 8) of the host certificate (Host Cert) to be received.

When the medium (memory card) confirms that the host (playback device) is a recording / playback device, it is shown on the left side of FIG.
(1) The processing of the host = recording / reproducing apparatus is executed.
On the other hand, when the medium (memory card) confirms that the host (playback device) is a PC or a portable terminal, it is shown on the right side of FIG.
(2) Host = PC / portable terminal processing is executed.

(1) In the processing of the host = recording / reproducing device,
In step S321, the medium (memory card) executes the encoding process (Encode) of the medium (MID) corresponding to the recording / reproduction dedicated device.
The encoded MID 411 corresponding to a dedicated recording / reproducing device as the encoding result is provided to a dedicated recording / reproducing device that is a host (reproducing device).
The recording / playback device as the host (playback device) decodes the encoded MID411 corresponding to the recording / playback device received from the medium (memory card) in step S322 by applying the decoding algorithm corresponding to the recording / playback device of the device. The media ID (MID) 431 is acquired.

On the other hand, when (2) host = PC or mobile terminal,
In step S331, the medium (memory card) executes encoding processing (Encode) of the medium (MID) compatible with the PC and the portable terminal.
The PC / portable terminal encoding MID 412 as the encoding result is provided to a PC or a mobile terminal which is a host (playback apparatus).
The PC (mobile device) or mobile terminal that is the host (playback device) applies the decoding algorithm corresponding to the PC and mobile terminal of its own device, and decodes the PC / mobile terminal encoded MID 412 received from the media (memory card) in step S332. The media ID (MID) 431 is acquired.

Media (memory card)
It is a configuration capable of executing a plurality of different encoding algorithms for executing encoding processing (Encode) of media (MID).
If the host is a recording / playback device, apply the first encoding algorithm.
If host = PC or mobile terminal, apply the second encoding algorithm,
Thus, the encoding algorithm is selected and applied according to the type of the host (reproducing device).

  A content decoding / playback sequence in the case of executing a media ID (MID) encoding process corresponding to the type of the host (playback apparatus) will be described with reference to FIG.

FIG. 18 is a diagram illustrating a sequence of media ID (MAC) verification and decryption processing of encrypted content to which a title key is applied, as in FIG. 16 described above.
In FIG. 18, as in FIG. 16, a medium (memory card) 320 storing encrypted content and the like, and a host (playback apparatus) that performs decryption and playback of the encrypted content stored in the medium (memory card) 320. 350 is shown.

The medium (memory card) 320 stores the following data as shown in the figure.
Media ID-MAC 321
Media ID (MID) 322,
Conversion title key (XORed Title Key) 323,
Usage control information (Usage Rule) 324,
Encrypted content 325,
The media (memory card) 320 stores various other data, but is applied in the sequence of media ID (MAC) verification and decryption processing of encrypted content using a title key. Only data is shown.

The conversion title key (XORed Title Key) 323 is title key conversion data, as described above with reference to FIG. 16, and is stored in a protected area (Protected Area) of the memory card.
Specifically, an exclusive OR (XOR) result between the title key data and the hash value of the usage control information (Usage Rule) 324 is stored as a converted title key.

  First, in step S331, the medium (memory card) 320 executes the encoding process of the media ID (MID) 322 corresponding to the type of the host (playback apparatus) that executes content playback.

As a premise of this processing, the media (memory card) 320 and the host (playback apparatus) 350 execute mutual authentication processing. During this mutual authentication execution processing, the media (memory card) 320 performs the host (playback). The host certificate (Host Cert) is received from the (device) 350.
As described above with reference to FIGS. 7 and 8, type information is recorded in the host certificate (Host Cert), and device type information indicating the type of device is recorded in the type information. Yes.

The medium (memory card) 320 refers to the type information (device type information) recorded in the host certificate (Host Cert) received from the host (reproducing device) 350 and confirms the type of the host (reproducing device).
According to the confirmation of the device type, the encoding (Encode) mode (encoding algorithm) of the media ID (MID) is determined, and the media ID (MID) is determined according to the determined encoding (Encode) mode (encoding algorithm). Perform the encoding process.
The media (memory card) 320 provides the encoded media ID (MID) corresponding to the device type generated in step S331 to the host (playing device) 350.

In step S351, the host (playing device) 350 executes a decoding process (Decode) of the encoded media ID (MID) received from the medium (memory card) 320.
The host (playback device) 350 includes a decoding program or decoder corresponding to the device type, and a decoding process (Decode) of the encoded media ID (MID) is applied by applying the decoding program or decoder corresponding to the device type. Execute.

When the host (playback apparatus) 350 is a recording / playback dedicated device, the recording / playback dedicated device holds a decoding program or decoder associated with the recording / playback dedicated device, and executes a process to which the decoding program or decoder is applied. .
When the host (playback device) 350 is a portable terminal such as a PC or a tablet terminal, the PC or portable terminal holds a decoding program or decoder associated with the PC and the portable terminal, and this decoding program or decoder is Execute the applied process.

The host (playing device) 350 acquires the media ID (MID) by the decryption process in step S351.
For example, even though the host (reproducing device) 350 is a PC, for example, the host certificate (Host Cert) of the dedicated recording / reproducing device is illegally used to impersonate the recording / reproducing device. In this case, the PC cannot acquire the media ID (MID) and cannot perform subsequent content reproduction.
In such a case, the encoded media ID (MID) provided by the media (memory card) can be decoded and acquired only by a decoding program or decoder only held by the recording / playback device. .

The processing after the host (playback apparatus) 350 acquires the media ID (MID), that is, the processing in steps S352 to S356 is the same as the processing in steps S301 to S305 described above with reference to FIG. Become.
In step S352, the host (playing device) 350 reads the usage control information (Usage Rule) 324 from the medium (memory card) 320 and calculates its hash value. For example, a hash value is calculated according to the AES encryption algorithm.

  Next, in step S353, the conversion title key (XORed Title Key) 323 read out from the protected area (Protected Area) of the medium (memory card) 320 according to a predetermined procedure such as confirmation of the access right, and the usage control information (Usage). Rule) Exclusive OR (XOR) with the hash value of 324 is calculated. By this process, a title key is generated.

  Next, in step S354, MAC calculation is performed by applying the title key generated in step S353 to the media ID (MID) 322 read from the medium (memory card) 320.

Next, in step S355, collation processing between the media ID-MAC 321 read from the medium (memory card) 320 and the MAC value calculated in step S354 is executed.
In this verification process, if the media ID-MAC 321 read from the media (memory card) 320 matches the calculated MAC value calculated in step S354, MAC verification is established, and the validity of the media (memory card) 320 is confirmed. The process proceeds to the decryption process of the encrypted content to which the title key is applied in step S356.

  On the other hand, if the media ID-MAC 321 read from the medium (memory card) 320 and the calculated MAC value calculated in step S 354 do not match in the collation process in step S 355, the MAC collation is not established, and the medium (memory card) 320 It is determined that the validity is not confirmed, and the decryption process of the encrypted content to which the title key of step S356 is applied is not executed.

  This content usage is required to be performed as a usage mode in accordance with the rules of the usage control information (Usage Rule) 372 read from the medium (memory card) 320.

As described above, in this embodiment, the medium (memory card) discriminates the type of the host (reproducing device), changes the media ID conversion mode according to the discriminated host type, and provides it to the host.
The host acquires a media ID (MID) by applying a decryption algorithm corresponding to the device type provided in the own device.
With such a configuration, the medium (memory card) can perform processing control according to the type of the host (reproducing device).

Next, with reference to flowcharts shown in FIG. 19 to FIG. 21, a sequence of content reproduction processing in the present embodiment will be described.
That is, it is a flowchart for explaining a content reproduction processing sequence accompanied by a media ID (MID) conversion process corresponding to a host (reproduction device) type.

The flowchart shown in FIGS.
On the left side is a host (playing device) that performs content playback,
Media (memory card) with encrypted content and title key stored on the right
The processes executed by these two devices are shown in order.
Details of the processing of each step will be described.

The host (playback apparatus) attaches a medium (memory card), and inputs playback content selection information in step S511.
For example, a list of contents stored in the memory card is displayed on the display of the host, and when the user selects a playback content from the displayed content list, the host data processing unit identifies the selected content.

In step S512, the host activates a reproduction program corresponding to the type of selected content.
In this processing example, the content type is
(A) normal content,
(B) high value-added content,
One of the above (a) and (b).
That is, the host holds a normal content playback program for executing normal content playback processing and a high value-added content playback program for executing high-value added content playback processing, and the type of content selected as a playback target Start the playback program corresponding to.

Note that some hosts may have only a normal content reproduction program, but such a host cannot execute a high-value-added content reproduction process.
Further, the high value-added content reproduction program may be set so that only high value-added content can be reproduced, or may be set as a program capable of reproducing both high value-added content and normal content.

Next, in step S513, the host acquires a device certificate (Host Cert) associated with the playback program activated according to the type of content from the memory of the host device.
This device certificate (Host Cert) is the host certificate (Host Cert) described above with reference to FIG.
(1a) Device type information (1b) Corresponding content type information Each of these pieces of information is a certificate recorded as type information.

For example, the normal content reproduction program can acquire only the host certificate corresponding to only the normal content shown in FIG.
The high value-added content reproduction program can acquire only the host certificate corresponding to the high value-added content and the normal content shown in FIG.
For example, in the host certificate acquisition information (for example, memory address) recorded in each reproduction program, only information (address) corresponding to one of the host certificates in FIGS. 7A and 7B is recorded. Each playback program can obtain a unique host certificate that it can use.

Next, in steps S514a and S514b, a mutual authentication process between the host (reproducing device) and the medium (memory card) is executed.
In this mutual authentication process, the host (playback apparatus) transmits a host certificate (Host Cert) acquired from the host memory to the medium (memory card).
On the other hand, the media (memory card) transmits a media-compatible device certificate (Media Cert) stored in the memory in the media (memory card) to the host (playing device).
This authentication process is executed, for example, as a mutual authentication process of a public key cryptosystem applying both public key certificates.

Next, the processing after step S515 shown in FIG. 20 will be described.
In step S515, it is determined whether or not mutual authentication between the host (playback apparatus) and the medium (memory card) has been established.
If mutual authentication is not established, it is determined that the reliability of both devices cannot be confirmed, the process proceeds to step S530, and the content reproduction process is stopped.

  If mutual authentication is established, the medium (memory card) determines the type of the host (reproducing device) based on the device type information included in the type information of the device certificate (Host Cert) in step S516. For example, the device type such as whether the host is a recording / playback device, a PC, or a portable terminal such as a tablet terminal is determined.

  Next, in step S517, the medium (memory card) is the type of host (playback device) determined based on the type information of the device certificate (Host Cert) (for example, a recording / playback device, a PC, or a portable terminal). ), A media ID (MID) encoding process is executed in accordance with an encoding algorithm previously set in association with the device type.

  The media (memory card) is configured to select and execute a plurality of encoding algorithms. Depending on the type of the host (reproducing device), one of the plurality of encoding algorithms is selected and the media ID ( MID) encoding (Encode) is executed.

Next, in step S518a, the medium (memory card) transmits the encoded medium ID (MID) to the host (playing apparatus).
In step S518b, the host (playing device) receives the encoded media ID (MID) from the media (memory card).

  Next, in step S519 shown in FIG. 21, the host (playing device) applies a decoding algorithm dedicated to the device that can be executed by the device, and executes a decoding process (Decode) of the encoded media ID (MID). .

If it is determined in step S520 that the decryption has failed, the process proceeds to step S530, and the content reproduction process is stopped.
If it is determined in step S520 that the decryption is successful and the media ID (MID) is successfully acquired, the process proceeds to step S521.

In step S521a, the medium (memory card) executes processing for providing data necessary for content reproduction.
That is, the title key stored in the protection area, the encrypted content stored in the general-purpose area, and the like.
In step S521b, the host (playing device) receives a title key, encrypted content, and the like from the medium (memory card).

  Finally, the host (playback apparatus) performs content playback by executing decryption processing of the encrypted content using the title key received from the medium (memory card).

  Note that the processing of steps S518 to S522 is shown in a simplified manner in this flow diagram, but these processing correspond to the processing described above with reference to FIG. 18 and include MAC verification processing of media ID, usage control information. Processing such as title key acquisition by calculation of the converted title key based on is performed.

As described above, the media (memory card) is executed by changing the conversion mode of the media ID (MID) in accordance with the host (playback apparatus) that executes content playback.
By this processing, it is possible to perform content reproduction only when the type of the host (reproduction device) and the type information of the host certificate presented by the host (reproduction device) match.

Also, the media (memory card) can check the type of the host (reproducing device) based on the host certificate (Host Cert), and can also execute the content usage control according to the host (reproducing device). It becomes.
For example, it is possible to execute content usage control according to the type of the host (reproducing device) such that the specific content can be used only by a recording / reproducing device and not by a PC or a portable terminal.

  In the flowcharts of FIGS. 19 to 21, as described with reference to FIGS. 9 to 11, in step S <b> 512, the playback program corresponding to the type of the selected content is started and associated with the playback program. Although the host certificate (Host Cert) is selected (S513), the content playback program itself selects the host certificate according to the content type as in the flow described with reference to FIGS. It is good also as a setting to do.

In addition, the embodiments described above, ie,
(Embodiment 1) Processing using a host certificate (Host Cert) associated with a started playback program by selectively starting a playback program according to the content type,
(Example 2) A process in which a playback program selects and uses a host certificate (Host Cert) according to the content type,
(Example 3) Processing that changes the conversion mode of the media ID (MID) according to the type of the host (playback device),
These processes may be executed separately, but may be executed as a combination of the first and third embodiments or a combination of the second and third embodiments.

[6. About hardware configuration example of each device]
Finally, with reference to FIG. 22 and FIG. 23, a hardware configuration example of each device that executes the above-described processing will be described.
First, with reference to FIG. 22, a hardware configuration example of a host device that mounts a memory card and performs data recording and reproduction processing will be described.

  A CPU (Central Processing Unit) 701 functions as a data processing unit that executes various processes according to a program stored in a ROM (Read Only Memory) 702 or a storage unit 708. For example, content reception processing from a broadcasting station or server, recording processing of received data on a memory card (removable medium 711 in the figure), data reproduction processing from a memory card (removable medium 711 in the figure), and the like are executed. A RAM (Random Access Memory) 703 appropriately stores programs executed by the CPU 701, data, and the like. The CPU 701, ROM 702, and RAM 703 are connected to each other via a bus 704.

  The CPU 701 is connected to an input / output interface 705 via a bus 704. The input / output interface 705 is connected to an input unit 706 including various switches, a keyboard, a mouse, and a microphone, and an output unit 707 including a display and a speaker. Yes. The CPU 701 executes various processes in response to a command input from the input unit 706, and outputs a processing result to the output unit 707, for example.

  The storage unit 708 connected to the input / output interface 705 includes, for example, a hard disk and stores programs executed by the CPU 701 and various data. A communication unit 709 communicates with an external device via a network such as the Internet or a local area network.

  A drive 710 connected to the input / output interface 705 drives a removable medium 711 such as a magnetic disk, an optical disk, a magneto-optical disk, or a semiconductor memory such as a memory card, and records various data such as recorded contents and key information. For example, content is decrypted and played back according to a playback program executed by the CPU using the acquired content and key data.

FIG. 23 shows a hardware configuration example of the memory card.
A CPU (Central Processing Unit) 801 functions as a data processing unit that executes various processes according to a program stored in a ROM (Read Only Memory) 802 or a storage unit 807. For example, the communication processing with the server or host device described in each of the above-described embodiments, the processing such as writing and reading of the data in the storage unit 807, the access permission determination processing for each divided area of the protection area 811 of the storage unit 807, and the like. Run. A RAM (Random Access Memory) 803 appropriately stores programs executed by the CPU 801, data, and the like. These CPU 801, ROM 802, and RAM 803 are connected to each other by a bus 804.

  The CPU 801 is connected to an input / output interface 805 via a bus 804, and a communication unit 806 and a storage unit 807 are connected to the input / output interface 805.

  A communication unit 804 connected to the input / output interface 805 executes communication with, for example, a server or a host. The storage unit 807 is a data storage area, and includes a protected area 811 with restricted access (Protected Area) 811 and a general purpose area (General Purpose Area) 812 that can freely read and write data as described above.

  The server can be realized by a device having the same hardware configuration as that of the host device shown in FIG. 22, for example.

[7. Summary of composition of the present disclosure]
As described above, the embodiments of the present disclosure have been described in detail with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiments without departing from the gist of the present disclosure. In other words, the present invention has been disclosed in the form of exemplification, and should not be interpreted in a limited manner. In order to determine the gist of the present disclosure, the claims should be taken into consideration.

The technology disclosed in this specification can take the following configurations.
(1) a medium storing the content to be played;
A playback device for playing back content stored in the media;
The playback device
Determine the content type of the content selected for playback,
Select and obtain a device certificate associated with the determined content type from the storage unit,
It is a configuration for transmitting the selected device certificate to the media,
The device certificate is a device certificate corresponding to a content type in which usable content type information of the device certificate is recorded.
The media is
If the encryption key requested to be read from the playback device is an encryption key for decrypting encrypted content that matches the available content type recorded in the device certificate, and if they match, An information processing system that only allows reading of encryption keys.

(2) The information processing system according to (1), wherein the playback device executes a content playback program that does not depend on a content type, and determines the type of content selected as a playback target according to the content playback program.
(3) The device certificate has a configuration in which at least one of high-value-added content and normal content other than high-value-added content is recorded as a content type that can be used in the device certificate, and the media is the reproduction Whether or not the encryption key requested to be read from the device is a decryption key for decrypting encrypted content that matches the high-value-added content that is the available content type recorded in the device certificate or the normal content The information processing system according to (1) or (2), wherein the encryption key is allowed to be read only when the two match.

(4) The playback device transmits the acquired device certificate to the media to execute an authentication process, and the media accepts an encryption key read request from the playback device on condition that the authentication process is established. The information processing system according to any one of (1) to (3), wherein the determination process is executed.
(5) The playback device determines the type of the selected content according to the attribute information associated with the content selected as the playback target, and selects the device certificate associated with the determined content type from the storage unit. The information processing system according to any one of (1) to (4) to be acquired.

(6) Based on the confirmation of the access right of the playback device, the medium stores the encryption key in a protected area that allows access, and the protected area access right information recorded in the device certificate received from the playback device. Based on (1) to (5), the access right of the protection area where the encryption key is stored is confirmed, and when the access right of the playback device is confirmed, the playback device allows the playback of the encryption key. ) An information processing system according to any one of the above.
(7) The device certificate has a configuration in which playback device type information that can use the device certificate is recorded, and the medium is a code selected according to the playback device type information recorded in the device certificate. In accordance with the encoding algorithm, the media ID that is the identification information of the media is encoded and transmitted to the playback device, and the playback device receives the encoded media ID received from the media corresponding to the device type of the device. The information processing system according to any one of (1) to (6), wherein the content is decrypted and reproduced according to a decryption algorithm and accompanied by data processing using the acquired media ID.

(8) having a data processing unit for executing reading and playback processing of content stored in the medium;
The data processing unit
Determine the content type of the content selected for playback,
Select and obtain a device certificate associated with the determined content type from the storage unit,
Sending the selected and acquired device certificate to the medium, and outputting to the medium an encrypted content and a request for reading an encryption key applied to decrypting the encrypted content,
On the condition that the encryption key requested for reading is the encryption key of the content that matches the available content type recorded in the device certificate, the encryption is performed from the media. An information processing apparatus that acquires a key and decrypts encrypted content by applying the acquired encryption key.

(9) The information processing apparatus according to (8), wherein the data processing unit executes a content reproduction program that does not depend on a content type, and determines the type of content selected as a reproduction target according to the content reproduction program.
(10) The device certificate has a configuration in which at least one of high value-added content and normal content other than high value-added content is recorded as a usable content type of the device certificate. ).

(11) The information processing apparatus according to any one of (8) to (10), wherein the data processing unit transmits an acquired apparatus certificate to the medium and executes an authentication process.
(12) The information processing apparatus according to any one of (8) to (11), wherein the data processing unit determines the type of the selected content according to attribute information associated with the content selected as a reproduction target.
(13) The device certificate has a configuration in which playback device type information that can use the device certificate is recorded, and the medium is a code selected according to the playback device type information recorded in the device certificate. In accordance with the encoding algorithm, the media ID that is the identification information of the media is encoded and transmitted to the playback device, and the data processing unit of the playback device uses the encoded media ID received from the media of its own device. The information processing apparatus according to any one of (8) to (12), wherein the information is decrypted according to the decryption algorithm corresponding to the apparatus type, and the content is decrypted and reproduced with data processing using the acquired media ID.

  Furthermore, the configuration of the present disclosure includes a method of processing executed in the above-described apparatus and system, and a program for executing the processing.

  The series of processing described in the specification can be executed by hardware, software, or a combined configuration of both. When executing processing by software, the program recording the processing sequence is installed in a memory in a computer incorporated in dedicated hardware and executed, or the program is executed on a general-purpose computer capable of executing various processing. It can be installed and run. For example, the program can be recorded in advance on a recording medium. In addition to being installed on a computer from a recording medium, the program can be received via a network such as a LAN (Local Area Network) or the Internet and can be installed on a recording medium such as a built-in hard disk.

  Note that the various processes described in the specification are not only executed in time series according to the description, but may be executed in parallel or individually according to the processing capability of the apparatus that executes the processes or as necessary. Further, in this specification, the system is a logical set configuration of a plurality of devices, and the devices of each configuration are not limited to being in the same casing.

As described above, according to the configuration of the embodiment of the present disclosure, the content usage control according to the content type of the content stored in the medium is realized.
Specifically, the playback device holds a device certificate corresponding to the content type that can be used according to the type of content, for example, high value-added content such as a movie that has just been released, and other content types such as normal content. To do. The playback device determines the type of playback content selected by the user, acquires a device certificate corresponding to the determined content type, and transmits it to the medium. When the media confirms the corresponding content type information recorded in the device certificate, and the title key that is the encryption key requested by the playback device corresponds to the content that matches the corresponding content type recorded in the device certificate Only allows reading of the title key.
With these processes, title key read control according to the content type is possible, and as a result, content usage control according to the content type is realized.

11 Broadcasting station 12 Content server 21 Recording / playback device 22 PC
23 Mobile terminal 31 Memory card 51 Protected area
52 General Purpose Area
61, 62 Division area 90 General purpose area (General Purpose Area)
100 memory card 101 protected area (Protected Area)
102 General Purpose Area
300 media (memory card)
311 Protected Area
312 General Purpose Area
321 Media ID-MAC
322 Media ID (MID)
323 Conversion title key 324 Usage control information 325 Encrypted content 371 Usage control information 372 Content 401 Media ID (MID)
411 Coding MID for recording / playback equipment
412 Coding MID for PC / mobile terminal
431 Media ID (MID)
701 CPU
702 ROM
703 RAM
704 Bus 705 Input / output interface 706 Input unit 707 Output unit 708 Storage unit 709 Communication unit 710 Drive 711 Removable media 801 CPU
802 ROM
803 RAM
804 Bus 805 I / O interface 806 Communication unit 807 Storage unit 811 Protected area (Protected Area)
812 General Purpose Area

The first aspect of the present disclosure is:
A data processing unit that executes data recording processing on a medium having a protected area that is a data storage area in which access restrictions are set;
A storage unit storing a host certificate that records access right information for the protected area of the media;
The data processing unit
Retrieve the host certificate from the storage unit and output it to the media;
The information processing apparatus executes a data recording process for the protected area on the condition that the access right for the protected area has been confirmed as a result of verifying the access right information of the host certificate in the medium.

  The second aspect of the present disclosure is:
  A storage unit having a protection area which is a data storage area in which access restrictions are set;
  A data processing unit for performing a data recording process on the storage unit;
  The data processing unit
  From a host device that executes a data recording request for the protected area, input a host certificate that records access right information for the protected area,
  Execute the access right information verification process recorded in the entered host certificate,
  As a verification result of the verification process, on the condition that the host device has confirmed the access right to the protection area,
  The information processing apparatus records data input from the host device in the protection area.

  The third aspect of the present disclosure is:
  An information processing method executed in an information processing apparatus,
  The information processing apparatus includes:
  A data processing unit that executes data recording processing on a medium having a protected area that is a data storage area in which access restrictions are set;
  A storage unit storing a host certificate that records access right information for the protected area of the media;
  The data processing unit is
  Retrieve the host certificate from the storage unit and output it to the media;
  As a result of verifying access right information of the host certificate in the medium, there is an information processing method for executing a data recording process for the protected area on condition that the access right to the protected area is confirmed.

  The fourth aspect of the present disclosure is:
  An information processing method executed in an information processing apparatus,
  The information processing apparatus includes:
  A storage unit having a protection area which is a data storage area in which access restrictions are set;
  A data processing unit for performing a data recording process on the storage unit;
  The data processing unit is
  From a host device that executes a data recording request for the protected area, input a host certificate that records access right information for the protected area,
  Execute the access right information verification process recorded in the entered host certificate,
  As a verification result of the verification process, on the condition that the host device has confirmed the access right to the protection area,
  In the information processing method of recording data input from the host device in the protection area.

  The fifth aspect of the present disclosure is:
  A program for executing information processing in an information processing apparatus;
  The information processing apparatus includes:
  A data processing unit that executes data recording processing on a medium having a protected area that is a data storage area in which access restrictions are set;
  A storage unit storing a host certificate that records access right information for the protected area of the media;
  The program is stored in the data processing unit.
  Processing to extract a host certificate from the storage unit and output it to the medium;
  As a result of verifying the access right information of the host certificate in the medium, the program is for executing a data recording process for the protected area on condition that the access right to the protected area is confirmed.

  The sixth aspect of the present disclosure is:
  A program for executing information processing in an information processing apparatus;
  The information processing apparatus includes:
  A storage unit having a protection area which is a data storage area in which access restrictions are set;
  A data processing unit for performing a data recording process on the storage unit;
  The program is stored in the data processing unit.
  A process of inputting a host certificate that records access right information for the protection area from a host device that executes a data recording request for the protection area;
  Verify the access right information recorded in the entered host certificate,
  Further, as a verification result of the verification process, on the condition that the host device has confirmed the access right to the protection area,
  A program for executing a process of recording data input from the host device in the protected area.

The technology disclosed in this specification can take the following configurations.
(1) a data processing unit that executes a data recording process on a medium having a protected area that is a data storage area in which access restrictions are set;
A storage unit storing a host certificate that records access right information for the protected area of the media;
The data processing unit
Retrieve the host certificate from the storage unit and output it to the media;
An information processing apparatus that executes data recording processing for the protected area on the condition that the access right for the protected area is confirmed as a result of verifying access right information of the host certificate in the medium.

  (2) The host certificate is
  As the access right information for the protected area of the media, the data read processing for the protected area, and the permissible information for each processing mode of the data recording process is recorded,
  The data processing unit
  The information processing apparatus according to (1), wherein the data recording process for the protection area is executed on the condition that the permission of the data recording process for the protection area is confirmed on the medium.

  (3) The host certificate is
  As the access right information for the protected area of the media, it is a configuration in which permissible information for each processing mode of the data reading process and the data recording process is recorded in units of the protection area,
  The data processing unit
  The information processing apparatus according to (1) or (2), wherein the data recording process is executed on the divided area where the permission of the data recording process is confirmed on the medium.

  (4) The host certificate is
  A certificate that records at least one of high-value-added content or normal content other than high-value-added content as supported content type information.
  The media confirms the corresponding content type information of the host certificate during the access right information verification processing of the host certificate, and determines whether or not to allow data recording processing of content that matches the content type recorded in the corresponding content type information Do
  The data processing unit
  The information processing apparatus according to any one of (1) to (3), wherein data recording processing is performed on content that matches a content type for which permission of data recording processing has been confirmed on the medium.

  (5) a storage unit having a protection area which is a data storage area in which access restrictions are set;
  A data processing unit for performing a data recording process on the storage unit;
  The data processing unit
  From a host device that executes a data recording request for the protected area, input a host certificate that records access right information for the protected area,
  Execute the access right information verification process recorded in the entered host certificate,
  As a verification result of the verification process, on the condition that the host device has confirmed the access right to the protection area,
  An information processing apparatus that records data input from the host apparatus in the protection area.

  (6) The host certificate is
  As the access right information for the protection area, the data read processing for the protection area, and the permissible information for each processing mode of the data recording process is recorded,
  The data processing unit
  In the access right information verification processing of the host certificate, verify whether data recording processing to the protected area is allowed,
  The information processing apparatus according to (5), wherein data input from the host apparatus is recorded in the protection area on the condition that the permission of the data recording process is confirmed.

  (7) The host certificate is
  As the access right information for the protection area, it is a configuration in which permissible information for each processing mode of the data reading process and the data recording process is recorded in the divided area unit of the protection area,
  The data processing unit
  In the access right information verification processing of the host certificate, it is verified whether data recording processing is permitted for each divided area of the protected area,
  The information processing apparatus according to (5) or (6), wherein data input from the host apparatus is recorded in the partitioned area where the permission of data recording processing has been confirmed.
  (8) The host certificate is
  A certificate that records at least one of high-value-added content or normal content other than high-value-added content as supported content type information.
  The data processing unit
  In the access right information verification processing of the host certificate, the corresponding content type information of the host certificate is confirmed, and the permission determination of the data recording processing of the content matching the content type recorded in the corresponding content type information is performed.
  The data processing unit
  The information processing apparatus according to any one of (5) to (7), wherein input data from the host apparatus that matches a content type that has been confirmed to be acceptable for data recording processing is recorded.

Claims (2)

A storage unit storing a host certificate that records access restriction information;
A data processing unit that executes data recording processing on a medium having a protected area with access restrictions set;
The data processing unit takes out a host certificate from the storage unit and outputs it to a medium (memory card).
An information processing apparatus that executes data recording processing on the protected area on the condition that an access right to the protected area is confirmed as a result of verifying access restriction information of the host certificate in the medium (= memory card). A storage unit having a protected area with access restrictions set;
A data processing unit,
The data processing unit
From a host that intends to perform data recording processing on the storage unit, input a host certificate that records access restriction information,
Performing verification processing of access restriction information recorded in the host certificate;
An information processing apparatus that executes a data recording process for the protection area on the condition that the host is confirmed as having an access right to the protection area as a verification result of the verification process.