JP3846230B2 - Content information authentication playback device - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to the authentication re-authentication of digital contents and recording media on which the digital contents are recorded. Raw In particular, it detects illegal signature information. Testimony, And processing when the digital content is played back Content information authentication playback Relates to the device.
[0002]
[Prior art]
2. Description of the Related Art Conventionally, a signature authentication method has been generally used as an effective means for preventing use of a recording medium in which digital content protected by copyright is illegally copied. In the authentication reproduction method, in addition to digital content, signature information indicating that the recording medium or content is legitimate is recorded on the recording medium, and content reproduction is permitted or not permitted based on the signature information. Content reproduction control is performed as described above.
[0003]
In an apparatus that controls the reproduction of the digital content, first, it is verified whether the signature is valid, and the digital content is reproduced only when the signature is valid.
[0004]
Japanese Patent Laid-Open No. 2000-22680 “Digital Content Distribution Method and Content-Recorded Recording Medium” requires decryption of at least partly encrypted digital content based on a signature verification result A method for determining whether or not to decrypt a key and decrypting content when it is determined that information such as a signature is valid is disclosed, and a method for controlling content reproduction using such a signature is disclosed. Are known.
[0005]
[Problems to be solved by the invention]
However, in a scheme using a signature as used in the above method, when attempting to secure a certain level of security for protection against falsification of signature information, the amount of data required for protection of the signature and the signature is In addition, the amount of computation used for signature authentication increases and the authentication processing becomes complicated.
[0006]
In order to authenticate the signature, a work environment for signal processing such as using a personal computer with sufficient processing capability is necessary. It is not preferable to install such a computer system with a high processing capacity because the price of the playback apparatus becomes expensive, and usually the processing capacity for signature authentication is often lowered.
[0007]
In such a digital content playback apparatus having only a signature authentication function with a low processing capability, a long time is required until the content is played back and displayed after a playback operation by the user is performed. Complicated signature authentication processing must be performed every time content is played, and such a digital content playback device is easy to use, for example, it takes time from the start of playback to the display of content. There were issues such as obstacles to realizing the functions.
[0008]
Therefore, the present invention authenticates the content and the recording medium when reproducing the information from the recording medium recording the signature information indicating that the content and the recording medium on which the content is recorded are legitimate content and the recording medium. In a digital content playback method that prohibits or stops playback of content when it is recognized as unauthorized content and medium, authentication information recorded on the recording medium is stored in advance on the storage medium. The signature information is collated, and if there is matching information, the content reproduction is not permitted or stopped without performing the authentication process.
[0009]
Further, when there is no matching information, an authentication operation related to the signature of the new content and the recording medium is performed, and when the content is authenticated as an unauthorized content and medium, the signature information to be fraudulent is It is stored in a removable medium or memory element, or its signature information is stored in a storage device of a server system connected to the network via a network interface, so that it becomes an unauthorized object stored in the storage medium in advance. Signature information is updated, and the signature information authentication work performed when playing back content is simplified. Tako Content information authentication reproduction equipment Place It is something to be offered.
[0010]
[Means for Solving the Problems]
In order to solve the above problems, the present invention provides the following 1) to 8 ).
That is,
[0011]
1 A content information authentication / playback apparatus for playing back only a digital content recording medium in which digital content produced based on legitimate rights and signature information related to authentication of the creator of the digital content are recorded,
Recording signal reading means (41) for reproducing the digital content recording medium to obtain reproduction signature information related to the signature information;
The reproduction signature information is compared with the reproduction signature information by comparing the reproduction signature information with the illegal signature information group accumulatively storing the illegal signature information attached to the produced digital content instead of the legitimate rights. Signature information comparison means (47) for detecting whether or not any of
When the signature information comparing means detects the reproduction signature information that matches the illegal signature information, it supplies a signal for stopping the reproduction of the digital content recording medium, and also detects a match with the illegal signature information. If not, signature verification means (46) for performing signature verification as to whether or not the playback signature information is signature information related to authentication of the creator of the digital content;
A signature information recording unit (51) for additionally storing the reproduction signature information in the illegal signature information group when the validity of the reproduction signature information is not verified by the signature verification unit;
A content information authentication / playback apparatus comprising:
[0012]
2 A content information authentication / playback apparatus for playing back only digital content transmission information in which digital content produced based on legitimate rights and signature information relating to authentication of the creator of the digital content are transmitted,
Information signal receiving means (49) for reproducing the digital content transmission information to obtain reproduction signature information related to the signature information;
The reproduction signature information is compared with the reproduction signature information by comparing the reproduction signature information with the illegal signature information group accumulatively storing the illegal signature information attached to the produced digital content instead of the legitimate rights. Signature information comparison means (47) for detecting whether or not any of
When the signature information comparison means detects the reproduction signature information that matches the illegal signature information, it supplies a signal for stopping reproduction of the digital content transmission information, and also detects a match with the illegal signature information. If not, signature verification means (46) for performing signature verification as to whether or not the playback signature information is signature information related to authentication of the creator of the digital content;
A signature information recording unit (51) for additionally storing the reproduction signature information in the illegal signature information group when the validity of the reproduction signature information is not verified by the signature verification unit;
A content information authentication / playback apparatus comprising:
[0013]
3 The illegal signature information group used for comparison with the reproduction signature information in the signature information comparison means uses the illegal signature information group stored in the signature information recording means which is a removable portable storage medium. Characterized by doing 1 Or 2 ) Content information authentication / playback apparatus.
[0014]
4 The illegal signature information group used for the comparison with the reproduction signature information in the signature information comparison means obtains the data of the illegal signature information group stored in the storage medium of the network server connected to the network. Characterized by using the obtained data 1 Or 2 ) Content information authentication / playback apparatus.
[0015]
5 The signature verification by the signature verification means is performed by the network server having signature verification means for performing signature verification as to whether or not the reproduction signature information is signature information related to authentication of the creator of the digital content. Is transmitted through a network, and information related to the result of the signature verification is obtained from the network server. 1 Or 2 ) Content information authentication / playback apparatus.
[0016]
6 The operation of the signature verification means related to the stop of playback of the digital content is an operation of stopping the decoding by supplying unplayable information indicating that playback is not permitted to a decoder that decodes the digital content information. It is characterized by 1 Or 2 ) Content information authentication / playback apparatus.
[0017]
7 The operation of the signature verifying unit related to stopping the reproduction of the digital content is performed even if the copy permission information attached to the digital content is copy permission. The operation is to stop supplying to other recording media. 1 Or 2 ) Content information authentication / playback apparatus.
[0018]
8 The addition of the reproduction signature information to the illegal signature information group in the signature information recording means is additionally stored in a portable storage medium. 1 Or 2 ) Content information authentication / playback apparatus.
[0021]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, the present invention No The preferred embodiment of the content information authentication / playback apparatus will be described below.
Figure 1 shows No FIG. 2 is a schematic block diagram of a content information authentication recording / reproducing system including a content information authentication reproducing apparatus, and outlines the configuration and operation thereof.
[0022]
The content information authentication recording / reproducing system shown in FIG. 1 includes a content information authentication recording apparatus 10 including a digital content unit 11, a signature creation unit 14, and a signal recording unit 15, a digital content recording medium 20, a display unit 61, and The content information authentication / reproduction device 40 is configured.
[0023]
The content information authentication / playback apparatus 40 includes a recording signal reading unit 41, a digital content memory 42, a decoder 44, a signature checking unit 46, a signature information comparison unit 47, a signature information recording unit 51, and a history management unit 52. The
[0024]
Next, the operation of the content information authentication recording / reproducing system configured as described above will be outlined.
First, digital content stored in the digital content unit 11 such as a bitstream compressed and encoded by an encoding method established by, for example, MPEG (moving picture experts group) is generated by being encrypted by the signature generation unit 14. The signal is supplied to the signal recording unit 15 together with the signature information, and the supplied signal is recorded on the digital content recording medium 20 such as a digital video tape.
[0025]
The digital content recording medium 20 recorded in this way is obtained by recording digital content that is protected by a legitimate copyright together with signature information relating to the copyright holder, but the digital content recording medium 20 is illegal. The signature information of the digital content recording medium 20 that has been copied and recorded is recorded as invalid signature information that is different from the signature information generated by being encrypted by the signature creation unit 14.
[0026]
The digital content recording medium 20 recorded in this way is played back and decrypted by the content information authentication / playback apparatus 40. Next, the operation of the content information authentication / playback apparatus 40 will be described. .
[0027]
First, the digital content recording medium 20 is reproduced by the recording signal reading unit 41, the digital content obtained by the reproduction is supplied to the digital content memory 42, and the signature information is supplied to the signature checking unit 46 and the signature information comparison unit 47.
[0028]
In the signature information comparison unit 47, the illegal signature information table previously recorded in the signature information recording unit 51 is compared with the supplied signature information, and when signature information matching the illegal signature information is detected, The unplayable information related to the detection result is supplied to the decoder 44, and the decoder 44 stops the decoding operation of the digital content temporarily stored in the digital content memory 42.
[0029]
On the other hand, when the signature information supplied to the signature information comparison unit 47 and the illegal signature information table previously recorded in the signature information recording unit 51 are not detected, the signature information comparison unit In 47, a signature verification execution instruction signal is supplied to the signature verification unit 46, and the signature verification unit 46 verifies the signature information by using a cryptographic analysis method described later for the validity of the supplied signature information.
[0030]
When it is verified that the signature information is valid, reproduction permission / prohibition information for granting reproduction permission to the decoder 44 is supplied, and the content information temporarily stored in the digital content memory 42 in the decoder 44 is, for example, The digital content that has been compression-encoded according to the MPEG standard is then decoded based on the MPEG standard, and the video signal obtained by the decoding is supplied to the display unit 61 to display the content.
[0031]
The contents verified as valid in this way are displayed. On the other hand, if the signature verification unit 46 determines that the signature information is invalid, reproduction for stopping the decryption of the digital contents is performed. The availability information is supplied to the decoder 44, and the decoding operation is stopped. The determined signature determination information is supplied to the signature information comparison unit 47, and the signature information determined as invalid by the signature information comparison unit 47 is signed. The signature information supplied to the information recording unit 51 is additionally recorded in the unauthorized signature information table.
[0032]
Then, in the history management unit 52 connected to the signature information recording unit 51, the recording date / time of the signature information additionally recorded in the unauthorized signature information table of the signature information recording unit 51 or the information related to the recording order is recorded history information. However, when the recording amount in the signature information recording unit 51 is close to a predetermined recording capacity and the free recording capacity becomes smaller than a predetermined value at that time, for example, the old signature information is deleted in order. In this way, a recording area is secured.
[0033]
By using the recorded signature information table in this way, the processing time for signature verification performed by the signature verification unit 46 is shortened, and unauthorized digital content recorded in the unauthorized signature information table The reproduction of the digital content recording medium 20 is immediately stopped and the display thereof is stopped.
[0034]
In this way, the content information authenticating / reproducing apparatus 40 determines whether or not the content can be reproduced based on the digital content recorded on the digital content recording medium 20 and the illegal signature information reproduced and stored in the past. Such control is performed in a short time, and when an illegal signature is detected, the signature information is added to the unauthorized signature information table to further reduce the control time related to the unauthorized signature information. .
[0035]
The configuration and operation of the content information authentication / playback apparatus 40 have been outlined above. The configuration and operation will be further described.
FIG. 2 shows the configuration of the content information authentication recording / playback system according to the first embodiment, and its operation will be described. The system shown in FIG. 2 is obtained by adding functions to the system shown in FIG. 1, and the added functions will be mainly described in detail below.
[0036]
The content information authentication recording / reproducing system shown in FIG. 1 includes a content information authentication recording apparatus 10a, a digital content recording medium 20, a display unit 61, and a content information authentication reproducing apparatus 40a. The information authentication recording apparatus 10a includes the information authentication described above. Compared to the recording device 10, the copy control flag setting unit 12 and the hash function calculation unit 13 are included and configured, and the content information authentication / playback device 40 a has a hash function unit compared to the content information authentication / playback device 40. 43, a controller 45, and an external output controller 48 are included.
[0037]
Next, functions and operations of the content information authentication recording device 10a, the digital content recording medium 20, and the content information authentication / playback device 40a configured as described above will be further described.
[0038]
First, the digital content stored in the digital content unit 11 is not only a video signal compressed and encoded by MPEG, but also an image signal encoded by a method other than MPEG, an encoded audio signal, a computer program, etc. The so-called digitized information signal is used.
[0039]
Such a digitized information signal is supplied to the signal recording unit 15 and recorded on the digital content recording medium 20. The digital content recording medium 20 records digital data in addition to the magnetic tape for the digital VTR. Recording media capable of recording digital signals such as magnetic tapes for streamers, magneto-optical disks, optical disks such as DVDs, and semiconductor memories are used.
[0040]
The digital content recorded on the digital content recording medium 20 is used for the purpose of reproduction by the content information authenticating / reproducing device 40a, but the content is supplied to another recording device and copied. Reuse is also managed.
[0041]
Control related to the reuse of the digital content is managed by a copy control flag set by the copy control flag setting unit 12, and the copy control flag is supplied to the signal recording unit 15 to be digital content. It is recorded on the recording medium 20.
[0042]
The copy control flag recorded on the digital content recording medium 20 is a flag indicating whether or not digital copying of the digital content recorded on the recording medium 20 to another recording medium is permitted. (Copy Generation Management System) method is used to set permission information such as whether to allow “children” whose copy generation is 1 or “grandchild” which is 2 to be permitted by the copy control flag setting unit 12. Is done.
[0043]
There are signature information and signature setting flag information as information set and recorded on the digital content recording medium. Next, generation of the signature information and signature setting flag information will be described.
[0044]
The signature information indicates the validity of the content recorded on the digital content recording medium 20, and a part of the information stored in the digital content unit 11 is supplied to the hash function calculation unit 13, and the hash function calculation is performed. In the unit 13, a one-way function such as a hash function is used for calculation to obtain a message digest (hereinafter referred to as MD), and the obtained MD is supplied to the signature creating unit 14.
[0045]
In the signature creation unit 14, the supplied MD uses secret key data managed by the copyright holder of the content. For example, RSA (public key cryptosystem developed by Professor Rivest Shamir Adelman) 3 signature scheme or It is created by the DSS (Digital Signature Standard) signature method.
[0046]
In the signature creation unit 14, a signature information flag indicating whether or not the signature information is recorded together with the signature information, for example, 1-bit binary data “0” indicates no signature information and “1” indicates signature information. Is generated, and the generated signature information and signature information flag are supplied to the signal recording unit 15.
[0047]
As described above, signals such as digital content, copy control flag, signature information, and signature information flag are supplied to the signal recording unit 15, and the supplied signals are recorded on the digital content recording medium 20.
[0048]
The digital content recording medium 20 thus recorded by the content information authentication recording device 10a is reproduced and decrypted by the content information authentication reproduction device 40a. Next, the reproduction operation by the content information authentication reproduction device 40a is performed. State.
[0049]
First, the digital signal recorded on the digital content recording medium 20 is read by the recording signal reading unit 41, and the signal related to the digital content among the read signals is sent to the digital content unit 42 in the signature information and the signature information flag. Both are supplied to both the signature verification unit 46 and the signature information comparison unit 47, and the copy control flag information is supplied to the external control output unit 48.
[0050]
When the signature information flag in the supplied information is “0”, it is indicated that the signature information is not recorded in the digital content recording medium 20. There is no need to verify the signature information, and the signature verification unit 46 supplies the decoder 44 with reproduction permission / prohibition information for allowing reproduction.
[0051]
On the other hand, when the signature information flag is “1”, it is indicated that the signature information is described. The signature information comparison unit 47 to which the signature information flag is supplied is based on FIG. By the same method as described above, the supplied signature information is compared with an illegal signature information table previously recorded in the signature information recording unit 51, and information that cannot be reproduced when matching signature information is detected. It is supplied to the control unit 45.
[0052]
When no matching signature information is detected, signature verification execution instruction information is supplied to the signature verification unit 46. Then, in the signature verification unit 46 supplied with the instruction information, a predetermined content information portion of the digital content temporarily stored in the digital content unit 42 is subjected to a hash function processing by the hash function processing unit, and MD (Message Digest). The supplied MD signal and signature information to be verified are verified using a public key managed by the copyright holder in the signature verification unit 46.
[0053]
As a result of the verification operation, when the signature information is verified as valid, the digital content information supplied to the digital content unit 42 is supplied to the decoder 44 and decoded, and the decoded information signal is displayed on the display unit 61. The normal playback operation is performed, such as being supplied and displayed.
[0054]
On the other hand, when it is verified that the signature information is invalid as a result of the verification operation, the digital content recording medium is invalid, and the reproduction possibility information that is not permitted to be reproduced by the signature verification unit 46 to the control unit 45 is the control unit 45. And the decoder 44 stops the decoding operation of the digital content, and the signature information verified as illegal is supplied to the signature information recording unit 51, and the illegal signature recorded therein is supplied. It is additionally recorded in the information table.
[0055]
The writing of the unauthorized signature information additionally recorded in the signature information recording unit 51 is managed by the history management unit 52, and when the area where the unauthorized signature information can be recorded exceeds a predetermined amount, the unauthorized signature information is recorded there. When the recording area is equal to or smaller than the predetermined amount, for example, the oldest fraud authentication information is erased and the newly supplied fraud authentication information is recorded.
[0056]
Furthermore, when such illegal signature information is detected, the display unit 61 displays that “the digital content recording medium 20 is an illegal recording medium”, and informs the user of the verification status.
[0057]
In this way, the digital content recorded on the digital content recording medium 20 is verified with the signature information and the signature information flag, so that the signature information is normally verified when the signature information is not recorded. The signal decrypted by the content information authenticating / reproducing apparatus 40a is supplied to the display unit 61 for display only when
[0058]
Further, in the content information authenticating / reproducing device 40a, the signal of the digital content recording medium 20 read by the recording signal reading unit 41 is supplied to another recording device via the external output control unit 48, and copy recording is performed. It has a function that can be done.
[0059]
The external output control unit 48 is supplied with a copy control flag signal read from the digital content recording medium 20, and another recording device according to the content of the copy control flag signal and the verification result of the signature information. Control of supply or non-supply of the signal supplied to is performed.
[0060]
That is, the digital content recorded on the digital content recording medium 20, the copy control flag, and the signature information are supplied to another recording device, and the digital copy is made. The copy control flag has information relating to copy permission. Only when the digital content signal and accompanying information are supplied to other recording devices.
[0061]
When the illegal signature information as described above is detected, the copy control flag related to the copy permission from the recording signal reading unit 41 to the external output control unit 48 is, for example, that the content can be digitally copied or can be copied only once. Even in such a case, the copy control flag supplied from the recording signal reading unit 41 is changed to a flag related to copy prohibition so that information related to digital content or the like is not supplied to the external recording device.
[0062]
Next, copy control performed in this way will be described.
FIG. 3 is a flowchart illustrating signal recording processing related to copy control.
[0063]
First, in step 1 (S1), the copy control flag setting unit 12 checks whether or not the copy control flag is set. If not, the process goes to the signature setting step in step 3 (S3). If the copy control flag is set in S1, the copy control flag is set in step 2 (S2), and then the process proceeds to the signature setting step in S3.
[0064]
In S3, after the signature is set in the signature creation unit 14, the process proceeds to step 4 for recording the content, signature information, signature information flag, and copy control flag. In step 4, the signal recording unit 15 The signal is recorded on the digital content recording medium 20.
[0065]
Next, the operation of reading the recorded digital recording content will be described.
FIG. 4 is a flowchart showing signal reproduction processing related to the read control of the digitally recorded content recording medium.
[0066]
First, the copy control flag recorded in step 11 is detected, and in step 12, it is checked whether or not copying is permitted by the copy control flag. The contents are updated, and signal supply for signal recording is performed from the external output control unit 48 to the external recording device, and the process proceeds to the next step 15.
[0067]
If the determination result in S12 is not copyable, the output to the external recording device is prohibited in step 14 and the process proceeds to signature information flag detection step 15 where the signature information flag recorded on the recording medium 20 is recorded. Detection is performed.
[0068]
In step 16, it is checked whether or not the detected signature information flag is “1”. If it is not “1”, the processing related to the read control of the recorded content recording medium is terminated and the digital content recording medium 20 is finished. When the detected signature information flag is “1”, the signature information is read out in step 17.
[0069]
The signature information read in step 17 is compared in step 18 to see if it is not already in the stored illegal signature table. If there is illegal signature information (No), the process moves to step 22 to reproduce the content. Is stopped, and when there is no matching illegal signature information (Yes), the signature information verification operation in step 19 is performed.
[0070]
Based on the verification result made in step 19, whether or not the content is valid is determined by the signature verification in step 20, and when it is valid, the processing related to the read control of the content recording medium is terminated and the digital content recording medium 20 is started and when it is determined that it is not valid, the illegal signature information is supplied to the signature information recording unit 51 in step 21 and additionally recorded in the illegal signature memory table. Playback is stopped.
[0071]
As described above, based on the copy control flag, the signature information, and the signature information flag information recorded on the digital content recording medium 20, the recorded content is reproduced, decrypted, and the content is connected to an externally connected device. Control operation for copying is performed.
[0072]
The illegal signature information is compared with the illegal signature information list recorded in the signature information recording unit in advance, so that the illegal signature information can be easily obtained without performing signature information verification work that is complicated in calculation. Can be obtained.
[0073]
Therefore, information related to the unauthorized signature table recorded in the signature information recording unit 51 and the history management unit 52 is recorded on a removable storage medium such as a floppy disk or an IC memory element, and the content information authentication / reproduction device 40a The contents stored in the storage medium are moved together with the storage medium and copied to the signature information recording unit of the different content information authentication / playback apparatus so that the different content information authentication / playback apparatus stores the signature stored in the unauthorized signature table. An illegal signature detection operation is easily performed based on the information.
[0074]
Such an illegal signature detection operation is performed when the signature information flag is read as a signature information flag indicating that “signature information is present”. Therefore, if the information “signature information is present” recorded in the signature information flag is falsified and supplied as “signature information is absent”, the illegal signature detection operation is not performed.
[0075]
Therefore, the recording of the signature information flag on the digital content recording medium is not a simple recording method such as simply recording the content information in the header area of the content information, but the recording is performed by embedding the signature flag information in the content information. There is a need to.
[0076]
That is, the signature information flag information related to the presence or absence of the recorded signature information is performed by, for example, embedding watermark information in the content, and the recorded signature information flag is changed from the presence of the signature information to the absence of the signature information. In such a case, there is a method for preventing the content itself from being broken, so that the content is not normally decrypted and displayed.
[0077]
In order to protect such content, the content information authentication recording apparatus encrypts and records at least a part of the content, and the content information authentication reproduction apparatus decrypts and reproduces the encrypted content. It is realizable by the method of doing.
[0078]
That is, it is relatively easy to embed a signature information flag related to the presence or absence of signature information in such encrypted content so that the encrypted signal is not decrypted when the information flag is falsified. is there.
[0079]
The digital content recorded on the digital content recording medium by the content information authentication recording apparatus in the first embodiment and the decryption operation of the content information have been described above. The digital content is recorded on the recording medium and conveyed. In addition, a similar content information authentication transmission / reception system can be configured for digital content information which is directly transmitted using a communication channel or a broadcast transmission channel.
[0080]
FIG. 5 shows a configuration of a content information authentication transmission / playback system.
In the content information authentication transmission apparatus 10b according to the second embodiment shown in the figure, the signal recording unit 15 is in the transmission apparatus 16 and the digital content recording medium 20 is in the transmission path 30 as compared with the content information authentication recording apparatus 10a. It is different in that it is.
[0081]
The content information authentication / playback apparatus 40b is configured such that the recording signal reading unit 41 is a receiving device 49 with respect to the content information authentication / playback apparatus 40a, but the other configurations are the same. The digital content is distributed using a digital transmission medium instead of the recording medium, and other operations are the same as those of the content information authentication recording apparatus in the first embodiment.
[0082]
In this way, the digital content authentication and the content information decryption operation in the content information authentication recording / reproduction system shown in the first embodiment are the same in the content information authentication transmission / reproduction system shown in the second embodiment. Done.
[0083]
In the second embodiment, the transmission path 30 is used instead of the digital content recording medium 20, but the transmission path can also be used for transmission of the unauthorized signature information table recorded in the signature information recording section. .
[0084]
FIG. 6 shows a configuration of a content information authentication / playback apparatus 40c in the case where a storage medium for storing the unauthorized signature information table is provided in the network server 50, and the unauthorized signature information is transmitted via the transmission network or acquired via the network. Will be described.
[0085]
The content information authentication / playback apparatus 40c shown in the figure has no signature information recording unit 51 and history management unit 52 as compared with the configuration of the content information authentication / playback apparatus 40b in FIG. And 32, the signature information recording unit 51 and the history management unit 52 in the network server 50 are connected.
[0086]
The verification of the illegal signature information in the signature verification unit connected in this way is performed in the same manner as the signature verification unit 46 shown in FIG. 2 described above, and when it is recognized as an illegal content and medium by the verification operation. In the content information authenticating / reproducing apparatus on which the work has been performed, the reproduction permission information is supplied to the control unit 45 as a reproduction non-permission or reproduction stop instruction signal, and the verified illegal signature information is the network interface 31 and 32 is supplied to the signature information recording unit 51 of the network server 50.
[0087]
The unauthorized signature information is shared by a plurality of content information authentication / playback apparatuses connected to the network server 50 over a network, and the unauthorized signature information list is shared and used by the plurality of content information authentication / playback apparatuses. In addition, each of the illegal signature information verified by each content information authentication / playback apparatus is supplied to the network server 50.
[0088]
The network server 50 is supplied with a large amount of unauthorized signature information detected by a plurality of content information authentication / playback apparatuses, and a database related to the unauthorized signature information is constructed in a short period of time. The verification work by is reduced.
[0089]
The capacity of the signature information recording unit of the network server that stores the database is set large, but the illegal signature information supplied to the signature information recording unit is made by the history management unit 52, and the signature information recording unit 51 If there is a vacant area that can be recorded in the illegal signature information recording area, the illegal signature information is recorded in the signature information recording unit. If the recordable area is insufficient, for example, the oldest illegal authentication is performed. The information is erased, and the newly supplied fraud authentication information is recorded.
[0090]
In the case of the content information authentication / playback apparatus in the first embodiment, the content information authentication / playback apparatus in which the fraudulent signature information list is changed via a floppy disk or IC memory element is different from the unauthorized authentication information recorded in this way. However, sharing of illegal signature data by network connection is a real-time update of newly verified illegal signature data and does not involve a storage medium replacement operation. Since this is done easily, the work for verifying signature data in each content information authentication / playback apparatus can be reduced.
[0091]
The third embodiment in which the network server 50 has the signature information recording unit 51 and shares the illegal signature data has been described above. Next, an example in which the signature verification unit is provided in the network server will be described.
[0092]
FIG. 7 shows the configuration of a content information authentication / playback apparatus according to the fourth embodiment in the case where a signature verification unit is provided in the network server, and the operation thereof will be described.
[0093]
That is, the content information authentication / playback apparatus 40d shown in the figure is compared with the content information authentication / playback apparatus 40c according to the third embodiment shown in FIG. , And the circuit unit of the signature information comparison unit 47 are not included in the hash function unit 43, the signature verification unit 46, and the signature information comparison unit 47 in the network server 50a via the network interface 31a and the network interface 31b. It is different in that it is configured to be connected.
[0094]
Compared to the operation of the content information authentication / playback apparatus 40c, the operation of the content information authentication / playback apparatus 40d configured as described above performs verification work on the network server 50a via the network when an operation related to signature verification is required. In response to the result obtained by the verification operation, the server unit 50a supplies the reproduction permission / prohibition information regarding the content information authentication / reproduction device 40d to the control unit 45 via the network. Similarly, the illegal signature information is recorded in the signature information recording unit 51.
[0095]
That is, the content information authentication / playback device 40d receives information on a part of the content necessary for creating the signature information, the signature information flag, and the digital content message digest on the network server 50a via the network interface 31a. On the network server side, those information signals supplied via the network interface 32a are obtained, and the signature authentication work is performed.
[0096]
In this way, the signal for signature authentication work performed via the network, the reproduction permission information, etc. may be altered by another computer connected to the network, so the signal transmitted via the network It is desirable that encryption is sufficiently strong.
[0097]
In the network server 50a, the unauthorized signature data recorded in the signature information recording unit is tampered with such as being erased by an external access, or valid signature information being recorded as unauthorized signature information. In order to prevent this, it is desirable that the encryption system be sufficiently protected. However, it is necessary to maintain and manage the stored data by periodically re-verifying the illegal signature data recorded.
[0098]
As described above, according to the first to fourth embodiments, the recording / reproducing method, the transmission / reception method, and the configuration of the apparatus in which they are verified, which quickly and easily verifies the signature information using the stored illegal signature data, and those Described the operation.
[0099]
When reproducing or receiving digital content information with signature information and signature flag information by those recording and transmission devices, the digital content and the recording medium or the signature information transmitted on the transmission medium are authenticated and illegal When the content and medium are verified, the reproduction is stopped, and when the medium having the illegal signature information is reproduced again, the reproduction of the content is not performed without performing the authentication process. It can be permitted or stopped, and the processing time can be shortened and the processing can be simplified.
[0100]
Since the illegal signature information is recorded on the removable recording medium or memory element, the illegal signature information recording medium or memory element is duplicated, and a plurality of playback devices or receptions are received. By supplying those illegal signature information recording media to the apparatus, the work for signature authentication can be speeded up and simplified in a plurality of apparatuses.
[0101]
When a plurality of playback devices or receiving devices are connected via a network and illegal signature information is supplied via the network, the illegal signature information verified by one of the plurality of devices is simultaneously shared. Therefore, it is possible to configure a reproducing apparatus or a receiving apparatus that operates by verifying signature information more simply.
[0102]
Further, since the illegal signature information is obtained by verifying the illegal signature information on a network server connected to the network, all the reproduction devices or reception devices connected to the network are Even when the signature information verification function is not provided, the authentication processing speed at which digital content can be reproduced or received based on the signature information verified by the network server having a high calculation function is high. In addition, a low-priced content information authentication / playback apparatus can be configured.
[0103]
【The invention's effect】
Contract Claim 1 According to the described invention, when a digital content recording medium recorded with a digital content produced based on a legitimate right with signature information relating to the production of the digital content added is reproduced. Detects illegal signature information by comparing with an illegal signature information table that stores multiple illegal signature information attached to digital content produced based on an unfair right that stores reproduction signature information in advance. If it is, the reproduction of the digital content recording medium is stopped, and when the illegal signature information is not detected, the signature verification related to the verification of the validity of the reproduction signature information is performed, and when the validity is not verified, the reproduction signature information is Since it is stored in addition to the illegal signature information table, the frequency of authentication processing by complex arithmetic processing is reduced. Kusuru it possible, there is an effect capable of providing a structure of reducing the content information authentication reproducing apparatus authentication processing time it is possible to configure the processing means according to the authentication process in a simple manner.
[0104]
Claims 2 According to the described invention, when the digital content information transmitted based on the digital content produced based on the legitimate rights is added with the signature information related to the production of the digital content, the reproduction is obtained by reproduction. Compared to an unauthorized signature information table storing a plurality of unauthorized signature information attached to digital content produced based on an unfair right that has previously stored the signature information, the unauthorized signature information is detected. If the digital signature is not detected, the verification of the validity of the playback signature information is performed. If the verification is not verified, the playback signature information is illegal. Since it is added and stored in the signature information table, the frequency of performing authentication processing by complicated arithmetic processing is reduced. Rukoto can, there is an effect capable of providing a structure of reducing the content information authentication reproducing apparatus authentication processing time it is possible to configure the processing means according to the authentication process in a simple manner.
[0105]
Claims 3 According to the described invention, the claims 1 as well as 2 In addition to the effects described above, since the signature comparison is performed by using an illegal signature information table stored in a removable portable storage medium, the processing steps related to the authentication processing can be further simplified and the authentication processing can be performed. There is an effect that it is possible to provide a method for authenticating and reproducing content information with reduced time.
[0106]
Claims 4 According to the described invention, the claims 1 as well as 2 In addition to the effects described above, especially the signature comparison is performed by accessing the storage medium of the network server connected to the network and using the data of the illegal signature information table stored in the storage medium. There is an effect that it is possible to provide a method of authenticating and reproducing content information that can further simplify the processing steps and reduce the authentication processing time.
[0107]
Claims 5 According to the described invention, the claims 1 as well as 2 In addition to the effects described above, in particular, the signature verification is performed by transmitting the reproduction signature information to a network server connected to the network and having a function for verifying the validity of the reproduction signature information, and verifying the validity of the reproduction signature information from the network server. Since the signature verification information according to the method is obtained via a network, it is possible to further simplify the processing steps related to the authentication processing and to provide an authentication reproduction method for content information with reduced authentication processing time.
[0108]
Claims 6 According to the described invention, the claims 1 as well as 2 In addition to the effects described above, in particular, the operation relating to the cancellation of the reproduction of the digital content is performed by supplying non-reproducible information indicating that the reproduction is not permitted to a decoder that decodes the compressed and encoded digital content information. Therefore, there is an effect that it is possible to provide a method for authenticating and reproducing content information in which malfunctions such as digital content information that has been decrypted in error due to a delay time associated with a processing step related to authentication processing are prevented from being reproduced. .
[0109]
Claims 7 According to the described invention, the claims 1 as well as 2 In addition to the effects described above, in particular, the operation relating to the stop of the reproduction of the recording medium is recorded with copy permission information for permitting the recorded digital content to be copied to another recording medium. Even in such a case, there is an effect that it is possible to provide a method for authenticating and reproducing content information by preventing the malfunction related to the copy permission by simultaneously performing the operation of stopping the signal supply for the copy.
[0110]
Claims 8 According to the described invention, the claims 1 as well as 2 In addition to the effects described above, the addition of the reproduction signature information to the unauthorized signature information table is additionally stored in a portable storage medium, so that the stored unauthorized signature information table is used to authenticate other content information. Since it can be used in a reproduction method, it is possible to simplify an authentication processing process related to an authentication reproduction apparatus for content information equipped with the authentication method, and to provide an authentication reproduction method for content information with reduced authentication processing time There is.
[Brief description of the drawings]
FIG. 1 is a diagram showing an outline of a configuration of a content information authentication recording / playback system according to a content information authentication / playback apparatus of the present invention.
FIG. 2 is a diagram showing a configuration of a content information authentication recording / reproducing system according to a first example of the present invention.
FIG. 3 is a flowchart illustrating an operation of a recording signal according to the content information authentication recording apparatus according to the embodiment of the present invention.
FIG. 4 is a flowchart illustrating an operation of a reproduction signal according to the content information authentication reproduction apparatus according to the embodiment of the present invention.
FIG. 5 is a diagram showing a configuration of a content information authentication recording / reproducing system according to a second example of the present invention.
FIG. 6 is a diagram showing a configuration of a content information authentication / playback apparatus according to a third embodiment of the present invention.
FIG. 7 is a diagram showing a configuration of a content information authentication / playback apparatus according to a fourth embodiment of the present invention.
[Explanation of symbols]
10, 10a Content information authentication recording device
10b Content information authentication transmission device
11 Digital content section
12 Copy control flag setting section
13 Hash function calculator
14 Signature creation department
16 Transmission equipment
20 Digital content recording media
30 transmission line
31, 31a, 32, 32a Network interface
40, 40a, 40b, 40c, 40d Content information authentication reproduction apparatus
41 Recording signal readout section
42 Digital content memory
43 Hash function part
44 Decoder
45 Control unit
46 Signature Inspection Department
47 Signature information comparison part
48 External output controller
49 Receiver
50, 50a network server
51 Signature information recording part
52 History Management Department
61 Display

Claims (8)

A content information authentication / playback apparatus for playing back only a digital content recording medium in which digital content produced based on legitimate rights and signature information related to authentication of the creator of the digital content are recorded,
A recording signal reading means for reproducing the digital content recording medium to obtain reproduction signature information related to the signature information;
The reproduction signature information is compared with the reproduction signature information by comparing the reproduction signature information with the illegal signature information group accumulatively storing the illegal signature information attached to the produced digital content instead of the legitimate rights. Signature information comparison means for detecting whether or not any of
When the signature information comparing means detects the reproduction signature information that matches the illegal signature information, it supplies a signal for stopping the reproduction of the digital content recording medium, and also detects a match with the illegal signature information. Signature verification means for performing signature verification as to whether or not the reproduction signature information is signature information related to authentication of the creator of the digital content when not done,
When the validity of the reproduction signature information is not verified by the signature verification means, signature information recording means for additionally storing the reproduction signature information in the illegal signature information group;
A content information authentication / playback apparatus comprising: A content information authentication / playback apparatus for playing back only digital content transmission information in which digital content produced based on legitimate rights and signature information related to authentication of the creator of the digital content are transmitted,
Information signal receiving means for reproducing the digital content transmission information and obtaining reproduction signature information related to the signature information;
The reproduction signature information is compared with the reproduction signature information by comparing the reproduction signature information with the illegal signature information group accumulatively storing the illegal signature information attached to the produced digital content instead of the legitimate rights. Signature information comparison means for detecting whether or not any of
When the signature information comparison means detects the reproduction signature information that matches the illegal signature information, it supplies a signal for stopping reproduction of the digital content transmission information, and also detects a match with the illegal signature information. Signature verification means for performing signature verification as to whether or not the reproduction signature information is signature information related to authentication of the creator of the digital content when not done,
When the validity of the reproduction signature information is not verified by the signature verification means, signature information recording means for additionally storing the reproduction signature information in the illegal signature information group;
A content information authentication / playback apparatus comprising: The illegal signature information group used for comparison with the reproduction signature information in the signature information comparison means is performed using the illegal signature information group stored in the signature information recording means which is a removable portable storage medium. The content information authenticating / reproducing apparatus according to claim 1 or 2 . The illegal signature information group used for comparison with the reproduction signature information in the signature information comparing means obtains the data of the illegal signature information group stored in a storage medium of a network server connected to the network, and is obtained. 3. The content information authenticating / reproducing apparatus according to claim 1 , wherein the content information authenticating / reproducing apparatus is used. In the signature verification in the signature verification means, the reproduction signature information is sent to a network server having signature verification means for performing signature verification as to whether or not the reproduction signature information is signature information related to authentication of the creator of the digital content. 3. The content information authenticating / reproducing apparatus according to claim 1 , wherein the content information authenticating / reproducing apparatus transmits the information via a network and obtains information related to a result of the signature verification from the network server. The operation relating to the digital content reproduction stop in the signature verification means is an operation for stopping the decoding by supplying to the decoder for decoding the digital content information unreproducible information indicating that the reproduction is not permitted. 3. The content information authenticating / reproducing apparatus according to claim 1 , wherein the content information authenticating / reproducing apparatus is provided. The operation related to the reproduction stop of the digital content in the signature verification means is performed in addition to the digital content signal for the copy even if the copy permission information attached to the digital content is copy permission. content information authentication reproducing apparatus according to claim 1 or 2, wherein the an operation to stop the supply to the recording medium. The additions to the incorrect signature information group, the content information according to claim 1 or 2, wherein the forming to additionally stored in the storage medium is a portable authentication reproduction of the reproduction signature information in the signature information recording unit apparatus.

Images