JP4548393B2 - Content recording / playback device - Google Patents

Description

  The present invention relates to a large-capacity recording device that records and reproduces copyright-protected digital content on a hard disk device (hereinafter referred to as HDD), and in particular, moves the recorded content on the HDD to a removable recording device (hereinafter referred to as HDD). (Referred to as a move).

With the development of digital video signal processing technology in recent years, digital TV receivers (hereinafter referred to as DTV) that receive digital broadcasts and digital recording devices that record and play back digital broadcast programs (for example, HDD recorders, DVD recorders, etc.) AV devices are being commercialized one after another.
In addition, with the spread of broadband / Internet, these digital AV devices have a communication function and can transmit digital contents using a wired / wireless LAN (Local Area Network). In this case, a DTCP (Digital Transmission Content Protection) system is defined as a technique for preventing unauthorized copying on a transmission path.

In the DTCP method, (1) content encryption / decryption protocol, (2) key sharing protocol (authentication process) necessary for encryption / decryption processing, and (3) copy control information (for example, “Copy Free” added to each content) (Copy unlimited), "Copy Never" (copy prohibited), "Copy One Generation" (copy 1 generation allowed), "No More Copies" (copy not allowed), etc.).
The digital recording apparatus compliant with the DTCP method can record only the content of “Copy Free” or “Copy One Generation”. When the content of “Copy One Generation” is recorded, the copy control information is set to “No”. Change to “More Copies” and prohibit further recording. Further, the content of “No More Copies” once recorded on the recording medium can be “moved” to another recording medium, and the content of the original recording medium is deleted or rendered unplayable.

In the current digital broadcasting, most contents are operated as “Copy One Generation”, and IEEE 1394 and wired / wireless LAN (only TCP / IP transfer) are permitted as interfaces capable of digital output.
When transferring copyright-protected content using IEEE 1394, the authentication process is executed using the asynchronous transfer method, and then the content is encrypted using the isochronous transfer method. Similarly, when transferring content over a wired / wireless LAN (hereinafter, IP network), the authentication processing and the content transfer use separate TCP connections, and the authentication processing is first performed on the TCP connection for authentication processing. Thereafter, the encrypted content is transferred over the TCP connection for content transfer.

  The DTCP method is described, for example, in Non-Patent Document 1 below. As a technique for implementing the move function, for example, there is one described in Patent Document 1 below. As a technique for implementing content transfer on the IP network, for example, there is one described in Patent Document 2 below.

"IEEE1394, application to AV equipment", supervised by Shinji Takada, Nikkan Kogyo Shimbun JP 2004-326892 A JP 2005-301449 A

However, when the content is transferred on the IP network, at least the content transmission side device always opens the authentication processing and content transfer TCP sockets as listening sockets, and authentication requests from other devices and Need to respond to content requests. Therefore, during content transfer between the transmitting device (A) and the receiving device (B), another malicious device (C) continuously requests connection establishment requests from the listening socket, and loads the load. A situation may occur in which data to be increased or data that hinders network responsiveness is sent and the transmission apparatus (A) and the reception apparatus (B) fall into a service provision impossible state. In the case of content viewing, the damage is small, but if this situation occurs during content recording or moving, recording fails in the middle, especially when the moving is performed, the original content is deleted, so the user will watch the content again May not be possible.
SUMMARY OF THE INVENTION An object of the present invention is to provide a content recording / reproducing apparatus having a function capable of performing a move as safely as possible, reliably and easily for a user.

In order to solve the above problems, in the present invention,
Normally, two TCP sockets (A1, A2) are generated in the listening mode to accept the authentication processing request and the content transfer request, and the sockets (A1, A2) are always in an open state.
When performing content recording or moving, at least the listening mode of the content transfer socket (A1) is canceled so that a request for the socket from another device on the IP network is not accepted. Thereafter, the transmitting device or the receiving device that performs recording or moving mutually exchanges the port numbers of the TCP sockets (B1, B2) different from the sockets (A1, A2) to be opened in advance and the information for identifying each other. Share to.
Then, the transmission device or the reception device opens the TCP socket (B1, B2) as a listening socket, and accepts only the connection request of the transmission device or the reception device. When a connection request is received from a device other than the transmitting device / receiving device, an error is returned or ignored (no response).
When a connection request is received from the transmission device or the reception device within the specified time, the listening mode of the TCP socket (B1, B2) is canceled and subsequent connection requests are not accepted. If no connection request is received from the transmitting device / receiving device within the specified time, the TCP sockets (B1, B2) are closed.

  The content recording / playback apparatus of the present invention can prevent a network function from being disabled due to an excessive connection establishment request or data transfer from another apparatus, and can safely record and move content via the IP network.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is an embodiment for explaining the present invention, and shows the configuration of an AV system including a plurality of content recording / playback apparatuses. The AV system is assumed to be used in a home network environment, and the HDD built-in DTV 100, HDD recorder 200, DTV 300A, 300B are digitally connected to each other via the hub 30 by the Ethernet (registered trademark) 20. Assume that the DTV 100 and the HDD recorder 200 are installed in the room A, the DTV 300A is installed in the room B, and the DTV 300B is installed in the room C. Although Ethernet (registered trademark) (registered trademark) is used in the present embodiment, a digital interface such as IEEE1394, wireless, or USB can also be used.

The DTV 100 can view a digital broadcast program received by the antenna 10 and can store the broadcast program in a built-in HDD. Also, digital output of broadcast programs and transmission / reception of control commands can be performed via Ethernet (registered trademark) 20 to other HDD recorders 200 and DTVs 300A and 300B.
The HDD 200 includes a built-in or removable HDD, and can record content received via the Ethernet (registered trademark) 20.
The DTVs 300 </ b> A and 300 </ b> B can view the content recorded in the DTV 100 or the HDD 200 in the room A via the Ethernet (registered trademark) 20.

Next, one configuration of the DTV 100 shown in FIG. 1 will be described with reference to FIG.
The DTV 100 includes a tuner processing unit 101, a descrambler 102, a demultiplexer 103, a decoder 104, an input processing unit 105, a device authentication processing 106, a recording / playback processing unit 107, an encryption / decryption processing unit 108, a communication processing unit 109, an HDD 110, A monitor 111, a control unit 112, and a digital input / output terminal 114 are included.
The tuner processing unit 101 is a part that selects a desired channel from a plurality of channels received from a broadcasting station and demodulates a digitally modulated program.
The descrambler 102 is a part for releasing the scramble of the broadcast program that is set to be able to receive only the channel contracted with the service provider.
The demultiplexer 103 is a part that extracts audio data and video data from a broadcast program.

The decoder 104 is a part that decodes compressed audio data and video data, which are contents recorded in the broadcast program and the HDD 110, and expands the original audio signals and video signals. These signals are output to the monitor 110.
The input processing unit 105 is a part where the user operates the DTV 100 using a remote controller, a touch panel, or the like.
The device authentication processing unit 106 conforms to a specific authentication protocol with another AV device on the Ethernet (registered trademark) 20 in order to transfer the content subject to copyright protection via the Ethernet (registered trademark) 20. It is a part that authenticates whether the devices are properly authorized to each other and shares a key used for content encryption / decryption. Examples of the specific authentication protocol include the DTCP method.

The recording / playback processing unit 107 is a part that performs recording control for recording the received broadcast program in the HDD 110 and playback control for playing back the broadcast program recorded in the HDD 110.
The encryption / decryption processing unit 108 encrypts the content using the key shared by the device authentication processing unit 106 when transmitting / receiving the broadcast program and the content recorded in the HDD 110 on the Ethernet (registered trademark) 20. Or it is a part to decode.
The communication processing unit 109 is a part that transmits and receives content and control commands to and from other AV devices (for example, the HDD 200 and the DTVs 300A and 300B) connected via the digital input / output terminal 114 via the Ethernet (registered trademark) 20. .
The HDD 110 is a built-in memory that records broadcast programs. In addition, a removable HDD, an optical disk, a memory card, and a hybrid form combining these can be considered.

The monitor 111 is a part that displays broadcast programs and contents recorded in the HDD 110. Instead of being built-in, it is also possible to have a form external to DTV 100.
The control unit 112 is a part that comprehensively controls the operation of each unit in the DTV 100. In addition, a TCP socket management unit 113 that is a feature of the present invention is included. The TCP socket management unit 113 will be described later.

Similarly, a configuration of the HDD recorder 200 will be described with reference to FIG.
The HDD recorder 200 includes an input processing unit 201, a device authentication processing unit 202, a recording / playback processing unit 203, an encryption / decryption processing unit 204, a communication processing unit 205, an HDD 206, a control unit 207, and a digital input / output terminal 209. .
The input processing unit 201 is a part where the user operates the HDD recorder 200 using a remote controller, a touch panel, or the like.
The device authentication processing unit 202 conforms to a specific authentication protocol with another AV device on the Ethernet (registered trademark) 20 in order to transfer the content subject to copyright protection via the Ethernet (registered trademark) 20. It is a part that authenticates whether the devices are properly authorized to each other and shares a key used for content encryption / decryption. Examples of the specific authentication protocol include the DTCP method.

The recording / playback processing unit 203 is a part that performs recording control for recording content received via the digital input / output terminal 209 in the HDD 206 and playback control for playing back the content recorded in the HDD 206.
The encryption / decryption processing unit 204 encrypts or decrypts the content using the key shared by the device authentication processing unit 202 when transmitting / receiving the content recorded in the HDD 206 on the Ethernet (registered trademark) 20. It is a part to do.
The communication processing unit 205 is a part that transmits / receives contents and control commands to / from other AV devices (for example, the DTV 100, DTV 300A, and 300B) connected by the Ethernet (registered trademark) 20 via the digital input / output terminal 209. .
The HDD 206 is a built-in or detachable memory that records content. In addition, an optical disk, a memory card, and a hybrid form combining these can be considered.
The control unit 207 is a part that comprehensively controls the operation of each unit in the HDD recorder 200. In addition, a TCP socket management unit 208 that is a feature of the present invention is included. The TCP socket management unit 208 will be described later.
The DTVs 300 </ b> A and 300 </ b> B have the same configuration as the DTV 100 except that the recording / playback processing unit 107 and the HDD 110 of the DTV 100 are not installed.

Next, in the AV system shown in FIG. 1, a broadcast program recorded in the HDD 110 of the DTV 100 installed in the room A, which is a home server, is transmitted to the DTV 300A installed in the room B via the Ethernet (registered trademark) 20. A procedure 400 for viewing will be described with reference to FIGS. 4 and 7.
First, the control unit 112 of the DTV 100 communicates with other AV devices (for example, the HDD 200 and the DTV 300A, 300B) on the Ethernet (registered trademark) 20 when the power is turned on or when the Ethernet (registered trademark) 20 is connected. Then, a control TCP socket for exchanging control commands and various data is generated, set to a listening state, and a request from another AV device can be received. Then, the control unit 112 notifies the TCP socket management unit 113 that the control TCP socket has been successfully generated. The TCP socket management unit 113 manages information relating to subsequent connections on the control TCP socket and other AV devices on the Ethernet (registered trademark) 20. A configuration example of the information 700 managed by the TCP socket management unit 113 is shown in FIG.

  Data relating to the control TCP socket is composed of, for example, socket information 702 of the own device, socket information 703 of the connected AV device, and device type 704 of the connected AV device as the control 701. In addition to the information, other information such as a manufacturer name and model may be added. Here, the control TCP socket is used for communicating various data of, for example, UPnP (Universal Plug and Play) (step 401).

Subsequently, the control unit 112 of the DTV 100 generates an authentication TCP socket for performing device authentication with another AV device on the Ethernet (registered trademark) 20, sets the socket to a listening state, and the like. The authentication request from the AV device is made receivable. Then, the control unit 112 notifies the TCP socket management unit 113 that the authentication TCP socket has been successfully generated. The TCP socket management unit 113 manages information regarding subsequent connections on the authentication TCP socket and other AV devices on the Ethernet (registered trademark) 20.
The data related to the authentication TCP socket includes, for example, key information 711 and connection information 712 (including the socket information 713 of the own apparatus and the socket information 714 of the connected AV apparatus) as the authentication 710. In addition to this information, other information such as the current connection status and device authentication status may be added. When the socket is generated, “none” is set in the key information 711. Here, the authentication TCP socket is used, for example, to perform device authentication of the DTCP method (step 402).

  Similarly, the control unit 112 of the DTV 100 generates a content transfer TCP socket for transferring content to and from other AV devices on the Ethernet (registered trademark) 20, sets the socket to a listening state, A content transmission request from another AV device is set in a receivable state. Then, the control unit 112 notifies the TCP socket management unit 113 that the content transfer TCP socket has been successfully generated. The TCP socket management unit 113 manages information relating to subsequent connections on the TCP socket for content transfer and other AV devices on the Ethernet (registered trademark) 20. Data relating to the TCP socket for content transfer is used as content transfer 720, for example, listening permission information 721, connection information 722 (socket information 723 of the own device, socket information 724 of the connected AV device, encryption / decryption of content) Key information 725 to be included).

In addition to this information, other information such as content ID and transfer status may be added. Here, the TCP socket management unit 113 sets “start” in the listening permission information 721 (step 403).
Thereafter, the DTV 100 waits for various requests from the other AV devices and waits for an operation from the user via the input processing unit 105.

  Here, when the user instructs the DTV 300A installed in the room B to view the content recorded in the HDD 110 of the DTV 100, the DTV 300A establishes a TCP connection with the control TCP socket opened by the DTV 100 in step 401. To do. The TCP socket management unit 113 of the DTV 100 updates the information 702 to 704 of the control 701 as necessary (step 404).

Then, the DTV 300A issues a request for viewing the content recorded in the HDD 110 over the connection to the DTV 100 (step 405).
The control unit 112 of the DTV 100 that has received the request via the communication processing unit 109 uses information related to the content recorded in the HDD 110 (for example, title, time, image quality, format, copy control information, etc.) and is used when the content is transferred. Information about the TCP socket for authentication / content transfer is returned to the DTV 300A (step 406).
Then, the DTV 300A discards the connection as necessary (step 407).
Subsequently, the DTV 300A establishes a TCP connection with the authentication TCP socket acquired in Step 406 (Step 408).

  The DTV 300A performs device authentication with the device authentication processing 106 of the DTV 100 according to a specific authentication protocol such as the DTCP method, and shares a key used when content is encrypted / decrypted. If the device authentication is successful, the device authentication processing 106 of the DTV 100 sets a part or all of the shared key in the key information 711 managed by the TCP socket management unit 113. Further, the TCP socket management unit 113 updates the connection information 712 as necessary (step 409).

Then, the DTV 300A discards the connection as necessary (step 410).
Subsequently, the DTV 300A establishes a TCP connection with the content transfer TCP socket acquired in step 406 (step 411).
Thereafter, the DTV 300A issues a request for viewing one or more contents from the contents of the HDD 110 acquired in step 406 to the DTV 100 over the connection (step 412).

  The control unit 112 of the DTV 100 that has received the request via the communication processing unit 109 instructs the recording / reproduction processing unit 107 to reproduce the content requested to be viewed. In addition, the device authentication processing unit 106 and the encryption / decryption processing unit 108 are instructed whether to start content transfer and to encrypt the content. The TCP socket management unit 113 updates the connection information 722 as necessary. Then, the content is transferred to the DTV 300A via the communication processing unit 109 (step 413).

After all content transfer is completed, the DTV 300A or DTV 100 discards the connection as necessary (step 414).
With the above procedure, the DTV 300A installed in the room B can view the content of the HDD 110 built in the DTV 100 installed in the room A over the network.

Next, a procedure 500 for moving the content in the HDD 110 of the DTV 100 to the HDD recorder 200 installed in the room A while viewing the content in the DTV 100 with the DTV 300A will be described with reference to FIGS.
When the user instructs the HDD recorder 200 to move the content in the DTV 100 via the input processing unit 201, the control unit 207 of the HDD recorder 200 establishes a TCP connection with the control TCP socket of the DTV 100. Accordingly, the TCP socket management unit 113 of the DTV 100 updates the information 702 to 704 of the control 701 as necessary (step 501).

Then, the control unit 207 of the HDD recorder 200 issues a move request for the content recorded in the HDD 110 over the connection to the DTV 100 (step 502).
The control unit 112 of the DTV 100 that has received the request via the communication processing unit 109 uses information related to the content recorded in the HDD 110 (for example, title, time, image quality, format, copy control information, etc.) and is used when moving the content. Information regarding the TCP socket for move-dedicated authentication / move-dedicated content transfer is returned to the HDD recorder 200 (step 503).
The control unit 207 of the HDD recorder 200 that has received the information via the communication processing unit 205 discards the connection as necessary (step 504).

  Upon receiving the move request in step 503, the control unit 112 of the DTV 100 cancels the listening state of the content transfer TCP socket generated in step 403 and does not accept a content transmission request other than the current content transfer between the DTV 100 and the DTV 300A. Put it in a state. Then, the TCP socket management unit 113 sets “stop” in the listening permission information 721 (step 505).

  Next, the control unit 112 of the DTV 100 generates a move-dedicated authentication TCP socket for performing device authentication with the HDD recorder 200 that is the move destination, sets the socket to a listening state, To receive the authentication request. If the socket receives a connection request from a device other than the HDD recorder 200, the socket is discarded and ignored (so that the connection cannot be established). In addition, the control unit 112 starts a timer and waits for an authentication request from the HDD recorder 200 until a predetermined time is reached. If the authentication request is not received within the time, the socket is discarded (step 506).

Similarly, the control unit 112 of the DTV 100 generates a move-only content transfer TCP socket for transferring the content to be moved with the HDD recorder 200 that is the move destination, sets the socket to the listening state, The content transmission request from the HDD recorder 200 is made receivable. If the socket receives a connection request from a device other than the HDD recorder 200, the socket is discarded and ignored (so that the connection cannot be established). Further, the control unit 112 starts a timer and waits for a content request from the HDD recorder 200 until a predetermined time is reached. If the content request is not received within the time, the socket is discarded (step 507).
The control unit 207 of the HDD recorder 200 establishes a TCP connection with the move-dedicated authentication TCP socket acquired in step 503 (step 508).

When the connection with the HDD recorder 200 can be established at step 508, the control unit 112 of the DTV 100 cancels the listening state of the move-dedicated authentication TCP socket and stops the timer (step 509).
Thereafter, the device authentication processing unit 106 of the DTV 100 performs device authentication with the device authentication processing unit 202 of the HDD recorder 200 according to a specific authentication protocol, and encrypts / decrypts the content to be moved. Share the key to use. If the device authentication is successful, the device authentication processing 106 of the DTV 100 sets a part or all of the shared key in the key information 733 of the move-dedicated authentication 730 managed by the TCP socket management unit 113. Further, the TCP socket management unit 113 sets the connection information 731 to 732 as necessary (step 510).

If the device authentication is successful in step 510, the control unit 207 of the HDD recorder 200 establishes a TCP connection with the move-only content transfer TCP socket acquired in step 503 (step 511).
When the connection with the HDD recorder 200 can be established in step 511, the control unit 112 of the DTV 100 cancels the listening state of the move-only content transfer TCP socket and stops the timer (step 512).

Thereafter, the control unit 207 of the HDD recorder 200 issues a move request for one or more contents from the contents of the HDD 110 acquired in step 504 to the DTV 100 over the connection (step 513).
The control unit 112 of the DTV 100 that has received the request via the communication processing unit 109 instructs the recording / playback processing unit 107 to play the content that has been requested to be moved. Also, the device authentication processing unit 106 and the encryption / decryption processing unit 108 are instructed to start content transfer and to move the content. The TCP socket management unit 113 updates the connection information 741 to 744 of the move dedicated content transfer information 740 as necessary.
Then, the content is transferred to the HDD recorder 200 via the communication processing unit 109 (step 514).
According to the above procedure, the content in the HDD 110 of the DTV 100 can be moved to the HDD recorder 200 installed in the room A while the content in the DTV 100 is viewed by the DTV 300A in another room.

Next, a procedure 600 at the end of the move will be described with reference to FIGS.
When all of the contents to be moved have been transferred, the control unit 207 of the HDD recorder 200 discards the connection established in step 511. The TCP socket management unit 113 deletes the connection information 741 to 744 of the move-only content transfer information 740 (step 601).
Similarly, the control unit 207 of the HDD recorder 200 discards the connection established in step 508. The TCP socket management unit 113 deletes the connection information 731 to 734 of the move-specific authentication information 730 (Step 602).
Thereafter, the control unit 112 of the DTV 100 deletes the move-dedicated content transfer TCP socket (step 603), and deletes the move-dedicated authentication TCP socket (step 604).

Finally, the control unit 112 of the DTV 100 sets the content transfer TCP socket released from the listening state in step 505 to the listening state, and makes it possible to receive a content transmission request from another device. Then, the TCP socket management unit 113 sets the listening permission information 721 to “start” (step 605).
With the above procedure, after the move is completed, a content viewing request from another AV device (for example, HDD recorder 200, DTV 300B) can be accepted while the content in DTV 100 is being viewed by DTV 300A.

  From the above, the content recording / playback apparatus of the present invention sets the authentication and content transfer TCP sockets to the listening state in order to realize the content viewing over the network, and is normally viewed from other devices on the network. Make requests available at any time. When a content move request is received, the listening state of the TCP socket for content transfer is canceled, and setting is made so as not to accept a view request other than the content transfer currently being viewed. A TCP socket for content transfer is generated and set to the listening state.

The TCP socket supports only requests from the move destination device, and discards all requests from other devices. Also, after accepting a request from the move destination device, the listening state of the TCP socket is released, and the socket is allowed to accept only a one-to-one connection until the move is completed.
When the move is completed, the TCP socket for content transfer is returned to the listening state so that a viewing request from another device can be handled again. The same means can be used not only for moving but also for content recording.
As a result, it is possible to prevent a network function from being disabled due to an excessive connection establishment request from another device or data transfer, and to safely record and move content via the network.

It is an example of 1 structure of the system which is embodiment of this invention. 1 is a block configuration example of a DTV with built-in HDD according to an embodiment of the present invention. 1 is a block configuration example of an HDD recorder according to an embodiment of the present invention. FIG. 5 is a sequence diagram illustrating a procedure for viewing content on a DTV with a built-in HDD according to an embodiment of the present invention on a DTV over an IP network. It is a sequence diagram which shows the move process execution procedure between HDD built-in DTV and HDD recorder which is embodiment of this invention. FIG. 5 is a sequence diagram showing a move process end procedure between the HDD built-in DTV and the HDD recorder according to the embodiment of the present invention. It is an example of 1 structure of the data managed by the TCP socket management part of HDD built-in DTV which is embodiment of this invention.

Explanation of symbols

10. Antenna 20 ... Ethernet (registered trademark)
30 ... Hub 100 ... HDD DTV
200 ... HDD recorder 300A, 300B ... DTV
104 ... Decoder 105, 201 ... Input processing unit 106, 202 ... Device authentication processing unit 107, 203 ... Recording / playback processing unit 108, 204 ... Encryption / decryption processing unit 109, 205 ... Communication processing unit 110, 206 ... HDD
111 ... Monitor 112, 207 ... Control unit 113, 208 ... TCP socket management unit 114, 209 ... Digital terminal

Claims (8)

A content recording / playback apparatus including a recording medium for recording and playing back content,
A recording unit for digitally recording content on the recording medium;
A playback unit for playing back the content recorded on the recording medium;
An output unit for outputting the content to another device connected to the IP network;
A device authentication processing unit that authenticates that the devices are mutually authorized with the other devices connected to the network, and shares a key used for encryption and decryption of the content;
An encryption / decryption processing unit that encrypts the content at the time of transmission using a key shared in the authentication processing unit and decrypts the content at the time of reception;
Control that generates and manages a communication connection for exchanging control commands, various data, and content with other devices connected to the network, and performs transfer control of content recorded on the recording medium over the communication connection And comprising
The controller is
Wherein generating the first TCP socket for receiving control commands from other devices, it has been set in a state capable of receiving a request from the other device,
It said generating a second TCP socket for receiving a content transfer request from another device has been set to a state capable of receiving a request from the other device,
When a communication connection is established with the other device via the first TCP socket and the content viewing request is received from the first device, information on the second TCP socket is received. To the device,
When the communication connection is established with the other device via the second TCP socket and the viewing content transfer request is received from the other device, the encryption / decryption processing unit is necessary. And encrypts the content and sends it through the output unit,
When the content move request is received from the other device via the first TCP socket, the first and second TCP sockets are different from the first and second TCP sockets. Information on the third TCP socket and the fourth TCP socket for content transfer used only when the move is executed,
A request from the other device for the first TCP socket is set to a non-receivable state, and a content transfer request other than a content transfer currently being executed is not accepted;
Create the third TCP socket and the fourth TCP socket, and set the request to be received from the other device,
A communication connection is established with the other device that has issued the move request via the third TCP socket, and a request from the other device for the third TCP socket is set to a reception disabled state. , Perform device authentication processing with the device authentication processing unit, share a key used for encryption and decryption of the content to be moved,
A communication connection is established with the other device that has issued the move request via the fourth TCP socket, and a request from the other device for the fourth TCP socket is set to a reception disabled state. When the transfer request for the content to be moved is received from the other device, the content is encrypted by the encryption / decryption processing unit using the shared key and sent via the output unit,
A content recording / playback apparatus for performing a move.   When a timer is started when the third TCP socket is created, and a communication connection cannot be established between the third TCP socket and the other device that has issued the move request within a predetermined time. 2. The content recording / reproducing apparatus according to claim 1, wherein the third TCP socket is deleted.   A timer is started when the fourth TCP socket is created, and a communication connection cannot be established between the fourth TCP socket and the other device that has issued the move request within a predetermined time. The content recording / reproducing apparatus according to claim 1, wherein the fourth TCP socket is deleted.   At the end of the move, after discarding the third TCP socket and the fourth TCP socket, the second TCP socket is always reset to a state in which a request from the other device can be received. The content recording / reproducing apparatus according to claim 1.   A content recording / playback method in a content recording / playback apparatus including a recording medium for recording and playing back content,
  A first TCP socket for receiving a control command from another device is generated and set to a state in which a request from the other device can be received;
  Generating a second TCP socket for receiving a content transfer request from the other device, and setting the second TCP socket so as to receive a request from the other device;
  When a communication connection is established with the other device via the first TCP socket and the content viewing request is received from the first device, information on the second TCP socket is received. To the device,
  When establishing a communication connection with the other device via the second TCP socket and receiving the viewing content transfer request from the other device, the encryption / decryption processing unit may Encrypt the content and send it,
  When the content move request is received from the other device via the first TCP socket, the first and second TCP sockets are different from the first and second TCP sockets. Information on the third TCP socket and the fourth TCP socket for content transfer used only when the move is executed,
  A request from the other device for the first TCP socket is set to a non-receivable state, and a content transfer request other than a content transfer currently being executed is not accepted;
Create the third TCP socket and the fourth TCP socket, and set the request to be received from the other device,
  A communication connection is established with the other device that has issued the move request via the third TCP socket, and a request from the other device for the third TCP socket is set to a reception disabled state. , Perform device authentication processing, share the key used to encrypt and decrypt the content to be moved,
  A communication connection is established with the other device that has issued the move request via the fourth TCP socket, and a request from the other device for the fourth TCP socket is set to a reception disabled state. When the transfer request for the content to be moved is received from the other device, the content is encrypted by the encryption / decryption processing unit using the shared key and sent via the output unit,
  A content recording / reproducing method characterized by executing a move.   When a timer is started when the third TCP socket is created, and a communication connection cannot be established between the third TCP socket and the other device that has issued the move request within a predetermined time. 6. The content recording / reproducing method according to claim 5, wherein the third TCP socket is deleted.   A timer is started when the fourth TCP socket is created, and a communication connection cannot be established between the fourth TCP socket and the other device that has issued the move request within a predetermined time. 7. The content recording / reproducing method according to claim 5, wherein the fourth TCP socket is deleted.   At the end of the move, after discarding the third TCP socket and the fourth TCP socket, the second TCP socket is always reset to a state in which a request from the other device can be received. The content recording / reproducing method according to claim 5, wherein:

Images