JP5347118B2 - Receiver management system - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a technology for easily determining whether a receiver is manufactured, permitted from a rights management and protection (RMP) center. <P>SOLUTION: A receiver management system 1 includes a receiver 2 having an RMP function for contents; a receiver maker device 3 for writing into the receiver 2 identification information, from which at least the machine type of the receiver 2 and a receiver maker which has manufactured the receiver 2 can be identified, and converted identification information; an RMP center device 4, which outputs the converted identification information written by the receiver maker device 3; and a scrambler 5 for scrambling the content. <P>COPYRIGHT: (C)2011,JPO&amp;INPIT

Description

  The present invention relates to a technique for determining whether or not a receiver is manufactured with permission of a rights protection management center.

  2. Description of the Related Art Conventionally, various techniques have been proposed for protecting the copyright of content in a digital broadcast receiver.

  In addition, this receiver is provided with copyright protection means, and a copy control signal is sent from a content provider such as a broadcasting station, so that copying of the content is prohibited, and only one generation (one time) copy of the content is copied. Copy control such as permission or permission of unlimited copying of content is performed. At this time, in order to ensure that the receiver manufacturer (hereinafter referred to as the receiver manufacturer) is provided with copyright protection means, the contents broadcast on the broadcasting station side are scrambled and the scramble is restored. An operation is disclosed in which confidential information (for example, related information decryption algorithm) is disclosed only to a receiver manufacturer that manufactures a receiver provided with copyright protection means (for example, see Non-Patent Document 1).

Japan Radio Industry Association (ARIB) technical data “terrestrial digital broadcasting operation rules” (ARIB TR-B14), Volume 8

  On the other hand, for example, a receiver (hereinafter referred to as an illegal receiver) that can copy content broadcasted as copy prohibition without limitation without providing copyright protection means is also manufactured. In such an unauthorized receiver, in order to descramble the scrambled content, secret information is required, and it is necessary to obtain this secret information by some method. As one of the methods, it is conceivable that the secret information disclosed to any one of the receiver manufacturers is illegally obtained and the secret information is installed in the illegal receiver. At this time, in order to clarify the illegal process, it is necessary to identify from which receiver manufacturer the secret information is leaked. However, since the same signal is transmitted to an unspecified number of receivers in the digital broadcast wave, secret information for descrambling this signal is common to all receivers. Therefore, since the same secret information is disclosed to any receiver maker, it is difficult to identify the leaking receiver maker from the leaked secret information itself.

  In addition, when legally cracking an unauthorized receiver, the copyright protection means is not provided in the receiver, and the content in which confidential information is implemented and scrambled in some way in the receiver. It is considered that just watching is not enough as the basis for this.

  Furthermore, as a method for disclosing and passing secret information to the receiver, there is a method using a tamper resistant device such as an IC card. However, with this method, the cost of the IC card and the cost of reissuing the IC card are also problematic. For this reason, if security problems can be solved, it is desired to disclose confidential information as software.

  Accordingly, an object of the present invention is to provide a technique for easily determining whether or not a receiver is manufactured with permission from a right protection management center.

  In order to solve the above-described problem, the receiver management system according to the first invention of the present application is an identification that can at least identify a receiver having a content right protection function, a receiver model, and a receiver manufacturer that manufactured the receiver. A receiver management system comprising: a receiver maker device that writes information and converted identification information to a receiver; and a rights protection management center device that outputs the converted identification information written by the receiver maker device. The maker device includes an identification information transmitting unit, a converted identification information receiving unit, and a writing unit, and the right protection management center device includes an identification information receiving unit, an identification information converting unit, a storage unit, and a converted unit. An identification information transmission unit, and the receiver includes an identification information storage unit and a converted identification information storage unit.

  According to this configuration, in the receiver management system, the receiver manufacturer device transmits the identification information to the right protection management center device by the identification information transmission unit. Further, the receiver manufacturer apparatus receives the converted identification information from the right protection management center apparatus by the converted identification information receiving unit. Then, the receiver manufacturer device writes the identification information and the converted identification information received by the converted identification information receiving unit in the receiver.

The receiver manufacturer is a receiver manufacturer.
The right protection management center is an organization that manages the copyright of content, and gives unique identification information after conversion to a receiver having a content right protection function. In other words, the right protection management center does not give post-conversion identification information to an unauthorized receiver that does not have a content right protection function. The right protection management center may be called an RMP (Rights Management and Protection) management center.

  Further, the right protection management center apparatus receives the identification information from the receiver manufacturer apparatus by the identification information receiving unit. Then, the right protection management center device performs a predetermined conversion process on the identification information received by the identification information receiving unit by the identification information conversion unit, and outputs the converted identification information.

  The conversion process is an arbitrary process that can convert certain information into another information, and includes, for example, an encryption process using a key and a one-way hash function.

  In addition, the right protection management center device stores correspondence information indicating the correspondence between the identification information and the converted identification information by the storage unit. Since this correspondence relationship information is stored, the right protection management center apparatus identifies not only the process that can restore the identification information from the converted identification information as in the encryption process, but also the identification from the converted identification information as in the one-way hash function. A process that cannot restore information can also be used as a conversion process. Further, the right protection management center device transmits the converted identification information output from the identification information conversion unit to the receiver manufacturer device by the converted identification information transmission unit.

  Further, the receiver stores the identification information by the identification information storage unit. And a receiver memorize | stores the identification information after conversion by the identification information storage part after conversion. Therefore, the receiver management system can determine whether or not the receiver is manufactured without receiving permission from the right protection management center by referring to the converted identification information stored in the receiver. Here, for example, if the receiver does not store the converted identification information, or if the converted identification information of the correspondence information does not match the converted identification information of the receiver, the receiver It can be determined that the receiver is an unauthorized receiver manufactured without permission from the protection management center.

  In the receiver management system according to the second invention of the present application, the right protection management center device searches the correspondence information using the identification information stored in the receiver as a search condition, and the searched identification after conversion. The information processing apparatus further includes a determination unit that determines whether or not the information matches the identification information after conversion stored in the receiver and outputs the determination result.

  According to such a configuration, in the receiver management system, when an illegal receiver having a copyright protection problem (for example, a receiver in which the content right protection function is not implemented) is found, the receiver It is possible to determine whether or not the product has been manufactured with permission of the protection management center without manual intervention.

  Further, the receiver management system according to the third invention of the present application includes a concealment information receiving unit in which the right protection management center device receives concealment information used for concealment from the receiver maker device, and the receiver maker. A secret information concealment unit that conceals secret information that descrambles the content using the concealment information and outputs concealed secret information that is the concealed secret information; A secret information transmitting unit that transmits the concealed secret information output from the secret information concealing unit to the receiver maker device, wherein the receiver maker device includes the concealment information and the concealment information. A concealment information generating unit that generates concealment release information for releasing concealment using the concealment information, and the concealment information generated by the concealment information generation unit to the right protection management center device The confidential information transmitting unit that receives the confidential information that has been concealed from the right protection management center device, the secret information receiving unit that receives the confidential information, and the secret information receiving unit that has received the confidential information. A secret information concealment release unit that releases the concealment of the concealed secret information and outputs the secret information, and the writing unit further outputs the secret output from the secret information concealment release unit The information is written in the receiver, and the receiver receives the secret information storage unit for storing the secret information and the scrambled content and uses the secret information to descramble the content. And a rambler.

According to such a configuration, in the receiver management system, the descrambled content can be viewed on the receiver.
Concealment is a process that makes it impossible for a third party to identify the content of certain information, for example, encryption using a key. The release of concealment is a process for restoring the concealed information to the original information, for example, decryption using a key.

  Further, in the receiver management system according to the fourth invention of the present application, in the receiver maker apparatus, the concealment information generation unit generates a public key in a public key cryptosystem as the concealment information, and the concealment As release information, a secret key in the public key cryptosystem is generated. According to such a configuration, in the receiver management system, the secret information cannot be released unless the secret key stored in the receiver manufacturer apparatus is used.

  Further, in the receiver management system according to the fifth invention of the present application, in the receiver maker apparatus, the concealment information generation unit uses a common key in a common key cryptosystem as the concealment information and the concealment release information. It is characterized by generating. According to such a configuration, in the receiver management system, the concealment of the secret information cannot be released unless the common key stored in the right protection management center apparatus or the receiver manufacturer apparatus is used.

  The receiver management system according to the sixth aspect of the present invention further includes a conversion information generation unit that generates conversion information for converting the identification information into the converted identification information in the right protection management center apparatus. The identification information conversion unit converts the identification information using the conversion information by the conversion process that cannot be referred to from the outside other than the right protection management center apparatus.

  According to this configuration, in the receiver management system, the conversion information generation unit generates, for example, a pseudo random number as the conversion information. Then, for example, the identification information conversion unit concatenates this pseudo random number to the identification information, and then performs conversion processing using a hash function. Thereby, in the receiver management system, even if the conversion process used by the right protection management center apparatus leaks, it is difficult to forge the post-conversion identification information if the conversion information does not leak. The right protection management center apparatus secretly manages what conversion processing is used so that it cannot be referred to from the outside including the receiver manufacturer.

  In the receiver management system according to the seventh aspect of the present invention, the secret information storage unit stores the secret information to which a receiver manufacturer identifier that can identify the receiver manufacturer is added. According to this configuration, when the secret information is stolen, the receiver can identify which receiver manufacturer has stolen the secret information by referring to the secret information.

According to the present invention, the following excellent effects can be obtained.
According to the first invention of the present application, it is possible to easily determine whether or not the receiver is manufactured without receiving permission from the right protection management center.
According to the second aspect of the present invention, it is possible to determine whether or not the receiver is manufactured with the permission of the right protection management center without relying on the manual.
According to the third aspect of the present invention, the descrambled content can be viewed on the receiver.

  According to the fourth aspect of the present invention, if the secret key stored in the receiver maker apparatus is not used, the confidential information cannot be released and the possibility of leakage of the secret information can be further reduced. Further, according to the fourth aspect of the present invention, it is possible to specify that the secret information is information sent from the right protection management center to the receiver manufacturer.

According to the fifth invention of the present application, if the common key stored in the right protection management center apparatus or the receiver manufacturer apparatus is not used, the confidential information cannot be released, and there is a possibility that the confidential information may leak in a simpler manner. Can be reduced.
According to the sixth aspect of the present invention, forgery of the conversion identification information can be made difficult.
According to the seventh aspect of the present invention, it is possible to identify which receiver manufacturer has stolen the secret information only by referring to the stolen secret information.

It is a block diagram which shows the structure of the receiver management system which concerns on embodiment of this invention. It is a flowchart which shows operation | movement of the receiver maker apparatus of FIG. 3 is a flowchart showing an operation of the RMP management center apparatus of FIG.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings as appropriate. In each embodiment, means having the same function are denoted by the same reference numerals and description thereof is omitted.

[Outline of receiver management system]
Hereinafter, an outline of a receiver management system according to an embodiment of the present invention will be described with reference to FIG. The receiver management system 1 is a system that determines whether or not each receiver 2 manufactured by a receiver maker is manufactured with permission from an RMP management center (right protection management center). As shown in FIG. 1, the receiver management system 1 includes a receiver 2, a receiver manufacturer apparatus 3, an RMP management center apparatus (right protection management center apparatus) 4, and a scrambler 5. In FIG. 1, one receiver 2 and one receiver maker device 3 are illustrated for explanation, but a plurality of receivers may be provided.

  Hereinafter, a specific example of the receiver management system 1 will be described. In this example, the secret information is an encryption decryption algorithm used when the scramble key used for scrambling is transmitted to the receiver 2. Note that the technical method for transmitting the scramble key to the receiver 2 is, for example, the method specified in Part 1 of the Radio Industry Association (ARIB) standard “Access Control Method for Digital Broadcasting” (ARIB STD-B25). Since it is general, description is omitted. Here, the above-described secret information corresponds to an algorithm for encrypting the “related information” in the above-mentioned standard and information related to a key used for this algorithm. Is described. This related information decryption algorithm is, for example, built in an IC card or the like and managed in a secret manner in the method prescribed in the standard.

  In this example, the concealment is encryption by a public key cryptosystem. Therefore, the concealment information (concealment in FIG. 1) becomes a public key in the public key cryptosystem, and the deciphering information (decryption in FIG. 1) becomes a secret key in the public key cryptosystem. Furthermore, in this example, the predetermined conversion process is a hash function.

  First, a receiver manufacturer who desires to manufacture the receiver 2 applies to the RMP management center for disclosure of a related information decryption algorithm (secret information). In this case, the receiver manufacturer transmits a secret information disclosure application to be described later to the RMP management center apparatus 4 using the receiver manufacturer apparatus 3. This is because, unless this secret information is installed in the receiver 2, the scrambled content cannot be descrambled and the content cannot be reproduced by the receiver 2.

  At this time, the receiver manufacturer transmits the identification information to the RMP management center apparatus 4 using the receiver manufacturer apparatus 3. This identification information includes information necessary for operating the receiver management system 1 (for example, a receiver 2 manufactured with permission from the RMP management center and a receiver manufactured without receiving permission). And information used for determination from the outside of the receiver), and includes at least information for identifying the model of the receiver 2 and the receiver manufacturer that manufactured the receiver 2. Further, this identification information is preferably associated with information such as a manufacturing number and a serial number indicated on the nameplate of the receiver 2.

  Further, since the related information decryption algorithm is not leaked to anyone other than the receiver manufacturer, it is necessary to encrypt (conceal) it and transmit it to the receiver manufacturer apparatus 3. Therefore, the receiver manufacturer apparatus 3 transmits a public key (confidential information) to the RMP management center apparatus 4 when applying for disclosure of the related information decryption algorithm.

  Then, the RMP management center device 4 performs a calculation by a hash function (conversion process) on the transmitted identification information when applying for disclosure of the related information decoding algorithm. Thereafter, the RMP management center device 4 transmits post-conversion identification information that is the result of the conversion processing to the receiver manufacturer device 3. In addition, the related information decryption algorithm is encrypted using the unique public key for each receiver manufacturer (confidential secret information), and this is transmitted to the receiver manufacturer apparatus 3.

  Further, the receiver manufacturer device 3 decrypts the related information decryption algorithm transmitted from the RMP management center device 4 with the secret key (decryption information) stored in the receiver manufacturer device 3. Then, the receiver manufacturer device 3 writes the identification information, the converted identification information, and the decoded related information decoding algorithm in the receiver 2. In this case, the receiver maker apparatus 3 writes this in the receiver 2 in a state where it is transmitted from the RMP management center apparatus 4 without making any change to the converted identification information.

  As a result, when a problematic receiver 2 is found in the content right protection function, the RMP management center compares the identification information of the receiver 2 with the converted identification information stored in the receiver 2. . For example, if these pieces of information do not match, it can be easily determined that the receiver 2 is an unauthorized receiver manufactured without permission from the right protection management center.

[Receiver configuration]
Hereinafter, the configuration of the receiver will be described.
The receiver 2 receives and reproduces content via a digital broadcast wave and has a content right protection function. As shown in FIG. 1, the receiver 2 includes an identification information storage unit 21, a post-conversion identification information storage unit 22, a secret information storage unit 23, a descrambler 24, and a content right protection unit 25.

The identification information storage unit 21 is, for example, a memory such as a ROM (Read Only Memory) or a RAM (Random Access Memory) that stores identification information, or a hard disk.
The post-conversion identification information storage unit 22 is, for example, a memory such as a ROM or a RAM that stores post-conversion identification information, or a hard disk. Note that the post-conversion identification information storage unit 22 may have tamper resistance in order to prevent the post-conversion identification information from leaking outside.
The secret information storage unit 23 is, for example, a memory such as a ROM or a RAM that stores a related information decryption algorithm (secret information), or a hard disk. The secret information storage unit 23 may have tamper resistance in order to prevent the related information decryption algorithm from leaking to the outside.

  The descrambler 24 receives scrambled content via a digital broadcast wave. Then, the descrambler 24 reads the related information decryption algorithm stored in the secret information storage unit 23 and descrambles this content. Then, the descrambler 24 outputs the descrambled content to the content right protection unit 25.

  Here, the descrambler 24 may add the identification information or the converted identification information to the content output from the receiver 2. For example, the descrambler 24 adds the identification information or the converted identification information to the header area of the content, or adds the identification information or the converted identification information to the content as a digital watermark. In this case, when the identification information or the converted identification information is not added to the content, it can be said that the content is output from the unauthorized receiver. That is, by this, the receiver management system 1 can determine the unauthorized content output from the unauthorized receiver by the content itself.

  The content right protection unit 25 outputs the content from the descrambler 24 to a display device (not shown) and has a right protection function for the content. Here, the content right protection unit 25, for example, as a content right protection function, prohibits copying of content, permits copying of only one generation (one time) of content, or permits unlimited copying of content. Copy control is performed.

  Note that the receiver 2 may include an identification information confirmation function that allows the identification information stored in the identification information storage unit 21 to be confirmed externally. For example, the receiver 2 includes an identification information display unit that displays the identification information stored in the identification information storage unit 21 or an identification information output terminal that outputs a signal indicating the identification information to a display device (not shown).

[Configuration of receiver manufacturer equipment]
Hereinafter, the configuration of the receiver manufacturer apparatus 3 will be described.
The receiver manufacturer device 3 writes the identification information, the converted identification information, and the secret information in the receiver 2. As shown in FIG. 1, the receiver manufacturer apparatus 3 includes a secret information disclosure transmission unit 31, an identification information transmission unit 32, a concealment information generation unit 33, a concealment information transmission unit 34, and a converted identification information reception. Unit 35, secret information receiving unit 36, secret information concealment canceling unit 37, and writing unit 38.

  The secret information disclosure transmitting unit 31 transmits a secret information disclosure application to the RMP management center apparatus 4 via a network, for example. This secret information disclosure application is information indicating that the receiver manufacturer has applied for disclosure of the related information decoding algorithm to the RMP management center, and includes information for identifying the receiver manufacturer, for example.

  The receiver manufacturer device 3 does not have to include the secret information disclosure transmission unit 31. In this case, the receiver manufacturer applies to the RMP management center for disclosure of the related information decoding algorithm by means such as telephone or FAX.

  The identification information transmission unit 32 transmits the identification information to the RMP management center apparatus 4 via the network. At this time, the identification information transmission unit 32 outputs the identification information to the writing unit 38. Here, as described above, the identification information includes at least information capable of identifying the model of the receiver 2 and the receiver manufacturer that manufactured the receiver 2, and is set in advance by the receiver manufacturer, for example.

  The concealment information generation unit 33 generates a public key (concealment information) and a secret key (concealment release information) by a public key cryptosystem. Here, the concealment information generation unit 33 generates a public key and a secret key using, for example, an RSA (Rivest Shamir Adleman) encryption method as a public key encryption method. Specifically, the concealment information generation unit 33 generates two prime numbers p and q using a pseudo-random number generator (not shown), and obtains a value N obtained by multiplying them. Further, the concealment information generation unit 33 obtains the least common multiple L of the prime number p-1 and the prime number q-1. Then, the concealment information generation unit 33 obtains a value E that is greater than 1 and smaller than the least common multiple L and that the greatest common divisor with the least common multiple L is 1. Furthermore, the concealment information generation unit 33 obtains a value D that is larger than 1 and smaller than the value E and satisfies the following formula (1). Through the above calculation, the concealment information generation unit 33 generates a public key (E, N) and a secret key (D, N) that form a key pair.

  E × D mod L = 1 Expression (1)

  Then, the concealment information generation unit 33 outputs the generated public key to the concealment information transmission unit 34, and outputs the generated secret key to the secret information concealment release unit 37.

  The concealment information transmission unit 34 transmits the public key from the concealment information generation unit 33 to the RMP management center device 4 via the network.

  The post-conversion identification information receiving unit 35 receives post-conversion identification information from the RMP management center device 4 via the network. Then, the post-conversion identification information receiving unit 35 outputs the received post-conversion identification information to the writing unit 38. Details of the conversion process by the RMP management center apparatus 4 will be described later.

  The secret information receiving unit 36 receives the encrypted related information decryption algorithm (confidential secret information) from the RMP management center apparatus 4 via the network. This related information decryption algorithm is encrypted by the RMP management center apparatus 4 using the public key transmitted by the concealment information transmission unit 34. Then, the secret information receiving unit 36 outputs the encrypted related information decryption algorithm to the secret information concealment release unit 37.

  The secret information concealment release unit 37 uses the secret key (concealment release information) from the concealment information generation unit 33 to decrypt the related information decryption algorithm from the secret information reception unit 36 (cancel the concealment). Then, the secret information anonymization releasing unit 37 outputs the decrypted related information decoding algorithm to the writing unit 38.

  The writing unit 38 writes the identification information from the identification information transmitting unit 32 in the identification information storage unit 21. The writing unit 38 writes the post-conversion identification information from the post-conversion identification information receiving unit 35 into the post-conversion identification information storage unit 22. At this time, the writing unit 38 writes the converted identification information in the converted identification information storage unit 22 without any change. Further, the writing unit 38 writes the related information decryption algorithm from the secret information deciphering release unit 37 into the secret information storage unit 23.

  In the writing unit 38, the timing for writing the identification information, the converted identification information, and the related information decoding algorithm is not particularly limited. Usually, the writing unit 38 writes them when the receiver 2 is manufactured.

[Configuration of RMP management center device]
Hereinafter, the configuration of the RMP management center apparatus 4 will be described.
For example, the RMP management center device 4 transmits the related information decoding algorithm and the converted identification information to the receiver manufacturer device 3 that has transmitted the secret information disclosure application. As shown in FIG. 1, the RMP management center device 4 includes storage units 40 and 41, an identification information receiving unit 42, a conversion information generating unit 43, a concealment information receiving unit 44, and an identification information converting unit 45. The post-conversion identification information transmission unit 46, the secret information concealment unit 47, the secret information transmission unit 48, and the determination unit 49 are provided. The RMP management center device 4 corresponds to the right protection management center device described in the claims.

  The storage unit 40 is, for example, a memory such as a ROM or a RAM that stores related information decoding algorithms, or a hard disk. In this case, the related information decoding algorithm is stored in the storage unit 40 in advance by the system administrator, for example. Here, when transmitting the related information decoding algorithm to the receiver manufacturer, it is preferable to add a receiver manufacturer identifier that can identify the receiver manufacturer. For example, in the related information decoding algorithm, a receiver manufacturer identifier is added to the transmission signal.

  The configuration of the transmission signal of the related information decoding algorithm may be different for each receiver manufacturer, and may not be particularly defined. When the scrambler 5 described later refers to the related information decryption algorithm in the storage unit 40, the related information decryption algorithm is used for encryption of the scramble key.

  The storage unit 41 is, for example, a memory such as a ROM or a RAM that stores correspondence information (correspondence in FIG. 1), or a hard disk. This correspondence information is information in which identification information is associated with identification information after conversion. The correspondence information is referred to by the determination unit 49 described later.

  The identification information receiving unit 42 receives identification information from the receiver manufacturer apparatus 3 via the network. Then, the identification information receiving unit 42 outputs the received identification information to the identification information converting unit 45.

  For example, the conversion information generation unit 43 generates a pseudo random number as the conversion information. In this case, the conversion information generation unit 43 is a pseudo random number generator. Then, the conversion information generation unit 43 outputs the generated pseudo random number to the identification information conversion unit 45. When the identification information conversion unit 45 applies the hash function as it is to the identification information, that is, when the conversion information is not necessary, the RMP management center device 4 may not include the conversion information generation unit 43.

  The concealment information receiving unit 44 receives a public key from the receiver manufacturer device 3 via the network. Then, the concealment information reception unit 44 outputs the received public key to the secret information concealment unit 47.

  The identification information conversion unit 45 applies, for example, hash functions (conversion processing) such as SHA (Secure Hash Algorithm) -1, SHA-2, MD (Message Digest) 2 to 5 to the identification information from the identification information receiving unit 42. ) And the hash value can be used as post-conversion identification information. Then, the identification information converting unit 45 outputs the converted identification information to the converted identification information transmitting unit 46. At this time, the identification information conversion unit 45 generates correspondence information in which the identification information is associated with the converted identification information obtained by converting the identification information, and stores the correspondence information in the storage unit 41.

For example, the identification information conversion unit 45 can perform a hash operation as follows.
First example of hash operation: applying hash function to identification information as it is Second example of hash operation: applying hash function after connecting identification information and pseudo-random number

  In the first example of the hash calculation, it is not necessary to generate a pseudo-random number, and the calculation amount of the RMP management center device 4 can be reduced. However, as described above, in the first example of the hash calculation, if the hash function used by the identification information conversion unit 45 leaks to the outside including the receiver manufacturer, the converted identification information is easily forged. End up.

  Therefore, in the second example of the hash calculation, for example, the hash function is applied after concatenating the pseudorandom numbers from the conversion information generating unit 43 at the beginning or end of the identification information. That is, in the second example of the hash operation, even if the hash function used by the identification information conversion unit 45 leaks, it is difficult to forge the post-conversion identification information if the pseudo random number linked to the identification information does not leak. . The identification information conversion unit 45 may use either the first example or the second example of the hash calculation described above. In the above description, the hash operation is used as the conversion process. However, the present invention is not limited to the hash operation, and any encryption algorithm can be used.

Here, it is desirable that the specific algorithm of the conversion process is not an existing method. That is, when the conversion processing algorithm is known to the manufacturer of the unauthorized receiver, post-conversion identification information can be generated from the identification information. Therefore, it is important that this conversion processing cannot be referenced from outside the RMP management center device 4. It is. As this method, for example, an administrator who is responsible for the RMP management center creates an algorithm for performing the conversion process, and this algorithm is installed in the identification information conversion unit 45 so that only an administrator can access it. As another method, for example, there is a method in which the creator or administrator who created the algorithm does not execute the conversion process unless the password set by the person is used.

  The post-conversion identification information transmission unit 46 transmits the post-conversion identification information from the identification information conversion unit 45 to the receiver manufacturer apparatus 3 via the network.

  The secret information concealment unit 47 reads the related information decryption algorithm from the storage unit 40. Further, the secret information concealment unit 47 encrypts (conceals) the read related information decryption algorithm using the public key from the concealment information reception unit 44. Then, the secret information concealment unit 47 transmits the encrypted related information decryption algorithm (confidential secret information) to the secret information transmission unit 48.

  The secret information transmission unit 48 transmits the encrypted related information decryption algorithm from the secret information concealment unit 47 to the receiver manufacturer apparatus 3 via the network. As a method for transmitting the encrypted related information decryption algorithm from the RMP management center device 4 to the receiver manufacturer device 3, for example, a storage medium such as various memories may be used, and the method is not limited to the network. .

  The determination unit 49 receives the identification information stored in the receiver 2 and the converted identification information. Then, the determination unit 49 searches the correspondence information stored in the storage unit 41 using the input identification information as a search condition. Then, the determination unit 49 determines whether or not the converted identification information retrieved from the correspondence information matches the converted identification information stored in the receiver 2.

  Here, the determination part 49 outputs the determination result of a coincidence when both the converted identification information coincides. On the other hand, the determination unit 49 outputs a determination result of disagreement when both pieces of post-conversion identification information do not match or when post-conversion identification information satisfying the search condition is not stored in the correspondence information. That is, if the determination unit 49 outputs a determination result indicating that they do not match, it can be said that the receiver 2 was manufactured without permission from the right protection management center.

[Structure of scrambler]
The scrambler 5 receives content and a scramble key. The scrambler 5 scrambles the content using this scramble key. Thereafter, the scrambled content is transmitted to the receiver 2 via a digital broadcast wave. In the example of FIG. 1, the scrambler 5 is arranged at the broadcasting station, but the RMP management center device 4 may be configured to include the scrambler 5.

  As described above, this scramble key is pre-encrypted as related information in accordance with, for example, the method defined in Part 1 of the Radio Industry Association (ARIB) standard “Access Control Method in Digital Broadcasting”. It is transmitted to the receiver 2. At this time, the secret information stored in the storage unit 40 is used to encrypt the related information.

[Operation of receiver manufacturer equipment]
Hereinafter, the operation of the receiver manufacturer apparatus 3 will be described with reference to FIG. 2 (see FIG. 1 as appropriate). In FIG. 2, the secret information disclosure application will be described as having been transmitted. First, the receiver manufacturer apparatus 3 writes the identification information in the identification information storage unit 21 by the writing unit 38 (step S1).

  Subsequent to the process of step S1, the receiver manufacturer apparatus 3 transmits the identification information to the RMP management center apparatus 4 by the identification information transmission unit 32 (step S2). In addition, the receiver manufacturer apparatus 3 uses the concealment information generation unit 33 to generate a public key (concealment information) and a secret key (concealment release information) using a public key cryptosystem (step S3). .

  Subsequent to the processing in step S3, the receiver manufacturer apparatus 3 transmits the public key (confidential information) generated in step S3 to the RMP management center apparatus 4 by the concealment information transmission unit 34 (step S4). Further, the receiver manufacturer apparatus 3 receives the converted identification information from the RMP management center apparatus 4 by the converted identification information receiving unit 35 (step S5).

  Subsequent to the processing in step S5, the receiver manufacturer device 3 receives the encrypted related information decryption algorithm (confidential secret information) from the RMP management center device 4 by the secret information receiving unit 36 (step S6). ).

  Subsequent to the processing in step S6, the receiver manufacturer apparatus 3 uses the secret key (decryption release information) generated in step S3 by the secret information deconcealment release unit 37 to receive the related information decryption algorithm received in step S6. Is decrypted (decryption is released) (step S7).

  Subsequent to the processing in step S7, the receiver manufacturer apparatus 3 uses the writing unit 38 to identify the post-conversion identification information received in step S5 and the related information decryption algorithm (secret information) decrypted in step S7. The information is written in the information storage unit 22 and the secret information storage unit 23 (step S8).

  In FIG. 2, the processing of each step is illustrated in order for the sake of explanation, but the present invention is not limited to this. For example, in FIG. 2, the process of step S2 and the process of step S4 can be performed simultaneously, and the process of step S1 and the process of step S8 can be performed simultaneously.

[Operation of RMP management center device]
Hereinafter, the operation of the RMP management center apparatus 4 will be described with reference to FIG. 3 (see FIG. 1 as appropriate). Note that the determination process by the determination unit 49 can be performed at any timing as long as it is after the process of step S16, and thus illustration thereof is omitted.

  First, the RMP management center device 4 receives identification information from the receiver manufacturer device 3 by the identification information receiving unit 42 (step S10).

  Following the processing in step S10, the RMP management center apparatus 4 converts the identification information received in step S10 by the identification information conversion unit 45 using a hash function (conversion processing) (step S11). At this time, the RMP management center device 4 generates the conversion information (pseudorandom number) by the conversion information generation unit 43, and uses the pseudorandom number by the identification information conversion unit 45 to perform the hash function (conversion processing). It may be applied.

  Following the processing of step S11, the RMP management center apparatus 4 generates correspondence information by associating the identification information with the converted identification information obtained by converting the identification information by the identification information conversion unit 45, It memorize | stores in the memory | storage part 41 (step S12).

  Following the processing in step S12, the RMP management center device 4 transmits the converted identification information converted in step S11 to the receiver manufacturer device 3 by the converted identification information transmitting unit 46 (step S13).

  Following the processing of step S13, the RMP management center device 4 receives the public key (confidential information) from the receiver manufacturer device 3 by the concealment information receiving unit 44 (step S14). Further, the RMP management center device 4 encrypts (conceals) the related information decryption algorithm (secret information) using the public key received in step S14 (step S15).

  Following the processing in step S15, the RMP management center device 4 transmits the related information decryption algorithm (the concealed secret information) encrypted in step S15 to the receiver manufacturer device 3 (step S16).

  In FIG. 3, the process of each step is illustrated sequentially for the sake of explanation, but it is not limited to this as in FIG. 2.

  As described above, in the receiver management system 1 according to the embodiment of the present invention, when a receiver 2 having a copyright protection problem is found by referring to the converted identification information stored in the receiver 2. It is possible to easily determine whether or not the receiver 2 has been manufactured with permission from the right protection management center. As a result, the receiver management system 1 can easily target a business operator who has manufactured or sold the receiver 2 without permission from the rights protection management center.

  For example, consider a case where the confidential information disclosed to the receiver manufacturer is illegally obtained and installed in the receiver 2. In this case, the receiver 2 can view the content, but since the identification information and the converted identification information do not match, it is determined as an unauthorized receiver. If the identification information and the converted identification information match, this unauthorized receiver is a complete imitation of the receiver 2 manufactured with the permission of the rights protection management center. But it can be punished.

  Furthermore, for example, consider a case where confidential information common to all receiver manufacturers and all models disclosed to each receiver manufacturer is illegally obtained and mounted on the receiver 2. In this case, post-conversion identification information can only be generated by the RMP management center device 4 and therefore cannot be implemented in the receiver 2. Accordingly, the receiver 2 can view the content, but the identification information and the converted identification information do not match, so that the receiver 2 is determined to be an unauthorized receiver.

  The receiver management system 1 encrypts the related information decryption algorithm (secret information) with the public key (confidential information) generated by the receiver manufacturer apparatus 3 and transmits it. For this reason, in the receiver management system 1, in order to prevent leakage of the related information decryption algorithm, the receiver maker securely secures the private key corresponding to the public key transmitted to the RMP management center device 4. Take responsibility for managing. On the other hand, the RMP management center device 4 generates post-conversion identification information using a conversion process that even the receiver manufacturer does not know, and transmits this to the receiver manufacturer device 3. For this reason, in the receiver management system 1, the RMP management center is responsible for safely managing the conversion process of the identification information. Therefore, in the receiver management system 1, both the receiver manufacturer and the RMP management center are responsible, and the receiver management system 1 can be smoothly introduced.

(Modification 1)
Hereinafter, returning to FIG. 1, Modifications 1 to 3 in the receiver management system 1 according to the embodiment of the present invention will be sequentially described. In Modifications 1 to 3, differences from the receiver management system 1 in FIG. 1 will be described.

  In the first modification, the concealment information generation unit 33 generates concealment information (common key) and concealment release information (common key) by a common key encryption method instead of the public key encryption method. Here, the concealment information generation unit 33 includes a common key encryption method such as DES (Data Encryption Standard), Triple DES, AES (Advanced Encryption Standard), or the like. Then, the concealment information transmission unit 34 transmits this common key to the RMP management center apparatus 4 as concealment information.

  Also, the secret information concealment unit 47 encrypts the related information decryption algorithm using this common key. That is, in the receiver management system 1 according to the first modification, the arithmetic processing can be reduced as compared with the public key cryptosystem, but the same common key is used by the RMP management center and the receiver manufacturer.

(Modification 2)
In the second modification, the identification information conversion unit 45 encrypts the identification information using the public key instead of the hash function. That is, the identification information conversion unit 45 performs encryption by a public key cryptosystem as the conversion process.

  Specifically, the conversion information generation unit 43 generates a public key as conversion information by a public key cryptosystem such as RSA. Then, the identification information conversion unit 45 encrypts the identification information (conversion process) using the public key generated by the conversion information generation unit 43. Since the secret key generated by the conversion information generating unit 43 is not necessary, the RMP management center device 4 may delete this secret key.

(Modification 3)
In the third modification, the identification information converting unit 45 encrypts the identification information using a common key instead of the hash function. That is, the identification information conversion unit 45 performs encryption by a common key encryption method as the conversion process.

  Specifically, the conversion information generation unit 43 generates a common key as conversion information. Then, the identification information conversion unit 45 encrypts the identification information (conversion process) using the common key generated by the conversion information generation unit 43.

  Here, the conversion information generation unit 43 may add algorithm specifying information for specifying the common key encryption algorithm in the identification information conversion unit 45 to the conversion information. The identification information conversion unit 45 may include a plurality of common key encryption algorithms such as DES, triple DES, and AES. In this case, the identification information conversion unit 45 encrypts the identification information (conversion process) using the common key as the conversion information by the common key encryption algorithm indicated by the algorithm designation information. In the receiver management system 1 according to the third modification, not only the common key but also the common key encryption algorithm can be changed during operation, and it becomes difficult to forge the converted identification information. Note that the algorithm designation information is preset by a system administrator, for example.

DESCRIPTION OF SYMBOLS 1 Receiver management system 2 Receiver 21 Identification information storage part 22 Post-conversion identification information storage part 23 Secret information storage part 24 Descrambler 25 Content right protection part 3 Receiver maker apparatus 31 Secret information disclosure transmission part 32 Identification information transmission part 33 Concealment Information Generation Unit 34 Concealment Information Transmission Unit 35 Post-conversion Identification Information Reception Unit 36 Secret Information Reception Unit 37 Secret Information Concealment Release Unit 38 Write Unit 4 RMP Management Center Device 40 Storage Unit 41 Storage Unit 42 Identification Information Reception Unit 43 Conversion information generation unit 44 Concealment information reception unit 45 Identification information conversion unit 46 Post-conversion identification information transmission unit 47 Secret information concealment unit 48 Secret information transmission unit 49 Determination unit 5 Scrambler

Claims (7)

Receiver manufacturer apparatus that writes at least identification information that can identify a receiver having a content right protection function, a model of the receiver, and a receiver manufacturer that manufactures the receiver, and converted identification information to the receiver And a rights protection management center device that outputs the converted identification information written by the receiver manufacturer device, and a receiver management system comprising:
The receiver maker device is:
An identification information transmitting unit for transmitting the identification information to the right protection management center device;
A post-conversion identification information receiving unit that receives the post-conversion identification information from the right protection management center device;
A writing unit that writes the identification information and the converted identification information received by the converted identification information receiving unit to the receiver;
The right protection management center device includes:
An identification information receiving unit for receiving the identification information from the receiver manufacturer device;
An identification information conversion unit that performs a predetermined conversion process on the identification information received by the identification information reception unit and outputs the converted identification information;
A storage unit that stores correspondence information indicating the correspondence between the identification information and the converted identification information;
A post-conversion identification information transmission unit that transmits the post-conversion identification information output by the identification information conversion unit to the receiver maker device, and
The receiver
An identification information storage unit for storing the identification information;
A post-conversion identification information storage unit for storing the post-conversion identification information;
A receiver management system comprising: The right protection management center device includes:
The correspondence information is searched using the identification information stored in the receiver as a search condition, and it is determined whether or not the searched converted identification information matches the converted identification information stored in the receiver. The receiver management system according to claim 1, further comprising a determination unit that outputs the determination result. The right protection management center device includes:
A concealment information receiving unit that receives concealment information used for concealment from the receiver manufacturer device;
Secret information concealment that is common to the receiver manufacturer and that conceals secret information using the concealment information and outputs concealed secret information that is the concealed secret information. And
A secret information transmitting unit that transmits the concealed secret information output by the secret information concealing unit to the receiver maker device;
The receiver maker device is:
A concealment information generating unit for generating the concealment information and the deconcealment release information for canceling the concealment using the concealment information;
A concealment information transmission unit for transmitting the concealment information generated by the concealment information generation unit to the right protection management center device;
A secret information receiving unit that receives the concealed secret information from the right protection management center device;
A secret information deciphering unit that releases the concealment of the concealed secret information received by the secret information reception unit using the deconcealment information and outputs the secret information; and
The writing unit further writes the secret information output by the secret information decontamination unit to the receiver;
The receiver
A secret information storage unit for storing the secret information;
A descrambler that descrambles the content using the secret information and the scrambled content is input;
The receiver management system according to claim 1, further comprising: The receiver maker device is:
The concealment information generation unit generates a public key in a public key cryptosystem as the concealment information, and generates a secret key in the public key cryptosystem as the deciphering information. The receiver management system according to claim 3. The receiver maker device is:
4. The receiver management system according to claim 3, wherein the concealment information generation unit generates a common key in a common key cryptosystem as the concealment information and the concealment release information. The right protection management center device includes:
A conversion information generating unit for generating conversion information for converting the identification information into the converted identification information;
The identification information conversion unit converts the identification information by the conversion process that cannot be referred to from outside the right protection management center device by using the conversion information. The receiver management system according to any one of the above. The receiver
The receiver according to any one of claims 3 to 6, wherein the secret information storage unit stores the secret information to which a receiver manufacturer identifier that can identify the receiver manufacturer is added. Management system.

Images