JPH0946334A - Information processor and method therefor - Google Patents

Abstract

PROBLEM TO BE SOLVED: To suppress the use of an unauthorized security module by outputting information to be the base of a judging means to a processing means. SOLUTION: A decoder 31 successively outputs a security module certification command and a value N to a security module 32. The module 32 applies previously determined prescribed operation to the inputted value N and returs its operation result E(N) to the decoder 31. The decoder 31 judges whether the operation result E(N) is correct or not (whether the security module 32 is authorized or not).

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an information processing device and method, and more particularly to an information processing device and method for suppressing the use of an unauthorized device.

[0002]

2. Description of the Related Art In pay broadcasting, a broadcasting system called scramble broadcasting is often used. In this scrambled broadcasting, the broadcasting station side intentionally disturbs (scrambles) the original signal by a predetermined method,
Even if a person who does not have a contract with a broadcasting station receives a broadcast, normal images, sound, data, and the like cannot be used.

That is, a key signal for descrambling this is given to the decoder of the person who has contracted with the broadcasting station, and the data scrambled by the decoder is descrambled to the original form by this key signal. We are able to obtain normal images, sounds, and data.

Of the contracts for viewing pay broadcasting, the case of contracting on a channel-by-channel basis is called flat, and the case of being charged according to the program viewed is called pay-per-view. Of the pay-per-view, if the viewer suddenly wants to watch a certain program, he / she can watch it by performing a predetermined operation.
Those that do not require prior contact are called impulse pay-per-view, and those that require prior contact are called call-ahead pay-per-view.

As described above, in order to descramble the scrambled broadcast, the key signal is required. In a conventional scrambler, the key signal is stored in an IC card, the IC card is attached to a decoder that descrambles (decodes) the scrambled broadcast, and the key signal is supplied from the IC card to the decoder. I try to descramble scrambled broadcasts.

[0006]

However, when the IC card is mounted on the decoder and the descrambling process is executed as described above, a non-licensed IC card is manufactured, which is not an authorized IC card. If such an IC card is attached to a regular decoder and a viewer does not have a viewing contract, there is a risk that the scrambled broadcast may be viewed illegally.

The present invention has been made in view of such a situation, and suppresses unauthorized viewing of a scrambled broadcast by using an unauthorized IC card.

[0008]

According to a first aspect of the present invention, there is provided an information processing apparatus, wherein the processing means determines whether or not the supply means is predetermined, and the determination result of the determination means. And a control means for performing predetermined control in accordance with
The supply means is provided with an output means for outputting information that is a basis for the determination of the determination means to the processing means.

According to another aspect of the information processing method, the processing means determines whether or not the supply means is predetermined, and performs predetermined control according to the determination result to supply the information. The means outputs the information serving as the basis of the determination to the processing means.

In the information processing apparatus according to the first aspect of the present invention, the processing means determines whether or not the supply means is predetermined, and a predetermined value corresponding to the determination result of the determination means. And a supply means for outputting to the processing means the information serving as the basis for the determination of the determination means.

In the information processing method according to the fourth aspect, the processing means determines whether or not the supply means is predetermined, and performs predetermined control according to the determination result. The supply means outputs information that is the basis of the determination to the processing means.

[0012]

1 is a block diagram showing the configuration of an embodiment of a pay broadcasting system to which the present invention is applied.
Encoder 1 (1A to 1E) of the transmitting system 21
Is designed to digitize and compress video signals and audio signals for 5 channels. The multiplexer 2 packetizes the outputs of a plurality (5 channels) of the encoders 1 and a plurality of related information, and performs time division multiplexing. Here, the related information is “common information (program information)” including information about programs and a scramble key for descrambling, contract information for each subscriber (viewer) (for example, contract form such as flat or pay-per-view). And "individual information" including the contract key for decrypting the common information.

The scrambler 3 is adapted to selectively scramble a predetermined one of the output signals of the multiplexer 2 by the scramble key from the related information transmitting device 4.

The scramble control system 6 supplies a contract key (work key) to the related information transmitting device 4, and
The contract key is encrypted by the individual key (stored in the scramble control system 6) unique to the receiving terminal 22 and supplied to the multiplexer 2 as a part of the individual information.

The related information sending device 4 supplies the scramble key to the scrambler 3, encrypts the scramble key with the contract key supplied from the scramble control system 6, and multiplexes it as a part of common information (program information). It is designed to be supplied to the chemical converter 2.

The program control system 5 generates a predetermined control signal and controls the encoder 1 according to the program. That is, the method of digitization and compression is controlled. Also, now
The program ID of the program encoded by the encoder 1 and the channel ID of the corresponding channel (serv
ice-id) or the like is generated and supplied to the related information sending device 4. The viewing information collection processing system 7 includes viewing information (for example, viewed program ID, corresponding channel I) uploaded from a large number of receiving terminals 22 via the telephone line 24.
(D, time of viewing, etc.) and contract requests from viewers are processed and supplied to the scramble control system 6 as contract information.

On the other hand, the decoder 31 (processing means) of the receiving terminal 22 uses the descrambler 41 (FIG. 4) incorporated therein to generate the original scrambled signal with the scramble key supplied from the security module 32 (supply means). It is designed to descramble to the signal.
In addition, the individual information and program information added to the program can be extracted,
The output has been made.

The security module 32 is composed of, for example, an IC card or the like which is detachably attached to the decoder 31, and has a built-in EEPROM 53 (FIG. 4).
In addition, when the individual key unique to the receiving terminal 22 is stored and the non-scrambled individual information is supplied from the decoder 31, the individual information is decrypted by using this individual key to obtain the contract key and the contract information, respectively. Take out and remember. Also,
The common information accompanying the program supplied via the decoder 31 is fetched, the common information is decrypted by the contract key, the scramble key is fetched, and the decoder 31 is supplied.

Next, the operation will be described. First, the operation when the individual information is transmitted from the transmission side system 21 to the reception terminal 22 will be described. As shown in FIG. 2, the individual information includes the contract key number corresponding to the contract key, the contract key, and the channel ID (s) corresponding to the contracted channel.
service-id), contract type, and the like. Also, the individual information is the ID of the receiving terminal 22 of the transmission destination.
It also contains a number (Card ID).

The contract key is transmitted together with, for example, an 8-bit contract key number, and a plurality of contract keys can be selectively used. The contracted channel ID is represented by, for example, 16-bit Service_id. The contract type can identify flat, pay-per-view, and special contract, and is, for example, 4 bits.

This individual information is encrypted in the scramble control system 6 using an individual key unique to the receiving terminal 22 of the transmission destination to which this individual information is to be transmitted. The scramble control system 6 obtains, for all the receiving terminals 22, the individual key unique to the receiving terminal 22 by the I key of the receiving terminal 22.
It is stored in association with the D number (Card ID),
The individual key can be retrieved from the ID number of the receiving terminal 22 of the transmission destination. Therefore, the individual key corresponding to the ID number of the receiving terminal 22 of the transmission destination is searched, and the individual information is encrypted based on the search. The encrypted individual information is supplied to the multiplexer 2.

In the multiplexer 2, the digitized and compressed video and audio signals corresponding to the predetermined program supplied from the encoder 1 and the individual information supplied from the scramble control system 6 are packetized. , Time division multiplexed, and then supplied to the scrambler 3. Only the program part (video data and audio data) of the digital signal supplied to the scrambler 3 is scrambled by using the scramble key supplied from the related information sending device 4,
The individual information portion is sent to the transmission path 23 without being scrambled.

The transmission of the individual information to the receiving terminal 22 is carried out at any time when it is necessary to update the individual information. This individual information includes the contract information described above.

Next, an operation when a normal program and program information (components of common information) added thereto are transmitted from the transmitting side system 21 to the receiving terminal 22 will be described.

The program information is, for example, as shown in FIG. 3, the contract type, the contract key number indicating the contract key number, the scramble key, and the Service_i corresponding to the channel ID.
d, a program ID for identifying the program, etc. are included.
Of these, the scramble key is encrypted by the contract key (work key) supplied from the scramble control system 6. Further, the contract type includes a flag for identifying whether or not it is a special program.

The predetermined program information having the above-mentioned structure generated in the related information transmitting device 4 is supplied to the multiplexer 2. In the multiplexer 2, the digitized and compressed video signal and audio signal corresponding to the predetermined program supplied from the encoder 1 and the program information supplied from the related information sending device 4 are packetized, It is divided and multiplexed and supplied to the scrambler 3.

The scrambler 3 receives a compressed video signal or audio signal forming a program and program information as a packet and inputs a time-division multiplexed digital signal.
Only the program part (video signal and audio signal) of these is scrambled by the scramble key supplied from the related information sending device 4, and the program information part is sent to the transmission line 23 without being scrambled.

In this way, the predetermined program and the program information accompanying it are transmitted from the transmitting side system 21 to the receiving terminal 22.

Next, the operation of the receiving terminal 22 side will be described.

FIG. 4 is a diagram for explaining the basic operation of the receiving terminal 22 when the viewing permission is controlled. The decoder 31 has, for example, a descrambler 41 and a CPU 42, and the security module 32 has a CPU 50 substantially incorporating the decoders 51 and 52, and an EEPROM 53.

Individual information is transmitted to the receiving terminal 22 of the viewer who has formally contracted. From the transmitting system 21,
When a tuner (not shown) of the receiving terminal 22 receives a digital signal in which a predetermined scrambled program transmitted via the transmission line 23 and unscrambled individual information are time-division multiplexed, the signal is scrambled. The digital signal corresponding to the program is supplied to the descrambler 41.

On the other hand, the ID number (Ca of the receiving terminal 22 added to the non-encrypted part of the unscrambled individual information)
rd ID) and EEP of security module 32
The ID number (Card ID) of the receiving terminal 22 stored in advance in the ROM 53 is compared, and if the two match, the individual information (that is, the individual information addressed to itself) is fetched and supplied to the decoder 51. To be done.

Of the individual information supplied to the decoder 51,
The encrypted part is decrypted by the individual key stored in the EEPROM 53 and unique to the receiving terminal 22,
The contract key and contract information are retrieved, and the EEPROM5
3 and are stored. This contract key is used to decrypt the program information. Further, the contract information is used when determining whether the received program is a contracted program.

When the viewer is viewing the program at the receiving terminal 22, the receiving terminal 22 receives the predetermined scrambled program transmitted via the transmission path 23 and the program information accompanying it. ing. The digital signal corresponding to the scrambled predetermined program is supplied to the descrambler 41, and the program information accompanying it is supplied to the decoder 52.

When the contract key corresponding to the channel of the predetermined program has already been decrypted by the decryptor 51 and stored in the EEPROM 53 as described above, the decryptor 52 operates and its supplied from the EEPROM 53. The encrypted part of the program information is decrypted by the contract key. As a result, the scramble key included in the program information is extracted.

Next, the program information is collated with the contract information already stored in the EEPROM 53. As a result of the collation, when the program to which the program information is added is recognized as the contracted program, the scramble key obtained in the decoder 52 is supplied from the security module 32 to the decoder 31.

On the decoder 31 side, the scramble key is supplied to the descrambler 41. In the descrambler 41, the scrambled digital signal of the predetermined program is descrambled by the scramble key supplied from the decoder 52, restored to the original signal that can be normally viewed, and then output.

Next, with reference to FIG. 5, an operation performed when the security module 32 composed of an IC card is mounted on the decoder 31 will be described.

When the security module 32 is attached, the decoder 31 first generates a Reset signal and outputs it to the security module 32. When the reset signal is input, the security module 32 performs the reset operation, and when the reset operation is completed, the security module 32 outputs the Answer To Reset signal to the decoder 3
Output to 1.

The decoder 31 uses this Answer To
When receiving the input of the Reset signal and detecting that the reset of the security module 32 is completed, next,
ID Request to the security module 32
Output the est signal. Security module 32
Is the Card ID stored in the EEPROM 53 when receiving the input of this ID Request signal.
And Ca_System_ID are output to the decoder 31.

The Card ID is an ID unique to each security module 32 and given to each security module 32. Security module 32
The card ID is used to determine whether the received individual information is the individual information to be taken into the EEPROM 53 as the individual information of itself.

On the other hand, Ca (Conditional a
access) _System_ID is an identifier for identifying each receiving system when a plurality of conditional access systems coexist.

Next, the decoder 31 authenticates the security module 32 as to whether or not the security module 32 is a proper security module by issuing a security module authentication command followed by a predetermined numerical value N (for example, a random number). Output to. When the security module 32 receives the security module authentication command, the security module 32 performs a predetermined calculation on the input numerical value N and outputs the calculation result E (N) to the decoder 31.
Output to The decoder 31 determines whether or not the security module 32 is a valid one based on the input calculation result. This processing will be described later with reference to the flowcharts of FIGS.

Next, the decoder 31 receives the received individual information (EMM: EntityManagementManager).
t Message) to the security module 32. Upon receiving the input of this individual information (EMM), the security module 32 extracts the one corresponding to the Card ID and returns the corresponding Response to the decoder 31.

Further, the decoder 31 uses the program information (EC
M: Entry Control Mes
output) to the security module 32. As described above, the security module 32 decrypts the scramble key Ks from the supplied program information, further encrypts it, and outputs it to the decoder 31.

In addition to the scramble key Ks, the security module 32 uses Copy Right and Fing.
er Printing is output to the decoder 31.
This Copy Right is a flag indicating whether or not copying of the corresponding program is permitted. The Finger Printing is a flag indicating whether or not the Card ID corresponding to the program is forcibly displayed on the monitor.

The individual information (EM
M) is supplied, the security module 32
The corresponding message is returned and the decoder 31
When the program information (ECM) is supplied from the security module 32, the security module 32 appropriately performs an operation of returning a corresponding message.

Next, referring to the flowchart of FIG.
The security module authentication process performed by the decoder 31 will be described. First, in step S1, the CPU 42 of the decoder 31 outputs a security module authentication command to the CPU 50 of the security module 32. Subsequently, the CPU 42 outputs the numerical value N to the CPU 50 in step S2. The CPU 50
When this numerical value N is input following the security module authentication command, a predetermined calculation is performed and the calculation result E (N) is CPed, as will be described later with reference to FIG.
Output to U42. The CPU 42 receives the calculation result in step S3.

In step S4 (determination means), it is determined whether or not the calculation result E (N) received in step S3 is correct. That is, the CPU 42
U54 knows in advance the calculation to be performed on the numerical value N, and therefore also knows the correct calculation result E (N) as known data. When the calculation result E (N) is correct,
Proceeding to step S5 (control means), the CPU 42 continuously executes the subsequent processing. For example, as shown in FIG. 5, the individual information is output to the security module 32.

On the other hand, in step S4, C
When it is determined that the calculation result E (N) supplied from the PU 50 is not correct, step S6 (control means)
Then, the CPU 42 executes error processing. That is, at this time, the decoder 31 cannot execute the decoding process (descramble process) thereafter.

FIG. 7 shows C of the security module 32.
The PU 50 represents a process executed when a security module authentication command is input from the CPU 42 of the decoder 31. First, in step S11,
The CPU 50 of the security module 32 receives the numerical value N output by the CPU 42 of the decoder 31. Then, in step S12, a predetermined calculation is performed on the numerical value N to obtain the calculation result E (N).

Next, in step S13 (output means), the calculation result E (N) obtained in step S12 is output to the CPU 42 of the decoder 31. The CPU 42 determines in step S4 of FIG. 6 whether or not the calculation result E (N) is correct.

8 to 10 show step S12 of FIG.
Here, an example of calculation processing performed by the CPU 50 of the security module 32 is shown.

In the example of FIG. 8, the CPU 50 of the security module 32, when the numerical value N is input from the CPU 42 of the decoder 31, performs the operation of inverting the bit of the numerical value N. For example, when the numerical value N is 11001101, the calculation result E (N) is 00110010.

In the embodiment of FIG. 9, the CPU 50 of the security module 32 uses the MSB and LSB of the numerical value N.
Execute the process of replacing. For example, the numerical value N is 11
When 00100, the operation result E (N) is 010
It becomes 01101.

Further, in the embodiment shown in FIG. 10, both the operations shown in FIGS. 8 and 9 are performed. That is, in step S41, the inversion process of the bit of the numerical value N is executed, and in step S42, the M
The process of exchanging SB and LSB is executed.

For example, when the numerical value N is 11001100, 00110011 is obtained by bit inversion processing, and further, by the processing of exchanging MSB and LSB,
10110010 is obtained.

The numerical value N may be a fixed value instead of a random number.

Of course, such an operation is an example,
In addition, various calculations can be executed.

In the above embodiment, the transmission line 23 is described as a broadcast wave, but the transmission line 23 is not limited to this and may be an optical fiber cable or another transmission medium.

[0061]

As described above, according to the information processing apparatus of claim 1 and the information processing method of claim 4,
Information that is the basis for the determination by the determination means is output to the processing means, and the processing means determines whether or not the supply means is predetermined, and a predetermined process corresponding to the determination result. Since this is performed, it becomes possible to suppress the use of an unauthorized supply means.

[Brief description of drawings]

FIG. 1 is a block diagram showing a configuration example of a pay broadcasting system to which the present invention is applied.

FIG. 2 is a diagram showing a part of individual information.

FIG. 3 is a diagram showing a part of program information.

FIG. 4 is a diagram for explaining the operation principle of the receiving terminal 22 of FIG.

FIG. 5 is a diagram for explaining exchange of signals between the decoder 31 and the security module 32 of FIG.

6 is a flowchart illustrating a security module authentication process of the decoder 31 of FIG.

7 is a flowchart showing a processing example of the security module 32 of FIG. 1 when a security module authentication command is received.

FIG. 8 is a flowchart showing a processing example of calculation in step S12 of FIG.

9 is a flowchart showing a processing example of calculation in step S12 of FIG.

10 is a flowchart showing a processing example of calculation in step S12 of FIG.

[Explanation of symbols]

 1, 1A to 1E Encoder 2 Multiplexer 3 Scrambler 4 Related information sending device 5 Program control system 6 Scramble control system 7 Viewing information collection processing system 21 Sending side system 22 Receiving terminal 23 Transmission line 24 Telephone line 31 Decoder 32 Security module 41 descrambler 42 CPU 50 CPU 51, 52 decoder 53 EEPROM

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification number Office reference number FI technical display location H04L 9/00 673E H04N 7/167 Z

Claims (4)

[Claims] 1. An information processing apparatus comprising: processing means for processing input information; and supply means for supplying the processing key to the processing means, wherein the processing means is predetermined by the supply means. And a control means for performing a predetermined control corresponding to the determination result of the determination means, wherein the supply means determines the determination with respect to the processing means. An information processing apparatus comprising: an output unit that outputs information that serves as a basis for determination by the unit. 2. The processing means descrambles the scrambled information, and the supplying means is detachable from the processing means and supplies a descramble key to the processing means. The information processing apparatus according to claim 1. 3. The determining means supplies a command to the supply means to perform a predetermined operation on predetermined data, and the operation result is supplied from the supply means in response to the command. The determination unit performs a determination, and when the output unit receives the command input from the determination processing unit, performs a predetermined calculation on the data and outputs the data to the determination unit. Information processing equipment. 4. An information processing method for an information processing apparatus, comprising: a processing unit that processes input information; and a supply unit that supplies the processing key to the processing unit. Along with determining whether the means is predetermined, performs a predetermined control corresponding to the determination result, the supply means, to the processing means, the information that is the basis of the determination. An information processing method characterized by outputting.