RU2424555C2 - Information processing device, device for making data recording medium, data recording medium, methods thereof and computer programme - Google Patents

Abstract

FIELD: information technology.

SUBSTANCE: information processing device designed to process content playback comprises: a content playback processing module designed to process data conversion for replacing part of configuration data of the entered content meant for playback with conversion data, and processing content playback; and a parameter generation module for providing a parameter in the content playback processing module, where the said parameter is employed when processing conversion data; in which the content playback processing module is configured to receive a parameter identifier which differs for each segment established as the region for dividing into sections the played back content, and outputting a request for calculating the parameter, together with the parameter identifier in the parameter generation module; and in which the parameter generation module is configured to provide a parameter in the content playback module, the said parameter corresponding to a segment, in response to the request to calculate the parameter from the content playback module.

EFFECT: preventing unauthorised copying of content and protecting the copyright owner.

24 cl, 31 dwg

Description

FIELD OF THE INVENTION

The present invention relates to an information processing device, an apparatus for manufacturing an information recording medium, information recording medium, their methods and computer program. More specifically, the present invention relates to an information processing apparatus, an apparatus for manufacturing an information recording medium, an information recording medium, their methods and a computer program, in which unauthorized use of the content is eliminated as a result of data conversion processing performed for various contents for which it is necessary to provide usage control content, thus realizing strict management of the use of content.

State of the art

Various types of program data, such as audio data, such as music, etc., image data, such as movies, etc., game programs, various types of application programs, etc. (referred to as “contents” below) can be stored as digital data on recording media such as Blu-ray discs that use a blue laser, or DVD (digital versatile disc), MD (mini-disc), and CD (compact disc) discs . In particular, Blu-ray discs using a blue laser are high density discs on which massive amounts of image content and the like, such as high quality image data, can be recorded.

Digital content is stored on such recording media of various types (recording media) for distribution to users. Users play and use content on a playback device, such as a PC (personal computer), disc player, etc., owned by the user.

Usually the right to distribution, etc. many kinds of content, such as music data, image data, etc., are held by the creator or distributor of the content. Accordingly, during the distribution of content, measures are usually taken that establish certain restrictions on use, that is, the use of content is allowed only to authorized users and unauthorized reproduction, etc. is prevented.

In digital recording devices and on recording media, recording and playback can be repeated without compromising the quality of, for example, image or sound, and problems arise, such as distribution of illegally copied content via the Internet, distribution of so-called counterfeit disks of illegal publications, or content, copied onto CD-R discs or the like, using multiplied copied content stored on PC hard disks and the like.

High-capacity recording media such as DVDs, recording media developed in recent years that use a blue laser to read, etc., allow you to record large amounts of data, for example, from one to several movies in the form of digital information on a single disc. Ability to record image information, etc. in the form of digital information makes the problem of preventing unauthorized copying to protect copyright holders an even more important issue. Recently, various techniques have been implemented to prevent unauthorized copying in digital recording devices and recording media to prevent such unauthorized copying of digital data.

SUMMARY OF THE INVENTION

One technique for preventing unauthorized copying of content and protecting the copyright holder is to process the content using encryption. However, even when using encrypted content, a problem arises that if a secret key leaks, an unauthorized leak of the decrypted content occurs. The measures described in Publication No. 11-45508 of the pending Japanese patent application represent the prior art that discloses measures intended to solve such problems. Japanese Patent Pending Publication No. 11-45508 discloses a layout in which unauthorized reproduction of content is prevented by overwriting part of the content using fictitious data.

During the reproduction processing of the content in which the content has been replaced by dummy data, it is necessary to replace the dummy data again with the original content data. Such data conversion processing should be performed without external leakage of the original content, and it is also preferred that the leakage of processing information such as the position of the dummy data and the conversion method is prevented. The current state of the art is such that there are still many problems that need to be studied with respect to such an arrangement in order to perform such processing during playback in such a way as to ensure security and prevent information leakage.

The present invention was made in view of the state of the art described above, and accordingly, it is desirable to provide an information processing device, a device for manufacturing an information recording medium, information recording medium, their methods and a computer program that effectively prevent the unauthorized use of content by destroying the content in the result of partial replacement of content configuration data and the implementation of reliable data processing that prevents information leakage AI for playback processing.

An information processing device for executing content reproduction processing in accordance with an embodiment of the present invention includes: a content reproduction processing module for executing data conversion processing for replacing a portion of the configuration data of input content for reproduction with conversion and execution data processing for reproducing content intended for reproduction; and a parameter generating module for providing to the playback processing module the content of the parameter that is used in the data conversion processing; in which the content reproduction processing module is configured to obtain a parameter identifier that is different for each segment set as a division area into reproduced content sections, and output a request for calculating the parameter together with the parameter identifier to the parameter generating module; and in which the parameter generating module is configured to provide the parameter corresponding to the segment to the reproducing module in response to a request for calculating the parameter from the content reproducing module.

In addition, the content reproduction processing module may be configured to provide calculation processing or encryption processing for the data of the recovery table including the conversion data using the parameter corresponding to the segment obtained from the parameter generation module and performing data recovery processing including transform data used as replacement data for segment configuration data.

In addition, the content reproduction processing module may be configured to perform processing to obtain a packet number consisting of a segment configuration packet included in the reproduction unit from an EP card included in the clip information, which is information of the content reproduction unit; and referring to a parameter identifier definition table that correlates the parameter identifier with the packet number used as content configuration data, and to obtain a parameter identifier corresponding to the packet number for the segment configuration packet.

In addition, the parameter identifier determination table may be a table in which the parameter identifier and the number of the packet at the position of the segment header, which is the content configuration data, are correlated.

In addition, the packet number may be a source packet number (SPI) corresponding to the I-image included in the EP card.

In addition, the content reproduction processing module may be configured to perform processing to obtain an EP card registration table ID, which is an identifier of the EP card registration table included in the clip information, which is information of the content reproduction unit; and referring to the parameter identifier determination table, which correlates the parameter identifier with the EP card registration table ID to obtain a parameter identifier corresponding to the segment configuration packet number.

Furthermore, the parameter identifier determination table may be a table in which the parameter identifier and the EP card registration table ID are correlated, which is the identifier of the EP card registration table including the packet information at the segment header position, which is the content configuration data.

In addition, the content reproduction processing module may be configured to perform processing to obtain an EP card registration table ID, which is an identifier of the EP card registration table included in the clip information, which is information of the content reproduction unit; and calculating the parameter identifier corresponding to the segment based on the ID of the EP card registration table.

In addition, the content reproduction processing module may be configured to perform processing for calculating a parameter identifier corresponding to a segment based on an EP map registration table ID in accordance with the following expression:

(SP_ID) = (EP_map_ID) / N

where SP_ID is a parameter identifier;

EP_map_ID is an EP card registration table ID; and

N represents the number of EP card registration tables established in accordance with one segment.

In addition, the content reproduction processing module may be configured to perform processing for calculating the number of times of using the EP map registration table included in the clip information, which is information of the content reproduction unit, and calculating a parameter identifier corresponding to the segment based on the counting result for EP card registration tables.

In addition, the content reproduction processing module may be configured to perform processing to obtain recovery table data including transformation data from packets contained in the content, performing calculation processing or encryption processing using a parameter corresponding to a segment obtained from the module generating a parameter, and performing data recovery processing including conversion data used as replacement data, as config data ation segment.

In addition, the content reproduction processing module may be configured to perform processing to obtain recovery table data including conversion data from recovery table data different and independent of the content, performing calculation processing or encryption processing using a parameter corresponding to the segment, obtained from the parameter generating module, and performing data recovery processing including conversion data used as OF DATA replacement for the data segment configuration.

In addition, the parameter calculation module may be implemented as a virtual machine installed in the information processing device.

In addition, the information processing device may be configured to request a parameter calculation from the content reproduction processing module to a parameter calculation module, which is executed as an interrupt request, and providing the parameter from the parameter calculation module to the content reproduction processing module is performed as a response to the interrupt request.

An apparatus for manufacturing an information recording medium in accordance with another embodiment of the present invention includes: a data processing module for generating content, including damaged data other than the correct content configuration data, and a recovery table including a parameter identifier determination table in which the main part of the data of the recovery table is stored, saved by processing calculation or processing of data encryption formations intended to be replaced with damaged data, with a parameter set in accordance with a segment that is a sectioned content area and a parameter identifier that represents parameter identification information; and a data recording module for recording content including damaged data and a recovery table on the information recording medium.

In addition, the parameter identifier determination table may be a table in which the parameter identifier and the number of the packet at the position of the segment header, which is the content configuration data, are correlated.

In addition, the parameter identifier determination table may be a table in which the parameter identifier and the EP card registration table ID are correlated, which is the identifier of the EP card registration table including information of a packet located at the position of the segment header, which is configuration data content.

On the information recording medium in accordance with another embodiment of the present invention, the following are stored: content, part of the content configuration data of which has been replaced and reproduced; a recovery table in which a parameter identifier that is set in accordance with a segment in which content configuration data is divided into sections to obtain a plurality of segments and installed, and conversion data that is an object for replacing part of the content configuration data intended for replacements; where the conversion data is data for which a coding calculation or processing has been performed based on a parameter corresponding to the parameter identifier.

In addition, the information recording medium may further comprise a timestamp of presentation (VMP, PTS) of the entry point and an EP map with which the packet number, which is the address, is correlated and registered; in which the segment is divided into sections based on the set of entry points recorded in the EP map.

In addition, a segment can be divided into sections based on a fixed number of entry points.

An information processing method for executing content reproduction processing in accordance with another embodiment of the present invention includes the following steps: content reproduction processing performed in the content reproduction processing module for data conversion processing to replace a portion of the configuration data of the input content for playback, conversion data, and processing to replace reproducible content; and parameter generation, performed in the parameter generation module, for providing to the reproduction processing the content of the parameter used in the data conversion processing; wherein the content reproduction processing has a step of obtaining a parameter identifier that is different for each segment set as a division area into reproduced content sections, and outputting a request for calculating a parameter that accompanies the parameter identifier in the parameter generating unit; and wherein generating the parameter comprises the step of providing the parameter corresponding to the segment to the reproducing module in response to a request for calculating the parameter from the content reproducing module.

In addition, the content reproduction processing may have a step of performing calculation processing or encryption processing on the data of the recovery table including the conversion data using a parameter corresponding to the segment obtained from the parameter generating unit and for performing data recovery processing including conversion data used as replacement data for segment configuration data.

In addition, the content reproduction processing may have a processing step for obtaining a segment configuration packet number included in the reproduction unit from the EP card included in the clip information, which is information of the content reproduction unit; and referring to a parameter identifier definition table correlating a parameter identifier with a packet number that is used as content configuration data; and obtaining a parameter identifier corresponding to the segment configuration packet number.

In addition, the table defining the parameter identifier may be a table in which the parameter identifier and the packet number are correlated at the position of the segment header, which is the content configuration data.

In addition, the packet number may be a source packet number (NPI) corresponding to the I-image included in the EP card.

In addition, the content reproduction processing may have a processing step for obtaining an EP card registration table ID, which is an EP card registration table identifier included in the clip information, which is information of the content reproducing unit; and referring to a table defining a parameter identifier correlating the parameter identifier with the ID of the EP card registration table to obtain a parameter identifier corresponding to the segment configuration packet number.

In addition, the parameter identifier determination table may be a table in which the parameter identifier and the EP card registration table ID are correlated, which is the identifier of the EP card registration table including information of a packet located at the position of the segment header, which is configuration data content.

In addition, the content reproduction processing may have a processing step for obtaining an EP card registration table ID, which is an identifier of the EP card registration table included in the clip information, which is information of the content reproducing unit; and calculating the parameter identifier corresponding to the segment based on the ID of the EP card registration table.

In addition, the content reproduction processing may have a processing step for calculating a parameter identifier corresponding to a segment based on an EP map registration table ID in accordance with the following expression:

(SP_ID) = (EP_map_ID) / N

where SP_ID is a parameter identifier;

EP_map_ID is an EP card registration table ID; and

N represents the number of EP card registration tables established in accordance with one segment.

In addition, the content reproduction processing may have a processing step for counting the number of times of using the EP map registration table included in the clip information, which is information of the content reproduction unit, and calculating a parameter identifier corresponding to the segment based on the counting result for the card registration table EP

In addition, the content reproduction processing may have a processing step for obtaining recovery table data including conversion data from packets contained in the content, performing calculation processing or encryption processing using a parameter corresponding to a segment obtained from the parameter generating module, and performing data recovery processing including conversion data used as replacement data for segment configuration data.

In addition, the content reproduction processing may have a processing step for obtaining recovery table data including conversion data from the recovery table data that is different and independent of the content, performing calculation processing or encryption processing using a parameter corresponding to the segment obtained from the parameter generating module, and performing data recovery processing including conversion data used as replacement data for data iguratsii segment.

A method of manufacturing an information recording medium in accordance with another embodiment of the present invention includes the following steps: processing for generating data for the content, in which part of the configuration data of the content is replaced and reproduced, and a recovery table in which the parameter identifier that is set to according to a segment in which the configuration data of the content is divided into sections to obtain a plurality of segments and installed, and the conversion data Bani, which represent an object to replace part of the configuration of content data intended to replace; and recording data for recording content including damaged data and a recovery table on the information recording medium.

A computer program for executing content reproduction processing in an information processing apparatus according to another embodiment of the present invention includes the following steps: content reproduction processing executed in the content reproduction processing module for data conversion processing to overwrite a portion of the input content configuration data for reproduction and processing for reproducing reproducible content; and generating a parameter executed in the parameter generating module to provide the content of the parameter used in the data conversion processing to the playback processing module; in which the reproduction processing of the content has the step of obtaining a parameter identifier that is different for each segment set as the area of division into sections of the reproduction content and outputting a request for calculating the parameter together with the parameter identifier to the parameter generating unit; and in which the generation of the parameter has the step of providing to the reproducing module the content of the parameter corresponding to the segment, in response to a request for calculating the parameter from the reproducing module of the content.

It should be noted that the computer program in accordance with the present invention can be, for example, a computer program that allows you to create a computer system configured to execute various types of program codes using recording media or data transfer media that can be provided in a computer readable format, for example, recording media such as CD (compact discs), FD (floppy disks), MO (magneto-optical disks), etc., or data transmission media such as networks or the like approved. Providing such a program in a format readable by a computer implements processing corresponding to a program running in a computer system.

Other objects, features, and advantages of the present invention will be apparent from the following detailed description by way of example of the embodiments of the present invention described below and the attached drawings. It should be noted that the term "system" used in the present description refers to the location of the logical nodes of many devices, and is not limited to the arrangement in which all components of the device are in the same housing.

In accordance with one embodiment of the present invention, when using a configuration to recover and obtain data converted by calculating a parameter or encryption processing different for each segment set as the area for dividing the content into sections, and performing playback of the content, replacing part of the content data with the obtained conversion data, a configuration can be implemented in which the parameter ID corresponding to the segment is obtained based on a table correlating H AND (source packet number) included in the content to be reproduced, and parameter ID (SP_ID), or based on a table correlating the identifier of the EP card registration table (EP card registration table ID) in which the information of the packet included in the segment is recorded the content intended for reproduction and the parameter ID, moreover, the received parameter ID (SP_ID) is transmitted as a notification for the protected VM (VM), and the request (INTRP) for calculating the secret parameter is performed so that the content can be reproduced It is possible when performing the corresponding data transformations by successively receiving secret parameters (SP) corresponding to each segment from the protected VM, respectively.

In addition, according to an embodiment of the present invention, a configuration can be implemented in which a playback application (playback device) that performs playback of the content first determines an EP map corresponding to the content data to be reproduced from the EP map registered in the information clip, which is the information of the content playback unit, and receives the parameter ID (SP_ID) either by applying a calculation formula, or by counting the registration tables of the EP card, based on the identifier of the registration table of the EP card (ID of the registration table of the EP card), and the received parameter ID (SP_ID) is transmitted as a notification to the protected VM, and the request (INTRP) for calculating the secret parameter can be performed, which to get the parameter ID (SP_ID), without using a special table for determining the parameter ID, and the reproduction of the content can be performed by performing the corresponding data conversion, by sequentially receiving secret parameters (SP), with corresponding to each segment from the protected VM in the right way.

Brief Description of the Drawings

1 is a diagram describing a configuration and processing of stored data on an information recording medium and a drive device and an information processing device;

2 is a diagram describing an example of installing a content management module for installations made with respect to stored data on an information recording medium;

Figure 3 shows a diagram describing the correlation between the content management module for settings made in relation to the stored data on the information recording medium and the module key;

4 is a diagram describing content recorded on an information recording medium and data conversion processing necessary for reproducing content;

5 is a diagram describing a data configuration in the case of a recovery table stored in packets of a transport stream including content;

6 is a diagram describing in detail the contents and the recovery table stored on the information recording medium;

7 is a diagram showing a configuration of data of recovery records included in a recovery table;

FIG. 8 is a diagram describing data conversion processing using recovery records in TS packets constituting the content;

FIG. 9 is a diagram describing data conversion processing using recovery records included in a recovery table; FIG.

10 is a diagram describing a processing sequence executed between a playback application program (player) and a protected VM;

11 is a diagram describing a processing for copying a recovery table performed in a name initiation processing within a processing sequence between a playback application program (player) and a protected VM;

12 is a diagram describing a sequence of receiving and processing a failure in a protected VM;

13 is a diagram describing an example of content reproduction processing;

14 is a diagram describing data conversion processing performed during reproduction of content;

15 is a diagram describing in general terms an example of processing 1 for obtaining a SP identifier (SP_ID) corresponding to a segment;

16 is a diagram describing an EP map;

17 is a diagram describing an EP map;

On Fig shows a diagram describing the processing sequence of example 1 to obtain a SP identifier (SP_ID) corresponding to a segment, and an example configuration table definition table SP_ID;

19 is a diagram illustrating a complete configuration of recovery table data;

20 is a diagram describing an example configuration of a determination table SP_ID;

21 is a diagram illustrating a data configuration of a main part of a recovery table contained in a recovery table;

22 is a diagram illustrating a data configuration of a recovery table unit (FA block) contained in the main part of the recovery table;

FIG. 23 is a diagram illustrating a flowchart describing a sequence of reproducing content in the case of applying the processing of Example 1 to obtain a SP identifier (SP_ID) corresponding to a segment;

24 is a diagram illustrating a flowchart describing a playback sequence of content for special playback in the case of applying the processing of Example 1 to obtain a SP identifier (SP_ID) corresponding to a segment;

25 is a diagram describing an example configuration of a determination table SP_ID in the processing of Example 2;

FIG. 26 is a diagram illustrating a flowchart describing a playback sequence of content in the case of applying the processing of Example 2 to obtain a SP identifier (SP_ID) corresponding to a segment;

On Fig shows a diagram illustrating a flowchart describing a sequence of playback of content for special playback in the case of applying the processing of example 2, to obtain the identifier SP (SP_ID) corresponding to the segment;

On Fig shows a diagram describing the General layout of the processing according to example 3 to obtain the identifier SP (SP_ID) corresponding to the segment;

On Fig shows a diagram illustrating a flowchart describing a sequence of playback of content in the case of applying the processing of example 3, to obtain the identifier SP (SP_ID) corresponding to the segment;

30 is a diagram illustrating a flowchart describing a playback sequence of content for special playback in the case of applying the processing of Example 3 to obtain a SP identifier (SP_ID) corresponding to a segment; and

FIG. 31 is a diagram describing an example of a hardware configuration of an information processing apparatus for executing application programs as a host device.

Description of Preferred Embodiments

The information processing device, the device for manufacturing the information recording medium, the information recording medium, their methods and the computer program in accordance with the present invention will be described in detail with reference to the drawings. It should be noted that the description will be made in accordance with the following paragraphs.

1. An overview of the stored data on the information recording medium and processing in the drive and in the main device.

2. About the content management module (ICC module (CPS)).

3. An overview of the configuration of content data, including modified data, and data conversion processing.

4. Processing of the playback application (player) and the protected VM.

5. Processing reproduction of content.

6. Processing to obtain the SP identifier (SP_ID) corresponding to the segment.

(6.1) Processing example 1 to obtain a SP identifier (SP_ID) corresponding to a segment.

(6.2) Processing example 2 to obtain a SP identifier (SP_ID) corresponding to a segment.

(6.3) Processing example 3 to obtain a SP identifier (SP_ID) corresponding to a segment.

7. Configuration of the information processing device.

8. A device for manufacturing an information recording medium and an information recording medium.

1. An overview of the stored data on the information recording medium and processing in the drive and in the main device

First, a description will be given relating to the review of the stored data on the information recording medium, as well as their processing in the drive and the main device. Figure 1 shows the configuration of the information recording medium 100 on which the content is stored, the drive 120 and the main device 140. The main device 140 is an application program for reproducing (or recording) data that is executed in an information processing device, such as, for example, a PC or the like, and performs processing using the hardware of an information processing device such as a PC or the like in accordance with a predetermined data processing sequence.

The information recording medium 100 is an information recording medium such as, for example, a Blu-ray disc, DVD, or the like, and is an information recording medium on which authorized content is recorded (ROM type disc or the like), manufactured at a disc manufacturing plant, with the permission of the so-called holder of the right to content, who has the appropriate rights with respect to the content or the right to distribute, or a recording medium of information on which data can be recorded (RE disc (with optional recording life) or the like). It should be noted that in the following embodiment, the disk type will be used as an example to describe the information recording medium, and the present invention can be applied to configurations in which various types of information recording media are used.

As shown in FIG. 1, encrypted content 101 that was subjected to encryption processing and partial data replacement, BKN (media key block) 102, which is an encryption key block generated based on the distribution method, is recorded on the information recording medium 100; a key of a tree structure, known as a certain type of encryption method for broadcasting, a name key file 103 composed of data in which a name key is encrypted used to process the decryption of the contents access (encrypted key of the ICC module), etc., use rule 104, including IAI (CCI) (copy control information) and the like, used as copy / reproduction information of the content, recovery table 105, to which conversion data corresponding to the replacement data in a predetermined area within the contents is recorded, and a data conversion processing program 106 including processing instructions for executing data conversion processing and a recovery table 105. It should be noted that the data example shown in the diagram is only an example, and the stored data is more or less different from each other depending on the type of disk. Next, a general configuration of each of these types of information will be described.

(1) Encrypted Content 101

Various types of content are stored on the information recording medium 100. Examples of such content include AV (AV) (audio-video) streams representing the contents of a moving image, such as the contents of a high-definition movie (HF), which is high-definition moving image data, game programs in a format defined by the relevant standard, image files, audio data, text data, etc. All these types of content are defined by data in accordance with a specific AV data format and stored in accordance with a specific AV data format. In particular, they are stored in accordance with a standard format of a Blu-ray ROM disc, for example, as standard data of a Blu-ray ROM disc.

In addition, sometimes game programs, image files, audio data, text data, etc. save, for example, as service data. In some cases, these types of content are stored as data having a data format that does not correspond to a specific AV data format.

Types of content include various types of content, such as music data, motion pictures, still images and similar image data, as well as game programs, world wide web content, etc., as well as information in various forms included in this content, such as content information used only by data on information recording medium 100, content information used when combining data from information recording medium 100 and data provided from a server connected to the network , etc. The content stored on the information recording medium is stored in encrypted form with different keys corresponding to each section of the content (ICC or module key (which may also be called the name key)) to implement different control of the use of the content in each block. Each module to which one module key corresponds is called a content management module (ICC module). In addition, the content configuration data is set as corrupted data, in which part of it is replaced by data other than the correct content data, as a result of which only the decryption processing does not allow the content to be correctly reproduced, and for the reproduction to be performed, it is necessary to process the replacement of the corrupted data with the data recorded in the table recovery. Such processing will be described in detail below.

(2) BKN

BKN (media key block) 102 is an encryption key block generated based on a key distribution method with a tree structure, known as a certain type of broadcast encryption method. BKN 102 is a block of key information that allows you to get the media key [Km] necessary for decrypting the content, only for processing (decryption), based on the key of the device [Kd] stored in the user information processing device with a valid license. In this case, the application program and also the method of disseminating information follow the so-called hierarchical tree structure, which allows receiving the media key [Km] only when the user device (information processing device) has a valid license, and the user devices that were excluded ( cancellation processing), cannot receive the media key [Km].

The Administration Center, which serves as the license object, can generate a BKN that has a structure that cannot be decrypted using the device key stored in a specific user device, that is, in which the media key needed to decrypt the content cannot be obtained by changing the key device used to decrypt key information stored in the BKN. Accordingly, unauthorized devices can be canceled at arbitrary points in time, thus providing encrypted content that can only be decrypted in devices with valid licenses. Content decryption processing will be described below.

(3) Name key file

As described above, each content or group of multiple types of content is encrypted using an individual encryption key (name key (ICC module key)) for each of them, to control the use of content stored on the information recording medium 100. That is, AV (audio-video) streams, music data, moving images, still images and similar image data, game programs, content of the World Wide Web, etc. constituting the content should be divided into control modules for using the content with different name keys generated for each module, and thus, decryption processing is performed. The information intended to generate these name keys is the name key data, and the name key is obtained by decrypting the encoded name key, which is a key generated, for example, using a media key or the like. Name keys corresponding to each module are generated in accordance with a predetermined encryption key generation sequence using the name key data, and content is decrypted.

(4) Rule of Use

The usage rule includes, for example, copy / play control information (IAA). This information is copy restriction information and playback restriction information for using the control with respect to encrypted content 101 stored on the information recording medium 100. In this case, various settings are used for information management for copying / reproducing information (IAI), such as, for example, information for individual ICC modules installed in the content management modules, settings correspond to many ICC modules, etc.

(5) Recovery table

As described above, the encrypted content 101 stored on the information recording medium 100 has been subjected to predetermined encryption, and also part of the content configuration data is composed of corrupted data that is different from the correct data. To reproduce the content, it is necessary to perform data rewriting processing in which the damaged data is replaced by conversion data, which is the correct content data. The table in which the conversion data is registered is a recovery table 105. A large amount of corrupted data is established with a spread across the entire content, and during playback of the content, it is necessary to perform processing to replace (overwrite) many parts of the damaged data with conversion data registered in the recovery table. The use of this conversion data means that even when unauthorized decryption of the content is performed, for example, as a result of an encryption key leak, reproduction of the correct content will be impossible using only the decryption of the content, due to the presence of replaced data, thereby preventing unauthorized use of the content.

In addition to normal conversion data, the recovery table 105 includes conversion data for analyzing the configuration bits of the data identification information to identify the content reproducing apparatus or the content reproducing application. In particular, for example, they include a player ID, which is the player’s identification data (devices for executing the main application program), or “conversion data including identification tags” in which identification information generated based on the player ID is recorded . The conversion data, including identification marks, is data where the bit values of the correct content data have been slightly changed, at a level that does not affect the reproduction of the content. The processing details when using such conversion data will be described below.

Although FIG. 1 shows an example in which the recovery table 105 is set as an independent data file, a configuration can be performed in which the recovery table is not an independent file, but distributed among encrypted content configuration packages 101. This configuration and its processing will be described below. .

(6) Data Conversion Processing Program

The data conversion processing program 106 is a program including processing instructions for executing data conversion processing using the data recorded in the recovery table 105, and it is used by the host device that reproduces the content. It is performed in the data conversion processing module 154 of the host device 100 shown in FIG. It should be noted that the recovery table described above 105 can be set as data included in the data conversion processing program 106.

A virtual machine (VM) is installed in the host device for executing data conversion processing, wherein the data conversion processing program 106 read from the information recording medium 100 is executed in the virtual machine (VM) using the registration record in the recovery table 105, and processing data transformations for partial configuration data are performed on decrypted content. Details of this processing will be described below.

Next, with reference to FIG. 1, a configuration of the host device 140 and the drive 120 and an overview of processing will be described. The reproduction processing of the content stored on the information recording medium 100 is performed on data transmitted to the host device 140 via the drive 120.

In the host device 140, a reproduction application 150 (player) and a secure VM 160 are installed. The reproduction application 150 (player) is a content reproduction processing module and performs processing such as authentication processing performed in the drive during the content reproduction processing, decryption of the content decoding processing etc. Protected VM 160 functions as a parameter generating module for providing parameters used for data conversion processing, is performed during content reproduction processing performed by the playback application program 150 (player), which is a content reproduction processing module, for example, protected VM 160 is installed as virtual machine in the main program 140. A virtual machine (VM) is a virtual computer that directly interprets and performs an intermediate language, and reads, interprets, and executes command code information in an intermediate language independent of the platform from the information recording medium 100.

Requests for information transfer or processing between the playback application program 150 (player) and the protected VM 160 are performed using interrupt sequences (INTRP) from the application program 150 playback (player) to the protected VM 160 and response (call) processing from the protected VM 160 to the application program 150 playback (player). Interrupt sequences (INTRP) from the application program 150 to the protected VM 160, and the response (call) processing from the protected VM 160 to the playback application program 150 (player), execute requests for calculating a parameter and providing parameters applicable to the data conversion processing performed when content reproduction processing. These processing sequences will be described in detail below.

Below, the basic processing performed by the host device 140 will be described. Before using the content, mutual authentication processing between the drive 120 and the host device 140 is performed, and after the validation of both sides as a result of this authentication processing, the encrypted content is transferred from the drive to the main program, wherein carry out content decryption processing on the side of the main program and then perform the data conversion processing described above using the table in recovery, resulting in a reproduction of the content.

For mutual authentication performed between the host device 140 and the drive 120, processing is carried out to determine the validity, by referring to the revocation list (not valid) issued by the Administration Center, whether each of the devices or applications is registered as an unauthorized device or application.

The drive 120 has a storage device 122 for storing the CAC (CRL) (certificate revocation list) of the host device, in which the certificate revocation information (invalidity) of the main program (public key certificate) is recorded. On the other hand, the host device 140 has a storage device 152 for storing the CAC of the drive (certificate revocation list) in which information of the revocation (invalidity) of the drive certificate (public key certificate) is stored. The storage device is a non-volatile storage device (NVRAM), and in the case where the CAC read from the information recording medium 100 is, for example, a newer version, their respective data processing modules 121 and 151 perform update processing to save the new CAC versions of the host device or CAC drive in the storage device 122 and 152.

CAC, such as the CAC of the host device or the CAC of the drive, is constantly updated in the central administration. That is, in the case where an unauthorized device has been re-opened, an updated CAC is issued in which the certificate ID issued by the unauthorized device, or the device ID, or the like, is added as a new entry. Each CAC has a version number, and it has a configuration in which novelty can be compared. For example, in the case where the CAC read from the information recording medium installed in the drive is newer than the CAC stored in the storage device 122 installed in the drive, the drive performs CAC update processing. The host device 140 also updates the CAC of the drive in the same manner.

In addition to this CAC update processing, the data processing module 121 of the drive 120 performs authentication processing with the main program, which is executed during the use of the content, and additionally performs the processing of reading data from the information recording medium and transferring this data to the host device.

The application program 150 playback (player) of the host device 140 is an application program for reproducing (or recording) data that is executed in an information processing device, such as, for example, a PC, and performs processing using hardware of an information processing device, such as a PC or the like similar, after a given sequence of data processing.

The host device 140 has a data processing module 151 for performing mutual authentication processing with a data transfer control drive 120, etc., a decryption processing module 153 for performing decryption processing of the encrypted content, a data conversion processing module 154 for performing data conversion processing based on the recorded data in the above recovery table 105, and the decoding processing module 155 for I decode processing (e.g., decoding MPEG).

The data processing module 151 performs authentication processing between the host device and the drive, and, within the authentication processing, it accesses the CAC of the drive stored in memory 152, which is a non-volatile memory (ENOZU), to confirm that the drive is not a drive which has been canceled. The host device also performs update processing to save the CAC drive with the new version in the storage device a 152.

The decryption processing unit 153 generates a key used to decrypt the content using various types of information stored in the storage device b 156 and the data read from the information recording medium 100, performing decryption processing of the encrypted content 101. The data conversion processing unit 154 performs replacement processing (overwrite) the content configuration data using the transformation data registered in the recovery table obtained from the information recording medium 100 after the prog Amma data conversion processing, with the resulting information recording medium 100. Decoding processing unit 155 performs decoding processing (e.g., MPEG decoding).

In the storage device b 156 of the information processing device 150, a device key is recorded: Kd, key information used for mutual authentication processing, key information intended for use in decryption, etc. The details of the decryption of the content will be described below. Device Key: Kd is the key used for the above described BKN processing. BKN is a key information block that provides the ability to obtain a media key [Km], which is the key needed to decrypt content obtained only as a result of processing (decryption), based on the key of the device [Kd] stored in the user information processing device , which has a valid license, and during decryption of encrypted content, moreover, the information processing device 150 uses the device key: Kd stored in the storage device b 156, d To perform BKN processing. The details of the decryption of the content will be described below.

2. About the content management module (ICC module)

As described above, the content stored on the information recording medium is subjected to decryption processing and stored with different keys corresponding to each module in order to implement different usage control for each module. In other words, the content is divided into content management modules (ICC modules), individual decryption processing is performed, and individual use management is performed.

When using the content, the need first arises to obtain the key of the ICC module (also called the name key) associated with each module, and then perform playback by performing data processing based on predetermined decryption processing sequences using other necessary keys, key generation information, etc. d. The settings of the content management module (ICC module) will be described with reference to FIG.

As shown in FIG. 2, the content has a hierarchical configuration consisting of (A) index 210, (B) movie object 220, (C) playlist 230, and (D) clip 240. By indicating an index, such as a name, for access of the playback device, it is provided, for example, an indication of the playback program correlated with the name if the playlist in which the playback order of the content is indicated is selected in accordance with the information of the playback program that has been indicated.

Playback items are included in the playlist as information about data to be reproduced. The AV stream, which is valid content or command data, is selectively read using clip information for the play units indicated by the play points included in the play list, and the AV stream is played back and executive processing is performed. It should be noted that there are a large number of playlists and play points, and each of them has a corresponding play list ID and play point ID as identification information.

Figure 2 presents two modules of the ICC. They form part of the content stored on the information recording medium. Each of the ICC module 1 271 and the ICC module 2 272 are ICC modules that were installed as modules including a name that performs an index function, a movie object, which is a playback program file, a playlist, and clip information including The AV stream file itself, which is the actual content data.

The content management module (ICC module) 1 271 includes a title 1 211 and a title 2 212, playback programs 221 and 222, playlists 231 and 232, a clip 241 and a clip 242, and AV stream data files 261 and 262 that are valid content data contained in two clips 241 and 242, which are at least data — an encryption object and, respectively, are set as data encrypted using a name key (Kt1), which is an encryption key, typically set according tvii module 1 271 controls content (ICC module) (also called key module ICC).

The content management module (ICC module) 2 271 includes an application program 1 213 as an index, a playback program 224, a playlist 233 and a clip 243, as well as an AV stream data file 263, which are actual content data calculated in the clip 243 which are encrypted using a name key (Kt2), which is an encryption key set in accordance with the content management module 2272 (ICC module).

For example, in order to execute for the user an application file or content reproduction processing corresponding to the content management module 1 271, a name key: Kt1, used as an encryption key that is set to be correlated with module 1 271 (MUS module) content management, must be obtained and subjected to decryption processing. In order to execute for the user an application program file or content reproduction processing corresponding to the content management module 2 272, a name key: Kt2, as an encryption key that is set to be correlated with the content management module 2 272 (MUS module), must be received and subjected to decryption processing.

Figure 3 shows the installation configuration of the ICC module and an example of the corresponding name keys. Figure 3 shows the correlation between the installation modules of the ICC modules, which are modules designed to control the use of encrypted content stored on the information recording medium and the name keys (keys of the ICC module) used for each ICC module. It should be noted that the ICC module and the name key for the data that will come later can be saved and set in advance. For example, data module 281 is records for data that will come later.

The installation modules of the ICC module can be very different, such as content names, applications, data groups, etc., and in each control table of the ICC module the IDs of the ICC module are used, which are used as identifiers corresponding to each of the ICC modules.

In Fig. 3, the name 1, for example, is the ICC module 1, and during decryption of the encrypted content belonging to the ICC module 1, it is necessary to generate a name key Kt1 and perform decryption processing based on the generated name key Kt1.

Thus, the content stored on the information recording medium 100 is stored after encryption processing with various encryption keys associated with each of the modules to implement usage management that is different for each of the modules. PI (UR) (rules of use) for each of the content management modules (ICC modules) are set for individual use management in relation to each of the content management modules (ICC modules). The terms of use are information including, for example, copy / play control information (IAI) of the content as described above, and are copy restriction information or reproduction restriction information of encrypted content contained in each of the content management modules (ICC modules) .

To generate a name key, it is necessary to perform data processing using various types of information stored on the information recording medium. Specific examples of such processing will be described in detail below.

3. Overview of content data configuration including modified data and data conversion processing

Next, an overview of the content data configuration including modified data and data conversion processing will be described. As described above, the encrypted content 101 included on the information recording medium 100 is set as corrupted data in which part of the configuration data is replaced with data other than the correct content data, as a result of which only the decryption processing does not allow playback of the content during playback, and Processing is required to replace the damaged data with the conversion data registered in the recovery table.

A configuration of the content stored on the information recording medium and an overview of the reproduction processing will be described with reference to FIG. 4. For example, AV (audio-video) content, such as a movie, is stored on the information recording medium 100. This content is encrypted, and the reproduction of the content becomes possible after decryption, by processing using an encryption key that can only be obtained as a result of reproduction, and on a device having a certain license. Specific content reproduction processing will be described below. The content stored on the information recording medium 100 is not only encrypted, but also has a configuration in which the content configuration data has been replaced with modified data.

4 is an example configuration of recorded content 291 stored on the information recording medium 100. The recorded content 291 is configured as normal content data 292 that has not been modified, and corrupted data 293, which is content that has been destroyed by modification. Corrupted data 293 is data that has been destroyed as a result of processing data related to the original content. Accordingly, proper reproduction of the content cannot be performed for that content 291 including corrupted data.

To perform playback of the content, processing is required to replace the damaged data 293 included in the recorded content 291 with the correct content data to generate playback content 296. Data for conversion (conversion data), which is normal content data corresponding to each of the areas of damaged data, is obtained by obtaining conversion data 295 [Record 295 recovery] recorded in the recovery table (FA) 105 (see FIG. 1), information recorded on the recording medium 100 when performing data replacement processing in the area of damaged data, thereby generating and reproducing playback contents 296. Specific examples of the recovery table and details of the reproduction processing using the recovery table will be described below.

Further, during the generation of the playback content 296, in addition to processing to replace the damaged data 293 with conversion data 297, which are normal content data, perform processing on a partial area of the recorded content 291 by the conversion data 298 set by the identifier including data enabling analysis of the configuration bits of the identification information, which makes identifiable a content reproducing apparatus or a reproducing application maintaining content (e.g. player ID). For example, in the event of a leak due to unauthorized copying of the content, analysis of the conversion data 298 established by the identifier in the illegally obtained content may allow the source of the leak of unauthorized content to be determined.

It should be noted that the recovery table in which the conversion data is recorded is recorded on the information recording medium and installed as a file separate from the content. In addition, a portion of the data in the recovery table, including the conversion data, is recorded with a spread over specific packets in the content configuration data. That is, the conversion data is stored in the recovery table 105 shown in FIG. 1, and is also scattered and recorded in the encrypted content 101 so that two copies thereof are recorded. The information processing device for performing reproduction of the content either obtains the conversion data stored in the recovery table 105 to perform data replacement, or obtains a conversion record recorded with a spread over the contents to perform data replacement.

In the case of a configuration of a record in the form of a block of the recovery table, which is the configuration data of the recovery table, including conversion data scattered across specific packets within the content configuration data, the configuration data of the recovery table block is stored in transport stream packets including the contents, with such an installation, as shown, for example, in figure 5. 5 (a) shows a configuration of content data. This content configuration illustrates content data composed of decrypted transport stream (TS) packets. The transport stream is configured from TP packets (transport stream) having a given number of bytes. The configuration data of a recovery table block including conversion data is recorded in a portion of a plurality of packets of these split packets. For example, the record is made in the package 307 TP shown in the drawing. An example of TP packages used to save blocks of a recovery table includes TP packages that include a TCP (PMT) (program map table) installed with a spread in content, etc.

Transformation data for executing replacement processing with respect to the decrypted content (or transformation data set by the identifier) and the recording position of the transformation data are recorded in the recovery table block. As information about the recording position in the case where there are many recording positions, such as, for example, shown in position (b) in FIG. 5, the offset from the package 307 TP, which includes the recovery record, which is the configuration data of the table unit recovery, recorded for the first position of the modified packet, and this offset position denotes the relative position of the packet from the first modified packet 308 to the next modified packet 309, recorded for the modified position th packet of the second packet.

The conversion data recorded in each of the blocks of the recovery table has recording positions set next to the package of TPs including the recovery record used as configuration data of each of the blocks of the recovery table, as shown, for example, in position (b) in FIG. 5.

In the example shown in position (b) of FIG. 5, for example, packets 308 and 309, which have conversion data recording areas, are installed next to packet 307, which has a recovery record, which is configuration data of a recovery table block. Such a setup allows performing data replacement processing using transformation data in the form of continuous processing after decryption, in the case of decrypting and reproducing content in real time, and efficiently performing detection and analysis processing of TS packets in which the recovery table is recorded, which allows processing for receiving conversion data and recording the conversion data to a position recorded in the table (overwriting).

An example configuration of a data conversion processing program 300 recorded on the information recording medium 100, a recovery table (FA) 301, and encrypted content 306 will be described with reference to FIG. 6. The recovery table 301 recorded on the information recording medium 100 has a configuration including a table 302 defining a secret parameter ID and a recovery table body 303a, as shown in FIG. 6.

The main part 303a of the recovery table is set up as a group 303b of the recovery table for each clip, the recovery tables block by block for each clip are configured from a plurality of blocks 1 to K 304 of recovery tables, and in addition, each of the blocks of the recovery table has a configuration including a plurality of records 305 recovery. Each of these recovery records includes conversion data intended to be used as replacement data, and information about a recording position of the conversion data.

Figure 7 shows an example of a data configuration for a single recovery record (FixUpEntry) included in a recovery table block. As shown in FIG. 7, a recovery record (FixUpEntry) contains the following data.

type_indicator: Type identifier [00: no conversion, 01b: processing with conversion data, 10b, 11b: processing with conversion data including an identification mark]

FM_ID_bit_position: Position of the identification bit for the player ID corresponding to the conversion data with the identifier set

relative_SPN: The position of the packet in which the conversion data should be applied (number of packets from the TCH packet)

byte_position: The position in which the transformation data is written in the packet

overwrite_value: Transformation data (also including the transformation data set by the identifier)

relative_SPN_2: The position of the packet where the second transform data is applied (number of packets from the TCH packet)

byte_position_2: The position in which the transformed data is written in the packet (correspond to the second transformation data)

overwrite_value_2: Second transformation data (also including the transformation data set by the identifier)

The configuration is made from this data.

The recovery table is set up as a recovery table in which conversion data is written for replacing a portion of the content data, and information on setting the position of the conversion data in relation to the content, wherein such a recovery table is used to execute a data conversion processing program including replacement command execution instructions content configuration data, resulting in data conversion.

Information [type_indicator] included in the recovery record information (FixUpEntry) contained in the block of the recovery table shown in FIG. 7 is a type identifier for identifying whether the registration information of the recovery table is (a) or (b) in according to the following:

(a) either registration information related to the conversion data intended to convert the damaged data into corresponding content data, or

(b) registration information related to the conversion data set by the identifier for embedding identification information of the reproducing device or the content reproducing application.

In the case where the range of registration information of the recovery table is a range of registration information related to the conversion data set by the identifier for embedding the identification information of the playback device or the content playback application, the conversion data to be selectively used based on the identification information of the content playback device, or a content rendering application is recorded as information ju registration table, that is, register as the conversion data set by the identifier.

The registration information [FM_ID_bit_position] is information about the position of the bit, which is accessed either from the identification information of the playback device or from the application program playback, consisting of many bits, to determine the type of processing. The type of processing is determined for data conversion so that, for example, in the case where the bit value is 1 for the bit referenced by the identification information of the playback device or the playback application program consisting of a plurality of bits, the content configuration data is replaced using the conversion data set by the identifier registered in the recovery table, and in the case where the bit value is 0 for the referenced bit, no replacement is performed.

It should be noted that an arrangement can be obtained in which the conversion is performed when the reference bit is 0, and the conversion is not performed when it is equal to 1. Or, a configuration can be made in which the conversion data in the case where the reference bit is 0, and the conversion data means that it is 1, set as separate conversion data, and the conversion data is selected and set in accordance with the value of the reference bit.

As shown in FIG. 6, the encrypted content 306 is set as a TS packet stream, and the packets with the restored records are stored with a spread in its part, that is, the packets 307a-307d are installed in the storage area of the restoration record. The AV stream is divided into clip modules, and recovery records in the clip modules are recorded with a spread across the entire content.

Adjacent conversion data is recorded in each recovery record set with a spread in the recording data, as described with reference to FIG. Recovery records recorded with a spread in the encrypted content 306 and recovery records included in the recovery table 301 are the same data and the information processing device that reproduces the content or obtains conversion data from the recovery records recorded with a spread over the entire content and performs data replacement, or receives conversion data from recovery records in the recovery table 301 and performs data replacement, depending on the specification, when a laid-back playback program (player).

As shown in FIG. 6, the content is divided into segments of predetermined data units. Recovery records that include each conversion data are calculated or encrypted using parameters (SP: secret parameters) that are different for each given content module (segment modules).

An information processing device that performs data conversion processing, which is data replacement processing performed during the reproduction of content, sequentially obtains secret parameters (SP1, SP2, SP3 ...), performs calculation or encryption processing, using the received parameters (SPn) for the block a recovery table including conversion data corresponding to each position of the segment, thereby performing processing to obtain conversion data.

Shown in Fig.6 table 302 determination of the ID of the secret parameter (SP), is a table in which written guide information to which the secret parameters should be applied, indicating the position of the content data. Details of this table and examples of its use will be described below.

A specific example of data replacement based on the conversion data will be described with reference to FIGS. 8 and 9. First, an example of processing consisting in performing data replacement by acquiring configuration data of a recovery table block including conversion data will be described with reference to FIG. which were recorded with scatter throughout the content.

FIG. 8 (a) is an illustration of a configuration of content recorded on the information recording medium 100. The configuration data of the recovery table block, including the recovery records, is recorded with a spread in TP packets 307a-d shown in the drawings.

The sequence of data replacement processing will be described with reference to position (b) in FIG. The processing shown in position (b) of FIG. 8 is a processing for executing a playback application (player) of the host device. At position (b) in FIG. 8, a portion of the TS packet stream for content belonging to segment ID = N, N + 1 is presented in the content configuration data.

For example, a package 311, including a recovery record recorded in segment ID = N, contains a recovery record 315 processed using an exclusive OR operation (XOR), which is the result of a calculation using an exclusive OR logical operation with a secret parameter (SPx). The playback application (player) of the host device that performs the data replacement processing performs the exclusive-OR operation calculations using the secret parameter (SPx) 316 with respect to the recovery record 315 processed using the exclusive-OR logical operation, as a result of which recovery record 317, and conversion data and recording position information from recovery record 317 are obtained to perform replacement processing for packets 312a and b at the data replacement position.

The parameter (SPx) used to calculate the recovery record 317 is transmitted from the protected VM 320. For example, the playback application (player) receives the secret parameter ID (SP_ID), which is used as the secret parameter specification information corresponding to each segment, and outputs a request for calculating a secret parameter, including a notification about the ID of the secret parameter, as an interrupt request (INTRP) to the protected VM, to obtain the secret parameter (SPn) required for each segment obsession. The protected VM calculates the secret parameter (SPx) corresponding to (SP_ID) in response to the request for calculating the secret parameter from the playback application (player), and provides it to the playback application (player) as a response (Call).

As shown in Fig. 8, different segments have different parameters for parameters (SPx), intended for use in the calculations for obtaining recovery records. For example, each segment is set to approximately 10 seconds of the playback time of the content, and the playback application (player) every 10 seconds receives from the protected VM parameters that are different for each segment, restores the recovery record, receives the conversion data from the restored recovery record, and performs replacement processing data.

Figure 9 shows an example of processing where recovery records after processing using the exclusive OR function are obtained from a single clip containing a recovery table 303b used as an independent file of a recovery table block, instead of a recovery table block recorded with a scatter in content, according to which the calculation or processing of the encryption is performed, wherein the recovery records are restored, and the conversion data is extracted from the restored recovery records to perform replacement nyh.

Fig. 9 (a) shows a configuration of content recorded on the information recording medium 100. Recovery records containing conversion data are recorded with a spread over the TP packets 307a-d shown in the drawing, but in this example, such data is not used, and instead they use a single clip containing the recovery table 303b, which is the configuration data of the recovery table, independently recorded on the recording medium information, and data replacement is performed using the recovery record stored in this one clip containing the recovery table 303b.

The data replacement sequence will be described with reference to position (b) in FIG. 9. The processing shown in position (b) in FIG. 9 is the processing that is performed in the reproduction application (player) of the host device. At position (b) in FIG. 9, a portion of the TS stream of content packets belonging to the segment ID = N, N + 1 in the content configuration data is presented.

For example, in the case of performing a data replacement with respect to ID = N segment, a recovery record corresponding to ID = N segment is contained in one clip that contains the recovery table 303b. However, the x315 recovery record is the exclusive-OR recovery record 315, as the result of calculations using the logical exclusive-OR operation with the secret parameter (SPx), in the same way as the block of the recovery table recorded with a scatter in content . The playback application (player) of the host device for performing data replacement processing obtains a recovery record 317 by performing an exclusive OR calculation with the secret parameter (SPx) 316 with respect to the recovery record 315, after processing it using the exclusive OR operation "obtains the conversion data and information about the recorded position from the recovery record 317 and performs replacement processing with packets 312a and b at the data replacement positions.

The parameter (SPx), intended for use in calculations for obtaining recovery records 317, is transmitted from the secure VM 320 in the same manner as in the processing example described above. For example, the playback application (player) obtains the secret parameter ID (SP_ID), which is the secret parameter specification information corresponding to each segment, and outputs the result of the calculation of the secret parameter, including the notification of the secret parameter ID, as an interrupt request ( INTRP) for the protected VM to obtain the secret parameters (SPn) required for each content segment. The protected VM calculates the secret parameter (SPx) corresponding to SP_ID in response to this request for calculating the secret parameter from the playback device (player), and transfers it to the playback application program (player) as a response (Call).

As shown in FIG. 9, different segments have different parameters for parameters (SPx) intended for use in calculations to obtain recovery records. For example, each segment is set to approximately 10 seconds of the playback time of the content, and the playback application (player) receives parameters that differ for each segment from the protected VM every 10 seconds, restores the recovery record, obtains the conversion data from the restored recovery record and performs replacement processing data.

Thus, the application of the playback program (player) for performing playback of the content obtains secret parameters from the protected VM and in the modules of each segment, calculates, restores the restoration records, which are the configuration data of the recovery table block, and receives the restored recovery records and performs the replacement data. It should be noted that, although the processing example described above was presented as an illustration of the case of using the exclusive OR operation (XOR) as a calculation using secret parameters, other competing processing can also be used. Furthermore, an arrangement may be made in which encryption processing or the like is performed using secret parameters.

4. Processing the playback application (player) and the protected VM

In the case of the processing described above, the playback application (player) sequentially receives various secret parameters (SP1, SP2, SP3 ...) in certain modules of the segment, performing content reproduction, which means that the secret parameters are received in relation to the protected VM, and data is replaced perform before playing the switching point of the segments. In this case, the application playback program (player) notifies the protected VM, passing in it the ID (SP_I) of the secret parameter as the specification information of the secret parameter, thus determining the necessary SP. The secret parameter ID (SP_I) is recorded in the secret parameter (SP) ID determination table 302 described above with reference to FIG. 6.

The application playback program (player) must perform processing to set this table 302 determine the ID of the secret parameter (SP) in a state in which it can be accessed. The sets of processing sequences performed by the playback application and the protected VM will be described with reference to FIG. 10.

As described above with reference to FIG. 1, information transfer or processing requests between the playback application program 150 (player) and the protected VM 160 are performed using an interrupt sequence (INTRP) from the playback application program (player) 150 to the protected VM 160, and processing the response (Call) coming from the protected VM 160 to the application program 1540 playback (player).

The processing sequence shown in FIG. 10 is a diagram illustrating the types of processing performed between the playback application 150 (player) and the protected VM 160 from the insertion point of the information recording medium on which the content is recorded, before it is extracted.

For example, step S11 is Media Initialize processing, which is performed as processing during insertion of an information recording medium (disc), in which a playback application program (player) 150 loads a Content Code File on which the code information necessary for the initial reproduction processing is recorded in its storage device, and starts execution. The Content Code File defines the manufacturer, model, etc. playback application (player).

For example, protected VM 160 determines whether the resulting model is a model for which there was a security problem in the past, and in the case when this model is a model for which there was a security problem in the past, a check is performed by executing the content code (Content Code), which refers to the occurrence of a similar security issue. For example, check some values in the RAM of the information processing device or the operation of a specific device, whether they are in the correct state. It should be noted that the verification program for each model may not be included in this initially downloaded content code file, and in this case, they will refer to another necessary content code file. After the initiation processing of the secure VM 160 is completed, the response (Call) is passed to the playback application 150 (player), and the flow proceeds to the next step S12.

In step S12, Title Initialize processing is performed. The name is used as the indicated content information for reproduction, wherein the name corresponding to the specific content intended for reproduction is selected based on a user’s description or the like, and the name initiation processing request is output from the playback application (player) 150 to the protected VM 160 , along with title information.

The protected VM 160 generates a recovery table in the memory of the protected VM 160 by collecting the conversion data information corresponding to all the clips necessary for reproducing the name, and notifies the playback application program (player) 150 of the position in the storage device in which the table was recorded, which allows the application program 150 playback (player) get this table. It should also be noted that the security check, the same as for initiating the medium in step S11, can be performed during the initiation of the name.

An example of processing for generating a recovery table in the storage of the protected VM 160 by collecting conversion data corresponding to all the clips necessary for reproducing the name that is reproduced during the name initiation processing will be described with reference to FIG. 11. 11 shows a memory area (for example, 2 MB) that the protected VM 160 can use. Here, a content code that is code information included in the data conversion processing program that the protected VM 160 received from the information recording medium is stored. It should be noted that this content code includes a recovery table undergoing intentional entanglement processing, such as encryption or the like.

After entering a request to initiate a name from the playback application (player) 150, the protected VM 160 performs decryption processing of the recovery table, collecting information of the conversion data corresponding to all the clips necessary for reproducing the name from the content code, if necessary, stores it in memory in the state in which it was processed, such as the state described above, after processing by the exclusive-OR logic function (masked state), and notified This position of storing in memory shows the application program 150 playback (player). Such notification processing is performed as a response (Call) to a name initiation request (INTRP) from the playback application program (player) 150.

After receiving a response (Call) from the protected VM 160 regarding the request (INTRP) for initiating the name, the application program 150 playback (player) copies and saves the necessary part of the data from the save table of the recovery table in the memory area that the protected VM 160 uses to the memory area that can be used by the application program 150 playback (player). For example, a secret parameter ID table (SP_ID) is designated and copied for obtaining a secret parameter ID (SP_ID) corresponding to the content segment described above with reference to FIGS. 6-9, and the table is stored in a memory area that can be used application playback program 150 (player).

In the case where the playback application program (player) performs processing to obtain conversion data from a recovery table block recorded with a content scatter as described above with reference to FIG. 8, obtaining the secret parameter ID determination table (SP_ID) is sufficient, however in the case where the player is as described with reference to Fig. 9, that is, a player that does not use a recovery table block recorded with a content scatter, processing is performed in this copies of the contents for copying and saving the ID definition table (SP_ID) of the secret parameter, as well as the block of the recovery table in which the recovery records are recorded, in the memory area used by the player. The block of the recovery table after processing using the exclusive OR operation described with reference to FIG. 9 is a block of the recovery table copied to a memory area that the playback application 150 (player) can use in this processing.

Referring again to FIG. 10, the description will be continued with respect to the processing sequence between the playback application program 150 (player) and the protected VM 160. In step S13, processing corresponding to the calculation (Compute_SP) of the secret parameter (SP) in which the application program 150 playback is performed (player) outputs a request (INTRP) for calculating the SP to the protected VM 160, and the protected VM 160 returns the calculation results (SP) to the application program 150 playback (player) as a response (Call). In the case of outputting a request (INTRP) for calculating the SP to the protected VM 160, the playback application program (player) 150 obtains the SP_ID used as information identifying the SP, for example, from the secret parameter ID table (SP_ID), and transmits a notification about this.

It should be noted that in the case of obtaining the SP_ID as information identifying the SP and notifying the protected VM 160 about it, the application program 150 playback (player) must accurately select the SP_ID corresponding to this segment of the content. A specific example of SP_ID selection processing will be described below. The processing in step S13 is repeatedly performed for each segment.

The processing in step S14 is the processing of a request from the playback application program (player) 150 to the secure VM 160 to perform other calculations except for the secret parameter. For example, in the case where this processing is a request to perform a security check, the protected VM 160 performs the processing in accordance with the request and notifies the playback application 150 (player) of the processing results as a response (Call). It should be noted that for transferring this information, a register is used in which the playback application program (player) 150 and the protected VM 160 can write and read information, such as a player status register, for example, a PSR register (PSR, processor status register).

The processing in step S15 is the media finalize processing during disc ejection of the information recording medium (Disc), and wherein the processing state of the content code is recorded in a non-volatile storage device. This processing allows you to continue past security verification information for use the next time you insert a disc.

As described above, requests and responses for transmitting information or processing between the playback application program 150 (player) and the secure VM 160 are performed using an interrupt (INTRP) from the playback application program (player) 150 to the secure VM 160 and call processing from secure VM 160 into the application program 150 playback (player).

In this case, the protected VM 160 does not perform all the input interrupt processing (INTRP) from the playback application (player) 150, but performs some processing based on certain conditions and discards some processing. The method by which interrupt processing requests (INTRPs) are received or discarded in the secure VM 160 is described with reference to FIG.

On the graph 321, shown in the drawing, shows the transition mode in a protected VM. Time (t) flows from left to right. First, in the background, enter a request to calculate the secret parameter (SP) as an interrupt request from the playback application (player). At this moment, the protected VM does not perform processing and, accordingly, accepts (Accept) a request for calculating a secret parameter (SP), performs a transition to the parameter calculation mode and processes the parameter calculation.

In addition, in the case when the interrupt request is received from the playback application (player) during the period of the calculation mode of this parameter, the first request will be accepted, and successively received interrupt requests will be discarded (Ignore).

Processing corresponding to the first interrupt request received during the period of the parameter calculation mode is performed in the interrupt request mode, which follows after the end of the period of the parameter calculation mode. In addition, they accept a request for calculating a secret parameter (SP) adopted during this period (Accept), and after completing the request mode of the application program, they switch to the corresponding calculation mode, in which, thus, the parameter calculation is processed, while protected A VM has a configuration of the contents of only one raw interrupt before one type of interrupt (INTRP). The second and subsequent interrupt requests are discarded (Ignore).

5. Content reproduction processing

Next, with reference to FIG. 13, content reproduction processing that the host device performs will be described. 13 shows, on the left, an information recording medium 330 on which encrypted content is recorded, a drive 340 in which an information recording medium 330 is mounted for reading data, and a host device 345 that is connected to the drive so as to enable data transfer, and which receives the content recorded on the information recording medium 330 by the drive 340 and executes a reproduction application program that performs its reproduction processing.

It should be noted that the main device 345 shown in FIG. 13 is shown divided into a block 350 of a playback application (player) that performs processing such as decrypting the content, decoding, transmitting data, etc., and the secure VM unit 360 having a protected VM 360, which performs the processing of calculating the secret parameter (SP), etc.

On the information recording medium 330, a BKN (medium key block) 331, a name key file 332, encrypted contents 333, recovery tables 335 and a data conversion processing program 334 are recorded. The host device 345 contains a device key 351, which should be used to process the BKN.

The processing sequence in which the host device 345 shown in FIG. 13 receives and reproduces the stored content on the information recording medium 330 via the drive 340 will be described below. First, before reading the content stored on the information recording medium 330, the host device 345 and the drive 340 perform mutual authentication in step S101. Such mutual authentication is processing to confirm that each of the host device and the drive is an authorized device or application. For this sequence of mutual authentication processing, various types of processing can be applied. As a result of the mutual authentication processing, the drive 340 and the host device 345 share the session key (Ks) used as the shared secret key.

In step S101, after performing mutual authentication between the host device and the drive, and when sharing the session key (Ks), the playback application program (player) 350 of the host device 345 obtains a BKN 331 recorded on the information recording medium 330 using the drive in step S102 performs BKN 331 processing using the device key 351 stored in the memory and obtains a media key (Km) from the BKN.

As described above, the BKN (media key block) 331 is an encryption key block generated based on a key distribution system with a tree structure, known as a certain type of encryption method for broadcasting, and is a key information block that allows to obtain a media key (Km ), which is the key needed to decrypt the content, only as a result of processing (decryption), based on the key (Kd) of the device stored in the device, which has a valid nd license.

Then, in step S103, the media key (Km) obtained by the BKN processing in step S102 is used to decrypt the name key file 332 read from the information recording medium 330, thereby obtaining the name key (Kt). The name key file 332 stored on the information recording medium 330 is a file including data encrypted using the media key, and the name key (Kt) used to decrypt the content can be obtained by processing using the media key. It should be noted that in the decryption processing in step S103, an encryption algorithm, for example, AES, is used.

Then, the playback application program 350 (player) of the host device 345 reads the encrypted content 333 stored on the information recording medium 330 through the drive 340, stores the read content in the track buffer 352, performs decryption processing using the name key (Kt) in step S104 for content stored in the buffer and receives decrypted content.

The decrypted content is stored in the plaintext buffer 353 of the TS. The term (open TP) refers to the transport stream of decrypted plaintext. Then, the decrypted content stored in the TP plaintext buffer 353 is the content containing the damaged data described above, which cannot be reproduced in the form in which it is recorded, and there is a need to perform a given data conversion (data replacement by overwriting).

The processing example shown in FIG. 13 is an example of processing in which recovery records recorded with a spread in certain packets are obtained within the encrypted content configuration data, conversion data is extracted from them, and data is replaced. That is, this is equivalent to the data conversion processing described above with reference to FIG.

Recovery records, divided and recorded in the content, are data in which transformation data (or transformation data set by an identifier) is recorded for performing replacement processing on the decrypted content and determining a recording position in which the conversion data is recorded.

Protected VM 361 reads the data conversion processing program 335, including command code information, from the information recording medium 330, and periodically generates and outputs secret parameters (SP1, SP2, SP3 ...) necessary to change the recovery table recorded on the recording medium 330 information, together with the content, to the clear text recovery table, during playback of the content or before the output processing, and during processing, based on the control of the event handler 354, and input of the information of the player the resident 355. Such processing is performed periodically.

Secret parameters (SP1, SP2, SP3 ...) are, as described above, the calculation of encryption processing parameters that switch segments corresponding to the given content data modules, and, in particular, are, for example, XOR operation parameters (XOR ) Protected VM 361 performs processing for periodically generating and outputting parameters (SP1, SP2, SP3 ...) necessary to restore recovery records, such as configuration data of a recovery table block modified as a result of calculation processing during encryption processing, based on requests from a playback application (player).

In the playback application (player) 350, in step S104, decryption of the encrypted content 333 including the recovery records is performed, the recovery records which are the recovery table configuration data recorded in the content are separated as a result of the processing in the demultiplexer in step S105, and table recovery and data conversion processing is performed in step S106 under the control of a real-time event processor 356. Thanks to the control of the event processor 356 in real time, the playback application 350 (player) generates requests for calculating the secret parameter corresponding to the segment transition in the form of an interrupt (INTRP) for the protected VM 361, receives the protected parameters (SP1, SP2, SP3 ...) from protected about VM 361, performs decryption or calculation of a recovery table block to obtain a clear text recovery block block, and receives recovery records contained in the received recovery table block.

Transformation data is recorded in the recovery records, i.e.

(a) conversion data,

(b) conversion data set by the identifier,

and information that determines the recording position in the content of the above conversion data when the application 350 performs playback (by the player), the data conversion processing for recording at a specific position in step S106, as real-time processing, in parallel to the content playback processing or the output processing .

For example, in the case where the parameters (SP1, SP2, SP3 ...) are the parameters of the exclusive-OR operation (XOR) with the conversion data corresponding to the modules of the given data of the content part, the recovery processing in step S303 is as follows:

[Block 1 recovery table] (XOR) [SP1]

[Block 2 recovery table] (XOR) [SP2]

[Block 3 recovery table] (XOR) [SP3]

and so on.

This processing is performed with an exclusive-OR operation, as a result of which recovery records are included that are included in the data of the recovery table block. It should be noted that in the above expressions [A] (XOR) [B] denotes an exclusive OR operation on A and B.

Thus, the recovery table block contained in the content 333 recorded on the information recording medium is divided into recovery records in which the conversion data and the position information of the conversion data corresponding to each part of the content stored after the exclusive-OR operation with secret parameters ( SP1, SP2, SP3 ...). These parameters are constantly received and displayed using the protected VM 361.

In the table recovery processing and the data conversion performed in step S106, the conversion data is obtained from the recovery records restored by obtaining encryption using the secret parameters (SP1, SP2, SP3 ...) as a result of the calculation or processing, while the damaged data included in the content are replaced with transform data, which is the correct content configuration data, and furthermore, perform data rewriting processing in which the transform data is identified by to the identifier, replace with a part of the content data, thereby changing the stored data in the plaintext buffer 353 of the TS into converted data. An overview of this data conversion processing will be described with reference to FIG.

The encrypted content 333 stored on the information recording medium is temporarily stored in the track buffer 352, on the side of the host device. 14 (1) shows this data 401 stored in a track buffer. Decryption of the encrypted content, which is data 401 stored in the track buffer, is performed using decryption processing on the side of the host device, and the data obtained as a result of this decryption is stored in the plaintext buffer 353 of the TS. On Fig (2) shows the data 402 obtained by decryption.

Decryption result data 402 includes corrupted data 403 that is not valid content configuration data. The data conversion processing unit of the host device performs processing to replace this damaged data 403 with conversion data 404, which is the correct content configuration data. This replacement processing is performed as rewriting (overwriting over old data) a portion of the data related to data recorded, for example, in the plaintext buffer 353 of the TS.

Further, the data conversion processing that the host device performs is not only processing for replacing the damaged data with conversion data, which is normal content data, but also performing processing for replacing a portion of the configuration data in the data 402 of the decryption result of the conversion data 405, set by the identifier, as shown in FIG.

An identifier is data that allows identification bits of a configuration of identification information that identifies a reproducing apparatus or a content reproducing application as described above. In a specific example, configuration information of identification information (player ID) of an information processing device that is used as a player to execute an application program of a host device or an identification tag generated based on a player ID is presented. The conversion data set by the identifier is data in which the bit values of the correct content data have been slightly changed within a level that does not affect the reproduction of the content, as described above.

A large amount of conversion data 405 set by the identifier is set in the content, and collecting and analyzing a plurality of conversion data sets 405 set by the identifier determine, for example, the player ID. The transform data 405 set by the identifier is data in which the configuration bits of the normal content data have been replaced within the level at which normal reproduction of the content can be performed, and this data in which the bit definition (identification mark configuration bit) is provided by MPEG bit stream analysis.

A large amount of conversion data 404 and conversion data 405 set by the identifier shown in FIG. 14 is recorded in a recovery table stored on the information recording medium, and furthermore, recording position information is recorded on it. When performing data conversion processing based on the recorded information of the recovery tables, the data stored in the TP plaintext buffer 353 is replaced with the converted data 406 shown in FIG. 14 (3).

After that, the transformed TP (transport stream) is brought out through a network or the like and reproduced in an external playback device. Or, they convert from a transport stream (TP) to an elementary stream (ES) in step S107 as a result of processing by a demultiplexer, and then, after decoding processing (step S108), they are reproduced through a display speaker.

6. Processing to obtain the SP identifier (SP_ID) corresponding to the segment

As described above, the content recording on the information recording medium is divided into segments, so that during the data conversion processing necessary for each segment, it would be necessary to obtain secret parameters (SPn), which differ for each segment, from the protected VM, to recover a recovery table block including recovery records using the obtained secret parameters.

To obtain secret parameters (SPn) from the protected VM that differ for each segment, the playback application (player) obtains the identifier (SP_ID) of the secret parameter corresponding to each segment and notifies the protected VM of the received secret parameter identifier (SP_ID). The following is a description of a variety of processing examples 1-3, which relate to techniques for obtaining the corresponding identifiers (SP_ID) of the secret parameter corresponding to each segment.

(6.1) Processing example 1 to obtain a SP identifier (SP_ID) corresponding to a segment

Processing example 1 to obtain a SP identifier (SP_ID) corresponding to a segment will be described below. In this processing example, the NPI (source packet number) used as identification information packets (TP packets) that configure the content is pre-registered in the secret parameter ID determination table described with reference to FIG. 6 in correlation with SP identifiers (SP_ID )

The application playback program (player), which is designed to perform playback of the content, first receives the NPI (source package number) corresponding to the content data intended for reproduction from the EP card recorded in the clip information, which is information of the content reproduction unit. In addition, on the basis of the NPI (source packet number) obtained from the EP card, a search is performed in the definition table for the ID of the secret parameter and the SP identifier (SPJDD) is set to match to obtain the NPI (source packet number).

The playback application (player) notifies the protected VM of the SP identifier (SP_ID) obtained from the secret parameter ID determination table, and executes an INTRP request for calculating the secret parameter.

The following is a detailed description of the present processing example with reference to the drawings. On Fig shows a diagram describing the processing of reproducing content using a module for reproducing content that performs the reproduction of the content, that is, the application program playback (player). Initially, during playback of the content, the playback application program (player) obtains clip information, which is information of the content reproducing unit.

For example, clip information shown in FIG. 15A is selected. The clip information is EP maps including content packet identifier information set as a plurality of data sets. Each EP card includes, for example, packet information related to the I-image within the GRI (GOP, group of images), which are used as a module of encoded MPEG data, which are encoded data configuring an AV stream, which is the playback content shown in figv.

The information of the I-image packet included in the EP card includes an NPI (source packet number). For example, as shown in FIG. 15C, each GRI (Image Group) consists of one I-image 411 and a plurality of P and B images. The I-image 411 is encoded data set as a reference image within the IRG, and P and B images are image information in which I-image information is used as reference information.

It should be noted that the package to be installed as corrupted data is made of TP package modules, and that the TP packages installed from this image I-image configuration 411 or P and B images are shown in the drawing. That is, each I-image or P and B images are stored with a spread over a large number of TP packets.

For example, the installation of one of the TP packets constituting the I-image 411 within this GRI as modified data (damaged data) means that the I-image, which is a reference image for the MPEG data shown, will be violated, resulting in P -images and B-images that use the I-image as a reference for information intended for recovery (MPEG decoding) cannot be restored, and accordingly, effective data destruction can be performed .

An application reproduction program (player) for reproducing content obtains transformation data recorded in a recovery table by converting data, and performs data replacement. It should be noted that, as described above, data replacement is performed not only for the conversion data, which should be replaced by damaged data, but also in relation to the conversion data set by the identifier.

As described above, the conversion data is recorded in the recovery table, but it is calculated or encrypted using different secret parameters (SP) for each segment, and, accordingly, the application playback program (player) designed to reproduce the content must receive a secret parameter, corresponding to each segment, from the protected VM.

In the present processing example, the playback application program (player) receives the NPI (source packet number) from the EP card registered in the clip information used as the information of the content reproducing unit, searches in the determination table of the ID of the secret parameter based on the received NPI (packet number source), and receives the SP identifier (SP_ID) corresponding to the NPI (source packet number) with respect to the reproduction to be performed.

First, an EP map will be described in detail with reference to FIGS. 16 and 17. As shown in FIG. 16, an EP map 412 (EP_map) is data included in a clip information file (clip information). The detection of the position of the I-image based on the EP map will be described with reference to FIG. On figa shows the AV stream of the clip, and in each rectangle marked source packets with a size of 192 bits. Each source packet is set with a time stamp, and in this case, the time for processing playback is determined.

On figv presents a detailed configuration of the packet number (XI) of the source. Each source packet is configured from a TP_extra header and a transport packet, wherein the transport packet is made up of various types of header information, and I-PIC H data, and so on, used as MPEG2 object data.

The clip information shown in FIG. 17C includes an EP card as described above. As shown in the drawing, the EP card includes various data such as [PTS_EP start], [SPN_EP start] and [I_end_position_offset]. The meanings of each of these data are as follows.

PTS_EP start: timestamp corresponding to a source packet including a sequence header (presentation timestamp).

SPN_EP start: represents the address of the source packet header including the sequence header.

I_end_position_offset: represents the offset of the source packet, including the end of the I-image, from the source packet, including the header of the sequence.

On fig.17D presents the interdependence of this data.

Thus, as shown in FIG. 17B, the configuration of the data contained in the source packet is conditional upon receipt of the data [PTS_EP start], [SPN_EP start] and [I_end_position_pffset] shown in FIG. 17C from the EP card, position I -images in the source packet can be obtained based on this data.

In the present processing example, the playback application program (player) for executing reproduction of the content receives an NPI (source packet number) corresponding to the content data intended for reproduction from the EP card registered in the clip information, which is information of the content reproducing unit, Searches for the ID of the secret parameter by determining the table based on the received NPI (source packet number), and obtains the SP identifier (SP_ID), respectively The existing NPI (source package number) for playback.

Fig. 18 is a flowchart illustrating an example of a data configuration of a secret parameter ID (SP) determination table, and a sequence for processing a request for calculating the SP performed by the playback application (player) with respect to the protected VM.

Each step in the flowchart shown in FIG. 18 will be described below. Initially, in step S201, the playback application program (player) for reproducing the content obtains clip information, which is information of the reproducing unit of the content for reproducing, and then in step S201, receives an EP card included in the clip information. Next, in step S203, an NPI is obtained from the obtained EP card, which is a source packet number indicating reproduction positions.

For example, suppose the source package number was received: NPI = 9451000. Then, in step S204, the determination table SP_ID is accessed. It should be noted that this SP_ID definition table is the configuration data of the recovery table stored on the information recording medium as described above with reference to FIG. 6, and that, as described above, with reference to FIGS. 10 and 11, it is copied and stored in a memory area that the playback application can use.

As shown in FIG. 18, the SP_ID determination table is recorded as a correlation table between the SP_ID and source packet numbers (NPIs). The SP_ID definition table shown in the drawing is a SP_ID definition table corresponding to the clip. The registered source packet number (NPI) corresponding to each SP_ID is equivalent to the first packet number in each segment constituting the content.

In an example of such a determination table SP_ID shown in the drawing, the content segment, which, for example, corresponds to SP_ID = 124, is the package number (NPI) 9362153-9444310, and the content segment, which corresponds to SP_ID = 125, is the package number (NPI ) 9444311-9528254.

Assume that in step S203, the playback application received the source packet number: NPI = 9451000 from the EP card in the clip information. In step S204, the playback application program obtains the SP_ID corresponding to the source packet number: NPI = 9451000 from the determination table SP_ID.

In the example SP_ID definition table shown in FIG. 18, the source packet number: NPI = 9451000 belongs to the packet numbers (NPI) = 9444311-9528254 that correspond to SP_ID = 125. Accordingly, the ID of the secret parameter corresponding to the source packet number: NPI = 9451000, is SP_ID = 125. In step S205, the secret parameter ID [SP_ID = 125] corresponding to the source packet number: NPI = 9451000, is obtained as follows.

In step S206, the playback application (player) notifies the protected VM of the received secret parameter ID [SP_ID = 125], performs a request (INTRP) to calculate the secret parameter (SP) corresponding to the segment, and obtains the secret parameter (SP) corresponding to the segment, from protected VM.

An example of a configuration of a recovery table and a determination table SP_ID that can be applied in an example of the present processing will be described with reference to FIGS. 19 and 20. FIG. 19 is a diagram illustrating a configuration of a recovery table. The recovery table includes the following data.

Number of clips (= Nclip): The number of clips used in the title.

FixUpTableBody_StartAddress: start address for the main part of the recovery table within the recovery table.

SPChangePositionTable (): SP_ID definition table.

FixUpTableBody (): the main part of the recovery table.

In the present processing example, the SP_ID determination table is a table in which a packet number is recorded for which the secret parameter (SP) is to be changed, as shown in FIG. That is, the head packet number of each segment is recorded so that it corresponds to each SP_ID.

An example of data configuration of the definition table SP_ID [SPChangePositionTable] contained in the recovery table is shown in FIG. The SP_ID definition table is set as the table in which the source packet numbers (NPI) are used, used as packet identifiers, corresponding to the SP - changed parts included in each clip for each clip. The definition table SP_ID includes the following data.

Clip_ID: ID of the clip.

SP Number (= NSP): number of segments (SP_segment).

SP_segment_START_SPN: source packet number (NPI) in the segment header (SP_segment) corresponding to SP_ID.

The playback application may receive the source head packet number (NPI) of the segment (SP_segment) corresponding to SP_ID, and obtain the SP_ID corresponding to the NPI to be reproduced.

On Fig presents an example configuration data of the main part of the recovery table [FixUpTableBody] included in the recovery table. The main part of the recovery table has the following data for each clip.

Clip_ID: identifier (ID) of the clip (in the case where clip_ID = 1234 corresponds to the clip file 01234.clpi, 01234.m2TP).

Number of SP (= NSP): The number of segments (SP_segment) in the clip.

Additionally, the following data has been saved for each SP_ID.

The starting address of the fuel assembly unit (): the starting address of the recovery table unit (fuel assembly unit).

FA block: recovery table block.

As shown in the drawing, each block of the recovery table is set so that it includes all recovery records corresponding to one segment (SP_segment).

Below, with reference to FIG. 22, a description will be made regarding an example of a data configuration of one block of a recovery table. The recovery table block is a table in which recovery records are stored including conversion data used as valid replacement data and recording position information as described above. The following data is recorded in the recovery table block.

The number of FixUpEntry in this block (= NFixups): the number of table program cards (TCH), including recovery data (FxUp data) within the segment (SP_segment) corresponding to this block of the recovery table (FA block).

In addition, the following data is included for each of the recovery records.

Base NPI for FixUpEntry: source package number (NPI) for the program map table (TCH), which has a recovery record structure (FixUpEntry), which is the first in the segment (SP_segment).

FixUpEntry (): represents a recovery record; compares the information of the recovery record (FixUpEntry) with the table of the program map (TCH) having the structure of the recovery record (FixUpEntry), which is located first in the segment (SP_segment).

It should be noted that the recovery record (FixUpEntry) is data in which the recorded conversion data, which is the actual replacement object, and information about the recording position of this conversion data, as described above with reference to Fig. 7, where the playback application program ( player) extracts the position information of the transformation data record along with the transformation data from the recovery record, overwrites the transformation data in the specified position, thereby performing at once, data conversion.

Next, a description will be made with respect to a content reproduction processing sequence involving replacing data using transform data by obtaining a different secret parameter (SP) for each segment, with reference to the flowchart shown in FIG. 23. First, in step S401, the playback application program (player) determines a name for reproduction and generates a name initiation command for the protected VM. In step S402, the protected VM performs name initiation processing and performs recovery table generation processing (FixUpTable) corresponding to that name. This processing has been described above with reference to FIGS. 10 and 11 and corresponds to the processing in step S12 in the flowchart shown in FIG. 10.

At step S403, the playback application program (player) obtains the information that is needed from the recovery table (FixUpTable). This processing has been described above with reference to FIG. 11, and it is performed as processing for copying the necessary information from the recovery table recorded in the memory area of the protected VM to the memory area that the playback application (player) can use.

In the case of the application of the playback program (player), which performs data conversion by allocating a block of fuel assemblies of recovery records multiplexed by the content transport (transport stream), that is, in the case of the application program of playback (player), which performs the processing described above with reference to FIG. .8, only the secret parameter ID (SP) definition table will be copied to its own memory area. On the other hand, in the case of a playback application (player) that does not use a fuel assembly block multiplexed by the content TS (transport stream), and instead uses the transformation data recorded in the block of the recovery table within the file of the recovery table, i.e. a playback application program (player) (TVS preload type player) that performs the processing described above with reference to FIG. 9, the entire recovery table is copied to its own memory area.

Then, in step S404, the playback application program (player) obtains the clip information corresponding to the name, and obtains the source packet number (NPI) value corresponding to the start point of the playback from the EP card contained in the clip information.

Then, in step S405, the secret parameter ID (SP_ID) of the starting point is determined from the table (SPChangePositionTable ()) of determining the SP_ID based on the NPI obtained from the EP card. Such processing is the processing described with reference to FIG.

Then, in step S406, the protected VM is notified of the received secret parameter ID (SP_ID) and a request is made to calculate the value of the secret parameter (SP). Such processing is equivalent to the processing in step S13 described with reference to FIG. 10.

Then, in step S407, the playback application program (player) obtains the value of the secret parameter (SP) corresponding to the segment calculated by the protected VM, restores the recovery table block based on the secret parameter (SP), receives the restoration records stored in the restored block of the recovery table , performs data conversion processing to replace data within the content segment with conversion data, based on the conversion data recorded in the restoration records Nia, and their recording position and step S408 is performed on the decoding process and playback processing.

Then, in the case of moving to the next segment, in step S410, the NPI of the next playback segment is obtained from the EP card and the processing is performed from step S405 onwards. That is, based on the NPI obtained from the EP card, the SP_ID corresponding to the segment is obtained from the SP_ID definition table (SPChangePositionTable ()), and the notification of the received SP_ID is transmitted to the protected VM, and the SP value corresponding to the segment is obtained, the recovery table block is restored based on the obtained SP value, the recovery record is obtained from the restored block of the recovery table, the conversion data and the recording position are extracted from the recovery record, and for each segment, the transform data is processed Nia, in which the data segment replaced by the content conversion data.

In accordance with this processing, processing is performed in which different secret parameters (SP) are used for each segment.

Next, with reference to FIG. 24, a processing sequence performed in the case of special playback processing, such as random access, will be described. It should be noted that the processing shown in Fig. 24 illustrates only the processing sequence following the name initiation processing. That is, it presents the completion following the processing in steps S401 to S403 of processing in the flowchart shown in FIG. 23.

First, in step S421, the playback application program (player) obtains an EP card from the clip information in response to a request to perform a special playback process, such as random access, and obtains a source packet number (NPI) value corresponding to a playback start point from the received EP cards.

Then, in step S422, the secret parameter ID (SP_ID) is determined at the starting point from the determination table SP_ID (SPChangePositionTable ()) based on the NIP obtained from the EP map. This processing is the processing described with reference to FIG.

Then, in step S423, a notification about the received secret parameter ID (SP_ID) is transmitted to the protected VM and a request is made for calculating the secret parameter (SP). This processing is equivalent to the processing performed in step S13 described with reference to FIG. 10.

Then, in step S424, the playback application (player) obtains the value of the secret parameter (SP) corresponding to the segment calculated in the protected VM, restores the block of the recovery table based on the secret parameter (SP), receives the restoration records stored in the restored block of the table recovery, performs conversion data processing to replace data within the content segment with conversion data, based on the conversion data recorded in the recovery record ni, and their recorded position, and in step S425 performs decoding and preprocessing processing.

In addition, in the case of moving to the next segment, in step S430, the NPI of the next playback segment is obtained from the EP card and the processing of step S422 is performed. That is, based on the NPI obtained from the EP card, the SP_ID corresponding to the segment, the SP_ID is obtained from the definition table (SPChangePositionTable ()), and the received SP_ID is transmitted as a notification to the protected VM and the SP value corresponding to the segment is obtained, the recovery table block is restored to based on the obtained SP value, the recovery records are obtained from the restored block of the recovery table, the conversion data and the recording position are extracted from the recovery record, and conversion processing data in which data in the content segment is replaced with conversion data.

As described above, this processing example is designed so that the application playback program (player), designed to perform playback of the content, first receives from the EP card recorded in the clip information, which is used as information of the content playback module, NPI (source packet number) corresponding to the data segment of the content to be reproduced, and then search in the determination table of the ID of the secret parameter based on the received NPI (pack number and the source), receive the SP identifier (SP_ID), set in accordance with the received NPI (source packet number), transmits the received SP identifier (SP_ID) as a notification to the protected VM, and executes the INTRP request for calculating the secret parameter, so that the secret parameters (SP), corresponding to each of the segments in sequence, could be correctly taken from the protected VM, and reproduction of the contents could be performed when performing exact data transformations.

(6.2) Processing example 2 to obtain a SP identifier (SP_ID) corresponding to a segment

Processing example 2 to obtain a SP identifier (SP_ID) corresponding to a segment will be described below. In the present processing example, the secret parameter ID determination table has a configuration in which correlation data between the secret ID parameters (SP_ID) and EP card registration table identification information (EP card registration table ID) is recorded.

The application playback program (player), which is designed to perform playback of the content, first receives the EP card from the clip information corresponding to the content data intended for reproduction, and based on the identification information of the EP card registration table (EP card registration table ID) corresponding to the EP card gets the SP identifier (SP_ID) set in accordance with the ID of the EP card registration table from the secret parameter ID determination table.

The application playback program (player) transmits to the protected VM, as a notification, the SP identifier (SP_ID) obtained from the secret parameter ID determination table, and executes an INTRP request for calculating the secret parameter.

The following is a detailed description of the present processing example with reference to the drawings. 25 is a diagram illustrating a data configuration example of a determination table SP_ID [SPChangePositionTable] used in the present processing example. In the present processing example, the same recovery table configuration is used as in the configuration shown in FIG. 19 for the processing example 1 described above. Definition table SP_ID [SPChangePositionTable] differs from processing example 1 only in data configuration.

In the determination table SP_ID shown in FIG. 25, correlation data between the registration ID of the EP card and the secret parameter ID (SP_ID) is stored. In particular, it contains the correlation data between the ID of the registration table of the EP card for the EP card including information of the segment header packet (SP_segment), which is the content configuration data, and the secret parameter ID (SP_ID). The SP_ID definition tables include the following data.

Clip_ID: ID of the clip.

Number of SP (= NSP): number of segments (SP_segment).

SP_segment_start_EP_map_id: defines the EP card registration table ID (EP_map_id) in the segment header (SP_segment) corresponding to SP_ID, and SP_ID can be obtained from the EP card registration table ID (EP_map_id) corresponding to the source packet number (NPI) to be played using of this value.

The playback application may obtain the ID of the registration table of the EP card including the head packet of the segment source (SP_segment) corresponding to the SP_ID, and may obtain the SP_ID corresponding to the segment from the determination table SP_ID shown in FIG. 25 based on the ID of the map registration table EP

Below, a description will be given of a content reproduction processing sequence including replacing data with conversion data by obtaining a different secret parameter (SP) for each segment by applying the SP_ID determination table shown in FIG. 25 with reference to the flowchart operations presented in Fig.26.

First, in step S501, the playback application program (player) determines a name for playback and generates a name initiation command for the protected VM. In step S502, the protected VM performs name initiation processing and performs generation processing of the recovery table (FixUpTable) corresponding to the name. This processing has been described above with reference to FIGS. 10 and 11 and corresponds to the processing performed in step S12 in the flowchart shown in FIG. 10.

In step S503, the playback application (player) obtains the necessary information from the recovery table (FixUpTable). This processing has been described above with reference to FIG. 11 and is performed as processing for copying the necessary information from the recovery table stored in the memory area of the protected VM to the memory area that the playback application (player) can use.

In the case of the application of the playback program (player), which performs data conversion by extracting the recovery records from the fuel assembly unit of the content multiplexed by the TP (transport stream), that is, in the case of the application of the playback program (player), which performs the processing described above with reference to FIG. .8, only the secret parameter ID (SP) definition table is copied to its own memory area. On the other hand, in the case of a playback application (player) that does not use a fuel assembly block multiplexed by the TS (transport stream) of the content, but which rather uses the transformation data recorded in the block of the recovery table within the file of the recovery table, i.e. application of the playback program (player) (TVS pre-loading player), which performs the processing described above with reference to Fig.9, the entire recovery table is copied to its own th memory.

Then, in step S504, the playback application program (player) obtains the clip information corresponding to the name, determines the EP card contained in the clip information, and receives the EP card registration table ID as identification information of the EP card registration table that has been determined.

Then, in step S505, the secret parameter ID (SP_ID) of the starting point is determined from the determination table SP_ID (SPChangePositionTable ()) based on the ID of the registration table of the EP card. In this case, the determination table SP_ID shown in FIG. 25 is used, in which the correlation data between the secret parameter ID (SP_ID) and the identification information of the EP card registration table (EP card registration table ID) is recorded.

Then, in step S506, a notification with the received secret parameter ID (SP_ID) is transmitted to the protected VM, and a request is made to calculate the value of the secret parameter (SP). This processing is equivalent to the processing performed in step S13 described with reference to FIG. 10.

Then, in step S507, the playback application (player) obtains the value of the secret parameter (SP) corresponding to the segment calculated by the protected VM, restores the recovery table block, based on the secret parameter (SP), obtains the recovery records stored in the restored table block recovery, performs data conversion processing to replace data within the content segment with conversion data based on conversion data recorded in the restored records I, and their recording position, and in step S508 performs a decoding and playback processing.

Then, in the case of moving to the next segment, in step S510, the EP card registration table ID for the EP card including the first packet information in the next playback segment is obtained, and the processing from step S505 is performed. That is, based on the received EP card registration table ID, the SP_ID correlated with the EP card registration table ID is obtained from the SP_ID definition table (SPChangePositionTable ()), and the received SP_ID is transmitted as a notification to the protected VM, the SP value corresponding to the segment is obtained, restoring the recovery table block based on the obtained SP value, receiving recovery records from the restored recovery table block, the conversion data and the recording position are extracted from the recovery record and for each segment They perform data conversion processing in which data in the content segment is replaced with conversion data.

In accordance with this processing, processing is performed in which various secret parameters (SP) are applied for each segment.

Next, with reference to FIG. 27, a processing sequence in the case of performing special playback processing, such as random access, will be described. It should be noted that the processing shown in FIG. 27 illustrates only the processing sequence following the name initiation processing. That is, processing is presented here following the end of processing steps S501-S503 in the flowchart shown in FIG.

First, in step S521, the playback application program (player) determines the EP card used by the clip information in response to a request for processing special reproduction, such as random access, and obtains a registration table identifier value of a specific EP card (EP card registration table ID) .

After that, in step S522, the secret parameter ID (SP_ID) is determined at the starting point corresponding to the EP card registration table ID from the determination table SP_ID (SPChangePositionTable ()) based on the received EP card registration table ID.

Then, in step S523, the received secret parameter ID (SP_ID) is transmitted as a notification to the protected VM, and a request is made to calculate the secret parameter (SP). This processing is equivalent to the processing performed in step S13 described with reference to FIG. 10.

Then, in step S524, the playback application program (player) obtains the value of the secret parameter (SP) corresponding to the segment calculated in the protected VM, restores the recovery table block based on the secret parameter (SP), receives the restoration records stored in the block of the recovery table , performs data conversion processing to replace data within the content segment with conversion data, based on the conversion data recorded in the recovery record, and put it I write, and in step S525 performs a decoding and playback processing.

Then, in the case of moving to the next segment, in step S530, the EP card registration table ID for the EP card including the first packet information of the next playback segment is obtained, and the processing from step S522 is performed. That is, based on the received EP card registration table ID, the SP_ID correlated with the EP card registration table ID is obtained from the SP_ID definition table (SPChangePositionTable ()), while the received SP_ID is transmitted as a notification to the protected VM, the SP value corresponding to the segment is obtained, the recovery table block is restored based on the obtained SP value, the recovery records are obtained from the restored recovery table block, the conversion data and the recording position are extracted from the recovery record and for each segment The enta perform data conversion processing in which data in the content segment is replaced with conversion data.

As described above, the present processing example is designed such that the playback application program (player) for executing the reproduction of the content first determines the EP map in which the packet information corresponding to the initial position of the segment of the content data intended for reproduction is recorded from the EP map, recorded in the clip information, used as the information of the content reproducing unit, performs a search in the determination table of the ID of the secret parameter based on the identifier of the EP card registration table ID (EP card registration table ID), receives the SP identifier (SP_ID) set in accordance with the EP card registration table ID, notifies the protected VM of the received SP identifier (SP_ID) and executes a request (INTRP) for calculating the secret parameter, resulting in secret parameters (SP), sequentially corresponding to each of the segments, can be correctly received from the protected VM, and reproduction of the content can be performed when performing accurate data conversion.

(6.3) Processing example 3 to obtain a SP identifier (SP_ID) corresponding to a segment

Next, processing example 3 will be described, intended to obtain a SP identifier (SP_ID) corresponding to a segment. In this processing example, the segments to be set for maintenance are divided into sections based on the number of EP card registration tables set in advance. That is, a region of a content section having an entry point denoting an initial playback position equivalent to N registration tables of the EP card is one segment. N is an integer equal to 1 or more.

The playback application program (player), which is supposed to play the content, obtains the EP card from the clip information corresponding to the content data to be reproduced, and, on the basis of the EP card, sequentially receives and plays TP packets constituting the content. As described above with reference to Fig. 15, an EP card is installed for each GRI, while the application playback program (player) performs the processing of receiving EP maps in the clip information and the allocation of playback packets.

In the present processing example, the playback application program (player) uses the registration tables of the EP card corresponding to the EP card used to calculate the secret parameter ID (SP_ID). Or, the playback application program (player) calculates the number of EP card registration tables used and determines that the segment switching should occur each time when the number (N) of EP card registration tables comprising a segment is reached (corresponds to N - the number of EP card registration tables), and accordingly executes the processing for switching the secret parameter (SP), which is used to restore the recovery table block.

Each time when the number (n) of registration tables for EP cards constituting a segment (corresponding to the number n of registration tables for EP cards) is reached in the playback application program (player), it transmits to the protected VM a notification about the sequential increment of the SP identifier (SP_ID) and performs request (INTRP) for the calculation of the secret parameter.

The present processing example will now be described in detail with reference to the drawings. FIG. 28 shows (a) the configuration of the content and (b) the configuration data of the EP card used in the present processing example. As shown in position (a) of the content configuration, the content is divided into sections of the GRI, and information related to I-images in each of the GRI is recorded in the corresponding registration tables of the EP map. As shown in position (b) of the configuration data of the EP card in FIG. 28, a plurality of registration tables of the EP card are recorded on the EP card together with the NPI (source packet number), which is address information related to the I-image recorded in each of the registration tables of the EP map, and the VMP (time stamp of the presentation), which is recorded in a correlated manner.

Thus, the EP card has a data configuration consisting of a plurality of EP card registration tables stored in a single file. The tables registered in the EP card have table numbers that identify as the ID of the registration table of the EP card.

In the present processing example, the segment is set as the data area of N registration tables of the EP card. The example shown in FIG. 28 is an installation in which N = 5, therefore, five registration tables of the EP card are set as one segment. In the content shown in figa, GRI 0 - GRI 4, table 0 registration card EP - table 4 registration card EP, divided into sections as one segment, and the following GRI 5 - GRI 9, that is, table 5 registration card EP - EP card registration table 9 is divided as one segment. In the same way, 5 GRI (= 5 EP registration tables) are installed as one segment.

In this case, as shown in FIG. 28B, the secret parameter identifier (SP_ID) applied to the segment corresponding to the EP card registration tables 0-4 is set to [0], and therefore

Tables 5-9 registration cards EP: SP_ID = 1,

Tables 10-14 registration card EP: SP_ID = 2,

Tables 14-19 registration card EP: SP_ID = 3,

and thus, the secret parameter identifier (SP_ID) is incremented by 1 every 5 registration tables of the EP card.

An application playback program (player) that reproduces the content applies the ID of the EP map registration table corresponding to the EP registration table to be used, and calculates the secret parameter ID (SP_ID). The secret parameter ID (SP_ID) is determined by extracting the integer part equal to 0 or more calculated by the following expression.

SP_ID = (EP card registration table ID) / N

In the above expression, n is equivalent to the number of registration tables of the EP card within one segment, in the example of FIG. 28 it is calculated as follows

Tables 0-4 registration card EP: SP_ID = 0,

Tables 5-9 registration card EP: SP_ID = 1,

Tables 10-14 registration card EP: SP_ID = 2,

and so on.

Or, an arrangement can be made in which, instead of using the above expression, the application program (player) calculates the number of EP card registration tables used, determines the moment of switching the segment, which should happen each time the number (N) of EP card registration tables that make up a segment (corresponding to N registration tables of the EP card), and performs processing for switching the secret parameter (SP) used to restore the block of the recovery table Updates.

In the example setup shown in FIG. 28, N = 5, therefore, it is determined that the segment switching will occur every five EP registration tables, therefore the SP_ID is incremented by one every five EP cards, the SP_ID is determined, the determined SP_ID is output into the protected VM, and receive the secret parameter corresponding to the segment. Obviously, the segments can be defined as an integral unit, except for N = 5, but it is preferable that they represent a unit multiple of the set of entry points in the registration table of the EP card, which should be determined taking into account the processing time of the playback device.

In this processing example, different SP_IDs for each segment can be obtained on the basis of the above expression or calculation of the EP card registration table, therefore there is no need to use the source packet number or the secret parameter ID determination table to obtain the secret parameter ID based on the EP card registration table ID, as in the above processing examples 1 and 2.

In the case of applying the present processing example, a content reproduction processing sequence that uses obtaining secret parameters (SP) different for each segment and replacing the data with transform data will be described with reference to the flowchart shown in FIG. 29.

First, in step S601, the playback application program (player) determines a name for playback and generates a name initiation command for the protected VM. In step S602, the protected VM performs name initiation processing and performs generation processing of the recovery table (FixUpTable) corresponding to the name. This processing has been described above with reference to FIGS. 10 and 11 and corresponds to the processing performed in step S12 in the flowchart shown in FIG. 10.

In step S603, the playback application (player) obtains the necessary information from the recovery table (FixUpTable). This processing has been described above with reference to FIG. 11, and is performed as processing for copying the necessary information from the recovery table stored in the memory area of the protected VM to the memory area that the playback application (player) can use.

In the case of the application of the playback program (player), which performs data conversion by extracting the block of fuel assemblies of the recovery records multiplexed by the TS (transport stream) content, that is, in the case when the application program playback (player) performs the processing described above with reference to FIG. .8, only the secret parameter ID (SP) definition table is copied to its own memory area. On the other hand, in the case of a playback application (player) that does not use a fuel assembly block multiplexed by the content (transport stream), but instead uses conversion data written to the recovery table block within the recovery table file, i.e. case of the application of the playback program (player) (player with a pre-installed FA), which performs the processing described above with reference to Fig.9, the entire recovery table is copied to it with native memory area.

Then, in step S604, the playback application program (player) obtains the clip information corresponding to the name, determines the EP card contained in the clip information, and obtains the EP card registration table ID as the identification information of the EP card registration table that has been determined.

Then, in step S605, the SP_ID is calculated based on the ID of the EP card registration table. For example, with the number of registration tables for the EP card included in one segment equal to N, SP_ID is calculated using the following formula

SP_ID = (EP card registration table ID) / N

Then, in step S606, a notification with the received secret parameter ID (SP_ID) is transmitted to the protected VM and a request is made for calculating the value of the secret parameter (SP). This processing is equivalent to the processing performed in step S13 described with reference to FIG. 10.

Then, in step S607, the playback application (player) obtains the value of the secret parameter (SP) corresponding to the segment calculated by the protected VM, restores the recovery table block, based on the secret parameter (SP), receives the recovery records stored in the restored block of the table recovery, performs data conversion processing to replace data within the content segment with conversion data, based on the conversion data recorded in the restored records ia, its recording position, and in step S608 performs decoding and reproduction processing.

In addition, in the case of moving to the next segment in step S610, an EP card registration table ID is obtained for the EP card including information about the first packet in the next playback segment, and processing is performed starting from step S605. In other words, the SP_ID is calculated on the basis of the received EP card registration table ID, the received SP_ID is sent with notification to the protected VM, the SP value corresponding to the segment is obtained, the recovery table block is restored from the received SP value, recovery records are received for the restored recovery table block, conversion data and the recording position is extracted from the recovery record, and for each segment, data conversion processing is performed in which data in the content segment is replaced by data mi conversion.

In accordance with this processing, processing is performed in which various secret parameters (SP) are applied for each segment. It should be noted that an arrangement can be made in which the number of registration tables of the EP card is calculated to obtain the SP_ID, instead of obtaining the SP_ID based on an expression that uses the ID of the registration table of the EP card, as described above.

Next, with reference to FIG. 30, a sequence of processing in the case of performing special playback processing such as random access will be described. It should be noted that the processing shown in FIG. 30 illustrates only the processing sequence that follows the name initiation processing. In other words, the processing that follows after the processing steps S601-S603 in the flowchart shown in FIG. 29 is shown here.

First, in step S621, the playback application program (player) determines an EP card registration table used by the clip information in response to a special playback processing request, such as random access, and obtains an EP card registration table identifier (EP card registration table ID) .

Then, in step S622, based on the received ID of the EP card registration table, the SP_ID is calculated by the expression

SP_ID = (EP card registration table ID) / N.

Then, in step S623, the received secret parameter ID (SP_ID) is transmitted with notification to the protected VM and a request is made to calculate the secret parameter (SP). This processing is equivalent to the processing performed in step S13 described with reference to FIG. 10.

Then, in step S624, the playback application (player) obtains the value of the secret parameter (SP) corresponding to the segment calculated in the protected VM, restores the recovery table block based on the secret parameter (SP), obtains the recovery records stored in the restored block of the table recovery, performs data conversion processing to replace data within the content segment with conversion data, based on the conversion data recorded in the recovery record values, and their recording positions, and in step S625 performs decoding and recovery processing.

Then, in the case of moving to the next segment, in step S630, the EP card registration table ID for the EP card including information about the first packet of the next playback segment is obtained, and processing is performed starting from step S622. In other words, the SP_ID is calculated based on the received EP card registration table ID, the calculated SP_ID is sent with notification to the protected VM, the SP value corresponding to the segment is obtained, the recovery table block is restored based on the received SP value, recovery records are obtained from the restored recovery table block, data transformations and record positions are extracted from the recovery record, and for each segment, data conversion processing is performed in which the data in the content segment is changed by conversion data. It should be noted that for this example, an arrangement can also be made in which the number of registration tables of the EP card is calculated to obtain SP_ID, instead of using this equation.

As described above, an example of the present processing is made in such a way that the application playback program (player) for executing the reproduction of the content first determines the registration tables of the EP map corresponding to the content data to be reproduced from the EP map recorded in the clip information, used as information of the content reproducing unit, obtains the secret parameter ID (SP_ID) based on the identifier of the EP card registration table (EP card registration table ID), by applying an expression or by counting the number of registration tables for the EP card, it sends a notification about the received SP identifier (SP_ID) to the protected VM and executes a request (INTRP) for calculating the secret parameter, thus obtaining the SP identifier, without using the special parameter ID determination table thus, the secret parameters (SP) corresponding to each of the segments can be correctly received from the protected VM, and content can be played back when performing the exact conversion data.

7. Configuration of the information processing device

Below, with reference to FIG. 31, an example of a hardware configuration of an information processing apparatus that performs the processing described above in the playback application program (player) and the protected VM will be described. The information processing device 800 has a CPU 809 that performs data processing in accordance with various types of programs, including OS, content reproduction programs and application programs for reproducing and recording content, as well as programs for mutual authentication processing, processing and maintenance of reproduction of content, for example the above processing data conversion, etc., ROM 808, used as a storage area for programs, parameters, etc., storage device 810, interface 80 2 I / O, intended for input / output of digital signals, an input / output interface 804 having an A / D, D / A converter 805, for input / output of analog signals, an MPEG codec 803, designed to perform encoding and decoding of MPEG data TP-PP processing module 806 for performing TP (transport stream) - PS (software stream) processing; encryption processing module 807 for performing various types of encryption processing, such as mutual authentication decryption processing encrypted content, etc., a recording medium 812, such as a hard disk, and a drive 811 for driving a recording medium 812 and performing data input / output in the form of recording / reproducing signals, each of which is connected to a bus 801.

The information processing device 800 (main device) is connected to the drive via a connecting bus, such as, for example, ATAPI-BUS (packet interface bus of peripheral devices for AT-compatible computers). Tables of restoration, contents, etc. input / output via a digital signal input / output interface 802. The encryption processing and the decryption processing are performed using the encryption processing module 807, which uses, for example, AES (Advanced Encryption Standard) algorithms, or the like.

It should be noted that programs for performing playback or recording processing of contents are contained, for example, in ROM 808, and the storage device 810 is used as necessary when executing programs, as a workspace for storing parameters and data.

In the ROM 808 or the recording medium 812, for example, a central administration public key, a secret key for the host device, a public key certificate for the host device, and, in addition, a CRL drive used as a revocation list, etc. are recorded.

During playback or output of the contents of the data conversion processing program, the data obtained from the information recording medium is used to perform the processing, followed by the various processing sequences described above in the processing example, such as decrypting the encrypted content, restoring recovery tables, recording conversion data based on data stored in recovery tables, etc.

8. Device for manufacturing information recording medium and information recording medium

An apparatus for manufacturing an information recording medium and an information recording medium will be described below. In other words, a description will be given of a device for manufacturing an information recording medium used for the content reproduction processing described above, its method and information recording medium.

A device for manufacturing an information recording medium is, for example, a device for manufacturing an information recording medium 100 on which the recorded data described above with reference to FIG. 1 is contained.

An apparatus for manufacturing an information recording medium includes: a data processing module for generating content including damaged data other than the correct content configuration data, and a recovery table including a parameter identifier determination table in which data of a main part of the table is recorded recovery saved by performing replacement data conversion with damaged data for processing calculation or encryption with the parameter is set in accordance with a segment, which is a content area divided into sections, and a parameter identifier, which is parameter identification information; and a data recording unit for recording content including damaged data, as well as a recovery table, onto the information recording medium.

One example of a parameter identifier determination table generated by the data processing module in the configuration, in accordance with one embodiment of the apparatus for manufacturing the information recording medium, may be a table correlating parameter identifiers with packet numbers in the header position of the content configuration data segments, as described above with reference to Fig.20.

Or, as another example, the parameter identifier determination table generated by the data processing module in the configuration of one embodiment of the apparatus for manufacturing the information recording medium may be a table correlating parameter identifiers with the ID of the registration table of the EP card, which is used as identifiers of the registration table for the EP card, including information consisting of packets in the header position of the content configuration data segments, as described above with reference to FIG. 25.

The information recording medium generated by such a manufacturing device is, as described above with reference to FIG. 1 and other drawings, an information recording medium on which the following data is recorded:

(a) content that includes corrupted data that is different from the correct content configuration data; and

(b) a recovery table including a parameter identifier determination table for storing data of a main part of a recovery table stored as a result of replacing conversion data with damaged data for calculation or encryption processing with a parameter set in accordance with a segment that is a content area sectioned and parameter identification information.

In one embodiment, the recovery table recorded on the information recording medium is a table in which the parameter identifiers are correlated with the packet numbers at the header position of the content configuration data segments, as described above with reference to FIG. In this table, the parameter identifiers are correlated with the EP card registration table IDs used as registration table identifiers for the EP card including packet information at the header position of the content configuration data segments, as described above with reference to FIG. 25.

The present invention has been described in detail above with reference to specific embodiments. However, it will be understood by those skilled in the art that various modifications and replacements of the embodiments can be made without departing from the spirit of the present invention. That is, the present invention has been disclosed in the form of an example, and should not be interpreted as limiting. Judgment regarding the essence of the present invention should be made with reference to the section of the claims.

It should be noted that the processing sequence described in the Description may be performed using hardware, software, or a combination thereof. In the case of processing in the form of software, the program in which the processing sequence is recorded can either be installed and executed in the memory of a computer in which specialized hardware is embedded, or the program can be installed in a general-purpose computer that can perform various types of processing .

For example, a program may be pre-recorded on a hard disk or in ROM (read-only memory) used as a recording medium. Or it can be temporarily or permanently saved (recorded) on removable media such as a floppy disk, CD-ROM (read-only compact disk), MO (magneto-optical) disk, DVD (digital versatile disk), magnetic disk, semiconductor memory, etc. Such removable recording media may be provided in the form of so-called packaged software.

It should be noted that in addition to installing the program on the computer from a removable recording medium, such as described above, the program can be transferred to the computer via a wireless data channel from the download site, or it can be transferred to the computer via a cable network, such as a LAN (local computer network), or over the Internet, while the computer receives the transmitted program and installs it on the built-in recording medium, such as a hard disk or the like.

In addition, the various types of processing described in the Description are not limited to execution using the described time sequence and can be performed in parallel or independently, depending on the processing capabilities of the device performing the processing. It should also be noted that the system that is used in this Description is a logical connection of many devices and is not limited to devices having a configuration made within one enclosure.

Claims (24)

1. An information processing device for executing content reproduction processing, comprising:
a content reproduction processing module for executing data conversion processing for replacing a portion of the configuration data of input content for reproduction with transformation data and processing for reproducing content for reproduction; and
a parameter generating module for providing to the specified reproduction processing module the parameter content that is used in the data conversion processing;
wherein said content reproduction processing module is configured to obtain a parameter identifier that is different for each segment set as a division area into reproduced content sections, and output a request for calculating a parameter to said parameter generating module;
wherein said parameter generating module is configured to provide a parameter corresponding to a segment to said reproducing processing module in response to a request for calculating a parameter from said content reproducing processing module, and
wherein said content reproduction processing module is configured to provide calculation processing or encryption processing with respect to data of a recovery table including said conversion data using a parameter corresponding to a segment obtained from said parameter generating module and performing data recovery processing, including conversion data used as replacement data for configuration data of the specified segment. 2. The information processing device according to claim 1, wherein said content reproduction processing module is configured to perform processing to obtain a packet number consisting of a segment configuration packet included in the reproduction unit from the data included in the clip information, which is information a content reproducing unit;
and referring to a parameter identifier definition table that correlates the parameter identifier with the packet number used as content configuration data, and to obtain a parameter identifier corresponding to the packet number for the configuration packet of the indicated segment. 3. The information processing device according to claim 2, wherein said parameter identifier determination table is a table in which said parameter identifier and a packet number located in a segment header position, which is content configuration data, are correlated. 4. The information processing device according to claim 2, wherein said packet number is a source packet number (NPN SPN) corresponding to an I-image of the data included in the clip information, which is information of the content reproducing unit. 5. The information processing device according to claim 1, wherein said content reproduction processing module is configured to perform processing to obtain the ID of the data registration table included in the clip information, which is the identifier of the data registration table included in the clip information which are information of a content reproducing unit;
and referring to the parameter identifier determination table, which correlates the parameter identifier with the ID of the data registration table included in the clip information, to obtain a parameter identifier corresponding to the configuration packet number of the indicated segment. 6. The information processing device according to claim 5, wherein said parameter identifier determination table may be a table in which the parameter identifier and the ID of the data registration table included in the clip information are correlated, which is the identifier of the data registration table included in the clip information including package information at the position of the segment header, which is the content configuration data. 7. The information processing device according to claim 1, wherein said content reproduction processing module is configured to perform processing to obtain an ID of the data registration table included in the clip information, which is an identifier of the data registration table included in the clip information, which are content reproducing unit information;
and calculating a parameter identifier corresponding to the segment based on the indicated ID of the data registration table included in the clip information. 8. The information processing device according to claim 7, wherein said content reproduction processing module is configured to perform processing to calculate a parameter identifier corresponding to a segment based on an ID of a data registration table included in the clip information in accordance with the following expression:
(SP_ID) = (EP_map_ID) / N,
where SP_ID is a parameter identifier;
EP_map_ID is the ID of the registration table of the data included in the clip information; and
N represents the number of data recording tables included in the clip information set in accordance with one segment. 9. The information processing device according to claim 1, wherein said content reproduction processing module is configured to perform processing to calculate the number of times a data recording table is included in the clip information, which is information of the content reproduction unit, and calculates a parameter identifier corresponding to segment, based on the counting result for the data registration table included in the clip information. 10. The information processing device according to claim 1, wherein said content reproduction processing module is configured to perform processing to obtain recovery table data including conversion data from packets contained in the content, performing calculation processing or encryption processing using parameter corresponding to the segment obtained from the parameter generating module, and performing data recovery processing including transformation data used as nnye substitutions, as data segment configuration. 11. The information processing device according to claim 1, wherein said content reproduction processing module is arranged to perform processing to obtain data of a recovery table including transformation data from data of a recovery table that are different and independent of content, performing calculation or processing processing encryption using the parameter corresponding to the segment obtained from the parameter generating module, and performing data recovery processing including data Formations used as replacement data for configuration data of a specified segment. 12. The information processing device according to any one of claims 1 to 11, wherein said parameter calculation module can be implemented as a virtual machine installed in the information processing device. 13. The information processing device according to any one of claims 1 to 11, configured to request a parameter calculation from a content reproduction processing module to a parameter calculation module, which is executed as an interrupt request, and providing a parameter from the parameter calculation module to the content reproduction processing module is performed as response to interrupt request. 14. An information processing method for executing content reproduction processing, comprising the steps of:
content reproduction processing performed in the content reproduction processing module for processing data conversion for replacing a portion of the configuration data of the input content for reproduction with conversion data and processing for replacing the reproduced content; and generating a parameter executed in the parameter generating module, for providing to the reproduction processing the contents of the parameter used in the data conversion processing;
wherein said content reproduction processing comprises the step of obtaining a parameter identifier that is different for each segment set as a division area into reproduced content sections, and outputting a request for calculating the parameter in the parameter generating module;
wherein said parameter generation comprises the step of providing the parameter corresponding to the segment to the reproducing module in response to a request for calculating the parameter from the content reproducing module; and
wherein said content reproduction processing comprises a step of performing calculation processing on data of a recovery table including transform data using a parameter corresponding to a segment obtained from said parameter generating unit and for performing data recovery processing including transform data, used as replacement data for configuration data of a specified segment. 15. The information processing method according to claim 14, wherein said content reproduction processing comprises a processing step for obtaining a segment configuration packet number included in the reproduction unit from data included in the clip information, which are information of the reproduction unit of the content;
and referring to a parameter identifier definition table correlating a parameter identifier with a packet number that is used as content configuration data, and obtaining a parameter identifier corresponding to a segment configuration packet number. 16. The information processing method according to claim 15, wherein said table defining a parameter identifier is a table in which said parameter identifier and packet number are correlated at a position of a segment header, which is content configuration data. 17. The information processing method according to claim 15, wherein said packet number is a source packet number (NPI) corresponding to an I-image included in the data included in the clip information. 18. The information processing method according to claim 14, wherein said content reproduction processing comprises a processing step for obtaining an ID of a data registration table included in the clip information, which is an identifier of a data registration table included in the clip information, which are block information reproduction of content;
and referring to a table defining a parameter identifier correlating the parameter identifier with the ID of the data registration table included in the clip information to obtain a parameter identifier corresponding to the segment configuration packet number. 19. The information processing method according to claim 18, wherein said parameter identifier determination table is a table in which said parameter identifier and ID of the data registration table included in the clip information are correlated, which is the identifier of the data registration table included in the clip information including information of the package located in the position of the segment header, which is the content configuration data. 20. The information processing method according to claim 14, wherein said content reproduction processing comprises a processing step for obtaining a data registration table ID included in the clip information, which is an identifier of a data registration table included in the clip information, which is block information reproduction of content;
and calculating a parameter identifier corresponding to the segment based on the table ID of the registration data included in the clip information. 21. The information processing method according to claim 20, wherein said content reproduction processing comprises a processing step for calculating a parameter identifier corresponding to a segment based on an ID of a data registration table included in the clip information in accordance with the following expression:
(SP_ID) = (EP_map_ID) / N,
where SP_ID is a parameter identifier;
EP_map_ID is the ID of the registration table of the data included in the clip information; and
N represents the number of data recording tables included in the clip information set in accordance with one segment. 22. The information processing method according to claim 14, wherein said content reproduction processing comprises a processing step for counting the number of times of use of the data registration table included in the clip information, which is information of the content reproduction unit, and calculating a parameter identifier corresponding to the segment, based on the counting result for the specified data registration table included in the clip information. 23. The information processing method according to claim 14, wherein said content reproduction processing may have a processing step for obtaining recovery table data including conversion data from packets contained in the content, performing calculation processing or encryption processing using a parameter corresponding to a segment obtained from the parameter generating module and performing data recovery processing including conversion data used as replacement data for data s configuration of the specified segment. 24. The information processing method of claim 14, wherein said content reproduction processing may have a processing step for obtaining recovery table data including conversion data from recovery table data different and independent of the content, performing calculation processing or encryption processing , using the parameter corresponding to the segment obtained from the specified parameter generating module, and performing data recovery processing including data pre formations used as replacement data for configuration data of the specified segment.

Images