WO2004088987A1

WO2004088987A1 - Digital terrestrial broadcasting system, digital terrestrial broadcasting right protection device, digital terrestrial broadcasting right protection method, and program

Info

Publication number: WO2004088987A1
Application number: PCT/JP2004/004673
Authority: WO
Inventors: Kiyoshi Kohiyama; Seiichi Mashimo; Hirokazu Yoshizawa
Original assignee: Fujitsu Limited
Priority date: 2003-03-31
Filing date: 2004-03-31
Publication date: 2004-10-14
Also published as: JP2004304600A; WO2004088987A9; JP4246529B2; CN100512064C; CN1813477A

Abstract

There is provided a digital terrestrial broadcasting system for performing digital broadcast between a broadcast station and one ore more receivers by using a ground wave. A management mechanism receives a right protection LSI from an LSI manufacturer and supplies the right protection LSI containing key information and the like to a receiver manufacturer. A viewer receives a receiver from the receiver manufacturer and receives free broadcast broadcasted from a broadcast station. The management mechanism transmits a lot number related to the free broadcast, work key Kw update information, and revoke information. The broadcast station performs free broadcasting (digital terrestrial broadcasting) by transmitting a broadcast signal together with encrypted update information such as a work key Kw. The receiver receives free broadcasting and answers to the work key Kw update and revoke instruction.

Description

Description Terrestrial digital broadcasting system, terrestrial digital broadcasting right protection device, terrestrial digital broadcasting right protection method and program

The present invention relates to, for example, a terrestrial digital broadcasting right protection system, a terrestrial digital broadcasting system, a terrestrial digital broadcasting right protection device, a terrestrial digital broadcasting right protection method, and a program.

Background art

BS digital broadcasting was started as satellite broadcasting on February 1, 2012, and free and paid broadcasting services for viewers are being operated. In order for viewers to receive this BS digital broadcast, an IC card is required for the receiver to provide a CAS (Conditional Access System) function. This IC card is called a B-C AS card.

In the CAS system using a B-CAS card, the broadcast signal is scrambled by an encryption technique, so that the audience who receives the broadcast signal can be limited.

Scrambling applied to the CAS method is applied to video signals and audio signals. The broadcast signal transmitted from the broadcast station consists of a scrambled signal to be sent and a key (scramble key K s) for descrambling the scrambled signal by the receiver. Is done. In this way, when a broadcast signal including a key is transmitted after being scrambled from the broadcast station, a process of restoring the original broadcast signal that can be viewed using the key for descrambling in the receiver is performed.

The scramble key K s described above is fixed to prevent falsification of the receiver. It is common practice to make changes every few seconds, for example. In order to prevent scrambling, scramble key Ks and program information are encrypted together with a common work key Kw. The signal encrypted in this way is called ECM (Entitlement Control Message).

In order to restore the content of the above ECM by a receiver, it is necessary to multiplex a work key Kw with a broadcast signal transmitted from a broadcast station and transmit the multiplexed work key. Also for this work key K w, the contract information between the viewer and the broadcasting station is encrypted together and transmitted. The signal thus encrypted is called an EMM (Entitlement Management Message). This EMM is decoded by the master key Km. The master key K m is a unique key for each receiver, and is stored in the B-C A S card.

In this way, it is possible to freely contract for viewing of a desired program provided by each broadcasting station by using one B-CAS card. Also, by using this B_CAS card, it is possible to view pay-broadcast programs.

Non-patent document 1

NIKKEIIN EW MEDIA first issue "Digital Broadcasting Guidebook 2001" Nikkei BP, 2000 1st October 30, pages 44-57

As described above, for BS digital broadcasting, the CAS system using a B-CAS card is a system suitable for pay broadcasting. There are some concerns about the application of the B-CAS card to terrestrial digital terrestrial broadcasting started at the end of 1995.

That is, BS digital broadcasting differs from general terrestrial broadcasting in that it includes pay broadcasting. Therefore, the current penetration rate has been flat, and only a few million receivers or receivers are used. Therefore, if millions of viewers receive the receiving service, it can be easily managed by the management center.

On the other hand, terrestrial digital broadcasting, which is expected in the future, can be viewed by tens of millions of people even if judging from the number of TVs spread in terrestrial broadcasting today. This is because free broadcasts, which can be freely viewed by anyone, are attractive. this Thus, if it is predicted that there will be tens of millions of viewers, tens of millions of receivers can be expected to spread.

Of course, if digital terrestrial broadcasts are free broadcasts, and attention is paid to the fact that there is no data deterioration at the receiving side from the digital broadcast transmission format, it is essential to provide copyright protection and other rights protection functions to the receiver. It is. .

Therefore, in terrestrial digital broadcasting, managing viewers, including the above-mentioned copyright management, is different from the case where millions of viewers receive the receiving service, and the management burden is different. It is expected to be huge.

In other words, in terrestrial digital broadcasting, a system that uses a B-CAS card for BS digital broadcasting can be considered as it is, but in the case of terrestrial digital broadcasting, the number of devices that have spread has increased significantly compared to BS digital broadcasting. Considering the increase in the number of receivers and the possibility of free broadcasting that anyone can view freely, there is a concern that receivers may increase the cost burden due to unnecessary functions on hardware and the management burden at the management center. An object of the present invention is to provide a terrestrial digital broadcasting system, a terrestrial digital broadcasting right protection device, a terrestrial digital broadcasting right protection method, and a program capable of realizing a simple configuration and an inexpensive right protection function in terrestrial digital broadcasting. The purpose. Disclosure of the invention

In order to solve the above-mentioned problems and achieve the above object, a terrestrial digital broadcasting system according to the first aspect of the present invention provides digital broadcasting between a broadcasting station and one or more receivers using terrestrial waves. Terrestrial digital broadcasting system, wherein the broadcasting station (FIG. 1: broadcasting station 5A) generates a transmission signal by superimposing encrypted information for rights protection and an encrypted broadcasting signal. Generating means; and transmitting means for transmitting the transmission signal generated by the generating means using a terrestrial wave, wherein the receiver (FIG. 1: receiver 6A) For one or more receivers supplied in a predetermined unit and for decrypting an encrypted transmission signal. Means (FIG. 4: FRAM 635 A, ROM 636 A) for storing the information in advance, receiving means for receiving the transmission signal transmitted by the transmitting means, and receiving means Reproducing means for reproducing the broadcast signal by decoding the received transmission signal in accordance with the decoding information stored in the storage means (FIG. 4: encrypted MPEG packet decoding 6 222 A); It is characterized by having.

According to the first aspect of the present invention, the broadcasting station generates a transmission signal in which encryption information for rights protection and an encrypted broadcasting signal are superimposed, and uses the terrestrial wave as the transmission signal. In the receiver, the signal is allocated in a predetermined unit to one or more receivers supplied for the terrestrial digital broadcasting system, and is decrypted to decrypt the encrypted transmission signal. The information is stored in advance and the broadcast signal is reproduced by decoding the transmission signal transmitted from the broadcasting station according to the decoding information. It is possible to realize digital broadcasting.

The terrestrial digital broadcasting system according to claim 2 is a terrestrial digital broadcasting system that performs digital broadcasting between a broadcasting station and one or more receivers using terrestrial waves. The station (FIG. 7: broadcasting station 5C) generates a transmission signal by superimposing encryption information for rights protection and an encrypted broadcasting signal, and a transmission signal generated by the generation means. Means for transmitting the user information using terrestrial waves, and when the user-specific encryption information is received from the receiver (FIG. 7: receiver 6C), the service information is transmitted to the receiver individually for the user. And a dedicated transmission unit for transmitting and receiving the one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit, and decoding an encrypted transmission signal. Decryption information and Storage means for storing user-specific encryption information in advance, reception means for receiving a transmission signal transmitted by the transmission means, and transmission signal received by the reception means stored in the storage means. Reproducing means for reproducing a broadcast signal by decoding in accordance with the decoding information; user-specific encryption information transmitted from the broadcasting station by transmitting user-specific encryption information stored in the storage means to the broadcasting station; Sir And individual receiving means for receiving service information.

According to the second aspect of the present invention, the broadcast station generates a transmission signal in which the encryption information for protecting the right and the encrypted broadcast signal are superimposed, and the transmission signal is transmitted using the terrestrial wave. One or more service information is transmitted to the receiver when the user-specific encryption information is received from the receiver and transmitted to the receiver, and is supplied for the terrestrial digital broadcasting system by the receiver. The decryption information for decrypting the encrypted transmission signal and the user's individual encryption information are pre-stored in a predetermined unit for each receiver, and the transmission signal transmitted from the broadcast station is received. Then, the broadcast signal is reproduced by decoding the transmission signal according to the decoding information, and when the user individual encryption information is transmitted to the broadcast station, the user number returned from the broadcast station Since the service information is received, a simple configuration and an inexpensive right protection function can be realized, and the broadcasting station can provide the receiver with the service for each user according to the service request to the receiver. Is possible.

The invention according to claims 1 and 2 is the same as the invention according to claim 3, wherein the broadcast station includes a pay broadcast management mechanism that manages pay broadcasts. When an application for a pay broadcast is received through the receiver, the receiver transmits the decryption information for the pay broadcast to the receiver of the application source, updates the decryption information of the receiver, and activates the pay broadcast. You may do so.

According to the invention set forth in claim 3, the broadcast station is provided with a pay-broadcasting management mechanism for managing pay-broadcast, and when a viewer receives an application for pay-broadcast from a viewer through a receiver. Since the decoding information for pay broadcasting is transmitted to the receiver of the application source and the decoding information of the receiver is updated to enable the pay broadcasting, the pay broadcasting is enabled by the pay broadcasting required management mechanism. It is possible to manage pay broadcasts in the pay broadcast management mechanism.

The invention according to claims 1 and 2 is based on the invention according to claim 4, wherein, when updating the decoding information of each of the receivers, the broadcasting station multiplexes the old and new decoding information. The receiver transmits the broadcast signal and the storage means (FIG. 16: FRAM632) The decoded information stored in F) may be compared with new and old decoded information of the broadcast signal transmitted from the broadcasting station to update the decoded information with new decoded information.

According to the invention set forth in claim 4, when the decoding information of each receiver is updated, a broadcasting signal in which new and old decoding information is multiplexed is transmitted from a broadcasting station, and the decoding information and the broadcasting Since the broadcast signal transmitted from the station is compared with the old and new decoding information and updated to the new decoding information, the receiver can distinguish between the old and new decoding information. Thus, the receiver can update to the latest decryption information.

The invention according to claims 1 and 2 is, as in the invention according to claim 5, when the broadcast station notifies each of the receivers of the update of the decoding information, The authentication information (Fig. 18: authentication information), which is unique encryption information that is predetermined in advance and is encrypted with the encryption information that encrypts the broadcast signal, is mixed in the transmission signal. You may do so.

According to the fifth aspect of the present invention, when the broadcast station notifies each receiver of the update of the decryption information, the broadcast information is unique encryption information predetermined for each user, Authentication information encrypted with the encryption information that encrypts the signal encryption information is mixed in the transmission signal, so that the validity of the information received by the rights protection LSI can be confirmed. It is.

According to the first and second aspects of the present invention, as in the sixth aspect of the present invention, the broadcasting station inserts time information (FIG. 20: time information) into a transmission signal. The receiver, with reference to the inserted time information, may invalidate the predetermined decoding information if there is no update of the predetermined decoding information within a continuous period of time. Yeah.

According to the sixth aspect of the present invention, the receiver refers to the time information inserted into the transmission signal at the broadcast station, and if the predetermined decoding information is not updated within a continuous fixed time, Invalidated the predetermined decryption information, so it was in charge of ensuring the security of the receiver's right protection LSI and updating the decryption information within a certain time. Can be maintained.

According to a sixth aspect of the present invention, as in the seventh aspect of the present invention, the broadcast station encrypts the time information based on the encryption information, and the receiver further comprises the encryption unit. The decoded time information may be decoded based on the decoded information. According to the invention of claim 7, in the receiver, the time information encrypted by the broadcasting station based on the encryption information is decrypted based on the decryption information, so that It is possible to prevent tampering of the time information.

In addition, the terrestrial digital broadcasting right protection device according to the invention of claim 8 is a terrestrial digital broadcasting right protection device for receiving and processing digital broadcasting by terrestrial broadcasting from a broadcasting station (Fig. 1: Receiver 6A, FIG. 6: Receiver 6B), which decrypts a transmission signal that is allocated in a predetermined unit to one or more receivers supplied for the terrestrial digital broadcasting system and encrypted. (Figure 4: FRAM 635A, ROM 636A) for storing decryption information for decryption in advance, and encryption information for protecting rights and broadcast signals encrypted. Receiving means (FIG. 2: receiver main body 62) for receiving a transmission signal on which the transmission signal is superimposed, and decoding the transmission signal received by the reception means in accordance with the decoding information stored in the storage means. Playback means for playing back broadcast signals (Fig. 2: Receiving The main body of the transmitter and the rights protection LSI 63 A).

According to the invention set forth in claim 8, the transmission signal allocated to a predetermined unit and encrypted for one or more receivers supplied for the terrestrial digital broadcasting system is decrypted. The decryption information for shading is stored in advance, and a transmission signal in which encryption information for protecting rights and an encrypted broadcast signal are superimposed is received, and the received transmission signal is converted into decryption information. Therefore, since the broadcast signal is reproduced by decoding, it is possible to receive terrestrial digital broadcasting with a simple configuration and an inexpensive right protection function.

A terrestrial digital broadcasting right protection device for receiving and processing digital broadcasting by terrestrial broadcasting from a broadcasting station according to the invention of claim 9 is provided. (FIG. 7: receiver 6C), which is assigned to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and transmits an encrypted transmission signal. Storage means for previously storing decryption information for decryption and user-specific encryption information; and a signal transmitted from the broadcasting station, wherein encryption information for rights protection and an encrypted broadcast signal are stored. Receiving means for receiving a transmission signal superimposed on the broadcast signal, and reproducing means for reproducing a broadcast signal by decoding the transmission signal received by the receiving means in accordance with the decoding information stored in the storage means (FIG. 8: Rights protection LSI 63 C), and individual receiving means for transmitting user individual encryption information stored in the storage means to the broadcasting station and receiving user individual service information returned from the broadcasting station. (No. Figure 8 ': Right protection LSI 63 C).

According to the ninth aspect of the present invention, the transmission signal allocated to a predetermined unit to one or more receivers supplied for the digital terrestrial broadcasting system and encrypted is decrypted. And the user-specific encryption information are stored in advance, and the transmission signal is a signal transmitted from a broadcasting station, in which the encryption information for rights protection and the broadcast signal that has been decoded are superimposed. The broadcast signal is reproduced by decoding the received transmission signal in accordance with the decoding information, and the user-specific signal information is transmitted to the broadcasting station and returned to the broadcasting station. Since service information is received, it is possible to realize a simple configuration and an inexpensive right protection function, and enjoy services for individual users in response to service requests.

The terrestrial digital broadcasting right protection method according to the invention of claim 10 is a terrestrial digital broadcasting right protection method for receiving and processing digital broadcasting by terrestrial waves from a broadcasting station. A storage step of storing decryption information for decrypting a transmission signal, which is allocated in a predetermined unit to one or more receivers supplied for the transmission and is encrypted, in a storage means in advance. A receiving step of receiving a transmission signal on which encryption information for protecting rights and an encrypted broadcast signal are superimposed; and transmitting the transmission signal received in the receiving step to the storage step. And reproducing the broadcast signal by decoding according to the decoding information stored in the storage means.

According to the tenth aspect of the present invention, a transmission signal which is allocated in a predetermined unit to one or more receivers supplied for a terrestrial digital broadcasting system and encrypted is decrypted. For receiving the transmission signal on which the encryption information for protecting the right and the encrypted broadcast signal are superimposed, and decodes the received transmission signal according to the decoding information. As a result, the broadcast signal is reproduced, so that terrestrial digital broadcasting can be received with a simple configuration and an inexpensive right protection function.

The terrestrial digital broadcasting right protection method according to claim 11 is a terrestrial digital broadcasting right protection method for receiving and processing digital broadcasting by terrestrial broadcasting from a broadcasting station. A storage step in which decryption information for encrypting a transmission signal, which is allocated in a predetermined unit to one or more receivers supplied for encryption and for encrypting a transmission signal and user-specific encryption information, is stored in advance in storage means. Receiving a transmission signal which is a signal transmitted from the broadcasting station, wherein the transmission signal is obtained by superimposing encryption information for protecting a right and an encrypted broadcasting signal, and receiving by the receiving step A reproduction step of reproducing the broadcast signal by decoding the transmitted signal according to the decoding information stored in the storage means in the storage step; Transmitting a user-specific encryption information stored in the storage unit to the broadcasting station in the storage step and receiving a user-specific service information returned from the broadcasting station. And

According to the invention set forth in claim 11, the transmission signal that is allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and encrypted is decrypted. The decryption information and the user's individual signal information are stored in advance, and the transmitted signal is a signal transmitted from a broadcasting station, in which encryption information for rights protection and an encrypted broadcast signal are superimposed. And reproduces the broadcast signal by decoding the received transmission signal in accordance with the decoding information. The service transmits individual cryptographic information and receives service information for each user returned from the broadcasting station, realizing a simple configuration and inexpensive rights protection function, and allowing individual users to respond to service requests. It is possible to enjoy each service.

The program according to claim 12 is provided for a terrestrial digital broadcasting right protection device that receives and processes digital broadcasting by terrestrial waves from a broadcasting station, for the terrestrial digital broadcasting system. A storage step of storing in advance in a storage means decryption information for decrypting a transmission signal that is allocated to one or more receivers in a predetermined unit and that is encrypted, A receiving step of receiving a transmission signal in which the encrypted information and the encrypted broadcast signal are superimposed; and transmitting the transmission signal received in the receiving step in accordance with the decryption information stored in the storage unit in the storage step. And a decoding step of decoding the broadcast signal by decoding.

According to the invention set forth in claim 12, the transmission signal that is allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and encrypted is decoded. Decryption information is stored in advance, a transmission signal in which encryption information for protecting rights and an encrypted broadcast signal are superimposed is received, and the received transmission signal is decrypted according to the decryption information In this way, the broadcast signal is reproduced, so that terrestrial digital broadcasting can be received with a simple configuration and an inexpensive right protection function.

The program according to claim 13 is provided for the terrestrial digital broadcasting right protection device for receiving and processing digital broadcasting by terrestrial broadcasting from a broadcasting station for the terrestrial digital broadcasting system. A storage step in which decryption information for decrypting an encrypted transmission signal allocated to one or more receivers in a predetermined unit and user-specific encryption information are stored in advance in storage means; A receiving step of receiving a transmission signal, which is a signal transmitted from a broadcasting station and in which encryption information for protecting rights and an encrypted broadcasting signal are superimposed, and transmitting the transmission signal received in the receiving step According to the decryption information stored in the storage means in the storing step, A reproducing step of reproducing a broadcast signal by decoding the broadcast signal; and a user-specific service returned from the broadcasting station by transmitting the user-specific encryption information stored in the storage means to the broadcasting station by the storing step. And an individual receiving step for receiving information.

According to the invention of claim 13, the encrypted transmission signal is allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and encrypted. And the user's individual encryption information are stored in advance, and a signal transmitted from a broadcasting station, which is a transmission signal in which encryption information for rights protection and an encrypted broadcast signal are superimposed, is received. The broadcast signal is reproduced by decoding the received transmission signal according to the decoding information, and the user-specific encryption information is transmitted to the broadcasting station, and the user-specific service information returned from the broadcasting station is transmitted. Since reception is performed, it is possible to realize a simple configuration and an inexpensive right protection function, and to enjoy services for individual users in response to service requests. BRIEF DESCRIPTION OF THE FIGURES

FIG. 1 is a diagram showing a terrestrial digital broadcasting right protection system according to Embodiment 1 of the present invention. FIG. 2 is a block diagram showing an example of a configuration of a receiver according to Embodiment 1 of the present invention. FIG. 3 is a diagram illustrating a bit pattern according to the first embodiment, and FIG. 4 is a block diagram schematically illustrating an example of a configuration of a rights protection LSI according to the first embodiment. FIG. 5 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the first embodiment. FIG. 6 is a diagram showing a digital terrestrial broadcasting right protection system according to the second embodiment of the present invention. FIG. 12 is a diagram showing a terrestrial digital broadcasting right protection system according to Embodiment 3 of the present invention. FIG. 8 is a block diagram schematically showing a configuration example of a right protection LSI according to Embodiment 3 of the present invention. FIG. 9 shows the third embodiment. FIG. 10 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the present invention. FIG. 10 is a diagram showing a digital terrestrial broadcasting right protection system according to Embodiment 4 of the present invention. Is a rights protection LSI according to the fourth embodiment. FIG. 12 is a block diagram schematically showing a configuration example of FIG. 12. FIG. 12 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the fourth embodiment. FIG. 14 is a block diagram schematically showing a configuration example of a rights protection LSI according to a fifth embodiment. FIG. 14 is a flowchart illustrating an operation during digital terrestrial broadcasting according to the fifth embodiment. Yes, FIG. 15 is a diagram for explaining an example of a packet during digital terrestrial broadcasting according to the sixth embodiment, and FIG. 16 is a schematic diagram illustrating a configuration example of a rights protection LSI according to the sixth embodiment. FIG. 17 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the sixth embodiment. FIG. 18 is a flowchart illustrating the operation during digital terrestrial broadcasting according to the seventh embodiment. FIG. 19 is a diagram for explaining a bucket example of FIG. FIG. 20 is a flowchart for explaining the operation at the time of terrestrial digital broadcasting, FIG. 20 is a diagram for explaining revoke transmission according to the eighth embodiment, and FIG. 21 is a flowchart illustrating the ECM according to the eighth embodiment. FIG. 22 is a diagram illustrating transmission, FIG. 22 is a configuration diagram illustrating an example of a network of the terrestrial digital broadcasting system of the present invention, and FIG. 23 is a diagram of a network of the terrestrial digital broadcasting system of the present invention. FIG. 9 is a configuration diagram illustrating another example. BEST MODE FOR CARRYING OUT THE INVENTION

Preferred embodiments of a terrestrial digital broadcasting system, a terrestrial digital broadcasting right protection apparatus, a terrestrial digital broadcasting right protection method, and a program according to the present invention will be described in detail below with reference to the accompanying drawings.

(Embodiment 1)

First, Embodiment 1 of the present invention will be described from the overall system. FIG. 1 is a diagram showing a terrestrial digital broadcasting right protection system according to the first embodiment of the present invention. As shown in FIG. 1, for example, as shown in FIG. Center) 2 A, LSI main unit 3 A, receiver main unit 4 A, broadcasting station 5 A, receiver 6 A, etc. The management mechanism 1A communicates with the IDC 2A to control the entire system. This management mechanism 1A creates an LSI design specification and an LSI open specification, and concludes an NDA (Non Disclosure Agreement) with the LSI maker 3A to provide an undisclosed LSI design specification. The management mechanism 1A writes information such as a key into the LSI provided by the LSI maker 3A and provides the LSI to the receiver 4A as a rights protection LSI. Provide specifications (public specifications) as external specifications.

The management mechanism 1A provides information for free broadcasting to the broadcasting station 5A. The information for this free broadcast is information transmitted for each lot number, and includes work key update information and repoke information.

The IDC 2A performs master key group management and work key management for free broadcasting, and provides management information to the management mechanism 1A as appropriate. The LSI maker 3A receives the LSI design specification from the management mechanism 1A according to the NDA, manufactures the LSI according to the specification, and provides the LSI to the management mechanism 1A.

The receiver maker 4A manufactures the receiver in accordance with the LSI specification when the management mechanism 1A provides the rights protection LSI in which the key and the like have been written. This receiver 4A provides a receiver to the viewer, and when a complaint is received from the viewer, the LSI manufacturer 3A receives a participant through the management mechanism 1A when a complaint arrives. Request replacement.

Broadcasting station 5A is operated by a broadcasting company, and the above-mentioned work key update information, revoke information, etc. are provided by management organization 1A for each lot number. This broadcasting station 5A has a function of transmitting digital terrestrial broadcasting as free broadcasting. The receiver 6A is a terrestrial digital broadcast receiving device provided to viewers. The receiver 6A receives broadcast signals such as images and music by terrestrial digital broadcasting, and also receives a work key update packet, a revoked bucket, and the like. The viewer inquires the receiver manufacturer 4A about the failure of the receiver 6A.

Next, the receiver will be described. FIG. 2 shows an example of the receiver according to the first embodiment. FIG. 3 is a block diagram illustrating a configuration example, FIG. 3 is a diagram illustrating a bit pattern according to the first embodiment, and FIG. 4 is a block diagram schematically illustrating a configuration example of a rights protection LSI according to the first embodiment. FIG.

The receiver 6A includes, for example, a tuner 61, a receiver main body 62, a rights protection LSI 63A, a monitor 64, a speaker 65, and the like as shown in FIG. The tuner 61 receives the transmission signal of the terrestrial digital broadcast captured by an antenna (not shown), demodulates the signal by OFDM (Orthogonal Frequency Division Multiplexing), and outputs the demodulated MPEG-TS bucket 1 to the receiver main body 62. I do.

The receiver main unit 62 extracts the MPEG-TS packet from the input signal by the MPEG-TS bucket extraction unit 621, and the MULTI 2 encryption / decryption unit 623 uses the scramble key Ks supplied from the processor 622 to output the MPEG-TS packet. Put a desk lamp on the bucket. The receiver main body 62 sends to the rights protection LSI 63A through the processor 622, and receives the scrambled key Ks from the rights protection LSI 63A through the processor 622.

The receiver main body 62 supplies the image signal obtained by expanding the broadcast signal obtained by the descrambling by the MPEG video packet expansion processing section 624 to the monitor 64, and the broadcast signal obtained by the descrambling. The audio signal obtained by expanding the signal by the MPEG one-packet expansion processing section 625 is supplied to the speaker 65.

The monitor 64 displays an image based on the image signal supplied from the receiver main body 62. The speaker 65 outputs sound based on the sound signal supplied from the receiver main body 62.

The rights protection LSI 63A exchanges data with the processor 622 of the receiver main body 62 in accordance with the click CLK. The rights protection LSI 63A receives the MP EG—TS bucket, ECM, EMM, and reboke information from the processor 622 of the receiver main unit 62, extracts the scramble key Ks, and decrypts the scramble key Ks. Pass it to processor 622 as a key. This rights protection LSI 63 A Has a secret data input terminal, a large number of test terminals, etc., and inputs the unique number, master key Km, and individual key input path from the data input terminal.

A terrestrial packet (data) is composed of a start bit, 8-bit data, and a parity bit as shown in Fig. 3, for example, and follows a guard interval and continues to the next start bit.

For example, as shown in FIG. 4, the rights protection LSI 63A includes a bucket selector 631A, an s encryption / decryption unit 632A, a Kw encryption / decryption unit 633A, a Km 喑 decryption unit 634A, a FRAM (non-volatile (Memory) 635A, ROM636A, etc.

According to the above configuration, a packet such as an ECM, an EMM, or a revoked packet is selected from the MP EG-TS packet subjected to the Ks encryption by the bucket selecting unit 6221A. The packet selecting unit 6221A indicates a part that realizes the functions of the MPEG-TS packet extracting unit 621 and the processor 622 described above.

In the rights protection LSI 63A, FRAM635A and ROM636A are referred to, and the scramble key Ks is extracted. The Km encryption / decryption unit 634A extracts the master key Km (peak key number key) from the revoker packet selected by the packet selector 631A, and the Kw encryption / decryption unit 633A selects the master key Km using the packet selector 631A. The work key Kw is extracted from the obtained master key Km packet. Here, the work key Kw is the secret number of the KS, and is used for contract unit management.

The Ks encryption / decryption unit 632A extracts the scramble key Ks from the work key Kw bucket selected by the packet selector 631A. The extracted scramble key Ks is sent to the encrypted MPEG packet decryption unit 6222A as a 喑 symbol decryption key. Here, the encrypted MPEG packet decryption unit 6222A indicates a part that realizes a function corresponding to the MULT I2 喑 decryption unit 623 and the processor 622, and decodes the decrypted decrypted MPEG-TS into video and audio. Output to the subsequent decompression process according to. The scramble link Ks functions as a content encryption key. The content format is MPEG-TS format.

FRAM635 A has a work key _Kw for free broadcasting with a two-stage buffer structure for switching and two spare spares for switching, for example, each master key Km, lot number, lot number, lot number, Information such as model number and manufacturer number is stored in an updatable manner.

The ROM636A is capable of executing an initialization instruction, a revoke instruction, a Ks decryption instruction (for free broadcasting), a Kw decoding command (for free broadcasting), and stores a lot number, a manufacturer number, and a model number. are doing.

Here, the rights protection LSI 63A has a secret input route, and the master key Km, lot number, model number, key number, etc. must be input according to the instruction of the management organization and stored in FR AM 635A. Can be.

The rights protection LSI 63A stores, for example, two lock unit keys, two model unit keys, and two manufacturer unit keys as spare master keys Km. By this means, when the key is invalidated by re-poke, the situation where digital terrestrial broadcasting cannot be received can be handled by the spare master key Km.

Next, the operation will be described. FIG. 5 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the first embodiment.

It is assumed that the management mechanism 1A and the broadcasting station 5A can communicate by wireless or wire. Transmission from the management mechanism 1A to the broadcasting station 5A is performed for each unit number (step S11). At this time, work key update information, revocation information, etc. are transmitted.

When the broadcast station 5A receives the work key update information, revoke information, and the like for each lot number (step S21), based on the received data, a work key update bucket, a revoker packet, and the like are added to the broadcast signal of the content based on the received data. The superimposed and encrypted transmission signal is output (step S22). As a result, terrestrial digital broadcasting is performed.

When the terrestrial digital broadcast is received by the receiver 6A (step S31) In addition, a work key is updated, a revoked process is performed, and a process of outputting the received broadcast to a subsequent monitor or speaker is performed (step S32). In this way, terrestrial digital broadcasts will be received with the protection of rights.

As described above, according to the first embodiment, the management mechanism receives the supply of the management protection LSI from the LSI maker, writes information such as a key, and supplies the information to the receiver maker. Free terrestrial digital broadcasts are received by the viewer's receiver, so even if the receiver manufacturer tries to cheat or commercialize a receiver with insufficient rights protection functions, a simple configuration By doing so, it is possible to secure the right force by updating the decryption information.

In addition, since the management organization is notified of the update of the encryption information and the decryption information to the broadcasting station, it is possible to secure the rights enforcement in accordance with the management of the management organization.

In the management mechanism, at least one of the model unit, lot unit, and mail unit in each receiver is used as the key management unit, so it is possible to significantly reduce management and operation costs.

Also, in a broadcasting station, when at least one of a model unit, a lot unit, and a manufacturer unit is notified from a receiver, the work key Kw (decryption information) of each receiver is updated in the received unit. Since the implementation is performed, it is possible to efficiently update the decoding information by at least one of a model unit, a lot unit, and a mesh unit.

Also, a scramble key K s for applying the function of the rights protection LSI to the broadcast signal by scrambling Z descrambling, a work key Kw for encrypting / decrypting this K s and the scrambled broadcast signal together, and Kw and the master key Km for encrypting / decrypting the encrypted broadcast signal as a whole.Encryption by Z and Z decryption. It can be kept to the minimum necessary.

(Embodiment 2) In the first embodiment described above, the management mechanism writes a key or the like to the management protection LSI supplied from the LSI maker. However, the present invention is not limited to this. However, as in the second embodiment described below, a key or the like may be written in the management protection LSI on the LSI manufacturer side. Hereinafter, only the portions different from the first embodiment will be described, and the description of the common portions and the effects thereof will be omitted.

Fig. 6 shows an example. FIG. 6 is a diagram showing a terrestrial digital broadcasting right protection system according to Embodiment 2 of the present invention.

For example, as shown in Fig. 6, the digital terrestrial broadcasting right protection system of the actual form 2 has a management mechanism 1B, IDC2B, LSI maker 3B, receiver maker 4B, broadcasting station 5B, and receiver 6B. It is composed of Here, the right protection LSI provided in the receiver 6B has the same configuration and function as the right protection LSI 63A of the first embodiment (see FIG. 4). Is omitted.

In the configuration of FIG. 6, the difference from Embodiment 1 described above is that information such as keys is provided from the management mechanism 1B to the LSI maker 3B, and information such as keys is provided to the LSI in the LSI maker 3B. Is written. Therefore, the right protection LSI is provided directly from the LSI maker 3B to the receiver maker 4B. As described above, in the second embodiment, the information provided from the management mechanism 1B to the receiver maker 4B is the LSI specification which is an external specification.

As described above, according to the second embodiment, the management mechanism communicates only the key information to the LSI maker, and the LSI maker writes the key or the like to the management protection LSI. As a result, the exchange of errors between the receiver manufacturer and the LSI maker was performed, which reduced the amount of work required for the management mechanism and protected the rights of the receiver maker even if the receiver maker attempted fraud. Even if a receiver with inadequate functions is manufactured, it is possible to secure the right enforcement by updating the decryption information with a simple configuration.

(Embodiment 3) By the way, in Embodiments 1 and 2 described above, the update information of the work key Kw is regularly transmitted from the broadcasting station or the revoke command is transmitted. However, the present invention is not limited to this. However, as in Embodiment 3 described below, the broadcasting station may perform services such as updating of the work key Kw in response to a request of a user, that is, a viewer. In the following, portions different from the above-described first and second embodiments will be emphasized, and description of common portions and detailed description of their effects will be omitted. An example is shown in FIG. The figure shows a digital terrestrial broadcasting right protection system according to Embodiment 3 of the present invention. The terrestrial digital broadcasting right protection system shown in FIG. 7 is applied based on the configuration of the second embodiment described above (see FIG. 6).

As shown in Fig. 7, for example, the digital terrestrial broadcasting right protection system of the actual form 3 has a management mechanism 1C, IDC 2C, LSI maker 3C, receiver maker 4C, broadcasting station 5C, Machine 6C etc.

In the configuration of FIG. 7, the difference from the above-described second embodiment is that a viewer's claim is sent from a receiver 6C operated by a viewer to a broadcasting station 5C with identification information such as a user's telephone number. The point is that the broadcast station 5C sends Kw to the receiver 6C individually using the user's individual user key. As a result, the receiver 6C receives the K w individual transmission and enjoys services such as updating of the work key K w based on the user key. Another difference is that the IDC2C manages, as information for free broadcasting, a user number for identifying a user and a correspondence table between the user number and the user key.

Next, rights protection LSI will be described. FIG. 8 is a block diagram schematically showing a configuration example of the rights protection LSI according to the third embodiment.

As shown in FIG. 8, for example, the rights protection LSI 63 C includes a packet selector 631 C, a Ks encryption / decryption unit 632 C, a Kw encryption / decryption unit 63 3 C, and a Km encryption / decryption unit 6. It is composed of 34 C, FRAM 635 C, ROM 636 C and the like. In addition, The packet selecting section 6221C and the decoded MPEG bucket decoding section 6222C are the same as those in the first and second embodiments as the functions on the receiver side, and therefore description thereof is omitted. This right protection LSI 63 C has the same configuration and function as the right protection LSIs of the first and second embodiments described above. The point is that the user individual key is stored in C. With this user individual key, it becomes possible to decrypt the individual Kw transmission sent from the broadcasting station 5C for each user.

Next, the operation will be described. FIG. 9 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the third embodiment. Since the overall operation related to digital broadcasting is the same as that of Embodiments 1 and 2 described above, here, the viewer complaint which is the difference from Embodiments 1 and 2 above and the corresponding Kw individual transmission Will be described.

First, in the receiver 6C, a viewer complaint including a user number for identifying each user is transmitted to the broadcasting station 5C by a viewer operation (step S51). In response to this, in the broadcasting station 5C, when the viewer complaint is received (step S41), the user number is extracted from the transmission data of the viewer complaint, and the management mechanism 1C Is inquired (step S42).

As a result, the user is confirmed. At that time, in the management mechanism 1C, the user number is notified to the IDC 2C, and the user key corresponding to the user number is supplied. In this way, the user key is sent from the management mechanism 1C to the broadcasting station 5C.

In the broadcast station 5C, when the user key is obtained, the Kw individual transmission is performed based on the user key (step S43). This individual Kw transmission includes services such as a Kw update corresponding to the user number.

Then, when receiving the individual Kw transmission, the receiver 6C performs decryption based on the user key (step S52), and enjoys services such as Kw update (step S52). Step S 53).

As described above, according to the third embodiment, a simple configuration and an inexpensive right protection function are realized, and a broadcast station can provide an individual user with respect to a service request from a viewer through a receiver. It is possible to provide a service every time.

(Embodiment 4)

The first, second, and third embodiments described above are examples in which free broadcasting is assumed. However, the present invention is not limited to this example. Alternatively, it may be applied to pay broadcasting. Hereinafter, based on the system of the second embodiment described above, additional parts will be emphasized and described, and description of common parts and detailed description of the effects thereof will be omitted.

Fig. 10 shows an example. FIG. 10 is a diagram showing a terrestrial digital broadcast right protection system according to Embodiment 4 of the present invention. The terrestrial digital broadcasting right protection system shown in FIG. 10 is applied based on the configuration of the second embodiment described above (see FIG. 6).

As shown in Fig. 10, for example, the digital terrestrial broadcasting right protection system of the actual form 4 has a management mechanism 1D, IDC 2D, LSI maker 3D, receiver maker 4D, broadcasting station 5D, receiver 6D, It is composed of I DC 7D etc.

The configuration of FIG. 10 differs from Embodiments 1 to 3 described above in that a configuration for newly supporting pay broadcasting is provided. That is, the management information of the pay broadcast is managed by the IDC 7D, and information on the management of the pay broadcast is appropriately exchanged between the IDC 2D and the IDC 7D. In IDC 7D, at least Kw, contract information, and billing information for pay broadcasting are managed as pay broadcast (PPC: Pay per Channel) management information.

In IDC 2D, a table in which user numbers and the user numbers are associated with user keys is managed for pay broadcasting. The user number and the user key are exchanged with the management mechanism 1D. Broadcasting station 5D has a PPC management mechanism that communicates with IDC 7D and manages pay broadcasts. In the configuration of FIG. 10, the difference between the third embodiment and the usage form of the user number is that Pp C—Kw updates, pay broadcast messages, and contract information updates based on pay broadcasts from the broadcast station 5D to the receiver 6D using the user's individual user key. Therefore, the receiver 6D receives the transmission of the activation of the pay broadcast and updates the PPC—Kw based on the user key, the pay broadcast message, and the contract information. You will enjoy services such as updating. At this time, the management mechanism 1D obtains the user key corresponding to the user number from the IDC 2D in response to the inquiry of the user key based on the user number from the broadcasting station 5D, and has a role of transferring the user key to the broadcasting station 5D. .

Next, the rights protection LSI will be described. FIG. 11 is a block diagram schematically showing a configuration example of the rights protection LSI according to the fourth embodiment.

As shown in FIG. 11, for example, the rights protection LSI 63D includes a bucket selector 631D, a Ks encryption / decryption unit 632D, a Kw 喑 decoding unit 633D, a Km encryption / decryption unit 634D, and a FRAM635D _N ROM636D. Be composed. The functions of the bucket selecting unit 6221D and the encrypted MPEG bucket decrypting unit 6222D are the same as those of the first to third embodiments as functions on the receiver side, and therefore description thereof is omitted. This right protection LSI 63D has the same configuration and function as the base part of the right protection LSI of the first to third embodiments. Regarding the difference from the first to third embodiments described above, FRAM635D stores Km as an individual key per user in connection with pay broadcasting, and further obtains P PC—Kw by applying for pay broadcasting. (K w for pay channel), pay channel message, and pay channel contract information are stored in predetermined areas. It is assumed that the user number is obtained by, for example, a secret input route and stored in FRAM 635D.

Well, there is also a difference for ROM636D. In this ROM636D, Stored are an individual number presentation instruction, a pay channel message presentation instruction, a pay broadcast Kw decoding instruction, a pay broadcast contract information storage instruction, and a pay broadcast contract information presentation instruction. The individual number presentation command is a command for presenting the user number, and the pay channel message presentation command is a command for presenting the message. The pay broadcast Kw decryption command is a command for performing Kw decryption for pay broadcast, and is related to the Kw encryption / decryption 633D. The pay-broadcast contract information storage instruction and pay-broadcast contract information presentation instruction are instructions for storing and presenting the contract information in FRAM 635 D heno, respectively.

Next, the operation will be described. FIG. 12 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the fourth embodiment.

In order for viewers (users) to watch paid terrestrial digital broadcasts, the viewers themselves must apply for paid broadcasts. Therefore, when an application for pay broadcasting is made from the receiver 6D to the broadcasting station 5D by the viewer's operation (step S81), the broadcasting station 5D accepts the application and sends the application to the management mechanism 1D. The user key is queried (step S71). The above-mentioned application for pay broadcasting may be made by adding a user number via a telephone line, an Internet line, or a VPN line.

The management mechanism 1D receives the user key from the IDC 2D in response to an inquiry from the broadcasting station 5D, and executes a process of returning the user key with the user key (step S61). When the user key is sent to the broadcasting station 5D (step S72), the transmission data is encrypted and transmitted to the receiver 6D of the application source based on the user key (step S73). . The signal transmitted to the receiver 6D includes? ? 〇ー ^ Update information, pay broadcast messages, contract information is included.

In the receiver 6D, when a transmission signal from the broadcasting station 5D is received, decryption based on the user key is performed (step S82), and the contents of the FRAM635D are updated as shown in FIG. (Step S83). Then, when a paid terrestrial digital broadcast is carried out from the broadcasting station 5D (step S74), it is possible to receive only the contracted pay channel (step S84). In this way, The listener can view the desired pay channel.

As described above, according to the fourth embodiment, when a viewer applies for a pay broadcast through a receiver to a broadcast station, the management mechanism sends a pay broadcast to the receiver of the application. Because the decoding information for the receiver is passed through and the decoding information of the receiver is updated, the pay broadcasting can be validated by the pay broadcasting required management mechanism, and the pay broadcasting is managed by the pay broadcasting management mechanism. Is possible.

(Embodiment 5)

Now, in the system of the above-described fourth embodiment, additional registration of a pay broadcast channel may be performed as in a fifth embodiment described below. In a fifth embodiment described below, description of configurations and effects common to the fourth embodiment will be omitted.

Fig. 13 shows an example. FIG. 13 is a block diagram schematically showing a configuration example of a rights protection LSI according to the fifth embodiment.

As shown in FIG. 13, for example, the rights protection LSI 63E includes a bucket selector 631E, a Ks encryption / decryption unit 632E, a Kw encryption / decryption unit 633E, and a Km 喑 decryption unit 634E, FRAM6351 E _N FRAM6352 E _N It consists of FRAM6353E, FRAM6354E, ROM636E and so on. The packet selecting unit 6221 E and the encrypted MPEG bucket decrypting unit 6222 E are the same as those in the first to third embodiments as functions on the receiver side, and therefore description thereof is omitted.

The rights protection LSI 63E has the same configuration and function as the base part of the rights protection LSI of the first to third embodiments. The difference from Embodiments 1 to 3 described above is that Fm6351E stores Km as an individual key for each user in connection with pay broadcasting.

In FRAM6352E, PP C-Kw (Kw for pay channel), pay channel message, and pay channel contract information acquired by applying for pay broadcasting are stored in predetermined areas, respectively, and are also stored in FRAM6353E and 6354E. Use in the same way as FRAM6352 E by supporting other paid channels There is a difference. The user number is obtained, for example, through a secret input route and stored in FRAM635D.

Here, FRAM 6354 E is used as the pay channel area n (n is a natural number). If the number is the optimal number for the rights protection LSI, the necessary number may be provided in advance.

Well, there is also a difference for ROM636E. The ROM 636E is provided with, for example, a program for confirming the FRAM free space in addition to the configuration of the ROM 636C in FIG. In this free capacity determination step, if there is free space, the pay channel is additionally registered in FRAM, and if there is no free space, the ability to output a message indicating that the pay channel cannot be registered \ Existing pay channel (former pay channel) The new pay channel (new pay channel) is overwritten. Regarding the control of the absence of a space, the viewer may be allowed to select arbitrarily.

Next, the operation will be described. FIG. 14 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the fifth embodiment. Here, only the registration of paid channels will be described. Since the fourth embodiment is common to the fourth embodiment in terms of the application for pay broadcasting, steps common to those in FIG. 12 are denoted by the same reference numerals and description thereof is omitted.

Also in the receiver according to the fifth embodiment, a user key is obtained by applying for a pay broadcast to a broadcast station (steps S81 and S82). Then, when the information about the pay channel is stored in the FRAM, the capacity is first checked to see if there is any free space (step S91).

At this time, if there is a free area (YS route in step S91), the FRAM is updated by additionally registering the pay channel (step S92), and thereafter, the reception including the additionally registered pay channel is performed. The pay broadcast can be received by the device (step S84).

—If there is no free space (NO route in step S91), the new pay channel The viewer is inquired whether to overwrite the file (Step S93). In this case, the message may be displayed on a display (not shown) of the receiver.

Then, when the overwriting is accepted by the viewer's operation (YES route in step S93), the process of overwriting the existing pay channel with the new pay channel is executed (step S94). The receiver can receive pay broadcasts including the additionally registered pay channels (step S84).

On the other hand, if the overwriting is not approved by the viewer's operation (NO route in step S93), the pay broadcast can be received by the receiver while the existing pay channel remains unchanged ( Step S84).

As described above, according to the fifth embodiment, in the rights protection LSI, an update is performed for enabling pay broadcasting on a nonvolatile memory (FRAM), and the update is performed. If the user cannot secure an area for this, the old pay channel (old information on pay broadcast) is deleted or the new pay channel (new information on pay broadcast) is overwritten by viewer operation. New paid channels can be added as long as there is free space on FRAM. In addition, if it is not possible to secure an area for updating, it is possible to arbitrarily determine whether or not to overwrite the old or new pay channels by operating the viewer.

By the way, in Embodiment 5 described above, when there is no free space at the time of applying for a pay broadcast, it is determined whether or not a new pay channel is overwritten. However, the present invention is not limited to this. A rule for when there is no capacity may be determined.

(Embodiment 6)

In the receivers of the first to fifth embodiments described above, a specific example has not been shown in the update of the work key Kw. However, as in the sixth embodiment described below, the old work key Kw The new work key Kw may be mixed with the current work key Kw on the receiver side to perform an update process to keep pace with the new work key. less than In the sixth embodiment to be described, the deformed portion can be applied to any of the first to fifth embodiments described above, and the description of the common configuration and effect will be omitted. First, the principle will be described with reference to FIG. FIG. 15 is a diagram illustrating an example of a packet during digital terrestrial broadcasting according to the sixth embodiment.

The transmission signal from the broadcasting station is transmitted in MPEG packets as shown in FIG. 15 (A). This MPEG packet stores Kw update (for example, composed of 188 bytes), compressed video, and compressed audio. It is desirable that the MPEG packet for Kw update, that is, the Kw update bucket, be composed of a bucket ID, a new Kw after update, a new Kw corresponding number, and other information !.

If a certain period of time (grace period of renewal) elapses and the transmission of the scramble key Ks corresponding to the old work key Kw is stopped for the renewal of Kw, the rights protection LSI Need to confirm which stage of work key Kw is registered.

Therefore, in the sixth embodiment, as shown in FIG. 15 (B), the combination of the new Kw and the new Kw corresponding number and the combination of the old Kw and the old Kw corresponding number are included in the Kw update packet. And a function to notify the rights protection LSI of what the old and new Kw are. For this purpose, the rights protection LSI is provided with a function for distinguishing the new work key Kw from the old work key Kw.

Next, rights protection LSI will be described. FIG. 16 is a block diagram schematically showing a configuration example of the rights protection LSI according to the sixth embodiment.

The rights protection LSI 63 F according to the sixth embodiment has a mechanism in which functions realized by hardware and functions realized by software coexist, as shown in FIG. 16, for example. In Fig. 16, the functions represented by the practical blocks represent hardware realization functions, and the functions represented by dotted blocks represent software realization functions.

As shown in FIG. 16, for example, the rights protection LSI 63 F includes a packet selection section 622 1 F, a processor 63 1 F, an FRAM 63 2 F, and an encryption / decryption section 6.

£ L9 00 / 00ZdT / 13d 86880 contract OAV Can be different.

Next, the operation will be described. FIG. 17 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the sixth embodiment.

At the time of updating Kw, a Kw update packet is transmitted from the broadcasting station as shown in FIG. 15 (B) in the MPEG bucket transmission (step S101). In the receiver, the MPEG packet transmitted from the broadcasting station is received (step S111), and the current work key Kw currently stored in the FRAM and the old and new work chain Kw in the received packet are received. A comparison is made (steps S 1 1 2).

If a match with the old work key Kw is confirmed (YES route in step S113), the current work key Kw is updated to the new work key Kw, and the new work key Kw is updated. If a match is confirmed (YES route in step S113), the process ends as updated (step S114).

On the other hand, if no match is found between the old and new work keys (NO route in step S113), a message indicating no Kw is output to a display (not shown) of the receiver (step S11). 1 1 5).

As described above, according to Embodiment 6, when the receiver receives a broadcast signal multiplexed with the old and new work keys Kw transmitted from the broadcast station, the current work key Kw and the broadcast station The old work key Kw and the new work key Kw sent from the new work key Kw are compared and the new work and the key Kw are updated according to the coincidence of the old work key Kw. It is possible to update to the latest work key Kw.

When updating Kw, it is impossible to update Kw simultaneously for all viewers due to the different circumstances of each viewer (reception environment, etc.). If there is a receiver that could not update Kw, viewers using that receiver may not be able to view. Therefore, by mixing the old Kw into the Kw update packet as in the sixth embodiment, it is possible to receive terrestrial digital broadcasting with the old Kw even if the receiver has not completed the Kw update. It becomes possible. Therefore, one of the old and new Kw is registered If so, it is possible to receive terrestrial digital broadcasting.

Also, after a certain period (update grace period) from the broadcasting station, the transmission of the scramble key Ks corresponding to the old work key Kw is stopped, so that the matching of the old work key Kw cannot be confirmed by the above-described verification. In such a case, it is possible to notify the display impossibility due to the absence of the work key to a display (not shown) by a message or the like. In this way, it is possible to assist the viewer in confirming the inability to view.

(Embodiment 7)

In the first to sixth embodiments described above, the work key Kw is updated by a transmission signal, that is, a broadcast wave bucket. However, the present invention is not limited to this. The above update may be performed through the Internet line. In this case, a mechanism for ensuring the validity of the update information may be used as in the seventh embodiment described below. Embodiment 7 described below is applicable to any of Embodiments 1 to 6 described above, and a description of common configurations and effects will be omitted.

The principle is shown in FIG. FIG. 18 is a diagram illustrating an example of a bucket during digital terrestrial broadcasting according to the seventh embodiment.

A transmission signal from a broadcasting station is transmitted by an MPEG packet as shown in FIG. This MPEG bucket stores Kw update (composed of, for example, 188 bytes), compressed video, and compressed audio. It is desirable that the M PEG packet for the Kw update, that is, the Kw update bucket is composed of the packet ID, the new Kw after the update, the new Kw corresponding number, and the authentication information according to the seventh embodiment.

In the Kw update packet, the new Kw, the new Kw corresponding number and the authentication information are encrypted by the master key, so that the security of the MPEG bucket can be confirmed by decrypting the contents. A tag value is set for each of the new Kw, the new Kw corresponding number, and the authentication information, and it is possible to confirm whether the new Kw, the new Kw corresponding number, or the authentication information is based on the tag value. FIG. 18 shows tag values A and B for new Kw and authentication information, respectively, as examples. By assigning a tag value in this way, the order in which the new Kw, the new w corresponding number, and the authentication information in the Kw update packet are arranged does not have to be the same. This makes it difficult to illegally decode MP E.G packets.

Next, the operation will be described. FIG. 19 is a flowchart for explaining the operation during digital terrestrial broadcasting according to the seventh embodiment.

The Kw update packet including the authentication information is transmitted from the broadcasting station as shown in FIG. 18 (step S122). In the receiver, when a packet is received (step S133), the packet is decoded (step S133). At the time of this decryption, the tag value shown in FIG. 18 is referred to, and it is determined whether it is new Kw or authentication information.

Then, authentication is performed based on the decrypted authentication information (step S133). If the authentication is successful (YES route in step S133), the Kw is updated to the new work key Kw (step S134). If the authentication is not successful, the Kw update is not executed. Become.

As described above, according to the seventh embodiment, when the broadcast station notifies the receiver of the update of the decoding information, the master key Km (specific encryption key) predetermined for each user is determined. Since the authentication information encrypted in (2) is mixed in the transmission signal, it is possible to confirm the validity of the information received by the rights protection LSI.

(Embodiment 8)

In the above-described first to seventh embodiments, no specific example is given for the revoke information. However, as in the eighth embodiment described below, a revoke bucket is exchanged between a broadcasting station and a receiver. You may. Embodiment 8 described below is applicable to any of Embodiments 1 to 7 described above, and a description of common configurations and effects is omitted.

First, the revoke function will be described. The repoke function is performed by a revoke instruction. The re-poke command is, for example, the payload of the MPEG2-TS packet. Sent by A revoke instruction is executed for each manufacturer key, model key, and lot key. By the revocation instruction, it is possible to specify the force for revoking the work key Kw, and the current key can be revoked and the alternative key can be made valid at the same time.

Therefore, it is possible for the revoked receiver to continue receiving the alternative key. As a result, it is possible to deal with the leakage of the work key Kw and the current key. The substitute key is stored in the FRAM of the rights protection LSI. If n (n is a natural number) substitute keys are stored, it is possible to handle up to n recalls. Also, in order to maintain security such as prevention of leakage of revocation instructions, a master key dedicated to revocation may be prepared. In this case, the revoke command is encrypted with the revoke exclusive key, and further transmitted after being encrypted with the maker key, model key, and lot key. Subsequently, the principle of the eighth embodiment is shown in FIGS. FIG. 20 is a diagram for explaining repoke transmission according to the eighth embodiment, and FIG. 21 is a diagram for explaining ECM transmission according to the eighth embodiment.

The revoked packet (MPEG-TS format) consists of parts such as a header, packet ID, manufacturer number, model number, lot number, individual number, etc., decryption key selection information, and encryption, as shown in Fig. 20, for example. It consists of parts such as a generalized revoke command, time information, and error correction information.

In the rights protection LSI, the process of decrypting the revoked instruction encrypted from one or a part of the manufacturer number (Km), model number (Km), and individual number (Km) from the decryption key selection information is performed. Be executed. Then, after the first decryption is performed, a second decryption is performed this time for extracting time information and the like based on the revoke key.

Inside the rights protection LSI, a timer stores the power-on duration as time information 1 in the FRAM, for example, every 5 minutes. The time information 2 obtained in this way is compared with the time information 1 stored in the rights protection LSI, and if the time interval is longer than a certain range, it is determined that Kw has not been updated within a certain time, and the revocation instruction is issued. Causes Kw to be invalidated. Further, as shown in FIG. 21, the ECM packet may be configured to transmit encrypted time information at the same time as the encryption Ks. An ECM packet is composed of a header, a maker, a model, a lot, an individual number, an encrypted Ks chain, and encrypted time information. The encrypted time information includes the encrypted time information falsification detection information. This tampering detection information is, for example, a checksum.

In the bucket selection, bucket selection is performed by a bucket ID or the like in the header, and in the ECM selection, ECM is selected based on a manufacturer number, a model number, a lot number, an individual number, and the like. As a result, when the encrypted Ks is extracted, the decryption of Ks is performed using the work key Kw.

When the encrypted time information is extracted, the time information is decrypted by using the work key Kw. Further, when the encrypted falsification information tampering detection information is extracted, the falsification detection information is decrypted using the work key K w.

A checksum operation is performed on the decoding time information thus obtained, and the obtained checksum is compared with the checksum indicated by the falsification detection information. As a result, if a match is confirmed, the validity of the decryption K s is guaranteed as tampering-free, while if a mismatch is confirmed, the tampering of the ECM packet is confirmed as tampering.

As described above, according to the eighth embodiment, the rights protection LSI refers to the time information inserted into the transmission signal at the broadcasting station, and updates the predetermined decoding information within a continuous period of time. If not, the predetermined decryption information is invalidated, so that the security of the rights protection LSI can be ensured and it is possible to ensure that the decryption information is updated within a certain time.

Further, in the rights protection LSI, the time information encrypted by the broadcasting station is decrypted based on the decryption information, so that the time information can be prevented from being falsified.

(First Modification of Embodiments 1 to 8)

By the way, in Embodiments 1 to 8 described above, an interface between the management mechanism and the broadcasting station is provided. A connection may be made to be communicable using a net line, and a notification such as an update of encryption information and decryption information and a revocation request from the management mechanism to the broadcasting station may be made via the internet line.

An example is shown in FIG. FIG. 22 is a configuration diagram illustrating an example of a network of the terrestrial digital broadcasting system of the present invention. In the first modification, as shown in FIG. 2, the broadcast station 9 and the receiver 6 are connected by the Internet line 7, so that the communication cost can be significantly reduced. It is.

(Modification 2 common to Embodiments 1 to 8)

Also, in the above-described first modification, the Internet line was used. However, the present invention is not limited to this, and the management mechanism and the broadcasting station are communicably connected using a VPN line, and the management mechanism is connected to the broadcasting station. The notification of the update of the encryption information and the decryption information and the request for the repoke may be performed via the VPN line.

An example is shown in FIG. FIG. 23 is a configuration diagram for explaining another example of the network of the terrestrial digital broadcasting system of the present invention. In the second modification, as shown in FIG. 23, the broadcast station 9 and the receiver 6 are connected by a VPN line 8. In this way, the communication is dedicated by the VPN line, whereby the communication line can be secured.

The present invention is not limited to the above-described embodiments and modifications, and various modifications can be made without departing from the gist of the present invention.

As described above, according to the first aspect of the present invention, a broadcast station generates a transmission signal in which encryption information for protecting rights and an encrypted broadcast signal are superimposed, and the transmission signal Is transmitted using a terrestrial wave, and the receiver decodes an encrypted transmission signal which is allocated in a predetermined unit to one or more receivers supplied for the terrestrial digital broadcasting system and is encrypted. The decoding information is stored in advance, and the broadcast signal is reproduced by decoding the transmission signal transmitted from the broadcasting station in accordance with the decoding information. Thus, a digital terrestrial broadcasting system capable of realizing digital terrestrial broadcasting can be obtained.

Further, according to the investigation of claim 2, the broadcasting station generates a transmission signal in which encryption information for protecting rights and an encrypted broadcasting signal are superimposed, and the transmission signal is a terrestrial wave. The service information is transmitted to the receiver individually when the user-specific cryptographic information is received from the receiver, and is supplied by the receiver for the terrestrial digital broadcasting system. The decoding information and user-specific encryption information allocated to the receiver in a predetermined unit and used to decode the encrypted transmission signal are stored in advance, and the transmission signal transmitted from the broadcasting station is received. Then, the broadcast signal is reproduced by decoding the transmission signal according to the decoding information, and when the user individual encryption information is transmitted to the broadcast station, the user returned from the broadcast station Since individual service information is received, a simple configuration and an inexpensive right protection function can be realized, and the broadcasting station can provide receivers with services for individual users in response to service requests. This has the effect of providing a digital terrestrial broadcasting system that can operate.

According to the third aspect of the present invention, in the first and second aspects of the present invention, the broadcasting station includes a pay-broadcast management mechanism for managing pay-broadcast. When receiving an application for pay broadcasting from a receiver through a receiver, the receiver transmits the decoding information for the pay broadcasting to the receiver of the application and updates the decoding information of the receiver to enable the pay broadcasting. As a result, it is possible to enable the pay broadcast by the pay broadcast management mechanism, and to obtain a terrestrial digital broadcast system capable of managing the pay broadcast in the pay broadcast management mechanism. . According to the invention set forth in Claim 4, in the inventions set forth in Claims 1 and 2, when the decoding information of each receiver is updated, new and old decoding information is multiplexed from a broadcasting station. The decoded broadcast signal is transmitted, and the receiver compares the decoded information with the old and new decoded information of the broadcast signal transmitted from the broadcasting station, and updates the decoded signal to the new decoded information. This allows the receiver to distinguish between old and new decryption information. As a result, there is an effect that a terrestrial digital broadcasting system capable of updating the receiver with the latest decoded information is obtained.

According to the invention set forth in claim 5, in the invention set forth in claim 1 or 2, when the broadcast station notifies each receiver of the update of the decoding information, The authentication information, which is unique encryption information predetermined for each user and is encrypted by the encryption information for encrypting the broadcast signal and the encryption information for encrypting the broadcast signal, is mixed in the transmission signal. In addition, a digital terrestrial broadcasting system capable of confirming the validity of information received by the rights protection LSI is obtained. According to the invention set forth in claim 6, in the invention set forth in claims 1 and 2, the receiver refers to the time information inserted into the transmission signal at the broadcasting station. However, if the predetermined decryption information is not updated within a certain period of continuous time, the predetermined decryption information is invalidated. This has the effect of providing a terrestrial digital broadcasting system that can ensure that information is updated.

According to the invention of claim 7, in the invention of claim 6, in the receiver, the time information obtained by decoding the time information at the broadcasting station based on the encryption information is provided. Since the decoding is performed based on the decoding information, an effect is obtained that a digital terrestrial broadcasting system capable of preventing tampering of the time information can be obtained.

According to the invention of claim 8, the transmission signal allocated to a predetermined unit for one or more receivers supplied for the terrestrial digital broadcasting system and encrypted is decrypted. The transmission information in which the encryption information for protecting the right and the encrypted broadcast signal are superimposed is received, and the received transmission signal is decoded according to the decoding information. Since the broadcast signal is reproduced by performing the above operation, an effect is obtained that a terrestrial digital broadcasting right protection device capable of receiving terrestrial digital broadcasting with a simple configuration and an inexpensive right protection function is obtained.

According to the ninth aspect of the present invention, a digital terrestrial broadcasting system is provided. The decryption information for encrypting the encrypted transmission signal, which is allocated to one or more receivers to be supplied in predetermined units, and the user-specific encryption information are stored in advance and transmitted from the broadcasting station. A transmission signal in which encryption information for rights protection and an encrypted broadcast signal are superimposed, and the received transmission signal is decoded according to the decoding information to reproduce the broadcast signal. However, since the user-specific encryption information is transmitted to the broadcasting station and the user-specific service information returned from the broadcasting station is received, a simple configuration and an inexpensive right protection function are realized. This has the effect of providing a terrestrial digital broadcast right protection device capable of receiving services for each individual user in response to a service request.

According to the tenth aspect of the present invention, a transmission signal that is allocated in a predetermined unit to one or more receivers supplied for a terrestrial digital broadcasting system and is encrypted is provided. Decryption information for decryption is stored in advance, and a transmission signal in which encryption information for rights protection and an encrypted broadcast signal are superimposed is received, and the received transmission signal is decoded. The broadcast signal is reproduced by decoding according to the following scheme, so that there is an effect that a terrestrial digital broadcast right protection method capable of receiving terrestrial digital broadcasts with a simple configuration and an inexpensive right protection function is obtained. .

According to the invention set forth in claim 11, the transmission signal that is allocated in a predetermined unit to one or more receivers supplied for the terrestrial digital broadcasting system and encrypted is decoded. The decryption information for encryption and the user-specific signal information are stored in advance, and the signal transmitted from the broadcasting station, in which the encryption information for rights protection and the encrypted broadcast signal are superimposed A broadcast signal is reproduced by receiving a transmission signal, decoding the received transmission signal according to the decryption information, transmitting user-specific encryption information to the broadcasting station, and returning a user-specific service from the broadcasting station. Since information is received, a terrestrial digital broadcasting right that can realize a simple configuration and an inexpensive right protection function and enjoy the services of individual users in response to service requests Mamoru method an effect that can be obtained. According to the invention set forth in claim 12, the transmission signal allocated to a predetermined unit for one or more receivers supplied for the terrestrial digital broadcasting system and encrypted is decrypted. Decryption information is stored in advance, a transmission signal in which encryption information for protecting rights and an encrypted broadcast signal are superimposed is received, and the received transmission signal is decrypted according to the decryption information Thus, since the broadcast signal is reproduced by this, it is possible to obtain a program capable of receiving terrestrial digital broadcasting with a simple configuration and an inexpensive right protection function.

According to the invention set forth in Claim 13, the transmission signal allocated to a predetermined unit for one or more receivers supplied for the terrestrial digital broadcasting system and encrypted is decrypted. The decoding information and the user-specific signal information to be stored in advance are stored in advance, and the signal transmitted from the broadcasting station, in which the encryption information for rights protection and the encrypted broadcasting signal are superimposed. A broadcast signal is reproduced by receiving a signal, decoding the received transmission signal in accordance with the decoding information, transmitting user-specific code information to the broadcast station, and returning a user-specific service from the broadcast station. Since information is received, a program that can realize a simple configuration and an inexpensive right protection function and enjoy services for individual users in response to service requests can be obtained. The effect say. Industrial applicability

As described above, the terrestrial digital broadcasting system, the terrestrial digital broadcasting right protection apparatus, the terrestrial digital broadcasting right protection method and the program according to the present invention provide digital communication between a broadcasting station and one or more receivers using terrestrial waves. Suitable for broadcasting systems.

Claims

The scope of the claims

1. A terrestrial digital broadcasting system for performing digital broadcasting between a broadcasting station and one or more receivers using terrestrial waves,

The broadcast station,

Generating means for generating a transmission signal by superimposing encryption information for rights protection and an encrypted broadcast signal;

Transmitting means for transmitting the transmission signal generated by the generating means using a terrestrial wave,

The receiver,

Storage means for preliminarily storing decoding information for decoding a transmission signal which is allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and is encrypted. When,

Receiving means for receiving the transmission signal transmitted by the transmitting means,

Reproducing means for reproducing a broadcast signal by decoding the transmission signal received by the receiving means in accordance with the decoding information stored in the storage means;

Digital terrestrial broadcasting system characterized by comprising.

2. A terrestrial digital broadcasting system for performing digital broadcasting between a broadcasting station and one or more receivers using terrestrial waves,

The broadcasting station,

Transmitting means for transmitting the transmission signal generated by the generating means using terrestrial waves; and transmitting service information individually to the receiver when user-specific encryption information is received from the receiver. Individual transmission means to

With The receiver,

The decryption information and the user-specific encryption information, which are allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and are used to decrypt the encrypted transmission signal, are preliminarily obtained. Storage means for storing,

Individual receiving means for transmitting user-specific encryption information stored in the storage means to the broadcasting station and receiving user-specific service information returned from the broadcasting station;

Digital terrestrial broadcasting system characterized by comprising.

3. The broadcast station is provided with a pay broadcast management mechanism for managing pay broadcasts. When a viewer receives an application for a pay broadcast from the viewer through the receiver, the pay station receives the pay broadcast from the receiver. 3. The terrestrial digital broadcasting system according to claim 1, wherein decoding information is transmitted to the receiver, and the decoding information of the receiver is updated to enable pay broadcasting.

4. When the broadcast station updates the decoding information of each of the receivers, the broadcasting station transmits a broadcast signal obtained by multiplexing the old and new decoding information, and the receiver transmits the decoding information and the broadcast stored in the storage unit. 3. The terrestrial digital broadcast system according to claim 1, wherein the broadcast signal transmitted from the station is compared with old and new decoded information and updated to new decoded information.

5. When the broadcast station notifies each of the receivers of the update of the decryption information, it encrypts the encryption information, which is unique encryption information predetermined for each user and encrypts the broadcast signal. Authentication information encrypted by the 3. The terrestrial digital broadcasting system according to claim 1, wherein the digital terrestrial broadcasting system is provided.

6. The broadcast station inserts time information into a transmission signal, and the receiver refers to the inserted time information, and does not update predetermined decoding information within a continuous period of time. 3. The digital terrestrial broadcasting system according to claim 1, wherein the predetermined decoding information is invalidated.

7. The broadcast station encrypts the time information based on the encryption information, and the receiver decrypts the encrypted time information based on the decryption information. Digital terrestrial broadcasting system according to paragraph 6.

8. Digital terrestrial broadcasting rights protection device for receiving and processing digital terrestrial broadcasting from a broadcasting station,

Receiving means for receiving a transmission signal on which encryption information for protecting rights and an encrypted broadcast signal are superimposed;

A digital terrestrial broadcasting right protection device characterized by comprising:

9. A terrestrial digital broadcasting right protection device for receiving and processing terrestrial digital broadcasting from a broadcasting station,

Decryption information for decrypting a transmission signal, which is allocated in a predetermined unit to one or more receivers supplied for the terrestrial digital broadcasting system and is encrypted, and Storage means for preliminarily storing user-specific cryptographic information and user-specific cryptographic information; and receiving a transmission signal, which is a signal transmitted from the broadcasting station, in which cryptographic information for protecting rights and an encrypted broadcast signal are superimposed. Receiving means,

Terrestrial digital broadcasting, comprising: transmitting individual user encryption information stored in the storage unit to the broadcasting station; and receiving individual service information returned from the broadcasting station. Broadcast rights protection device.

10. A terrestrial digital broadcasting right protection method for receiving and processing digital broadcasting by terrestrial broadcasting from a broadcasting station,

Decoding information that is allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and is used to decode an encrypted transmission signal is stored in a storage unit in advance. Memory steps to put

A receiving step of receiving a transmission signal on which encryption information for protecting rights and an encrypted broadcast signal are superimposed;

A reproduction step of reproducing a broadcast signal by decoding the transmission signal received at the reception step according to the decoding information stored in the storage means at the storage step;

And a terrestrial digital broadcasting right protection method.

1 1. This is a terrestrial digital broadcasting right protection method for receiving and processing terrestrial digital broadcasting from a broadcasting station,

Decryption information and user-specific encryption information that are allocated to one or more receivers provided for the terrestrial digital broadcasting system in a predetermined unit and are used to decrypt an encrypted transmission signal. A storage step in which is stored in advance as storage means; A receiving step of receiving a signal transmitted from the broadcasting station, wherein the transmission signal is obtained by superimposing encryption information for protecting a right and an encrypted broadcasting signal;

A reproducing step of reproducing a broadcast signal by decoding the transmission signal received in the receiving step in accordance with the decoding information stored in the storage means in the storing step;

An individual receiving step of transmitting user-specific encryption information stored in the storage means to the broadcast station in the storage step and receiving user-specific service information returned from the broadcast station;

And a terrestrial digital broadcasting right protection method.

1 2. Digital terrestrial broadcasting rights protection equipment that receives and processes terrestrial digital broadcasting from broadcasting stations.

A storage unit stores decryption information for decrypting a transmission signal which is allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and is encrypted. Memorizing steps to memorize,

A program that executes

1 3. Digital terrestrial broadcasting right protection equipment that receives and processes digital terrestrial broadcasts from broadcasting stations.

The decryption information and the user-specific encryption information, which are allocated to one or more receivers supplied for the terrestrial digital broadcasting system in a predetermined unit and are used to decrypt the encrypted transmission signal, are preliminarily obtained. A storage step to be stored in storage means; A receiving step of receiving a transmission signal, which is a signal transmitted from the broadcasting station, in which encryption information for rights protection and an encrypted broadcasting signal are superimposed;

A reproduction step of reproducing a broadcast signal by decoding the transmission signal received in the receiving step in accordance with the decoding information stored in the storage and means in the storage step;

An individual receiving step of transmitting user-specific encryption information stored in the storage means to the broadcasting station in the storing step and receiving user-specific service information returned from the broadcasting station;

A program that executes