JP2001077802A - Data providing device, data providing method, program recording medium, data recording medium and manufacture of data recording medium - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent an illegal copy to a DVD-RAM and to reproduce the DVD-RAM to which the legal copy is made by using an existing DVD player. SOLUTION: A disk key encrypted by a master key (encrypted disk key) is stored in advance in a DVD-RAM 36, a decoder 42 reads the encrypted disk key from the DVD-RAM 36 and decodes it by using the master key stored in a master key storage section 41. Furthermore, an encryption device 43 encrypts the title key outputted from a title key generating section 44 by using the master key decoded by the decoder 42 and stores the encrypted title key obtained as a result to the DVD-RAM 36. Then an encryption device 45 encrypts contents by using the title key outputted from the title key generating section 44 and stores it to the DVD-RAM 36.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a data providing device,
The present invention relates to a data providing method, a program recording medium, a data recording medium, and a method of manufacturing a data recording medium. In particular, for example, a DVD-RAM (Digital Versatile)
Prevents illegal copying of Disc-Random Access Memory) and DVD-R with legal copying
The present invention relates to a data providing apparatus, a data providing method, a program recording medium, a data recording medium, and a method for manufacturing a data recording medium, which enable an AM to be reproduced on a current DVD player.

[0002]

2. Description of the Related Art With the progress and development of digital signal processing technology, in recent years, recording apparatuses and recording media for digitally recording information have become widespread.

According to such a recording apparatus and a recording medium, for example, recording can be repeated without deteriorating an image or sound, that is, copying can be performed many times while maintaining image quality and sound quality. Therefore, if a recording medium on which such copying is illegally performed is distributed to the market, the interests of copyright holders of movies and the like will be harmed.
Therefore, a mechanism (system) that prevents illegal copying is introduced into the recording apparatus and the recording medium.

That is, for example, in a mini-disc device (a mini-disc is a trademark), as a method for preventing illegal copying, an SCMS (Serial Copy Management System) is used.
Has been adopted. The SCMS outputs a SCMS signal together with audio data from a digital interface (DIF) on the reproducing side, and outputs the SCMS signal on the recording side.
By controlling the recording of audio data from the reproducing side based on the SCMS signal from the reproducing side, illegal copying is prevented.

[0005] That is, the SCMS signal is such that the audio data is either copy free or copy once allowed (copy once allowed).
Or copy is prohibited (copy p
signal on the recording side.
When audio data is received from F, an SCMS signal transmitted together with the audio data is detected. If the SCMS signal is copy free, the audio data is recorded on the mini-disc together with the SCMS signal. Also, the SCMS signal is
If copy once allowed, change the SCMS signal to copy prohibited and record it on the mini-disc along with the audio data.
If py prohibited, audio data is not recorded.

As described above, in the mini-disc device, the copyrighted audio data is prevented from being illegally copied by the SCMS.

However, in the SCMS, as described above, it is difficult to cope with a case where a mini-disc device that does not control recording of audio data from the reproducing side based on the SCMS signal is manufactured. It is.

Therefore, for example, in a DVD player, by adopting a content scramble system,
It is designed to prevent copyrighted data from being illegally copied.

In the content scramble system, D
Video data, audio data, and the like are encrypted and recorded in a VD-ROM (Read Only Memory), and a key used to decrypt the encrypted data is given to a licensed DVD player. . The license is provided on condition that the DVD player is designed to conform to a predetermined operation rule such as not to perform unauthorized copying. Therefore, the licensed DVD player uses the given key to By decoding the encrypted data, it is possible to reproduce images and sounds recorded on the DVD-ROM. On the other hand, an unlicensed DVD player cannot decrypt the encrypted data because it does not have a key for decrypting the encrypted data, thereby satisfying the conditions required at the time of licensing. Not a DVD player, DVD
-An illegal copy due to the reproduction of the ROM is prevented.

A DVD-ROM used in a content scramble system is manufactured as shown in FIG.

That is, a movie company or other copyright holders, which are content suppliers, are used to encrypt and decrypt contents such as movies recorded on a DVD-ROM called disk keys and title keys. Determine and issue one key.

A key management center 4 is an LSI (Large Scale Integrated Curcuit) used for manufacturing a DVD player.
And a plurality of master keys to be assigned to the manufacturer of the software module and the software module, and the encryptor 5 encrypts the disk key with each of the plurality of master keys to thereby obtain an encrypted disk key (hereinafter, appropriately referred to as an encrypted disk). Key set). further,
In the encryptor 6, the title key is encrypted with the disk key, and the encrypted title key (hereinafter, appropriately,
Encrypted title key) is created. Then, the key management center 4 provides the set of encrypted disk keys and the encrypted title key to the disk manufacturer 7, which is the manufacturer of the DVD-ROM.

In the disk manufacturer 7, in the compressor 2, the contents, which are digital data such as images and sounds registered in the database 1, are stored in, for example, MPEG.
(Moving Picture Experts Group) 2 The content is compressed by the encoder 2 and the content output from the compressor 2 is encrypted with the title key issued by the content provider in the encryptor 3 to be an encrypted content.

Further, the disc manufacturer 7 prepares a master disc (disc master disc) 8 of a DVD-ROM in which a set of encrypted disc keys provided from the key management center 4 and an encrypted title key are recorded together with the encrypted contents. The stamper 9 is created using the master 8 created.
Then, using the stamper 9, a large number of DVD-RO
M10 is manufactured.

It should be noted that the key issuing center 4 and the disk manufacturer 7 may be different organizations or the same organization. In FIG. 1, the content is encrypted by the disk manufacturer 7, but the content is also encrypted by the key management center 4,
Therefore, it is possible to provide the disk manufacturer 7 with the encrypted content together with the set of encrypted disk keys and the encrypted title key.

FIG. 2 shows a DV manufactured as described above.
The D-ROM 10 shows a disk format defined by the DVD standard.

As shown in FIG. 2A, a physical sector having a physical sector number of 0h (h indicates that the preceding numeral is a hexadecimal number) (a physical sector having a physical sector number of x, , The physical sector #x) to the physical sector # 2FFFFh are lead-in areas, and the physical sector # 30000h and thereafter are main data areas in which contents are recorded.

The lead-in area is an area where physical sectors # 0h to # 2EFFFh are 0, and physical sector # 2F0h
00h to # 2F01Fh are in the area of the reference code, physical sectors # 2F020h to # 2F1FFh are in the area of 0, and physical sectors # 2F200h to # 2FD.
Up to FFh are the physical sector # in the control data area.
Areas from 2FE00h to # 2FFFFh are 0 areas, and a set of encrypted disk keys is recorded in the control data area.

That is, the first physical sector of the control data area is an area in which physical format information such as a disk structure is recorded, the second physical sector is an area in which disk manufacturing information is recorded, and the third to 16th physical sectors. The physical sectors up to the first are the areas where the information of the content provider is recorded, and the control data areas thereafter are arranged so that the same area as the 16th physical sector from the beginning is repeated. Has become. And
The set of encrypted disk keys is recorded in the area where the information of the content provider is recorded in the control data area as described above.

In the main data area, data sectors, which are logical sectors in units of 2064 bytes as shown in FIG. 2B, are repeatedly arranged, and the data sectors are arranged with IDs (Identification) such as sector numbers. Region, I
D includes an area where error detection data is arranged, an area where copy management data is arranged, an area where user data is arranged, and an area where error detection data for the entire data sector is arranged. The encrypted title key is recorded in the area where the copy management data is arranged in the above data sectors.

It is to be noted that the area in which the set of encrypted disk keys is recorded and the area in which the encrypted title key is recorded cannot be read out through the logical file system of the computer. By
Disc keys and title keys are prevented from leaking out of the DVD player. However, the area in which the set of encrypted disk keys is recorded and the area in which the encrypted title key is recorded cannot be read out through the logical file system of the computer to the last. The disk key and the encrypted title key are read and used for decrypting the encrypted title key and the encrypted content.

Next, FIG. 3 shows a conventional (current) D-ROM for reproducing the DVD-ROM 10 of the format shown in FIG.
The configuration of an example of the VD player is shown.

The licensed DVD player has a master key storage unit 21 for storing a master key assigned to the maker of the DVD player (hereinafter, appropriately referred to as an assigned master key).
Reads out a set of encrypted disk keys recorded on the DVD-ROM 10 that has been encrypted with the assigned master key.

Here, among the set of encrypted disk keys recorded on the DVD-ROM 10, information on the order of the disk key (encrypted disk key) assigned to the manufacturer of the DVD player is given by the manufacturer. In contrast, a DVD player is provided with a master key at the time of a license contract, and the DVD player reads out from the DVD-ROM 10 an encrypted disk key encrypted with its assigned master key based on the information. It has become.

The decoder 22 reads the assigned master key stored in the master key storage unit 21 and
The encrypted disk key read from the ROM 10 is decrypted with the assigned master key. Then, the decryption unit 22 supplies the disk key obtained as a result of the decryption to the decryption unit 23.

The decryptor 23 reads the encrypted title key recorded in the copy management data area of the data sector in the DVD-ROM 10 and decrypts the encrypted title key with the disk key from the decryptor 22.
Then, the decoder 23 supplies the title key obtained as a result of the decoding to the decoder 24.

The decryptor 24 reads the encrypted content recorded in the user data area of the data sector on the DVD-ROM 10 and reads the encrypted content.
The decryption is performed using the title key from the decryptor 23. Decoder 24
The contents of digital data (so-called plaintext contents) obtained as a result of decryption by A / D
(log / Digital) conversion, converted to an analog signal, and output to the outside.

The above-mentioned content scramble system is described in, for example, “Nikkei Electronics”, Aug. 18, 1997 (No. 696), pp. 195-222.
110-119, Nikkei BP, etc., describe the details.

[0029]

SUMMARY OF THE INVENTION As described above, DVD
-A content scrambling system adopted in a ROM is intended for a recording medium on which data cannot be written by a user (hereinafter, appropriately referred to as a ROM medium), and a recording medium on which data can be written by a user (hereinafter, referred to as ROM medium). It is not considered for the application to RAM media.

That is, a RAM medium, for example, D
In order to adopt a content scramble system in a VD-RAM, a title key and a disc key issued by a content supplier of the content to be recorded in the DVD-RAM are required. It is difficult for a content provider to issue a title key or a disc key for a DVD-RAM that is not known (for a DVD-R that does not know what content is recorded).
Title keys and disc keys cannot be determined for AM).

Therefore, for a RAM medium such as a DVD-RAM, it is possible to prevent illegal copying by a method different from that of the content scramble system. In this case, such a different method is employed. The DVD-RAM cannot be played on the current DVD player. Therefore, when a method different from the content scramble system is adopted for the DVD-RAM, a user having the current DVD player must newly purchase a DVD player corresponding to such a DVD-RAM. Therefore, it is not preferable to adopt a method different from the content scramble system for the RAM medium.

The present invention has been made in view of such circumstances, and it is possible to prevent illegal copying on a RAM medium and reproduce the RAM medium on which a legal copy has been made by a current player. Is to do so.

[0033]

According to the present invention, there is provided a data providing apparatus comprising: a second encryption key which is a second key encrypted by a first key;
Using an acquiring unit for acquiring a key, an encrypted second key decrypting unit for decrypting the encrypted second key based on the first key, and a second key decrypted by the encrypted second key decrypting unit And encryption means for encrypting data, and providing means for providing encrypted data, which is data encrypted by the encryption means.

The encrypting means includes a third key encrypting means for encrypting the third key with the second key and outputting an encrypted third key, and a data encrypting means for encrypting data with the third key. Means can be provided, and in this case, the providing means can provide the encrypted data together with the encrypted third key.

[0035] The data providing device may further include storage means for storing the first key.

[0036] The acquiring means includes a set of encrypted second keys, each of which is a second key encrypted with each of the plurality of first keys, which can be decrypted with the first key stored in the storage means. Can be acquired.

A decryption method by the encrypted second key decryption means,
And an encryption method using an encryption means, a DVD (Digital
Versatile Disc) standard.

[0038] The acquiring means can read the encrypted second key recorded on the data recording medium. Also,
The acquisition means can receive the encrypted second key transmitted via the transmission path.

The providing means can record the encrypted data on a data recording medium. Further, the providing means can transmit the encrypted data via a transmission path.

According to the data providing method of the present invention, an obtaining step of obtaining an encrypted second key, which is a second key encrypted with a first key, and decrypting the encrypted second key based on the first key An encryption second key decryption step, an encryption step of encrypting data using the second key decrypted in the encryption second key decryption step, and data encrypted in the encryption step. Providing the encrypted data.

According to the program recording medium of the present invention, an obtaining step of obtaining an encrypted second key which is a second key encrypted with the first key, and decrypting the encrypted second key based on the first key. An encryption second key decryption step, an encryption step of encrypting data using the second key decrypted in the encryption second key decryption step, and data encrypted in the encryption step. And a providing step of providing encrypted data.

In the data recording medium of the present invention, an encrypted second key, which is a second key encrypted with the first key, is recorded, and later, the encrypted second key is decrypted with the first key. , A second key is obtained, and the data is encrypted and recorded using the second key.

This data recording medium is a DVD (Digital V
ersatile Disc) format.

Further, this data recording medium includes a plurality of first recording media.
Encryption second, which is a second key encrypted with each key
A set of keys may be recorded.

The encrypted second key can be recorded in a recording area which is readable but not writable.

The method of manufacturing a data recording medium according to the present invention will be described later with reference to an encrypted second key which is a second key encrypted with the first key.
Decrypts the key with the first key, obtains the second key,
Using the key, the encrypted second key is recorded on a data recording medium on which data is encrypted and recorded.

In the data providing device, the data providing method, and the program recording medium of the present invention, an encrypted second key, which is a second key encrypted with a first key, is obtained, and the encrypted second key is Decrypted based on the first key. Then, the data is encrypted using the decrypted second key, and encrypted data, which is the encrypted data, is provided.

In the data recording medium of the present invention, the first
An encrypted second key, which is a second key encrypted with the key, is recorded, and subsequently, the encrypted second key is decrypted with the first key, and using the resulting second key, The data is encrypted and recorded.

In the method of manufacturing a data recording medium according to the present invention, the second key, which is the second key encrypted with the first key, is decrypted with the first key to obtain the second key. ,
Using the second key, the encrypted second key is recorded on a data recording medium on which data is encrypted and recorded.

[0050]

FIG. 4 shows a RAM to which the present invention is applied.
1 shows an embodiment of a manufacturing process of a DVD-RAM as a medium.

The DVD-RAM is manufactured by a key management center 31 and a disk manufacturer 33 as shown in FIG.

That is, in the key management center 31, as shown in the flowchart of FIG. 5, first, in step S1, an appropriate disk key (second key) to be used for the DVD-RAM is determined, and the process proceeds to step S2. As in the case of the key management center 4 in FIG. 1, the encryption is performed by encrypting the disk key with each of the plurality of master keys (first keys) by the encryptor 32 that performs encryption in accordance with the DVD standard. A set of encrypted disk keys is created. The set of encrypted disk keys created by the key management center 31 is provided to the disk manufacturer 33 in step 3.

The key management center 31 assigns a different master key to each of the manufacturers who have made a license contract. The key management center 31 prepares a sufficient number of master keys as a plurality of master keys used for encrypting the disk key (therefore, the disk key is encrypted with each of such a sufficient number of master keys). Thus, different master keys can be assigned to each maker even if the number of licensing manufacturers increases.

As shown in the flowchart of FIG. 6, the disk manufacturer 33 first obtains an encrypted disk key set provided by the key management center 31 in step S11, and proceeds to step S12. A master disk (disk master) 34 of a format conforming to the DVD standard, in which a set of encrypted disk keys is recorded, is created. That is, in the disk manufacturer 33, in step S12, the DVD-RAM having the format as shown in FIG.
Of the master disk 34 in which a set of encrypted disk keys is recorded in the control data area of the lead-in area. Further, the disc manufacturer 33
Then, in step S13, a stamper 35 is created using the master 34, and the process proceeds to step S14, where a number of DVD-RAMs 36 are manufactured (stamped) using the stamper 35.

As described above, the DVD-RAM 36 of the format specified by the DVD standard shown in FIG.
Is manufactured.

Since the DVD-RAM 36 is manufactured by stamping using the stamper 35 as described above, the DVD-RAM 36 has a recording area (control data of the lead-in area) in which a set of encrypted disk keys is recorded. The area (FIG. 2A) is an area where reading is possible but writing is not possible.

Here, in order to more securely prevent illegal copying, the key management center 31 updates the disk key frequently, and as much as possible, a DVD on which a different disk key (encrypted disk key) is recorded. -RA
Preferably, M is produced.

The key issuing center 31 and the disk manufacturer 33 may be different organizations or the same organization.

FIG. 7 shows an example of the configuration of an embodiment of a DVD recorder for recording digital data contents on the DVD-RAM 36 manufactured as described with reference to FIGS. ing.

The master key storage section 41 stores a master key (assigned master key) assigned to a maker of the DVD recorder (LSI or software module).

The decryptor 42 reads out (acquires) a set encrypted with the assigned master key from the set of encrypted disk keys recorded in the lead-in area of the DVD-RAM 36, and stores it in the master key storage unit 41. The master key is used for decoding by a decoding method (decoding algorithm) based on the DVD standard. The disk key obtained as a result of decryption by the decryptor 42 is supplied to the encryptor 43.

The encryption device 43 includes a title key generation unit 44
Is encrypted with the disk key supplied from the decryptor 42 by an encryption method (encryption algorithm) conforming to the DVD standard, and the resulting encrypted title key is stored in the DVD-RAM 36. The data is recorded (provided) in the copy management data area of the data sector (FIG. 2B).

The title key generation unit 44 generates a key that can be used as a title key (third key) using, for example, a random number or the like, and
To be supplied.

The encryptor 45 receives digital data as content to be recorded on the DVD-RAM 36, and encrypts the content with the title key supplied from the title key generation unit 44 in accordance with the DVD standard. It encrypts by the method. further,
The encryptor 45 records the encrypted content obtained as a result of the encryption in the user data area of the data sector in the DVD-RAM 36.

In the DVD recorder configured as described above, as shown in the flowchart of FIG.
The recording of the content in the RAM 36 is performed.

That is, first, in step S21, the decryptor 42 selects a set of encrypted disk keys from the set of encrypted disk keys recorded in the lead-in area of the DVD-RAM 36.
The disk encrypted with the assigned master key is read, and the process proceeds to step S22, where the disk is decrypted with the master key stored in the master key storage unit 41 to obtain a disk key. This disk key is supplied from the decryption unit 42 to the encryptor 43.

Then, the process proceeds to a step S 23, where a title key is generated in the title key generation section 44 and supplied to the encryptors 43 and 45. The encryptor 43
In step S24, the title key supplied from the title key generation unit 44 is encrypted with the disk key supplied from the decoder 42, and the resulting encrypted title key is recorded on the DVD-RAM 36.

Thereafter, when the content to be recorded on the DVD-RAM 36 is input to the encryptor 45, the encryptor 45 receives the content in step S25, proceeds to step S26, and Encrypted with the title key from the title key generation unit 44,
The data is recorded in the VD-RAM 36. Then, step S27
It is determined whether or not all the content to be recorded has been recorded. If it is determined that the content has not been recorded yet, the process waits for the next content to be input to the encryptor 45, and proceeds to step S25. Then, the same process is repeated.

If it is determined in step S27 that all the contents to be recorded have been recorded, the processing is terminated.

As described above, the DVD-RAM 36 on which the content is recorded has the same format as the DVD-ROM 10 manufactured as described with reference to FIG.
A set of encrypted disk keys, an encrypted title key, and encrypted content are recorded. Therefore, DV
Since the D-RAM 36 cannot be played back by a DVD player having no master key, illegal copying can be prevented, and the same DVD player as that shown in FIG. Can be played. That is, illegal copying to the DVD-RAM can be prevented, and the DVD-RAM to which the legal copying has been performed can be reproduced by the current DVD player.

Next, FIG. 9 shows a configuration example of a DVD player for reproducing the DVD-RAM 36.

The master key storage unit 51 or the decoders 52 to 54 in FIG. 9 are configured similarly to the master key storage unit 21 or the decoders 22 to 24 in FIG. 3, respectively. Therefore, in the DVD player of FIG. The DVD-RAM 36 is reproduced in the same manner as the DVD player in FIG.

That is, in the DVD player of FIG.
As shown in the flowchart, first, in step S31, the decoder 52 is stored in the master key storage unit 51 from the set of encrypted disk keys recorded in the lead-in area of the DVD-RAM 36. Read the one encrypted with the assigned master key.
Further, in step S32, the decryptor 52 reads the assigned master key stored in the master key storage unit 51, and decrypts the encrypted disk key read from the DVD-RAM 36 with the assigned master key. Then, the decoder 52 supplies the disk key obtained as a result of the decoding to the decoder 53.

The decoder 53 determines in step S33
The encrypted title key recorded in the copy management data area of the data sector in the DVD-RAM 36 is read, and the process advances to step S34 to decrypt the encrypted title key with the disk key from the decryptor 52. Then, the decoder 53 supplies the title key obtained as a result of the decoding to the decoder 54.

The decoder 54 in the step S35
Reads the encrypted content recorded in the user data area of the data sector in the DVD-RAM 36,
Proceeding to step S36, the encrypted content is decrypted using the title key from the decryptor 53. The contents of digital data (so-called plaintext contents) obtained as a result of decoding by the decoder 54 are A / D (Analo
g / Digital), converted to an analog signal, and output to the outside.

Then, the process proceeds to a step S37 to determine whether or not all the contents to be reproduced have been reproduced.
If it is determined that playback has not been performed yet, step S35
Returns the encrypted content to be reproduced next to the DVD-
The data is read from the RAM 36 and the same processing is repeated thereafter.

If it is determined in step S37 that all the contents to be reproduced have been reproduced, the processing is terminated.

As described above, the DVD-RAM 36 can be reproduced by the DVD player of FIG. 9 having the same configuration as the DVD player of FIG.

The master key stored in the master key storage unit 41 of the DVD recorder or the master key storage unit 51 of the DVD player is obtained by a person who intends to make an illegal copy (hereinafter, appropriately referred to as an illegal person). If a DVD player having the same configuration as the DVD player shown in FIG. 9 (or FIG. 3) is manufactured without receiving a license contract, illegal copying can be performed. However, in this case, in the key management center 31 of FIG.
An encrypted disk key obtained by encrypting a disk key with a master key obtained by an illegal person (hereinafter referred to as an illegal disk key) is deleted from a set of encrypted disk keys recorded on the DVD-RAM 36 (for example, the illegal disk key is All 0 not used as encryption disk key
The DVD-RAM 3 in a DVD player having a master key obtained by an illegal person.
6 can be made impossible, thereby preventing the spread of damage caused by illegal copying by an illegal person.

However, in this case, the manufacturer to which the illegal disk key obtained by the illegal person has been assigned,
A new disk key (one of the disk keys not yet assigned to the manufacturer) must be assigned.

Next, in the DVD recorder shown in FIG.
Using the disk key obtained by decrypting the encrypted disk key recorded on the DVD-RAM 36, the content is encrypted and recorded on the DVD-RAM 36.
In addition to recording the encrypted content on the DVD-RAM 36, the encrypted content may be transmitted (provided) to a remote device (for example, a DVD player) via a transmission path.

FIG. 11 shows an example of the configuration of such a DVD recorder. In the figure, the same reference numerals are given to portions corresponding to the case in FIG. That is, the DVD recorder shown in FIG. 11 has basically the same configuration as that shown in FIG.

In the DVD recorder of FIG. 11, first, as shown in the flowchart of FIG.
Reads out the set of encrypted disk keys recorded in the lead-in area of the DVD-RAM 36, which is encrypted with the assigned master key in step S41, and proceeds to step S42 to execute the master key storage 41
Decrypted with the master key stored in the storage device to obtain a disk key. This disk key is supplied from the decryption unit 42 to the encryptor 43.

Then, the process proceeds to a step S 43, where a title key is generated in the title key generating section 44 and supplied to the encryptor 43. The encryption device 43 determines in step S
At 44, the title key supplied from the title key generation unit 44 is encrypted with the disk key supplied from the decryptor 42. Further, in step S44, the encrypted title key obtained as a result of the encryption device 43 is transmitted (provided) via the transmission path together with the set of encrypted disk keys read from the DVD-RAM 36 in step S41. .

Thereafter, when the content to be transmitted is input to the encryptor 45, the encryptor 45 proceeds to step S4.
In step 5, the content is received, and step S46 is performed.
Then, the content is encrypted with the title key from the title key generation unit 44 and transmitted via the transmission path. Then, the process proceeds to step S47, where it is determined whether or not all of the contents to be transmitted have been transmitted. If it is determined that the contents have not been transmitted yet, the process waits until the next content is input to the encryptor 45. , Returning to step S45, and thereafter, repeating the same processing.

If it is determined in step S47 that all the contents to be transmitted have been transmitted, the processing is terminated.

On the receiving side receiving the set of encrypted disk keys, the encrypted title key, and the encrypted content transmitted as described above, the content can be reproduced by the DVD player shown in FIG. .

That is, in this case, in the DVD player of FIG. 9, first, as shown in the flowchart of FIG. 13, in step S51, the set of encrypted disk keys transmitted via the transmission path is received. Then, the process proceeds to step S52, where the decryptor 52 extracts, from the set of encrypted disk keys, one encrypted with the assigned master key stored in the master key storage unit 51. Further, in step S52, the decryptor 52 reads the assigned master key stored in the master key storage unit 51, and decrypts the encrypted disk key extracted from the set of encrypted disk keys with the assigned master key. Then, the decoder 52 supplies the disk key obtained as a result of the decoding to the decoder 53.

The decoder 53 determines in step S53
Upon receiving the encrypted title key transmitted via the transmission path, the flow advances to step S54 to decrypt the encrypted title key with the disk key from the decryptor 52. Then, the decoder 53 supplies the title key obtained as a result of the decoding to the decoder 54.

The decoder 54 determines in step S55
The encrypted content transmitted via the transmission path is received, and the process proceeds to step S56, where the encrypted content is
The decryption is performed using the title key from the decryptor 53. Decoder 54
The content of digital data obtained as a result of decoding by A / D (Analog / Digital) is converted into an analog signal and output to the outside.

Then, the process proceeds to a step S57, wherein it is determined whether or not all the contents to be received have been received.
If it is determined that it has not been received yet, step S55
The encrypted content transmitted next is received, and the same processing is repeated thereafter.

If it is determined in step S57 that all the contents to be received have been received, the processing is terminated.

In the above case, the set of the encrypted disk key, the encrypted title key, and the encrypted content are transmitted from the DVD decoder to the DVD player, but the DVD recorder transmits the set to the DVD player. On the other hand, the encrypted title key and the encrypted content are transmitted, and the DVD player obtains the encrypted disk key encrypted with the assigned master key from the key management center 31, and reproduces the content. It is also possible.

Next, the set of encrypted disk keys is D
Instead of recording in the VD-RAM 36, for example,
The set is transmitted from the key management center 31 or the like to a DVD recorder via a transmission path, and the DVD recorder receives (acquires) a set of encrypted disk keys transmitted via the transmission path and uses the set. By encrypting the content and recording it on the DVD-RAM 36, the DVD-R
It is possible to create a DVD-RAM 36 having the same format as the OM 10.

FIG. 14 shows an example of the configuration of such a DVD recorder. In the figure, the same reference numerals are given to portions corresponding to the case in FIG. That is, the DVD recorder shown in FIG. 14 has basically the same configuration as that shown in FIG.

In the DVD recorder of FIG. 14, first, as shown in the flowchart of FIG.
1, the decryptor 42 receives the set of encrypted disk keys transmitted via the transmission path, and
Proceed to 62. In step S62, the set of the encrypted disk key received by the decryptor 42 is stored in the DVD-RAM3
6, and the process proceeds to step S63.

In step S63, the decryptor extracts the encrypted disk key received in step S61, which is encrypted with the assigned master key, and decrypts the encrypted disk key with the assigned master key stored in the master key storage unit 41. And get the disk key. This disc key is
The data is supplied from the decryption unit 42 to the encryption device 43.

Then, the process proceeds to step S64, and thereafter, in steps S64 to S68, step S2 of FIG.
The same processing as in the cases of 3 to S27 is performed, and the processing ends.

With the above processing, the DVD recorder shown in FIG.
The D-RAM 36 can be obtained.

That is, the DVD-RAM 36 on which contents are recorded by the DVD recorder of FIG. 14 can be reproduced by the DVD player shown in FIG. 9 by performing the processing according to the flowchart of FIG.

Next, a set of encrypted disk keys is transmitted from the key management center 31 or the like via a transmission path, for example.
The DVD recorder receives (acquires) a set of encrypted disk keys transmitted via a transmission path, and encrypts the content by using the set. The obtained result is further obtained by the DVD recorder. It is also possible to transmit (provide) the encrypted content to a remote device such as a DVD player via a transmission path.

FIG. 16 shows a configuration example of such a DVD recorder. In the figure, the same reference numerals are given to portions corresponding to the case in FIG. That is, the DVD recorder shown in FIG. 16 has basically the same configuration as that shown in FIG.

In the DVD recorder of FIG. 16, first, as shown in the flowchart of FIG.
1, the decryptor 42 receives the set of encrypted disk keys transmitted via the transmission path, and
Go to 72. In step S72, the set of encrypted disk keys received by the decryptor 42 is transmitted via the transmission path, and the process proceeds to step S73.

In step S73, the decryptor extracts the encrypted disk key received in step S71, which is encrypted with the assigned master key, and decrypts the encrypted disk key with the master key stored in the master key storage unit 41. And get the disc key. This disk key is supplied from the decryption unit 42 to the encryptor 43.

Then, the process proceeds to a step S 74, where a title key is generated in the title key generation section 44 and supplied to the encryptor 43. The encryption device 43 determines in step S
At 75, the title key supplied from the title key generation unit 44 is encrypted with the disk key supplied from the decryptor 42, and the resulting encrypted title key is transmitted (provided) via the transmission path.

Thereafter, the flow advances to step S76, and thereafter, in steps S76 to S78, step S76 in FIG.
The same processing as in the cases of 45 to S47 is performed, and the processing ends.

On the receiving side that has received the set of encrypted disk keys, the encrypted title key, and the encrypted content transmitted as described above, the DVD player shown in FIG. 9 follows the flowchart of FIG. By performing the processing, the content can be reproduced.

Next, the DVD player provides the set of encrypted disk keys to the DVD recorder, and
The D recorder uses the set of encrypted disk keys to encrypt the content and provides the content to a DVD player. The DVD player uses the set of encrypted disk keys provided to the DVD recorder and It is possible to play back the encrypted content provided by.

FIG. 18 shows such a DVD recorder and D
1 shows a configuration example of a DVD system including a VD player.

The DVD system shown in FIG. 18 comprises a DVD recorder 61 and a DVD player 62.
The VD recorder 61 is configured as shown in FIG.
There, the processing according to the flowchart of FIG. 17 is performed.

On the other hand, the DVD player 62 is configured, for example, as shown in FIG. 9, in which processing according to the flowchart shown in FIG. 19 is performed.

That is, in the DVD player 62, first, in step S81, for example, the DVD-RAM
36, or a set of encrypted disk keys transmitted via a transmission path from the key management center 31 or the like is received, and the set of encrypted disk keys is received. Is transmitted to the DVD recorder 61 via the transmission path.

Then, the process proceeds to a step S82, wherein the decoder 5
Reference numeral 2 extracts, from the set of encrypted disk keys transmitted to the DVD recorder 61, those encrypted with the assigned master key stored in the master key storage unit 51. Further, in step S82, the decryptor 52 reads the assigned master key stored in the master key storage unit 51, and decrypts the encrypted disk key extracted from the set of encrypted disk keys with the assigned master key. Then, the decoder 52 supplies the disk key obtained as a result of the decoding to the decoder 53.

The decoder 53 determines in step S83 that
The encrypted title key transmitted from the DVD recorder 61 via the transmission path is received, and the process proceeds to step S84, where the encrypted title key is decrypted with the disk key from the decryptor 52. Then, the decoder 53 supplies the title key obtained as a result of the decoding to the decoder 54.

In step S85, the decoder 54 determines
The encrypted content transmitted via the transmission path is received from the DVD recorder 61, and the process proceeds to step S86.
The encrypted content is decrypted with the title key from the decryptor 53. The contents of the digital data obtained as a result of decoding by the decoder 54 are A / D (Analog / Digita).
l) The signal is converted, converted into an analog signal, and output to the outside.

Then, the process proceeds to a step S87, in which it is determined whether or not all the contents to be received have been received.
If it is determined that it has not been received yet, step S85
Then, the next encrypted content transmitted from the DVD recorder 61 is received, and the same processing is repeated thereafter.

If it is determined in step S87 that all the contents to be received have been received, the processing is terminated.

Next, the above-described series of processing can be performed by hardware or software. When a series of processing is performed by software, a program constituting the software is
It is installed in a computer incorporated in a DVD recorder or DVD player as dedicated hardware, a general-purpose computer, or the like.

Therefore, referring to FIG. 20, a program recording medium on which a program for executing the series of processes described above is installed in a computer and used to make it executable by the computer is recorded. Will be described.

As shown in FIG. 20A, the program can be recorded in a hard disk 102 or a semiconductor memory 103 as a recording medium built in the computer 101 in advance.

Alternatively, the program is executed as shown in FIG.
As shown in (B), a floppy (registered trademark) disk 111, a CD-ROM (Compact Disc Read Only Memory) 11
2, MO (Magneto optical) disc 113, DVD (Digital
It can be temporarily or permanently stored (recorded) in a recording medium such as a Versatile Disc (114), a magnetic disk 115, and a semiconductor memory 116. Such a recording medium can be provided as so-called package software.

The program is installed in the computer from the recording medium as described above,
As shown in (C), from the download site 121,
The data is wirelessly transferred to the computer 101 via an artificial satellite 122 for digital satellite broadcasting, or a LAN (Local Area N
etwork), the Internet 131
Is transferred to the computer 123 via a cable, and the computer 101
And so on.

In the present specification, processing steps for writing a program for causing a computer to perform various processes do not necessarily have to be processed in chronological order in the order described in the flowchart, and may be performed in parallel or in parallel. The processing also includes processing executed individually (for example, parallel processing or processing by an object).

Next, FIG. 21 shows the computer 1 of FIG.
1 shows a configuration example.

As shown in FIG. 21, the computer 101 has a built-in CPU (Central Processing Unit) 142. An input / output interface 145 is connected to the CPU 142 via a bus 141, and the CPU 142 is connected to the CPU 142 by the user via the input / output interface 145.
When a command is input by operating the input unit 147 including a keyboard, a mouse, and the like, a ROM corresponding to the semiconductor memory 103 in FIG.
(Read Only Memory) The program stored in 143 is executed. Alternatively, the CPU 142 may execute a program stored in the hard disk 102,
Alternatively, the data is transferred from the network 131 and the communication unit 14
8, the program installed on the hard disk 102 or the floppy disk 111, the CD-ROM 112, and the MO disk 11 mounted on the drive 149.
3. A program read from the DVD 114 or the magnetic disk 115 and installed on the hard disk 102 is loaded into a RAM (Random Access Memory) 144 and executed. Then, the CPU 142 transmits the processing result to the LC via the input / output interface 145, for example.
Display unit 14 composed of D (Liquid CryStal Display) etc.
6 and output as necessary.

In this embodiment, a case has been described in which a DVD-RAM is used as a RAM medium. However, the present invention relates to a RAM other than a DVD-RAM, such as an optical disk, a magneto-optical disk, a magnetic disk, or a magnetic tape. Applicable to media.

Further, in the present embodiment, the content is encrypted with the title key encrypted with the disk key, but the content is encrypted with the disk key without using the title key. It is also possible to

The DVD-RAM 36 can record not only image and audio data but also programs executed by a computer.

[0129]

According to the data providing apparatus, the data providing method, and the program recording medium of the present invention, an encrypted second key, which is a second key encrypted with a first key, is obtained, and an encrypted second key is obtained. The key is decrypted based on the first key. Then, the data is encrypted using the decrypted second key, and encrypted data, which is the encrypted data, is provided. Therefore, data encrypted using the second key encrypted with the first key can be obtained.

According to the data recording medium of the present invention, the encrypted second key, which is the second key encrypted with the first key, is recorded, and the encrypted second key is later replaced with the first key. The data is decrypted, and the data is encrypted and recorded using the resulting second key. Therefore, it is possible to record data encrypted using the second key encrypted with the first key.

According to the method of manufacturing a data recording medium of the present invention, the encrypted second key, which is the second key encrypted with the first key, is decrypted with the first key to obtain the second key. Using the second key, the encrypted second key is recorded on a data recording medium on which data is encrypted and recorded. Therefore, it is possible to manufacture a data recording medium capable of recording data encrypted using the second key encrypted with the first key.

[Brief description of the drawings]

FIG. 1 is a view for explaining a manufacturing process of a DVD-ROM.

FIG. 2 is a diagram showing a disc format of the DVD standard.

FIG. 3 is a block diagram illustrating a configuration example of an example of a conventional DVD player.

FIG. 4 is a diagram for explaining a manufacturing process of a DVD-RAM to which the present invention is applied.

FIG. 5 is a flowchart for explaining processing in the key management center 31 of FIG. 4;

FIG. 6 is a flowchart for explaining processing in the disk manufacturer 33 in FIG. 4;

FIG. 7 is a block diagram illustrating a configuration example of a first embodiment of a DVD recorder to which the present invention has been applied.

FIG. 8 is a flowchart for explaining processing of the DVD recorder in FIG. 7;

FIG. 9 is a block diagram illustrating a configuration example of a DVD player that reproduces content.

FIG. 10 is a diagram illustrating a D-RAM of FIG. 9 when a DVD-RAM in which contents are recorded by the DVD recorder of FIG.
It is a flow chart for explaining processing of a VD player.

FIG. 11 is a block diagram illustrating a configuration example of a second embodiment of a DVD recorder to which the present invention has been applied.

FIG. 12 is a flowchart for explaining processing of the DVD recorder in FIG. 11;

FIG. 13 is a flowchart for explaining processing of the DVD player of FIG. 9 when reproducing content transmitted from the DVD recorder of FIG. 11;

FIG. 14 is a block diagram illustrating a configuration example of a third embodiment of a DVD recorder to which the present invention has been applied.

FIG. 15 is a flowchart for explaining processing of the DVD recorder in FIG. 14;

FIG. 16 is a block diagram illustrating a configuration example of a fourth embodiment of a DVD recorder to which the present invention has been applied.

FIG. 17 is a flowchart for explaining processing of the DVD recorder in FIG. 16;

FIG. 18 is a block diagram illustrating a configuration example of an embodiment of a DVD system to which the present invention has been applied.

FIG. 19 is a flowchart for explaining processing of the DVD player 62 of FIG. 18;

FIG. 20 is a diagram for explaining a program recording medium to which the present invention has been applied.

21 is a block diagram illustrating a configuration example of a computer 101 in FIG.

[Explanation of symbols]

31 key management center, 32 encryptor, 33 disk manufacturer, 34 master, 35 stamper, 36
DVD-RAM, 41 Master key storage, 42
Decryption device, 43 encryption device, 44 title key generation unit, 45 encryption device, 51 master key storage unit,
52 to 54 decoder, 61 DVD recorder, 6
2 DVD player, 101 computer, 10
2 hard disks, 103 semiconductor memory, 111
Floppy disk, 112 CD-ROM, 113 MO
Disk, 114 DVD, 115 magnetic disk,
116 semiconductor memory, 121 download site, 122 satellite, 131 network, 14
1 bus, 142 CPU, 143 ROM, 144
RAM, 145 input / output interface, 146 display unit, 147 input unit, 148 communication unit, 149
drive

──────────────────────────────────────────────────続 き Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04N 5/91 H04L 9/00 601E H04N 5/91 PF term (Reference) 5B017 AA06 BA07 BB02 BB03 CA09 CA16 5C052 AA04 AB03 AB05 CC11 DD04 5C053 FA13 FA25 GA11 GB06 GB21 GB38 JA03 5D044 BC03 CC04 DE49 DE50 EF05 FG18 GK17 HL08 HL11 5J104 AA01 AA12 AA16 EA04 EA06 EA08 EA18 EA22 JA03 NA02 NA03 NA32 PA00 PA14

Claims (16)

[Claims] 1. A data providing apparatus for encrypting and providing data, comprising: an acquiring unit for acquiring an encrypted second key which is a second key encrypted with a first key; and the encrypted second key. Second key decryption means for decrypting the second key based on the first key, and the second decryption means decrypted by the second encryption key decryption means.
A data providing apparatus comprising: an encrypting unit that encrypts the data using a key; and a providing unit that provides encrypted data that is the data encrypted by the encrypting unit. 2. The encryption means: a third key encryption means for encrypting a third key with the second key and outputting an encrypted third key; and encrypting the data with the third key. And providing means for encrypting the encrypted data with the third encrypted data.
2. The data providing device according to claim 1, wherein the data providing device provides the data with a key. 3. The data providing apparatus according to claim 1, further comprising storage means for storing the first key. 4. The method according to claim 1, wherein the acquiring unit decrypts the first key stored in the storage unit from a set of encrypted second keys that are second keys encrypted with the plurality of first keys. 4. Acquiring possible items.
2. The data providing device according to 1. 5. A decryption method using the encrypted second key decryption means and an encryption method using the encryption means include a DV
2. The data providing device according to claim 1, wherein the data providing device conforms to the D (Digital Versatile Disc) standard. 6. The data providing apparatus according to claim 1, wherein the acquisition unit reads the encrypted second key recorded on a data recording medium. 7. The data providing apparatus according to claim 1, wherein the acquisition unit receives the encrypted second key transmitted via a transmission path. 8. The providing means according to claim 1, wherein
The data providing device according to claim 1, wherein the data is recorded on a data recording medium. 9. The method according to claim 8, wherein the providing unit includes:
The data providing apparatus according to claim 1, wherein the data is transmitted via a transmission path. 10. A data providing method for encrypting and providing data, comprising: an acquiring step of acquiring an encrypted second key which is a second key encrypted with a first key; and the encrypting second key. A second key decryption step of decrypting the data based on the first key, and an encryption step of encrypting the data using the second key decrypted in the second decryption step. And a providing step of providing encrypted data which is the data encrypted in the encrypting step. 11. A program recording medium on which a program for causing a computer to perform a data providing process of providing data by encrypting the data is recorded, wherein a second key encrypted by a first key is encrypted. Obtaining an encrypted second key; an encryption second key decryption step of decrypting the encrypted second key based on the first key; and the encryption second key decryption step. A program including an encryption step of encrypting the data using a second key, and a providing step of providing encrypted data, which is the data encrypted in the encryption step, is recorded. A program recording medium characterized by the above-mentioned. 12. A recordable data recording medium on which data is encrypted and recorded, wherein an encrypted second key, which is a second key encrypted with a first key, is recorded, and Decrypting the encrypted second key with the first key;
A data recording medium, comprising: obtaining the second key; and using the second key, the data is encrypted and recorded. 13. The data recording medium according to claim 12, wherein the data recording medium has a format conforming to a DVD (Digital Versatile Disc) standard. 14. The data recording medium according to claim 12, wherein a set of an encrypted second key, which is a second key encrypted with each of the plurality of first keys, is recorded. 15. The data recording medium according to claim 12, wherein the encrypted second key is recorded in a recording area which is readable but not writable. 16. A method of manufacturing a recordable data recording medium on which data is encrypted and recorded, wherein the encrypted second key, which is a second key encrypted with a first key, is later written to the data storage medium. Decrypting with a first key, obtaining the second key, and recording the encrypted second key on a data recording medium on which the data is encrypted and recorded using the second key. A method for manufacturing a data recording medium characterized by the following.