JP2005322200A - Memory card file configuration management method and related technology - Google Patents

Abstract

Validity management cannot be performed in a state where an authentication area and a normal area are integrated and coordinated, and there is no content data protection / recovery mechanism that returns to a normal state even when an abnormality occurs. Once an abnormal condition occurs, formatting is unavoidable and the content data right is lost.
A step of confirming whether a first management file exists in a normal area 106 of a memory card, and confirming whether valid information relating to an encryption key stored in the first management file exists. A step of checking if the second management file exists in the authentication area 107 of the memory card when there is encryption key information, a step of checking whether or not a valid encryption key exists in the authentication area, And confirming whether the encrypted content data exists in the content storage folder 163 in the normal area when there is a key.
[Selection] Figure 11

Description

  In recent years, with the widespread use of digital network devices, there is a strong demand for small and large capacity recording media. Among them, memory cards using semiconductor memory such as flash memory are ultra-compact, large-capacity, equipped with security functions as standard, and standard standards are also in place. Memory cards are used in portable electronic devices and many home, office, and personal electronic devices.

  An example of a memory card that uses this flash memory is an SD (Secure Digital) memory card that has been standardized by the SD Card Association.

  Since these memory cards can input and output large amounts of data at high speed, they are frequently used for recording image information, particularly moving image information and music information.

  For example, the SD memory card is equipped with a robust security function as a standard. In the security function, copyright management of image information and music information, that is, viewing (reproduction) is permitted only to those who have received a valid license from a valid copyright holder. The SD memory card can be realized with such a simple control of security. This is another reason why memory cards are frequently used for recording image information and music information.

  The present invention relates to a method for managing that the file structure in various memory cards including such an SD memory card is normal. In particular, the present invention relates to a technology for restoring the state of content data in a memory card to a normal state based on management file information even in a memory card in an abnormal state where the file structure is not normal.

  As a file configuration management method for recording image information on a conventional memory card, for example, a file management method for image data described in Patent Documents 1 and 2 is known.

  FIG. 18 shows a schematic configuration of a file system of a memory card for the printer and electronic camera of Patent Document 2. This prior art verifies the validity of the file structure and the initialized state, and maintains the uniqueness of directories and files.

  All files and directories are created under the root of the file system. The print history file 913 and the image parameter file 914 are management files, in which various management information related to the image file is recorded. For example, the print history file 913 records a history of printing each image file. In the image parameter file 914, various parameters of each image file, for example, the image compression method, data capacity, image size, etc. of the image file are recorded. A management file other than the two management files of the print history file and the image parameter file may be included. In addition, either one may not be included.

  19 and 20 show an outline of the processing procedure of the image data management method described in the image data file configuration management system of Patent Document 1. FIG. This process is performed in preparation for recording image data. When a memory card is installed in a device that records images on a memory card such as an electronic camera, or when the device is turned on, the validity of the memory card is managed. To do.

  First, in step S1, it is checked whether the card mounted on the device is normal. If not, the process proceeds to step S18, where a warning message is displayed and the process ends. An abnormal card is one in which the device cannot read the contents of the card.

  If the card is normal, the process proceeds to step S2, in which the file structure in the storage area of the card is examined to verify whether a file named “DC” exists in the root directory. If it exists, the process proceeds to step S18, a message indicating that a directory with the same name cannot be created is displayed, and the process ends. On the other hand, if the file “DC” does not exist, the process proceeds to step S3 to verify whether the directory “DC” exists in the root directory. This is a subdirectory of the root directory, and all data such as images and sounds are stored in the “DC” directory.

  If the DC directory does not exist, the process proceeds to step S17 to create the DC directory, and then proceeds to step S19. On the other hand, if the DC directory exists, the process proceeds to step S4, the DC directory is checked, and if there is an empty CTG directory (one that does not have any files or directories therein), Is deleted.

  In step S5, it is checked whether the CTG directory exists in the DC directory. If not, the process proceeds to step S19. This is processing when the CTG directory does not exist as a subdirectory of the DC directory. This processing is performed when a card immediately after being formatted by the device or the host application or a card that has been erased all (erased) is loaded into the device. In this process, the current file number is compared with the file number threshold value, and if the threshold value is exceeded, the process proceeds to step S20 (exception process 1). Thereafter, the process proceeds to step S21, where a CTG directory having the current directory number as the directory number is created and the process ends.

  If at least one CTG directory exists in the DC directory in step S5, the process proceeds to step S6. In step S6, the directory entry starting with “CTG” is checked from the directory entries of the DC directory, and the one with the largest directory number is obtained, and the value is stored in the maximum directory number dirNoFound.

  Next, in step S7, it is checked whether the name corresponding to dirNoFound is a file or a directory. If it is a directory, the process proceeds to step S12. On the other hand, if it is a file, the process proceeds to step S8, and 1 is added to the value of dirNoFound. In step S9, it is verified whether or not the result exceeds the upper limit directory number. If it is larger than the upper limit directory number, an error message is displayed in step S18, and the process is terminated. If not, the process proceeds to step S10 to check whether a CTG directory having dirNoFound as a directory number exists. If not, a CTG directory is created in step S11.

  In step S12, it is verified whether or not the current directory number currDirNo is larger than dirNoFound. If so, a CTG directory having the current directory number as the directory number is created in step S21. If it is smaller, the process proceeds to step S13, the directory of dirNoFound is searched, the file with the maximum file number is searched for among the files included therein, and the file number is stored in the maximum file number FileNoFound.

  In step S14, the current file number is compared with the maximum file number. If it is larger, the process proceeds to step S15, and if not, the process proceeds to step S16. In step S15, the current file number is changed to a value obtained by adding 1 to the maximum file number. In step S16, it is checked whether a CTG directory having the current directory number as the directory number exists. If it exists, the process ends. On the other hand, if it does not exist, a CTG directory corresponding to the current directory number is created in step S21, and the process ends.

  According to the above procedure, when the memory card is inserted into the device, the validity of the file configuration management system of the memory card is verified, a CTG directory for recording image data is created, and the image data to be written next is stored. The current file number is set.

Also, when a card immediately after formatting or a card that has been erased (Erase All) is inserted, or when the current file number is larger than the maximum value of the file number, the current file number is initialized to 1. In such a case, there should be essentially no image data in the memory card. Therefore, new data is not saved with the same file name as the image file that originally existed, and inconveniences such as loss of image data that originally existed due to overwriting are prevented. That is, it is possible to accurately verify the validity of the file structure and the initialized state, and maintain the uniqueness of the directory and file.
JP-A-10-177646 (page 9-10, FIG. 4) JP 2002-240385 A (page 4, FIG. 3)

  However, the conventional file configuration management method in the memory card does not verify the validity of the authentication area that controls the security of the memory card. For this reason, the file configuration management method, which is indispensable when recording a large amount of image data, has a problem that it is not possible to manage legitimacy in a state where the normal area and the authentication area are integrated and linked. It was.

  Further, in the conventional method, since all directories are searched sequentially, the processing load on the CPU is heavy and requires a lot of time. In particular, when trying to store new image data, a long time is required until the sequential full search process is completed, and there is a drawback that the operability is extremely deteriorated.

  In addition, there is no content data protection / recovery mechanism that restores the normal state in the event of an abnormality such as loss of content data or key data. Once an abnormal state occurs, the memory card must be formatted. The content data was lost.

  The present invention takes the following means in order to solve the above problems.

The first file configuration management method in the memory card in the present invention is:
Checking whether the first management file exists in a normal area where normal memory access of the memory card is possible;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
And confirming whether or not the second management file exists in the authentication area of the memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. .

  First, it is confirmed whether or not the first management file exists in the normal area. The first management file records information about content data (for example, title, data encoding method, data capacity, etc.). When the existence of the first management file is confirmed, it is confirmed whether or not valid information regarding the encryption key exists in the first management file. That is, when the content data is encrypted, information indicating which second management file in the authentication area contains valid information regarding the encryption key is confirmed. Then, it is confirmed whether or not the second management file for storing the encryption key exists in the authentication area.

Summary,
[Confirmation of the first management file in the normal area → Confirmation of valid information regarding the encryption key] → [Confirmation of the second management file based on the valid information regarding the encryption key in the authentication area]
As described above, it is possible to integrally and cooperatively manage the authentication area that controls the security of the memory card and the other normal area and confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security.

  Next, the inventions in the form of starting from the confirmation of whether the content storage folder exists in the normal area will be sequentially described.

The second file configuration management method in the memory card in the present invention is:
A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether or not the first management file exists in the normal area when the existence of the content storage folder is confirmed;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
And confirming whether or not the second management file exists in the authentication area of the memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. .

  First, it is confirmed whether or not a content storage folder for storing content data exists in the normal area. After confirming the existence of the content storage folder, it is confirmed whether or not the first management file exists. The first management file records information about content data included in the content storage folder. When the existence of the first management file is confirmed, it is confirmed whether or not valid information regarding the encryption key exists in the first management file. That is, when content data stored in the content storage folder is encrypted, information indicating which second management file in the authentication area contains valid information related to the encryption key is confirmed. . Then, it is confirmed whether or not the second management file for storing the encryption key exists in the authentication area.

Summary,
[Confirmation of content storage folder in normal area → Confirmation of first management file → Confirmation of valid information regarding encryption key] → [Confirmation of second management file based on valid information regarding encryption key in authentication area]
As described above, it is possible to integrally and cooperatively manage the authentication area that controls the security of the memory card and the other normal area and confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security.

The third file configuration management method in the memory card in the present invention is:
A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
A step of confirming whether or not the first management file exists when the presence of the content data is confirmed;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
And confirming whether or not the second management file exists in the authentication area of the memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. .

  This is to check not only the existence of the content storage folder but also whether or not the content data actually exists in the second file configuration management method.

Summary,
[Confirmation of content storage folder in normal area → Confirmation of content data → Confirmation of first management file → Confirmation of valid information regarding encryption key] → [Second based on valid information regarding encryption key in authentication area] Check management file)
It becomes. Also in this case, it is possible to integrally and cooperatively manage the authentication area that controls the security of the memory card and the other normal area, and confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security. In addition, by confirming that content data actually exists under the content storage folder, the load and time required for processing increase, but more detailed verification is possible.

The fourth file configuration management method in the memory card according to the present invention is:
A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
A step of confirming whether or not the first management file exists when the presence of the content data is confirmed;
Determining whether the content data whose existence has been confirmed is encrypted;
And a step of confirming whether or not the second management file exists in the authentication area of the memory card that requires an authentication process for memory access when it is determined that the content data is encrypted.

  First, check whether the content storage folder for storing the content data exists in the normal area, confirm the existence of the content storage folder, and confirm that the content data actually exists under the content storage folder . After confirming the existence of the content data, it is confirmed whether or not the first management file exists. When the existence of the first management file is confirmed, it is confirmed whether or not the content data is encrypted. If it is encrypted, the second management file for storing the encryption key exists in the authentication area. Check whether or not.

Summary,
[Confirmation of content storage folder in normal area → Confirmation of content data → Confirmation of first management file → Judgment of encryption of content data] → [Confirmation of second management file in authentication area]
It becomes. Also in this case, it is possible to integrally and cooperatively manage the authentication area that controls the security of the memory card and the other normal area, and confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security. Also, by checking that content data actually exists under the content storage folder, the load and time required for processing increase, but more detailed verification is possible. In addition, since it is determined whether the content data is encrypted content data or plaintext content data that is not encrypted, the processing can be performed efficiently. Whether or not the content data is encrypted is determined based on, for example, an extension attached to the file name, so that it is not necessary to open the content data and can easily determine.

The fifth file configuration management method in the memory card in the present invention is:
A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
A step of confirming whether or not the first management file exists when the presence of the content data is confirmed;
Determining whether the content data whose existence has been confirmed is encrypted;
A step of checking whether or not the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when it is determined that the content data is encrypted;
Checking whether there is valid information regarding the encryption key stored in the first management file when it is determined that the content data is not encrypted;
And confirming whether or not the second management file exists in the authentication area of the memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. .

  This is because, in the fourth file configuration management method, when the content data whose existence has been confirmed is plaintext content data that is not encrypted, there is valid information regarding the encryption key in the first management file. It is to confirm whether or not. That is, information indicating which second management file in the authentication area contains valid information related to the encryption key of the content data is confirmed. Then, it is confirmed whether or not the second management file for storing the encryption key exists in the authentication area.

Summary,
[Confirmation of content storage folder in normal area → Confirmation of content data → Confirmation of first management file → Judgment of encryption of content data] → [During encryption: Confirmation of second management file in authentication area] [At the time of non-encryption: Confirmation of valid information regarding the encryption key → Confirmation of the second management file based on the valid information regarding the encryption key in the authentication area]
It becomes. Also in this case, it is possible to integrally and cooperatively manage the authentication area that controls the security of the memory card and the other normal area, and confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security. Also, by checking that content data actually exists under the content storage folder, the load and time required for processing increase, but more detailed verification is possible. In addition, since it is determined whether the content data is encrypted content data or unencrypted plaintext content data, the processing is advanced, so that the processing can be made efficient. Even when the data is plaintext content data, the second management file in the authentication area is confirmed based on valid information regarding the encryption key in the content storage folder, so that accuracy can be ensured.

  In the above invention, the starting point is to check whether the content storage folder exists in the normal area. Alternatively, the starting point may be to check whether the first management file exists in the normal area. Good. In the following, the inventions in the form starting from the confirmation of whether the first management file exists in the normal area will be sequentially described.

The sixth file configuration management method in the memory card according to the present invention is:
Checking whether the first management file exists in a normal area where normal memory access of the memory card is possible;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
Confirming whether or not the second management file exists in the authentication area of the memory card that requires authentication processing on memory access when the existence of valid information related to the encryption key is confirmed;
A step of confirming whether or not a valid encryption key exists in the authentication area when the existence of the second management file is confirmed;
And confirming whether or not encrypted content data exists in the content storage folder of the normal area when the existence of the encryption key is confirmed.

That is,
[Confirmation of the first management file in the normal area → Confirmation of valid information regarding the encryption key] → [Confirmation of the second management file based on valid information regarding the encryption key in the authentication area → Confirmation of the encryption key] → [Confirmation of encrypted content data in the content storage folder in the normal area]
It becomes.

  According to this, it becomes possible to manage the authentication area for managing the security of the memory card and the other normal area in an integrated and cooperative manner and confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security.

A seventh memory card file configuration management method according to the present invention is the sixth memory card file configuration management method,
When there is an abnormality in the consistency between the encryption key and the encrypted content data despite the presence of the second management file,
Confirming the presence / absence of content purchase history information in the second management file information;
When the presence of the content purchase history information is confirmed, re-accessing the area defined by the content right owner;
Authenticating content ownership rights based on the content purchase history information in the second management file when the access is securely established; and
Re-acquiring one or both of content data and key information encrypted with the same or different key as before when it is confirmed that the content data is a legitimate owner;
A step of resetting the encrypted content data and the key information acquired by the above processing in an appropriate folder or field that should originally exist from the second management file.

  When the content data is first checked as in the second file configuration management method, it is determined that there is an abnormality at that stage, and the process ends. However, even when there is no content data, when the validity is almost affirmed, the content can be recovered by performing a content reacquisition process or the like.

That is,
[Confirmation of the first management file in the normal area → Confirmation of valid information regarding the encryption key] → [Confirmation of the second management file based on valid information regarding the encryption key in the authentication area → Confirmation of the encryption key] → [Confirmation of encrypted content data in content storage folder in normal area → Inconsistency between encryption key and encrypted content data]
[Confirm the content purchase history information in the second management file] → [Reaccess the area specified by the content right owner based on the content purchase history information → Authentication of content ownership right → Re-encrypted content data / key information (Acquire → Re-encrypted content data / key information to the proper folder / field)
And

  According to this, the state of the memory card can be returned from the abnormal state to the normal state.

An eighth memory card file configuration management method according to the present invention is the sixth memory card file configuration management method,
When adding new content data or deleting existing content data,
In the process of updating the first management file and the second management file,
Creating a copy of the first management file with a different file name before updating the first management file;
Updating information of the first management file after a copy of the first management file has been successfully created;
Creating a copy of the second management file with a different file name before updating the second management file;
And a step of updating information of the second management file after a copy of the second management file has been successfully created.

  According to this, when content data is added to or deleted from the memory card, the normality of the file configuration management system in the memory card is confirmed, and then the first management file and the second management file are added and deleted. I do. By making a copy with a different file name, you can avoid inadvertent mistakes and mistakes.

A ninth memory card file configuration management method according to the present invention is the eighth memory card file configuration management method,
Upon occurrence of an abnormality in which the presence of the first management file or the second management file is not confirmed,
Checking the presence or absence of a copy file of the first management file when the presence of the first management file is not confirmed;
When the existence of a copy file of the first management file is confirmed, the copy file is changed to an official first management file name;
Checking the presence or absence of a copy file of the second management file when the presence of the second management file is not confirmed;
And when the existence of a copy file of the second management file is confirmed, the copy file is changed to an official second management file name.

  According to this, it is possible to return the state of the memory card from the abnormal state to the normal state. By changing to the official name, inadvertent additions and deletions can be avoided.

A tenth memory card file configuration management method according to the present invention is the sixth memory card file configuration management method,
When adding new content data or deleting existing content data,
In the process of updating the first management file and the second management file,
A step of copying and duplicating the first management file when a new and old identifier is not set in the first management file;
In the two first management files, setting the new and old identifiers in each file;
After updating the file in which the old version of the old and new identifiers is set, updating the old version of the new and old identifiers to a new version;
Updating a new version of the old and new identifiers after updating a file in which an old version of the old and new identifiers is set; and
A step of copying and duplicating the second management file when a new and old identifier is not set in the second management file;
In the two second management files, setting the new and old identifiers in each file;
After updating the file in which the old version of the old and new identifiers is set, updating the old version of the new and old identifiers to a new version;
And updating a new version of the old and new identifiers to an old version after updating a file in which the old version of the old and new identifiers is set.

  According to this, it is not necessary to copy a file every time a file update occurs in the process of having a duplicate management file, and it is possible to always update an old file only by checking the new and old identifiers. It becomes possible to increase the processing speed.

An eleventh memory card file configuration management method according to the present invention is the tenth memory card file configuration management method,
At the time of occurrence of an abnormality in which the existence of the first management file or the second management file in which a new version of the new and old identifiers is set is not confirmed,
Checking the presence or absence of the first management file in which an old version of the new and old identifiers is set;
When the presence of the first management file is confirmed, updating the old version of the old and new identifiers to a new version;
Checking the presence or absence of the second management file in which an old version of the new and old identifiers is set;
And a step of updating an old version of the new and old identifiers to a new version when the existence of the second management file is confirmed.

  According to this, it is possible to return the state of the memory card from the abnormal state to the normal state. Compared to copying a file each time a file is updated in a process having duplicate management files, it is possible to update an old file only by checking a new version or an old version. As a result, the processing speed can be increased.

A twelfth memory card file configuration management method according to the present invention is the sixth memory card file configuration management method,
When storing highly important files in a safe memory area outside the memory card,
Obtaining a content data use restriction key arbitrarily determined by the file use right owner from the area determined by the right owner;
Encrypting the file using the content data use restriction key;
Outputting a file encrypted with the content data use restriction key together with a key number to a memory area outside the memory card;
Re-inputting the file output to the external memory area into the memory card together with the key number;
And decrypting the file into the memory card using the content data use restriction key corresponding to the key number.

  According to this, the state of the memory card can be saved in the external area, and the restoration of the content data can be easily realized.

  The above is an invention regarding a file configuration management method in a memory card, but the following development is also possible as a file configuration management program in a memory card.

The first file configuration management program in the memory card according to the present invention corresponds to the first file configuration management method,
Checking whether the first management file exists in a normal area where normal memory access of the memory card is possible;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
And a step of confirming whether or not a second management file exists in an authentication area of a memory card that requires an authentication process for memory access when existence of valid information related to the encryption key is confirmed. It is an executable program.

The second file configuration management program in the memory card according to the present invention corresponds to the second file configuration management method,
Checking whether a content storage folder exists in a normal area of the memory card where normal memory access is possible;
Confirming whether or not the first management file exists in the normal area when the existence of the content storage folder is confirmed;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
And a step of confirming whether or not a second management file exists in an authentication area of a memory card that requires an authentication process for memory access when existence of valid information related to the encryption key is confirmed. It is an executable program.

The third file configuration management program in the memory card according to the present invention corresponds to the third file configuration management method,
Checking whether a content storage folder exists in a normal area of the memory card where normal memory access is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
Confirming whether or not the first management file exists when the existence of the content data is confirmed;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
And a step of confirming whether or not a second management file exists in an authentication area of a memory card that requires an authentication process for memory access when existence of valid information related to the encryption key is confirmed. It is an executable program.

The fourth file configuration management program in the memory card according to the present invention corresponds to the fourth file configuration management method,
Checking whether a content storage folder exists in a normal area of the memory card where normal memory access is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
Confirming whether or not the first management file exists when the existence of the content data is confirmed;
Determining whether the content data whose existence has been confirmed is encrypted;
Executing the computer including determining whether the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when it is determined that the content data is encrypted It is a possible program.

A fifth file configuration management program in a memory card according to the present invention corresponds to the fifth file configuration management method,
Checking whether a content storage folder exists in a normal area of the memory card where normal memory access is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
Confirming whether or not the first management file exists when the existence of the content data is confirmed;
Determining whether the content data whose existence has been confirmed is encrypted;
Confirming whether or not the second management file exists in the authentication area of the memory card that requires authentication processing on memory access when it is determined that the content data is encrypted;
Checking whether there is valid information regarding the encryption key stored in the first management file when it is determined that the content data is not encrypted;
And a step of confirming whether or not a second management file exists in an authentication area of a memory card that requires an authentication process for memory access when existence of valid information related to the encryption key is confirmed. It is an executable program.

The sixth file configuration management program in the memory card according to the present invention corresponds to the sixth file configuration management method,
Checking whether the first management file exists in a normal area where normal memory access of the memory card is possible;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
Confirming whether there is a second management file in an authentication area of a memory card that requires an authentication process on memory access when existence of valid information on the encryption key is confirmed;
Confirming whether or not a valid encryption key exists in the authentication area when the existence of the second management file is confirmed;
And a step of confirming whether or not encrypted content data exists in the content storage folder in the normal area when the existence of the encryption key is confirmed.

The seventh file configuration management program in the memory card according to the present invention corresponds to the seventh file configuration management method,
When there is an abnormality in the consistency between the encryption key and the encrypted content data despite the presence of the second management file,
Confirming the presence / absence of content purchase history information in the second management file information;
Re-accessing the area defined by the content right owner when the presence of the content purchase history information is confirmed;
Authenticating content ownership rights based on the content purchase history information in the second management file when the access is securely established; and
Reacquiring one or both of content data and key information encrypted with the same or different key as before when it is confirmed that the content data is a legitimate owner;
Resetting the encrypted content data and key information acquired by the processing in the appropriate folder or field that should originally exist from the second management file, and changing the state of the memory card from an abnormal state. A computer-executable program capable of returning to a normal state.

An eighth file configuration management program in the memory card according to the present invention corresponds to the eighth file configuration management method,
When adding new content data or deleting existing content data,
In the process of updating the first management file and the second management file,
Creating a copy of the first management file with a different file name before updating the first management file;
Updating information of the first management file after a copy of the first management file has been successfully created;
Creating a copy of the second management file with a different file name before updating the second management file;
And a step of updating information of the second management file after a copy of the second management file has been successfully created.

A ninth memory file internal file configuration management program according to the present invention corresponds to the ninth file configuration management method,
Upon occurrence of an abnormality in which the presence of the first management file or the second management file is not confirmed,
Checking the presence of a copy file of the first management file when the presence of the first management file is not confirmed;
When the existence of a copy file of the first management file is confirmed, the copy file is changed to an official first management file name;
Checking the presence or absence of a copy file of the second management file when the presence of the second management file is not confirmed;
When the existence of a copy file of the second management file is confirmed, the copy file is changed to an official second management file name, and the memory card is changed from an abnormal state to a normal state. A computer-executable program that can be restored to

The tenth file configuration management program in the memory card according to the present invention corresponds to the tenth file configuration management method,
When adding new content data or deleting existing content data,
In the process of updating the first management file and the second management file,
Copying and duplicating the first management file when a new and old identifier is not set in the first management file;
In the two first management files, setting the new and old identifiers in each file;
After updating the file in which the old version of the old and new identifiers is set, updating the old version of the new and old identifiers to a new version;
Updating a new version of the old and new identifiers after updating a file in which an old version of the old and new identifiers is set; and
Copying and duplicating the second management file when a new and old identifier is not set in the second management file;
In the two second management files, setting the old and new identifiers in each file;
After updating the file in which the old version of the old and new identifiers is set, updating the old version of the new and old identifiers to a new version;
And updating a new version of the old and new identifiers to an old version after updating a file in which an old version of the old and new identifiers is set.

An eleventh file configuration management program in a memory card according to the present invention corresponds to the eleventh file configuration management method,
At the time of occurrence of an abnormality in which the existence of the first management file or the second management file in which a new version of the new and old identifiers is set is not confirmed,
Checking the presence or absence of the first management file in which an old version of the new and old identifiers is set;
Updating the old version of the new and old identifiers to a new version when the existence of the first management file is confirmed;
Checking the presence or absence of the second management file in which an old version of the new and old identifiers is set;
Executing the computer capable of returning the state of the memory card from an abnormal state to a normal state, including the step of updating the old version of the new and old identifiers to a new version when the presence of the second management file is confirmed It is a possible program.

A twelfth memory card file configuration management program according to the present invention corresponds to the twelfth file configuration management method,
When storing highly important files in a safe memory area outside the memory card,
Obtaining a content data use restriction key arbitrarily determined by the file use right owner from the area defined by the right owner;
Encrypting the file using the content data use restriction key;
Outputting a file encrypted using the content data use restriction key together with a key number to a memory area outside the memory card;
Re-inputting the file output to the external memory area into the memory card together with the key number;
Using the content data usage restriction key corresponding to the key number to decrypt the file into the memory card as it is, and capable of storing the state of the memory card in the external area It is a program.

  Furthermore, the present invention can be expanded to a computer-readable recording medium in which the file configuration management program in the memory card having the above configuration is recorded.

  Further, the above-mentioned file configuration management method in each memory card can be developed as a file configuration management device in the memory card having the same configuration.

  For each of the above-mentioned memory card file configuration management method, memory card file configuration management program, computer-readable recording medium, and memory card file configuration management device, authentication is required instead of the “authentication area”. It is also possible to replace the “key storage area” with the above. The key storage area is an area separate from the normal area, but does not require authentication.

  In the present invention, a part of the recording area of the memory card is made an authentication area (key storage area), and this authentication area (key storage area) and other normal areas are managed in an integrated and cooperative manner. It becomes possible to confirm the validity. Therefore, it becomes possible to store the encrypted content data and the content encryption key in different areas and manage them in cooperation with each other, thereby improving the security.

  In addition to discovering abnormal states of content data and key management information in memory cards, file rights protection in the event of an abnormality by installing a duplicated management file mechanism and a safe storage mechanism in the external memory area The function is secured and the content rights protection of the user is enabled.

  Furthermore, such management can be executed without imposing a large load on the computer or the like.

  Embodiments of a file configuration management method in a memory card according to the present invention will be described below with reference to the drawings.

  Hereinafter, the mobile phone device will be described. However, the present invention is not limited to the mobile phone device, and may be other devices such as a personal computer, a PDA (Personal Digital Assistant: portable information terminal), and other devices as various information processing devices. For example, a device such as a cooking device, a washing machine, a vacuum cleaner, a refrigerator, and other various home appliances may be used, and various office devices such as a copying machine and a FAX may be used, and any other device may be targeted.

  An SD memory card will be described as an example of the memory card. However, the present invention is not limited to the SD memory card, and other various memory cards may be used. Various kinds of information recording means such as other magnetic, optical, chemical or physical information recording means or combinations thereof may be used. It may be a recording medium.

(Embodiment 1)
FIG. 1 is a block configuration diagram of a main part that implements a file configuration management method in a memory card according to Embodiment 1 of the present invention. In FIG. 1, 101 is an SD memory card, and 102 is a mobile phone device. The cellular phone device 102 executes a method for managing that the file configuration in the SD memory card 101 is normal. Or the recording medium which recorded the program for performing this method with a computer is mounted, and it is performed with the mounted computer.

  The cellular phone device 102 includes a control unit 104, a RAM 108, and an SD memory card interface (step SD I / F) 103 inside. Although there are many other constituent parts, they are not directly related to the present invention, so that the description thereof is omitted.

  In addition to voice communication, the mobile phone device 102 performs data communication, particularly multimedia content data including moving images and still images, and views (reproduces) and stores the communicated image information. The control unit 104 performs these controls, and the RAM 108 temporarily stores content data. The temporarily stored content data is recorded and saved on the SD memory card 101 via the SD memory card interface 103.

  The SD memory card 101 includes a normal area (normal recording area) 106 and an authentication area (authentication recording area) 107 that controls the security of the memory card. The SD memory card 101 receives content data sent from the mobile phone device 102. Record and save in either area. The control unit 105 performs the recording / saving process. Although the SD memory card 101 has many other components, the description is omitted because it is not directly related to the present invention.

  The authentication area 107 is an area where access and information cannot be input / output without performing predetermined authentication processing, for example, biometric authentication such as password input and fingerprint verification, and some other authentication processing.

  However, in the present embodiment, the authentication area 107 is an area that cannot be accessed unless a predetermined authentication process, for example, biometric authentication such as password input or fingerprint verification, or any other authentication process is performed. It is not limited to such an area, and may be an area that can be accessed without any authentication (simple key storage area), or may be a case that is not necessarily divided from the normal area 106.

  The normal area 106 and the authentication area 107 which are recording units of the SD memory card 101 are large-capacity recording units. In order to record and retrieve data in such a large capacity recording unit at high speed and accurately, a predetermined file system configuration is adopted.

  An outline of the file configuration management system described above is shown in FIG.

  The entire recording unit of the SD memory card 101 is divided into a normal area 106 and an authentication area 107. Folders 161 and 171 called SD_VIDEO are set at the base of the file system in each area. The SD memory card 101 is sometimes called an SD_VIDEO card.

  In the SD_VIDEO folder 161 in the normal area 106, information indicating the management folder 162 and, for example, two content storage folders 163 and 164 is recorded. By tracing this information, the management folder 162 and the content storage folders 163 and 164 are recorded. Can be accessed.

  For example, information indicating two first management files 165 and 166 is recorded in the management folder 162, and the first management files 165 and 166 can be accessed by tracing this information.

  In the first management files 165 and 166, for example, information regarding content data included in the two content storage folders 163 and 164 is recorded. The first management files 165 and 166 include various management item data relating to various content data stored in the content storage folders 163 and 164, such as title, creation date, creator, copyright information, and image information. Recording format, audio information encoding method, image information image size, resolution, data capacity, reproduction time of moving image information and audio information, and various other necessary information. Information common to each content data is recorded in the first management file 165, and individual information is recorded in each content data in the first management file 166. However, this configuration is merely an example, and whether it is common information or individual information is relative and not absolute. For example, all of the information may be included in one of the first management files, or may be divided into three or more first management files. Alternatively, it may be recorded in a different first management file for each content or for each group with content.

  More importantly, when the content data stored in the content storage folders 163 and 164 is encrypted, the second management files 172 and 173 in the authentication area 107 in which the encryption key is recorded are indicated. Information is recorded.

  When the content data is encrypted, the content data cannot be reproduced / viewed unless the encryption is decrypted. Only the person having a predetermined authority can decrypt the encrypted information. Therefore, the decryption key is recorded in the authentication area 107 that cannot be accessed without predetermined authentication. Information indicating the second management files 172 and 173 in the authentication area 107 in which the key is recorded is recorded in the first management files 165 and 166 in the normal area 106. Information common to each encryption key is recorded in the second management file 172 of the authentication area 107, and individual information etc. is recorded in each encryption key in the second management file 173. However, this configuration is only an example, and whether it is common information or individual information is relative and not absolute. For example, all the information may be included in one of the second management files, or may be divided into three or more second management files. Alternatively, it may be recorded in a different second management file for each content, for each group having the content, for each encryption key entry number or for each group having the encryption key entry number.

  In the content storage folder 163, information indicating the content files 167, 168, 169 included therein is recorded. The content data stored in the content storage folder 163 is not necessarily three, and may be more or less. Further, although the content data stored in the content storage folder 164 is not illustrated, there may be any number or no data at all.

  The content files 167, 168, and 169 pointed to by the information recorded in the content storage folder 163 include various types of multimedia content data such as information including moving images such as movies and audio information as described above. , Only moving image information, audio only information, still images, information including still images and audio information, character information, information including a plurality of these, and other various information are recorded. .

  When the content data stored in the content storage folder is encrypted, a key for decrypting the encrypted content data is recorded in the second management file in the authentication area 107. Information indicating the second management file is recorded and saved in the first management file in the normal area 106. When the presence of encrypted content data is confirmed in various content data, the encrypted content data is decrypted by tracing this information and reading the key. However, in order to access the authentication area 107, it is necessary to pass a predetermined authentication.

  3 and 4 are process flows for managing the file system configuration in the SD memory card 101 having the above-described configuration and verifying its validity. FIG. 3 generally shows a processing flow in the normal area 106, and FIG. 4 shows a processing flow in the authentication area 107. These processes are not separately performed independently, but are executed integrally in cooperation with each other. Therefore, the respective processes are not completely separated, and the validity as a total is managed and verified in a state where the normal area 106 and the authentication area 107 are integrally linked.

  First, when the SD memory card 101 is inserted into the mobile phone device 102 or when the power of the mobile phone device 102 is turned on, management and verification processing of the file configuration management system in the normal area 106 is first started.

  First, in step S31, it is confirmed whether or not an SD_VIDEO folder exists in the normal area 106. When the SD_VIDEO folder does not exist, it is determined that no information regarding the video is recorded in the SD memory card 101, and the validity verification process of the file configuration management system is normally terminated (step S36). On the other hand, when the SD_VIDEO folder exists, the process proceeds to step S32 to obtain entry information for various folders existing under the SD_VIDEO folder. The entry information is information indicating various folders existing under the SD_VIDEO folder, and is information recorded in the SD_VIDEO folder.

  If the entry information indicates a content storage folder, the process proceeds to step S34 to check whether or not the first management file exists in the normal area 106. When the first management file does not exist in the normal area 106, the validity of the file configuration management system is denied, the validity verification process is terminated abnormally (step S37), and a warning message is displayed on the screen of the mobile phone device 102. Processing for notifying abnormality such as display on the screen, other processing for notifying abnormality, or processing for prohibiting use is executed.

  On the other hand, when the first management file exists in the normal area 106, the validity of the file configuration management system is affirmed, and the validity verification process is normally terminated (step S36).

  If it is determined in step S33 that the entry information does not indicate a content storage folder, the process proceeds to step S35 to check whether or not unacquired entry information remains in the SD_VIDEO folder. When the entry information does not remain, the validity verification process ends normally (step S36), and when the unacquired entry information remains, the process returns to step S32 and proceeds to the acquisition of the next entry information.

  This process is repeated until there is no unacquired entry information, or the entry information to the content storage folder is detected during the process, thereby verifying the validity of the file configuration management system in the normal area 106 in the SD memory card 101. To do.

  Next, the validity of the file configuration management system in the authentication area 107 in the SD memory card 101 is verified. This will be described with reference to the flowchart of FIG.

  First, in step S41, it is confirmed whether or not the first management file exists in the normal area 106. If the first management file does not exist, it is determined that no valid content data is recorded in the SD memory card 101, and the validity verification process is normally terminated (step S46).

  On the other hand, when the first management file exists in the normal area 106, the process proceeds to step S42, and the entry number information for the encryption key existing in the first management file is acquired. The entry number information is information indicating the second management file in which the encryption key existing in the authentication area 107 is recorded, and is recorded in the first management file in the normal area 106.

  When the entry number information for the encryption key exists and the value indicates a valid value, the process proceeds to step S44, and the second management file is stored in the authentication area 107 in which the encryption key is recorded. Check if it exists. When the second management file does not exist in the authentication area 107, the validity of the file configuration management system is denied, the validity verification process is terminated abnormally (step S47), and a warning message is displayed on the screen of the mobile phone device 102. Processing for notifying abnormality such as display on the screen, other processing for notifying abnormality, or processing for prohibiting use is executed. On the other hand, when the second management file exists in the authentication area 107, the validity of the file configuration management system is affirmed, and the validity verification process is normally terminated (step S46).

  If it is determined in step S43 that the entry number information for the encryption key does not indicate a valid value, the process proceeds to step S45, where the entry number information for the unobtained encryption key is the first management file in the normal area 106. If the entry number information for the unobtained encryption key does not remain, the validity verification process is terminated normally (step S46), and the entry number information for the unobtained encryption key Is left, the process returns to step S42 to move to acquisition of the next encryption key entry number information.

  This process is repeated until there is no unacquired encryption key entry number information, or valid encryption key entry number information is detected in the middle of the process, thereby validating the file configuration management system of the authentication area 107 in the SD memory card 101. Verify sex.

  By doing so, the validity of the file structure management system of both the normal area 106 and the authentication area 107 in the entire SD memory card 101 is not verified independently but is comprehensively verified in an integrated and linked state. can do.

  The above embodiment describes a method for verifying the validity of the entire memory card when the memory card is mounted or when the power is turned on. However, the file structure verification process for only the entry to be processed may be performed immediately before performing some process, for example, the reproduction process. In such a case, the above-described embodiment and the modification thereof are configured not to process the folder of all entries, but to process the folder of a predetermined entry instead. Can be easily applied.

(Modification 1 of Embodiment 1)
Next, a first modification of the first embodiment will be described. The first modification is the same as the first embodiment with respect to many parts thereof, the description of the same parts is omitted, and only different parts are described.

  FIG. 5 shows a validity verification processing flow of the file configuration management system in the first modification. FIG. 4 is incorporated.

  FIG. 5 differs from FIG. 3 only in step S33a. In step S33a, it is confirmed whether or not content data actually exists in the content storage folder confirmed based on the entry information.

  That is, in the first embodiment, entry information for various folders under the SD_VIDEO folder is acquired (step S32), and it is confirmed that the entry information indicates a content storage folder (step S33). It was confirmed that the first management file exists in the normal area 106 (step S34). On the other hand, in the first modification, entry information for various folders existing under the SD_VIDEO folder is acquired (step S32), and it is confirmed that the entry information indicates a content storage folder (step S33). Next, it is confirmed that the content data actually exists in the content storage folder (step S33a). Thereafter, it is confirmed that the first management file exists in the normal area 106 (step S34).

  In this way, by checking not only the existence of the content storage folder but also the fact that content data actually exists below it, the load and time required for processing increase, but more detailed verification is possible. Become.

(Modification 2 of Embodiment 1)
Next, a second modification of the first embodiment will be described. The modification 2 is the same as the first embodiment with respect to many parts thereof, the description of the same parts is omitted, and only different parts are described.

  FIG. 6 shows an outline of the file configuration management system of the second modification. The difference from FIG. 2 is that it is determined whether each of the content files 167a, 168a, 169a stored in the content storage folder 163 is encrypted content data or unencrypted plaintext content data. It is. This determination is desirably performed by a method as simple as possible. In particular, it is desirable to be able to determine without opening the content data. For this purpose, for example, whether the content data is encrypted content data or plain text content data is determined based on the extension attached to the file name. However, it may be determined whether the content data is encrypted content data or plaintext content data by some other method.

  FIGS. 7 and 8 show the validity verification processing flow of the file configuration management system in the second modification. FIG. 7 is a processing flow in the normal area 106, which is substantially the same as the processing in FIG.

  The modification 2 is essentially different from the modification 1 in the processing flow of FIG. The entry information in the SD_VIDEO folder indicates the content storage folder (Yes in step S33), the content data exists in the content storage folder (Yes in step S33a), and the first management file exists in the normal area 106. If so (Yes in step S34), the process proceeds to step S50 in FIG.

  In step S51, it is confirmed whether the content data is encrypted content data or plaintext content data. This determination is preferably as simple as possible. For example, it is preferable to determine based on an extension added to the file name. Other simple methods may be used.

  When the content data is encrypted content data, the process proceeds to step S52, and it is confirmed that the second management file exists in the authentication area 107. When the second management file does not exist, it is determined as abnormal (step S57), and when it exists, it is determined as normal (step S58), and the verification of the validity verification process is finished.

  If the content data existing in the content storage folder is plaintext content data, the process proceeds to step S53, and the next entry information is acquired from the SD_VIDEO folder. Then, the process proceeds to step S54, and it is determined whether or not the entry information indicates a content storage folder as described above. When the entry information indicates the content storage folder, the process proceeds to step S55, and it is determined whether or not content data exists in the content storage folder as in step S33a. If content data exists, the process returns to step S51 to determine whether the content data is encrypted content data or plaintext content data.

  On the other hand, if the entry information does not indicate the content storage folder in step S54, or if no content data exists in the content storage folder in step S55, the process proceeds to step S56, and unacquired entry information remains in the SD_VIDEO folder. Judgment whether or not there is. If unacquired entry information remains in the SD_VIDEO folder, the process returns to step S53 to acquire the next entry information.

  If all the entry information has already been acquired and no unacquired entry information remains, the validity verification process ends normally (step S58).

(Modification 3 of Embodiment 1)
Next, a third modification of the first embodiment will be described. The modification 3 is the same as the modification 2 with respect to many parts thereof, the description of the same part is omitted, and only different parts are described.

  FIG. 9 and FIG. 10 show the validity verification processing flow of the file configuration management system in the third modification. FIG. 9 is a processing flow in the normal area 106, which is substantially the same as the processing in FIG. The modification 3 is essentially different from the modification 1 in the processing flow of FIG.

  If it is determined in step S61 that the content data stored in the content storage folder is plaintext content data, the process proceeds to step S62, and the encryption key entry number information is acquired from the first management file existing in the normal area 106. In step S63, it is determined whether a valid value is set in the encryption key entry number information.

  If valid encryption key entry number information is set, the process proceeds to step S64 to determine whether or not the second management file exists in the authentication area 107. If it exists, the validity verification process ends normally (step S66), and if it does not exist, it ends abnormally (step S67).

  On the other hand, when valid encryption key entry number information is not set, the process proceeds to step S65, and it is determined whether or not unacquired encryption key entry number information remains in the first management file existing in the normal area 106. to decide. If all of the encryption key entry number information has already been acquired and no encryption key entry number information remains, the validity verification process ends normally (step S66). On the other hand, when unacquired encryption key entry number information remains, the process returns to step S62, and the encryption key entry number information is acquired again from the first management file existing in the normal area 106, and the encryption key entry number is acquired. It is determined whether a valid value is set for the information (step S63).

  This process can be validated by detecting that unacquired encryption key entry number information does not exist in the first management file, or that valid encryption key entry number information is set in the middle. The verification process ends normally (step S66) or ends abnormally (step S67).

(Embodiment 2)
In the first embodiment of the present invention, the starting point is to check whether the content storage folder exists in the normal area, but in the second embodiment of the present invention, whether the first management file exists in the normal area. Confirmation is the starting point. The following describes the file configuration management method in the memory card according to the second embodiment.

  FIG. 11 shows a validity verification process flow of the file configuration management system according to the second embodiment of the present invention. 1 and 2 are incorporated.

  First, when the SD memory card 101 is mounted on the mobile phone device 102 and the encrypted content data is reproduced and moved on the SD memory card 101, the file structure management system in the normal area 106 is first managed and verified. Start.

  First, in step S71, the control unit 104 of the mobile phone device 102 determines whether or not the first management file in which all the video program information in the memory card is managed exists under the SD_VIDEO folder 161 in the normal area 106. To check. This processing corresponds to the confirmation of the presence / absence of the SD_VIDEO folder and the presence / absence of the management file in the normal area (steps S31 and S34) in the third modification of the first embodiment (FIG. 9).

  When there is no SD_VIDEO folder or the first management file does not exist, there is no Video program managed in the SD memory card, and the validity of this file configuration management system is denied, and the validity verification The process is terminated abnormally (step S79), and a process for informing the abnormality such as displaying some warning message on the screen of the mobile phone device 102 is executed.

  On the other hand, if it is determined in step S71 that the first management file exists, the process proceeds to step S72, and the content encryption key valid for the entry of the corresponding content in the video program information managed in the management file. Check whether the number information is set.

  If there is no valid content encryption key number information in the first management file, the corresponding content data is regarded as plain text content data, not encrypted content data. Therefore, the process proceeds to step S76, where the existence of plain text content data in the content storage folder is confirmed. This process includes steps S32 (acquisition of entry information from the SD_VIDEO folder), step S33 (check whether the entry information indicates a content storage folder), and step S34 in the third modification of the first embodiment (FIG. 9). (Confirmation of whether content data exists in the content storage folder). Note that step S76 does not necessarily correspond to all of the above three steps. For example, as in the first embodiment, it may be configured not to confirm whether the content actually exists in the content storage folder.

  If plaintext content data exists, the validity of this file structure management system is affirmed, the validity verification processing is normally terminated (step S78), and content data is reproduced / moved on the mobile phone device 102. It is possible to continue the process. On the other hand, when the content data does not exist, processing for notifying abnormality such as displaying some warning on the screen of the mobile phone device 102 is executed.

  If it is determined in step S72 that there is valid key information in the first management file, the process proceeds to step S73, in which the mobile phone device 102 performs authentication processing with the SD memory card 101, and is under the SD_VIDEO folder in the authentication area. Then, it is confirmed whether or not the second management file having the encryption key of the encrypted content data and the content right information exists.

  When the second management file does not exist, it means that there is no encryption key of the Video program in the authentication area, the validity of this file configuration management system is denied, and the validity verification process is terminated abnormally ( In step S79), processing for notifying abnormality such as displaying some warning on the screen of the mobile phone device 102 is executed.

  On the other hand, if the second management file exists, the process proceeds to step S74 to determine whether an encryption key effective for decrypting the encrypted content data managed in the second management file is set. Confirm. When a valid encryption key does not exist in the second management file, the validity of this file configuration management system is denied, the validity verification process is terminated abnormally (step S79), and some warning is given to the mobile phone device 102. Execute processing to notify the abnormality such as displaying on the screen.

  On the other hand, when a valid encryption key is set in the second management file, the validity of the relationship between the encrypted content data and the corresponding encryption key is confirmed. In step S75, it is confirmed whether or not the content storage folder indicated by the first management file and the encrypted content data in the folder actually exist. This processing includes steps S33 (confirmation of presence / absence of content storage folder), step S33a (confirmation of presence / absence of content data), and step S61 (contents) in the third modification of the first embodiment (FIGS. 9 and 10). Of ciphertext / plaintext).

  When there is no encrypted content data in the content storage folder, the validity of the file configuration management system is denied, the validity verification process is terminated abnormally (step S79), and some warning is displayed on the screen of the mobile phone device 102. Execute processing to notify the abnormality such as displaying on the screen.

  On the other hand, if there is encrypted content data in the content storage folder, the process proceeds to step S77 to determine whether there is any unacquired entry information managed by the first management file. When there is no entry, that is, when the file system configuration verification processing of all the acquired entries is normal, the validity of the file configuration management system is affirmed and the validity verification processing is normally terminated (step S78). .

  If there are still unacquired entries, the process returns to step S72 (processing for confirming whether there is valid key information in the corresponding entry), and the above-mentioned number of unacquired entry information managed in the first management file Repeat the file configuration verification process.

  According to the present embodiment, encrypted content data for which the validity of the file configuration management system has been confirmed by the above processing flow is decrypted using the corresponding encryption key acquired from the second management file. This makes it possible to acquire accurate plaintext content data. As a result, it is possible to safely execute processing such as reproduction of content data on the mobile phone device 102.

  The above embodiment describes a method for verifying the validity of the entire memory card when the memory card is mounted or when the power is turned on. However, the file structure verification process for only the entry to be processed may be performed immediately before performing some process, for example, the reproduction process. In such a case, the above-described embodiment and its modification can be easily applied by performing processing on a folder of a predetermined entry without performing processing on the folder of all entries.

(Modification A of Embodiment 2)
Next, the file configuration management method in the memory card in the modified example A of the second embodiment will be described. As for modification A, only the parts different from the second embodiment will be described.

  In the above-described first embodiment, the modification thereof, and the second embodiment, even if the legitimacy is denied, there may be no practical problem. For example, in the case where the validity verification is performed only for a predetermined folder, the contents folder even though the first management file and the second management file are legally present and a valid encryption key exists. If there is no content data, it can be considered that there is no problem with the legitimacy. However, if the content data is checked first as in the first embodiment, it is determined that there is an abnormality at that stage and the process ends.

  In the second embodiment, unlike the first embodiment, content confirmation processing that is considered to have few practical problems is brought to the last step. That is, the content is confirmed when the validity is almost affirmed. Thus, when content data does not exist, recovery can be performed by performing content re-acquisition processing or the like.

  In Modification A of Embodiment 2 of the present invention, the recovery method will be described in detail, taking as an example a case where validity verification is performed on a folder of a predetermined entry.

  Based on FIG. 12, the file system configuration in the SD memory card 101 in the modified example A is managed, and the processing flow when the abnormality occurs will be described.

  Steps S71 to S75 are the same as those in FIG. 11 in the second embodiment. Step S74a is different from step S75a.

  The occurrence of an abnormality assumed in the present embodiment is an abnormality that occurs when the validity of the file configuration management system is verified in Embodiment 2, and the following two locations are assumed.

  Even if the second management file exists, the effective encryption key of the content data is not set, and when the effective encryption key exists, the content file itself is stored in the content storage folder. The case where it does not exist.

  Regardless of the former or the latter, since the second management file exists in the authentication area 107, either of the following recovery methods for re-acquiring encrypted content data can be realized.

  If the second management file exists, it is checked in step S74 whether an effective encryption key is set for decrypting the encrypted content data managed in the second management file. At this time, if a valid encryption key does not exist in the second management file, the process proceeds to step S74a. In step S74a, the content encryption key information is acquired again from the distribution source server based on the content purchase history information stored in the second management file.

  If a valid encryption key is set, it is confirmed in step S75 whether the content storage folder indicated by the first management file and the encrypted content data in that folder actually exist. At this time, if there is no encrypted content data in the content storage folder, the process proceeds to step S75a. In step S75a, the encrypted content data is acquired again from the distribution source server based on the content purchase history information stored in the second management file.

  Based on the second management file, re-authentication processing is performed between the SD server and the network server that originally acquired the content data. Here, it is described as a network server, but any terminal, route, or medium from which the user can obtain content data may be a convenience store information terminal, a medium such as a hard disk or CD-ROM, or any other kind of problem. Absent.

  When the re-authentication process is established, it is confirmed that the SD memory card owner is a valid owner of the content data based on the content purchase history information stored in the second management file. Is confirmed, the encrypted content data and the content encryption key information are again created and redistributed on the server side. In the latter case, since the encryption key information is in the SD memory card, the key information is sent to the server, and the content data is re-encrypted and re-distributed on the server side using the key. Is also possible.

  With these processes, if the SD memory card suddenly runs out of capacity, the content data in the normal area is deleted for the time being, and when necessary, re-authenticating with the server and acquiring the content data again. It is possible to improve user convenience.

(Modification B of Embodiment 2)
Next, the file configuration management method in the memory card in the modified example B of the second embodiment will be described. As for the modification B, only the parts different from the first embodiment will be described. In the modified example B, as in the modified example 1, a case will be described as an example where only the folder of a predetermined entry is verified.

  FIG. 13 shows an example of processing for adding / deleting content data when the file system configuration in the SD memory card is normal. FIG. 14 is a flowchart for managing the file system configuration in the SD memory card according to the modification B and performing processing when the abnormality occurs.

  First, based on FIG. 13, a process for adding and deleting content data and management information in the SD memory card after confirming the normality of the file configuration management system in the SD memory card will be described.

  When content data is added or deleted, in step S81, the second management file is updated in order to store the key that encrypted the content data in the second management file or to delete it from the second management file. Check if you need to. If there is no need to update, no processing is performed and the process skips to step S84. When it is necessary to update, the process proceeds to step S82, where the second management file is copied, given an alias, and stored in the authentication area. Next, in step S83, the second management file is updated.

  Similarly, with respect to the first management file, when content data is added or deleted, the key number information obtained by encrypting the content data is stored in the first management file or the first management file in step S84. It is confirmed whether or not it is necessary to update the first management file in order to delete from the file. If there is no need to update, no processing is performed. When it is necessary to update, the process proceeds to step S85, the first management file is copied, made an alias, and stored in either the authentication area or the normal area. Next, in step S86, the first management file is updated.

  Based on the above processing, the occurrence of an abnormality assumed in the present embodiment is an abnormality that occurs when the validity of the file configuration management system is verified in the second embodiment. Assumed. 14, steps S71 to S75 and steps S74a and S75a are the same as those in FIG. Step S71a is different from step S73a.

  This is the case where the first management file itself does not exist and the case where the second management file itself does not exist.

  In step S71, it is confirmed whether or not the first management file exists. At this time, if the first management file itself is not found in the SD memory card due to some abnormality, the processing described above with reference to FIG. Confirms whether or not the copied first management file stored under a different name exists in the authentication area and the normal area. If the file is not found, the validity of the file configuration management system is If the result is negative, the validity verification process is terminated abnormally, and a process for notifying an abnormality such as displaying some warning message on the screen of the mobile phone device 102, another process for notifying an abnormality, or a process for prohibiting use is executed.

  If the file is found, in step S71a, the name of the file is changed to the same name as that of the first management file, and the file is copied again to the area where the first management file is stored. One management file can be restored to the previous state. It goes without saying that there is no need to specify anything regarding the copied file name set here as long as the file name can be identified.

  Next, when the second management file itself is not found in the SD memory card due to some abnormality, is there a copied file stored under another name in the authentication area by the above-described processing in FIG. If the file is not found, the validity of the file configuration management system is denied, the validity verification process is terminated abnormally, and a warning message is displayed on the screen of the mobile phone device 102. A process for notifying an abnormality, a certain process for notifying an abnormality, or a process for prohibiting use is executed.

  If the file is found, in step S73a, the name of the file is changed to the same name as the second management file, and the second management file is copied again to the area where the second management file is stored. 2 management files can be returned to the previous state. It goes without saying that there is no need to specify anything regarding the copied file name set here as long as the file name can be identified.

(Modification C of Embodiment 2)
Next, the file configuration management method in the memory card in the modification C of the second embodiment will be described. As for the modification C, only the parts different from the modification B will be described. In the modified example C, as in the modified example 1, a case where only the folder of a predetermined entry is verified will be described as an example.

  FIG. 15 shows an example of processing for adding / deleting content data when the file system configuration in the SD memory card is normal, and FIG. 16 shows the file system in the SD memory card in Modification C. The flowchart which manages a structure and performs the process at the time of the abnormality generation is shown.

  First, a process for adding and deleting content data and management information in the SD memory card after confirming the normality of the file configuration management system in the SD memory card will be described with reference to FIG.

  When content data is added or deleted, a key number and an encryption key obtained by encrypting the content data are added / deleted in the first and second management files. Therefore, it is confirmed whether or not the first and second management files need to be updated. If there is no need to update, no processing is performed. On the other hand, when it is necessary to update, if there is only one first and second management file after updating the file, the same file is copied and aliased to the normal area and the authentication area, respectively. Store. This time, both the first management file and the second management file are handled in the same way and are common processing, so the processing in both files is described below in common.

  In step S81, the copied two identical management files are each extended by 1 bit, and a bit indicating new / old indicating whether or not the file is the latest is set. As a method for updating the management file when there are two management files in which the new and old bits are set, instead of creating a copy every time as in the modified example B, updating is performed as follows.

  First, check the new and old bits of the two files. If either file has the old bit set, the file with the old bit set is the target of the update, and the file with the new bit set Is not subject to renewal.

  After updating the file with the old bit set, the area set for the old bit of the updated file is updated with the new bit, while the file with the new bit set so far is updated. The new bit is updated to the old bit (steps S85 and S87).

  In this process, if an abnormal state is detected in two files, such as when a new bit is set in both files or an old bit is set, the validity of this file configuration management system is If the result is negative, the validity verification process is terminated abnormally, and a process for notifying an abnormality such as displaying some warning message on the screen of the mobile phone device 102, another process for notifying an abnormality, or a process for prohibiting use is executed.

  Based on the above processing, the occurrence of an abnormality assumed in the present embodiment is an abnormality that occurs when the validity of the file configuration management system is verified in the second embodiment. Assumed.

  This is the case where the first management file itself in which the new bit is set does not exist and the case where the second management file itself in which the new bit is set does not exist.

  Since the processing is the same for both the former and the latter, the second management file will be described here, but it goes without saying that the same is true for the first management file.

  If the second management file itself in which the new bit is set is not found in the SD memory card due to some abnormality, in step S73b, the old bit is set in the authentication area by the above-described processing in FIG. 2 If the file is not found, the validity of this file configuration management system is denied, the validity verification process ends abnormally, and some warning message is sent to the mobile phone. Processing for notifying abnormality such as display on the screen of the apparatus 102, other processing for notifying abnormality, or processing for prohibiting use is executed. If the file is found, the setting of the old / new bit of the file is reset from the old bit to the new bit, so that the file having the old bit set before becomes a valid file.

  As a result, the second management file can be restored to the previous state. In the process of having the management file in duplicate, in the modification B, the process in which the file copy occurs every time the file is updated, in the modification C, only the check process of the new and old bits is performed. Since it is possible to always update an old file, it is possible to realize a higher processing speed compared to the modified example B.

  In this case, the new and old identifiers are indicated by the new version and the old version, and one bit of the new bit and the old bit is expanded and assigned. Any information can be used as long as the information can be set.

(Modification D of Embodiment 2)
Next, a file configuration management method in the memory card according to Modification D of Embodiment 2 will be described.

  Even in the management file duplication processing realized in the modification examples B and C so far, when the user loses the right such as the SD memory card itself is broken or lost, The user cannot reacquire the content data right. Modification D provides a content right protection mechanism that can cope with such a worst case.

  As a premise of the embodiment assumed this time, as shown in the modified examples B and C, the second management file is very important information stored in the authentication area. If one of the second management files is copied to the external memory, the copyright-protected content data can be reacquired with various SD memory cards. Therefore, as a content distribution source, from the viewpoint of copyright protection, the second management file is usually stored safely in the authentication area of the memory card. It is not assumed that the second management file is output to the outside.

  However, a modified example D for safely realizing a mechanism for outputting the second management file to the outside in order to ensure user convenience and safety will be described below with reference to FIG.

  When the user stores the second management file in an external memory such as a personal computer, if the encryption method specified by the content distribution source is a unique ID key of the SD memory card (step S91), step Proceeding to S94, the second management file is encrypted using the unique ID key of the SD memory card, and output to the external memory at step S95.

  In this case, even if the second management file is lost, if it is in the same SD memory card, when the second management file stored in the external memory is returned to the SD memory card, the SD memory card Decryption can be performed using the unique ID key. As a result, the same second management file as that previously held can be restored, and the content right itself can also be restored.

  Next, when the user stores the second management file in the external memory and the encryption method specified by the content distribution source is a user ID key managed by the content distribution source (step S92), Proceeding to step S94, the second management file is encrypted using the user ID key managed by the content distribution source, and output to the external memory at step S95.

  In this case, even if the SD memory card itself is lost and another SD memory card is obtained, if the content distribution source confirms that the user is the same user, the user ID key managed by the content distribution source is restored. When the second management file acquired and stored in the external memory is returned to the SD memory card, it can be decrypted using the user ID key managed by the content distribution source. As a result, the same second management file as that previously held can be restored, and the content right itself can also be restored.

  Furthermore, in the process in which the user saves the second management file in the external memory, the key for which the right is to be bound does not have to be the key shown in the above two examples, and the file distribution source and the copyright holder arbitrarily Needless to say that the key can be specified, it goes without saying that what value is used as the key can be determined freely by the copyright holder (step S93).

  As a result, the content purchaser can freely save the acquired file safely in an external memory area such as a personal computer, and both the user and the content distribution source can safely protect the rights. Become.

  However, it goes without saying that the file that can be externally output using an arbitrary key is applicable not only to the second management file but also to any file.

  The file configuration management method in the memory card of the present invention records and reproduces mainly image information, particularly moving image information, music information, etc., such as an SD memory card, etc., and a memory card that requires validity confirmation from the viewpoint of security. Is useful as a technique for realizing separate storage and cooperation management of encrypted content data and content encryption key.

Block configuration diagram of a mobile phone device and an SD memory card to which the file configuration management method in the memory card in the embodiment of the present invention is applied File system configuration diagram of SD memory card in the embodiment of the present invention The flowchart which shows the process sequence of the validity verification process of the file structure management system in Embodiment 1 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in Embodiment 1 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification 1 of Embodiment 1 of this invention. File system configuration diagram of the SD memory card in the second modification of the first embodiment of the present invention The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification 2 of Embodiment 1 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification 2 of Embodiment 1 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification 3 of Embodiment 1 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification 3 of Embodiment 1 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in Embodiment 2 of this invention. The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification A of Embodiment 2 of this invention. The flowchart which shows the process sequence of addition / deletion of content data in the modification B of Embodiment 2 of this invention The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification B of Embodiment 2 of this invention. The flowchart which shows the process sequence of addition / deletion of content data in the modification C of Embodiment 2 of this invention The flowchart which shows the process sequence of the validity verification process of the file structure management system in the modification C of Embodiment 2 of this invention. The flowchart which shows the process sequence of the external preservation | save of the file in the modification D of Embodiment 2 of this invention Schematic diagram of conventional memory card file structure management system The flowchart which shows the outline | summary of the process sequence of the conventional file structure management system The flowchart which shows the outline | summary of the process sequence of the conventional file structure management system

Explanation of symbols

101 SD Memory Card 102 Mobile Phone Device 103 SD Memory Card Interface (SD I / F)
104, 105 Control unit 106 Normal area 107 Authentication area 108 RAM
161,171 SD_VIDEO
162 Management folder 163, 164 Content storage folder 165, 166 First management file 172, 173 Second management file 167, 168, 169 Content file

Claims (16)

Checking whether the first management file exists in a normal area where normal memory access of the memory card is possible;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
A memory including a step of confirming whether or not the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. Card file configuration management method. A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether or not the first management file exists in the normal area when the existence of the content storage folder is confirmed;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
A memory including a step of confirming whether or not the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. Card file configuration management method. A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
A step of confirming whether or not the first management file exists when the presence of the content data is confirmed;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
A memory including a step of confirming whether or not the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. Card file configuration management method. A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
A step of confirming whether or not the first management file exists when the presence of the content data is confirmed;
Determining whether the content data whose existence has been confirmed is encrypted;
A memory card including a step of confirming whether or not the second management file exists in an authentication area of the memory card that requires an authentication process for memory access when it is determined that the content data is encrypted File structure management method. A step of checking whether a content storage folder exists in a normal area where a normal memory access of the memory card is possible;
Confirming whether content data exists in the content storage folder when existence of the content storage folder is confirmed;
A step of confirming whether or not the first management file exists when the presence of the content data is confirmed;
Determining whether the content data whose existence has been confirmed is encrypted;
A step of checking whether or not the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when it is determined that the content data is encrypted;
Checking whether there is valid information regarding the encryption key stored in the first management file when it is determined that the content data is not encrypted;
A memory including a step of confirming whether or not the second management file exists in an authentication area of a memory card that requires an authentication process for memory access when the existence of valid information related to the encryption key is confirmed. Card file configuration management method. Checking whether the first management file exists in a normal area where normal memory access of the memory card is possible;
Confirming whether or not there is valid information regarding the encryption key stored in the first management file when the presence of the first management file is confirmed;
Confirming whether or not the second management file exists in the authentication area of the memory card that requires authentication processing on memory access when the existence of valid information related to the encryption key is confirmed;
A step of confirming whether or not a valid encryption key exists in the authentication area when the existence of the second management file is confirmed;
A file configuration management method in a memory card including a step of confirming whether encrypted content data exists in the content storage folder of the normal area when the existence of the encryption key is confirmed. In the memory card file structure management method according to claim 6,
When there is an abnormality in the consistency between the encryption key and the encrypted content data despite the presence of the second management file,
Confirming the presence / absence of content purchase history information in the second management file information;
When the presence of the content purchase history information is confirmed, re-accessing the area defined by the content right owner;
Authenticating content ownership rights based on the content purchase history information in the second management file when the access is securely established; and
Re-acquiring one or both of content data and key information encrypted with the same or different key as before when it is confirmed that the content data is a legitimate owner;
Including the step of resetting the encrypted content data and key information obtained by the processing in the appropriate folder or field that should originally exist from the second management file, and changing the state of the memory card from an abnormal state. A file configuration management method in the memory card that can be restored to normal. In the memory card file structure management method according to claim 6,
When adding new content data or deleting existing content data,
In the process of updating the first management file and the second management file,
Creating a copy of the first management file with a different file name before updating the first management file;
Updating information of the first management file after a copy of the first management file has been successfully created;
Creating a copy of the second management file with a different file name before updating the second management file;
A file configuration management method in a memory card including a step of updating information of the second management file after a copy of the second management file is normally created. The file configuration management method in the memory card according to claim 8,
Upon occurrence of an abnormality in which the presence of the first management file or the second management file is not confirmed,
Checking the presence or absence of a copy file of the first management file when the presence of the first management file is not confirmed;
When the existence of a copy file of the first management file is confirmed, the copy file is changed to an official first management file name;
Checking the presence or absence of a copy file of the second management file when the presence of the second management file is not confirmed;
When the existence of a copy file of the second management file is confirmed, the copy file is changed to a formal second management file name again, and the memory card is changed from an abnormal state to a normal state. File configuration management method in a memory card that can be restored to In the memory card file structure management method according to claim 6,
When adding new content data or deleting existing content data,
In the process of updating the first management file and the second management file,
A step of copying and duplicating the first management file when a new and old identifier is not set in the first management file;
In the two first management files, setting the new and old identifiers in each file;
After updating the file in which the old version of the old and new identifiers is set, updating the old version of the new and old identifiers to a new version;
Updating a new version of the old and new identifiers after updating a file in which an old version of the old and new identifiers is set; and
A step of copying and duplicating the second management file when a new and old identifier is not set in the second management file;
In the two second management files, setting the new and old identifiers in each file;
After updating the file in which the old version of the old and new identifiers is set, updating the old version of the new and old identifiers to a new version;
A file configuration management method in a memory card, including a step of updating a new version of the new and old identifiers to an old version after updating a file in which an old version of the new and old identifiers is set. In the memory card file structure management method according to claim 10,
At the time of occurrence of an abnormality in which the existence of the first management file or the second management file in which a new version of the new and old identifiers is set is not confirmed,
Checking the presence or absence of the first management file in which an old version of the new and old identifiers is set;
When the presence of the first management file is confirmed, updating the old version of the old and new identifiers to a new version;
Checking the presence or absence of the second management file in which an old version of the new and old identifiers is set;
Including a step of updating the old version of the new and old identifiers to a new version when the presence of the second management file is confirmed, and the memory card is capable of returning the state of the memory card from an abnormal state to a normal state. File structure management method. In the memory card file structure management method according to claim 6,
When storing highly important files in a safe memory area outside the memory card,
Obtaining a content data use restriction key arbitrarily determined by the file use right owner from the area determined by the right owner;
Encrypting the file using the content data use restriction key;
Outputting a file encrypted with the content data use restriction key together with a key number to a memory area outside the memory card;
Re-inputting the file output to the external memory area into the memory card together with the key number;
A file in the memory card that can store the state of the memory card in the external area, including the step of decrypting the file into the memory card using the content data use restriction key corresponding to the key number Configuration management method.   13. The in-memory card file configuration management method according to claim 1, wherein the “authentication area” is replaced with a “key storage area”.   14. A computer-executable file configuration management program in a memory card configured by replacing “step” with “step” in the file configuration management method in a memory card according to any one of claims 1 to 13.   A computer-readable recording medium in which the file configuration management program in a memory card according to claim 14 is recorded.   14. A file configuration management device in a memory card configured by replacing “process” with “means” in the file configuration management method in a memory card according to any one of claims 1 to 13.

Images