JP2009140604A - Digital data recording / reproducing apparatus and digital data recording / reproducing method - Google Patents

Abstract

A digital data recording / reproducing apparatus and a digital data recording / reproducing method capable of protecting data at a mirroring destination by providing an illegal copy prevention function in the recording medium at a mirroring destination without depending on a connection interface of the recording medium. provide.
A digital data recording / reproducing apparatus 110 for recording and reading digital data to and from a recording medium, the recording medium access unit 1 (111) for accessing an internal HDD 120, and the recording medium for accessing an external HDD 130 It has an access unit 2 (115), an ID access unit (112) that acquires information specific to the recording medium, and an encryption / decryption unit (113), reads out data from the internal HDD 120, and stores it in the external HDD 130. When mirroring is performed by recording, the read data is encrypted by the encryption / decryption unit 113 using information unique to the external HDD 130 as a key, and the encrypted data is recorded in the external HDD 130.
[Selection] Figure 1

Description

  The present invention relates to an apparatus and method for recording / reproducing digital data, and more particularly to a technique effective when applied to a recording / reproducing apparatus and a recording / reproducing method having a function of mirroring data on one recording medium on the other recording medium. Is.

  In recent years, with the development of digital storage media, the use of hard disk drives (HDD) not only in PCs (Personal Computers) but also in AV (Audio Visual) devices has been spreading. There are two types of HDDs: those built into the device and those that are externally attached to the device. The external type HDD employs a removable cartridge and shares a common interface, so Standardization that enables use in various devices such as mobile devices and in-vehicle devices is progressing.

  As an example, there is an HDD according to a standard called iVDR (registered trademark) (information Versatile Disc for Removable usage). In addition to functions as a normal HDD, iVDR has also been commercialized as an iVDR-Secure HDD that complies with a standard called SAFIA (Security Architecture Intelligent Attachment Device), which is a copyright protection technology for content. For this reason, the use not only in PCs but also in AV devices such as hard disk recorders that require content copyright protection and TVs with a built-in recorder function is spreading.

  On the other hand, as the capacity of HDDs has increased, various techniques for avoiding data loss due to HDD damage or the like have come out. As this technique, for example, a technique called mirroring (RAID 1: Redundant Array of Independent Disks 1) for writing data to a plurality of HDDs is known.

In JP 2004-362444 A (Patent Document 1), not only the data but also the OS (Operating System) of the device in which the HDD is installed is mirrored, so that the OS can be damaged even when the HDD storing the OS is damaged. Discloses a technique for enabling the system to start up normally and reducing the total number of HDDs.
JP 2004-362444 A

  In the technique disclosed in Patent Document 1, since the connection between the PC and the HDD is basically an IDE (Integrated Drive Electronics) interface, there is a possibility of being restricted in terms of usability when considering use with various devices. There is sex. Further, since there is no special means for preventing unauthorized copying in the mirroring HDD, there is a possibility that data or the like will be copied illegally.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a digital data recording / reproducing apparatus and digital data that can protect the mirrored data by having an illegal copy prevention function in the mirrored recording medium without depending on the connection interface of the recording medium. To provide a recording / reproducing method.

  The above and other objects and novel features of the present invention will be apparent from the description of this specification and the accompanying drawings.

  Of the inventions disclosed in the present application, the outline of typical ones will be briefly described as follows.

  The digital data recording / reproducing apparatus according to the representative embodiment of the present invention performs mirroring by reading the data of the first recording medium and recording it on the second recording medium, and the second recording is performed at the time of mirroring. Data is encrypted and recorded using information unique to the medium as a key.

  Among the inventions disclosed in the present application, effects obtained by typical ones will be briefly described as follows.

  According to the representative embodiment of the present invention, it is possible to easily construct a mirroring system having an unauthorized copy prevention function without depending on the connection interface of the recording medium.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that components having the same function are denoted by the same reference symbols throughout the drawings for describing the embodiment, and the repetitive description thereof will be omitted.

<Embodiment 1>
For example, when the internal HDD of a PC stops operating due to damage or the like, the OS cannot be started on the PC, so that data cannot be extracted even if the data is backed up to another recording medium. If both the OS and data are mirrored, the OS can be started by using the mirrored HDD. Therefore, in the first embodiment of the present invention, a mirroring system having a digital data recording / reproducing apparatus that mirrors an OS installed in a built-in HDD of a PC and stored data on an external HDD will be described.

  FIG. 2 is a diagram showing a configuration example of a mirroring system having a digital data recording / reproducing apparatus according to the present embodiment. In FIG. 2, the system of the present embodiment is configured by a personal computer (PC) 100, and has a digital data recording / reproducing device 110 and a built-in recording medium 220 as a first recording medium as a mirroring source. ing. A display device 200 is connected to the display output terminal 210 outside the PC 100, and an external recording medium 230 is connected to the connection interface 240 as a second recording medium that is a mirroring destination. Here, the connection interface 240 is a connection terminal such as, for example, Serial ATA (Serial Advanced Technology Attachment) or USB (Universal Serial Bus).

  The PC 100 may have a configuration including other input / output devices and network devices in addition to the display device 200. As the internal recording medium 220 and the external recording medium 230, various recording media such as an HDD and a semiconductor memory can be used as long as digital data can be recorded and read out. Will be described. As the external recording medium 230 using the HDD, for example, a removable recording medium such as the aforementioned iVDR can also be used.

  FIG. 1 is a diagram showing a configuration example of a mirroring system having a digital data recording / reproducing apparatus 110 when an HDD is used as a recording medium. In FIG. 1, a PC 100 has a built-in HDD 120 as a first recording medium, and also has a digital data recording / reproducing device 110. An external HDD 130 is connected to the outside via a connection interface 240 as a second recording medium.

  The digital data recording / reproducing apparatus 110 also includes a recording medium access unit 1 (111) for accessing data in the internal HDD 120, an ID access unit 112 for acquiring unique information of the internal HDD 120 and the external HDD 130, and encryption and decryption of data. The encryption / decryption unit 113 to be converted, the determination unit 114 that determines unauthorized copying of the external HDD 130, and the recording medium access unit 2 (115) that accesses the data of the external HDD 130 are configured.

  The built-in HDD 120 stores ID (IDENTIFY DEVICE information) 1 (121), which is unique information of the built-in HDD 120, an OS 122 installed in the PC 100, and data 123. The external HDD 130 includes ID2 (131) of the external HDD 130, ID1 (132) obtained by copying ID1 (121) of the internal HDD 120, encrypted ID1 (133) obtained by encrypting ID1 (121), and the internal HDD 120. An encrypted OS 134 obtained by encrypting the OS 122, encrypted data 135 obtained by encrypting a part or all of the data 123 of the built-in HDD 120, and data 136 copied without encryption are recorded.

  The specific processing contents of mirroring in the digital data recording / reproducing apparatus 110 of this embodiment will be described below with reference to FIG. FIG. 3 is a flowchart illustrating an example of the flow of the mirroring process.

  When the mirroring process is started (step S301), a part or all of the OS 122 recorded in the internal HDD 120 is first read by the recording medium access unit 1 (111). The ID access unit 112 reads ID2 (131) of the external HDD 130 that is the mirroring destination. Using this ID2 (131) as a key, the OS 122 is encrypted by the encryption / decryption unit 113 and recorded as the encrypted OS 134 in the external HDD 130 by the recording medium access unit 2 (115) (step S302).

  Next, the data 123 recorded in the internal HDD 120 is read by the recording medium access unit 1 (111), and it is determined whether or not the read data 123 is to be encrypted (step S303). If not encrypted, the read data 123 is recorded as it is in the external HDD 130 by the recording medium access unit 2 (115) as data 136 (step S304).

  When encrypting the read data 123, the data 123 read by the encryption / decryption unit 113 is encrypted using the ID 2 (131) of the external HDD 130 read by the ID access unit 112 as a key. This is recorded as encrypted data 135 in the external HDD 130 by the recording medium access unit 2 (115) (step S305). The processes from step S303 to step S305 are executed for all data 123 to be mirrored.

  In the digital data recording / reproducing apparatus 110 of this embodiment, in order to specify the mirroring source HDD, the mirroring source HDD ID is recorded on the mirroring destination HDD. Accordingly, ID1 (121) of internal HDD 120 is read by ID access unit 112, and ID1 (121) of encryption / decryption unit 113 is encrypted by ID2 (131) of external HDD 130 read by ID access unit 112 as a key. Turn into. This is recorded as the encryption ID 1 (133) in the external HDD 130 by the recording medium access unit 2 (115) (step S306).

  ID1 (121) is recorded as ID1 (132) in the external HDD 130 as it is by the recording medium access unit 2 (115) (step S307). In order to identify the mirroring source HDD, either one of the above-mentioned encryption ID1 (133) or ID1 (132) may be used. In this embodiment, the unauthorized copy determination process described later is performed. Also record both to do. This completes the mirroring process (step S308).

  Next, ID1 (121) and ID2 (131) used as encryption key data and data for specifying the mirroring HDD will be described with reference to FIG. The IDs in the internal HDD 120 and the external HDD 130 are read out by issuing an IDENTIFY DEVICE command to the HDD by the ID access unit 112. The IDENTIFY DEVICE command is a command for reading the detailed information of the HDD that is provided as a standard in the ATA device, and is used as information of ID1 (121) and ID2 (131) using information responded to the IDENTIFY DEVICE command.

  FIG. 4 is a diagram showing a part of information actually read by the IDENTIFY DEVICE command. Of the information read by the IDENTIFY DEVICE command, the data used for ID1 (121) and ID2 (131) must be information that is not rewritten unique to each recording medium, and is different for each recording medium. Since it is desirable to be information, the serial number 402 (20 bytes) and the model number 403 (40 bytes) are used.

  In the digital data recording / reproducing apparatus 110 of the present embodiment, it is assumed that the encryption method used in the encryption / decryption unit 113 uses AES (Advanced Encryption Standard) that is strong and fast in processing. The AES key length can be selected from 16 bytes (128 bits), 24 bytes (192 bits), and 32 bytes (256 bits). In this embodiment, the key length uses 16 bytes (128 bits). And

  Here, since the serial number 402 is 16 bytes or more, in this embodiment, data of lower 16 bytes of the serial number 402 is used. Thereby, practically different values can be obtained for individual recording media. When a longer key length is selected, the length of the serial number 402 is not sufficient, so that data obtained by adding the model number 403 to the serial number 402 can be used. In this embodiment, AES is used as the encryption method, but the present invention is not limited to this, and other encryption methods can also be used. In that case, data having a length corresponding to the key length used in the encryption method is used.

  The data used as the ID is information that is not rewritten unique to each recording medium, and is information that has a length longer than the key length used in the encryption method and can be read by a command or the like. Other information can be used depending on the type of recording medium to be used.

  Next, specific processing contents when using the external HDD 130 mirrored according to the above-described procedure will be described with reference to FIG. FIG. 5 is a flowchart showing an example of the flow of processing using the mirrored external HDD 130.

  When the process is started (step S501), first, ID1 (132) and encrypted ID1 (133) recorded in the external HDD 130 are read by the recording medium access unit 2 (115). The read encrypted ID1 (133) is decrypted by the encryption / decryption unit 113 using the ID2 (131) acquired by the ID access unit 112 as a key, and is compared with the ID1 (132) by the determination unit 114. (Step S502).

  If they do not match, it is determined that the data in the external HDD 130 has been illegally copied, and the process ends (step S503). If they match, the encryption OS 134 is read by the recording medium access unit 2 (115), and the encryption / decryption unit 113 decrypts the ID 2 (131) acquired by the ID access unit 112 as a key (step S504). . Thereafter, the PC 100 is activated by the decrypted OS (step S505).

  Next, it is determined whether to use the encrypted data 135 (step S506). When the encrypted data 135 is used, the encrypted data 135 is read by the recording medium access unit 2 (115), and decrypted by the encryption / decryption unit 113 using the ID2 (131) acquired by the ID access unit 112 as a key. The decrypted data is recorded in the external HDD 130 (step S507). This completes the process of using the external HDD 130 (step S508).

  Next, an operation when the external HDD 130 is illegally copied will be described with reference to FIG. FIG. 6 is a diagram showing an example when the data in the external HDD 130 is copied to another external HDD 630. Assume that ID1 (132), encrypted ID1 (133), encrypted OS 134, encrypted data 135, and data 136 in the external HDD 130 are illegally copied to the external HDD 630 as shown in FIG. At this time, since ID3 (631) of the external HDD 630 is data that cannot be rewritten, even if the data of the external HDD 130 is copied, it is not overwritten.

  If the OS is to be started up using the external HDD 630 in the same procedure as the case of the external HDD 130 in accordance with the processing contents described above with reference to FIG. 5, the encrypted ID 1 (633) is set to ID 3 ( 631) is compared with ID1 (632). The encrypted ID 1 (633) is encrypted using the ID 2 (131) of the external HDD 130 as a key, so it is not correctly decrypted, and the two do not match, and the process ends in step S503.

  As described above, the ID1 (132) that is the ID of the mirroring source internal HDD 120 and the ID1 (132) that is obtained by encrypting the ID1 (132) with the ID2 (131) that is the ID of the external HDD 130 are stored in the external HDD 130. 133) is recorded together, and by comparing the two, the presence or absence of unauthorized copying can be determined.

  Even if other data illegally copied, for example, the encrypted OS (634) is used by some means and decrypted using ID3 (631) as a key, ID2 (ID2) which is the key when this key is encrypted is used. 131), it cannot be correctly decoded. In other words, the OS cannot be started even if copied illegally. Similarly, even if the encrypted data (635) is to be decrypted and used, it cannot be correctly decrypted because the key used for decryption is different from the encrypted key, and the data cannot be used. .

  As described above, according to the digital data recording / reproducing apparatus 110 of this embodiment, a recording medium such as an HDD is connected by a simple interface such as Serial ATA or USB, and unauthorized copying is performed on the recording medium at the mirroring destination. It is possible to easily construct a mirroring system having a function to prevent.

<Embodiment 2>
Since an external HDD can be easily connected to a PC, a method of using only important data by mirroring the external HDD for backup is also assumed. Therefore, in the second embodiment of the present invention, a mirroring system having a digital data recording / reproducing apparatus that mirrors only data stored in an internal HDD of a PC to an external HDD will be described.

  FIG. 7 is a diagram showing a configuration example of a mirroring system having the digital data recording / reproducing apparatus 110 according to the second embodiment of the present invention. In FIG. 7, the configuration of the entire mirroring system is substantially the same as the configuration shown in FIG. The difference from FIG. 1 is that the encrypted OS 134 is not recorded in the external HDD 130.

  The specific processing contents of mirroring in the digital data recording / reproducing apparatus 110 of this embodiment will be described below with reference to FIG. FIG. 8 is a flowchart illustrating an example of a processing flow of mirroring.

  When the mirroring process is started (step S801), first, the data 123 recorded in the internal HDD 120 is read by the recording medium access unit 1 (111), and it is determined whether or not the read data 123 is to be encrypted (step S802). ). If not encrypted, the read data 123 is recorded as data 136 in the external HDD 130 as it is by the recording medium access unit 2 (115) (step S803).

  When encrypting the read data 123, the data 123 read by the encryption / decryption unit 113 is encrypted using the ID 2 (131) of the external HDD 130 read by the ID access unit 112 as a key. This is recorded as encrypted data 135 in the external HDD 130 by the recording medium access unit 2 (115) (step S804). The processes from step S802 to step S804 are executed for all data 123 to be mirrored. As in the first embodiment, AES is used as the encryption method used in the encryption / decryption unit 113.

  In the present embodiment, as in the first embodiment, in order to identify the mirroring source HDD, the mirroring source HDD ID is recorded in the mirroring destination HDD. Accordingly, ID1 (121) of internal HDD 120 is read by ID access unit 112, and ID1 (121) of encryption / decryption unit 113 is encrypted by ID2 (131) of external HDD 130 read by ID access unit 112 as a key. Turn into. This is recorded as the encryption ID 1 (133) in the external HDD 130 by the recording medium access unit 2 (115) (step S805).

  ID1 (121) is directly recorded as ID1 (132) in the external HDD 130 by the recording medium access unit 2 (115) (step S806). As in the first embodiment, in order to identify the mirroring source HDD, either the above-described encryption ID1 (133) or ID1 (132) is sufficient. Both are recorded in order to perform an illegal copy determination process described later. This completes the mirroring process (step S807).

  Next, specific processing contents when using the external HDD 130 mirrored by the above-described procedure will be described with reference to FIG. FIG. 9 is a flowchart showing an example of a flow of processing using the mirrored external HDD 130.

  When the process is started (step S901), first, ID1 (132) and encrypted ID1 (133) recorded in the external HDD 130 are read by the recording medium access unit 2 (115). The read encrypted ID1 (133) is decrypted by the encryption / decryption unit 113 using the ID2 (131) acquired by the ID access unit 112 as a key, and is compared with the ID1 (132) by the determination unit 114. (Step S902).

  If they do not match, it is determined that the data in the external HDD 130 has been illegally copied, and the process ends (step S903). If they match, it is determined whether or not to use the encrypted data 135 (step S904). When the encrypted data 135 is used, the encrypted data 135 is read by the recording medium access unit 2 (115), and decrypted by the encryption / decryption unit 113 using the ID2 (131) acquired by the ID access unit 112 as a key. The decrypted data is recorded in the external HDD 130 (step S905). This completes the process of using the external HDD 130 (step S906).

  As described above, as in the first embodiment, the external HDD 130 has the ID1 (132) that is the ID of the mirroring-source internal HDD 120 and the ID1 (132) that is the ID of the external HDD 130 itself (131). It is possible to determine whether or not there is an unauthorized copy by recording together the encrypted ID 1 (133) encrypted in step S1 and comparing the two. Even if the encrypted data (135) is illegally copied and used, it cannot be correctly decrypted because the encrypted key and the decrypted key are different, and the data cannot be used. Therefore, unauthorized copying can be prevented.

<Embodiment 3>
In the third embodiment of the present invention, a mirroring system having a digital data recording / reproducing apparatus when the recording medium to be mirrored is a recording medium having a secure area and a normal area will be described.

  Here, the secure area is an area that is authenticated between the device and the recording medium, and can be accessed using a special command only when the authentication is valid. The normal area is a normal area. It is an area that can be accessed without special authentication in the same way as an area in an HDD or the like. Examples of the recording medium having the secure area as described above include an HDD conforming to the above-described SAFIA standard.

  FIG. 10 is a diagram showing a configuration example of a mirroring system having the digital data recording / reproducing apparatus 110 according to the third embodiment of the present invention. 10, the configuration of the entire mirroring system is almost the same as the configuration shown in FIG. 1 of the first embodiment. The difference from FIG. 1 is that the external HDD 130 is an external HDD 1000 with a secure area, and the digital data recording / reproducing device 110 does not have the ID access unit 112 and the determination unit 114, and is encrypted / decrypted. The key data generating unit 1001 that generates a key used in the converting unit 113 and the secure area access unit 1002 that accesses the data in the secure area of the external HDD 1000 with the secure area.

  The external HDD 1000 with the secure area does not hold the ID 1 (132) of the internal HDD 120 and the encrypted ID 1 (133) obtained by encrypting the internal HDD 120, and the key data 1 (1011) and the key data 2 (1012) are stored in the secure area 1010. ). The key data 1 (1011) and the key data 2 (1012) are keys generated by the key data generation unit 1001.

  The specific processing contents of mirroring in the digital data recording / reproducing apparatus 110 of this embodiment will be described below with reference to FIG. FIG. 11 is a flowchart illustrating an example of a processing flow of mirroring.

  When the mirroring process is started (step S1101), first, the key data generation unit 1001 generates key data 1 by generating random data (step S1102).

  Next, a part or all of the OS 122 of the internal HDD 120 read by the recording medium access unit 1 (111) is encrypted by the encryption / decryption unit 113 using the key data 1 generated by the key data generation unit 1001 as a key, Recording is performed as an encrypted OS 134 in the external HDD 1000 with a secure area by the recording medium access unit 2 (115). Further, the key data 1 is recorded as key data 1 (1011) in the secure area 1010 of the external HDD 1000 with the secure area by the secure area access unit 1002 (step S1103).

  Next, the data 123 recorded in the internal HDD 120 is read by the recording medium access unit 1 (111), and it is determined whether or not the read data 123 is to be encrypted (step S1104). If not encrypted, the read data 123 is recorded as it is in the external HDD 1000 with secure area as data 136 by the recording medium access unit 2 (115) (step S1105).

  When encrypting the read data 123, the key data generation unit 1001 generates the key data 2 by generating random data (step S1106). Next, the data 123 read by the encryption / decryption unit 113 is encrypted using the generated key data 2 as a key. This is recorded as encrypted data 135 in the external HDD 1000 with a secure area by the recording medium access unit 2 (115). Further, the key data 2 is recorded as key data 2 (1012) in the secure area 1010 of the external HDD 1000 with the secure area by the secure area access unit 1002 (step S1107).

  The processing from step S1104 to step S1107 is executed for all data 123 to be mirrored. This completes the mirroring process (step S1108).

  As in the first embodiment, AES is used as the encryption method used in the encryption / decryption unit 113. The key length of AES can be selected from 16 bytes (128 bits), 24 bytes (192 bits), and 32 bytes (256 bits). In this embodiment, the key data generation unit 1001 uses 16 bytes of data. It is assumed that a key length of 16 bytes (128 bits) is used.

  Next, specific processing contents when using the external HDD 1000 with the secure area mirrored by the above-described procedure will be described with reference to FIG. FIG. 12 is a flowchart showing an example of the flow of processing using the mirrored external HDD 1000 with a secure area.

  When the processing is started (step S1201), first, the encrypted OS 134 is read by the recording medium access unit 2 (115), and the encryption / decryption unit using the key data 1 (1011) read by the secure area access unit 1002 as a key. The data is decrypted by 113 (step S1202). Thereafter, the PC 100 is activated by the decrypted OS (step S1203).

  Next, it is determined whether to use the encrypted data 135 (step S1204). When the encrypted data 135 is used, the encrypted data 135 is read by the recording medium access unit 2 (115), and the key data 2 (1012) read by the secure area access unit 1002 is used as a key for the encryption / decryption unit. The decrypted data is recorded in the external HDD 1000 with the secure area (step S1205). This completes the process of using the external HDD 1000 with the secure area (step S1206).

  If the content of data in the external HDD 1000 with secure area is copied illegally and the encryption OS 134 or the encrypted data 135 is used, the key data 1 (1011) and the key data 2 ( 1012) are in the secure area 1010, they cannot be copied and cannot be correctly decrypted. Thereby, unauthorized copying can be prevented on the recording medium of the mirroring destination.

  As mentioned above, the invention made by the present inventor has been specifically described based on the embodiment. However, the present invention is not limited to the embodiment, and various modifications can be made without departing from the scope of the invention. Needless to say.

  For example, the digital data recording / reproducing apparatus 110 described in the first to third embodiments can be configured by a circuit, an LSI, or the like and mounted on a device such as a PC as hardware such as a board or a card. In addition, it can be implemented as software that realizes these functions, and can be realized, for example, to be executed when the device is activated or at any time during operation.

  In the first to third embodiments, the digital data recording / reproducing apparatus 110 is mounted on the PC 100. However, the target device is not limited to this, and for example, a server device, NAS (Network Attached Storage), or the like. It is also possible to adopt a configuration to be mounted on.

  In the first to third embodiments, the mirroring source recording medium is a built-in recording medium, and the mirroring destination recording medium is an external recording medium. However, the present invention is not limited to such a configuration. A configuration in which mirroring is performed from the external to the internal and from the external to the external may be employed.

  The present invention can be used in an apparatus and method for recording / reproducing digital data.

1 is a diagram showing a configuration example of a mirroring system having a digital data recording / reproducing device when an HDD is used as a recording medium, which is Embodiment 1 of the present invention. FIG. It is the figure which showed the structural example of the mirroring system which has a digital data recording / reproducing apparatus which is Embodiment 1 of this invention. It is a flowchart which shows the example of the flow of the process of mirroring in Embodiment 1 of this invention. FIG. 5 is a diagram showing a part of information actually read by an IDENTIFY DEVICE command in the first embodiment of the present invention. 4 is a flowchart showing an example of a flow of processing using a mirrored external HDD in the first embodiment of the present invention. It is the figure in Embodiment 1 of this invention which showed the example at the time of copying the data of external HDD to other external HDD. It is the figure which showed the structural example of the mirroring system which has a digital data recording / reproducing apparatus which is Embodiment 2 of this invention. It is a flowchart which shows the example of the flow of the process of mirroring in Embodiment 2 of this invention. It is a flowchart which shows the example of the flow of a process which uses the mirrored external HDD in Embodiment 2 of this invention. It is the figure which showed the structural example of the mirroring system which has a digital data recording / reproducing apparatus which is Embodiment 3 of this invention. It is a flowchart which shows the example of the flow of a mirroring process in Embodiment 3 of this invention. 10 is a flowchart showing an example of a flow of processing using a mirrored external HDD with a secure area in Embodiment 3 of the present invention.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 ... Personal computer (PC), 110 ... Digital data recording / reproducing apparatus, 111 ... Recording medium access part 1, 112 ... ID access part, 113 ... Encryption / decryption part, 114 ... Determination part, 115 ... Recording medium access part 2, 120 ... Internal HDD, 121 ... ID1, 122 ... OS, 123 ... Data, 130 ... External HDD, 131 ... ID2, 132 ... ID1, 133 ... Encrypted ID1, 134 ... Encrypted OS, 135 ... Encrypted data 136 ... data,
200 ... display device, 210 ... display output terminal, 220 ... internal recording medium, 230 ... external recording medium, 240 ... connection interface,
630 ... external HDD, 631 ... ID3, 632 ... ID1, 633 ... encryption ID1, 634 ... encryption OS, 635 ... encrypted data, 636 ... data,
1000: external HDD with secure area, 1001: key data generation unit, 1002: secure area access unit, 1010 ... secure area, 1011 ... key data 1, 1012 ... key data 2.

Claims (8)

A digital data recording / reproducing apparatus for recording and reading digital data on a recording medium,
A first recording medium access unit that accesses data on the first recording medium, a second recording medium access unit that accesses data on the second recording medium, and an ID access unit that acquires information specific to the recording medium And an encryption / decryption unit for encrypting and decrypting data,
By reading all or part of the data of the first recording medium by the first recording medium access unit and recording it on the second recording medium by the second recording medium access unit, the first recording medium access unit Mirroring from the recording medium to the second recording medium,
Specific information of the second recording medium obtained by the ID access unit with all or part of the data read from the first recording medium by the first recording medium access unit when performing the mirroring A digital data recording / reproducing apparatus, wherein the encryption / decryption unit encrypts the encrypted data using the second recording medium access unit as a key and the encrypted data is recorded on the second recording medium by the second recording medium access unit. The digital data recording / reproducing apparatus according to claim 1, wherein
The digital data recording / reproducing apparatus characterized in that the unique information of the recording medium acquired by the ID access unit is all or a part of the data including the serial number and model number of the recording medium. The digital data recording / reproducing apparatus according to claim 1, wherein
When the mirroring is performed, the unique information of the first recording medium acquired by the ID access unit and the acquired unique information of the first recording medium are acquired by the ID access unit. At least one of the information encrypted by the encryption / decryption unit using the unique information of the recording medium as a key is recorded on the second recording medium by the second recording medium access unit. A digital data recording / reproducing apparatus. The digital data recording / reproducing apparatus according to claim 1, wherein
When the mirroring is performed, the unique information of the first recording medium acquired by the ID access unit and the acquired unique information of the first recording medium are acquired by the ID access unit. What is recorded by the encryption / decryption unit using the unique information of the recording medium as a key is recorded on the second recording medium by the second recording medium access unit,
When reading the data of the second recording medium, the unique information of the first recording medium recorded on the second recording medium and the unique information of the encrypted first recording medium are recorded. The information is read by the second recording medium access unit, and the read unique information of the first recording medium and the encrypted unique information of the first recording medium are acquired by the ID access unit Compared with the information decrypted by the encryption / decryption unit using the unique information of the second recording medium as a key, if the two do not match, illegal copying is performed on the second recording medium. A digital data recording / reproducing apparatus characterized in that it is determined that the data has been broken. A digital data recording / reproducing apparatus for recording and reading digital data on a recording medium,
A first recording medium access unit for accessing data in the first recording medium; a second recording medium access unit for accessing data in a normal area of the second recording medium having a secure area and a normal area; A secure area access unit that accesses data in a secure area of the second recording medium, an encryption / decryption unit that encrypts and decrypts the data, and a key that is used by the encryption / decryption unit A key data generation unit,
By reading all or part of the data of the first recording medium by the first recording medium access unit and recording it on the second recording medium by the second recording medium access unit, the first recording medium access unit Mirroring from the recording medium to the second recording medium,
When the mirroring is performed, all or part of the data read from the first recording medium by the first recording medium access unit is encrypted / decrypted using the key generated by the key data generation unit. The encryption unit encrypts the encrypted data, the second recording medium access unit records the encrypted data in the normal area of the second recording medium, and the key data generation unit generates the key in the secure area access A digital data recording / reproducing apparatus for recording in a secure area of the second recording medium. A digital data recording / reproducing method in an apparatus having a first recording medium and a second recording medium for recording digital data,
All or part of the data on the first recording medium is read, and all or part of the read data is encrypted using the unique information of the second recording medium acquired from the second recording medium as a key. And recording the encrypted data on the second recording medium to perform mirroring. The digital data recording / reproducing method according to claim 6,
When performing the mirroring, the unique information of the first recording medium acquired from the first recording medium and the acquired unique information of the first recording medium were acquired from the second recording medium. What is recorded on the second recording medium is encrypted with the unique information of the second recording medium as a key,
When reading the data of the second recording medium, the unique information of the first recording medium recorded on the second recording medium and the unique information of the encrypted first recording medium are recorded. Of the second recording medium obtained by reading the information unique to the first recording medium and the encrypted unique information of the first recording medium from the second recording medium. A digital data recording / reproducing method, comprising: comparing with decryption using unique information as a key; and determining that illegal copying has been performed on the second recording medium if they do not match. A digital data recording / reproducing method in an apparatus having a first recording medium and a second recording medium for recording digital data, wherein the second recording medium has a secure area and a normal area;
Reading all or part of the data of the first recording medium, encrypting all or part of the read data using a key generated for encryption, and encrypting the data to the second A digital data recording / reproducing method comprising: recording in a normal area of the recording medium, and recording a key generated for encryption in a secure area of the second recording medium.

Images