JP5338879B2 - Information recording apparatus, information reproducing apparatus, information recording method, information reproducing method, and computer program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a recording and reproducing device capable of performing accurate and efficient copyright corresponding control in content recording and reproduction. <P>SOLUTION: An information recording device generates and stores in a recording medium, as corresponding copyright information of stored contents on the recording medium, the severest copy control information among copy control information set to every element of record contents, and copyright information including information about a change point of the copy control information in the record contents. During reproduction of an entire content corresponding to a title when the content is reproduced, reproduction control according to the severest copy control information among the copy control information is executed, and information about the change point is also applied so that a partial content output can be executed. <P>COPYRIGHT: (C)2012,JPO&amp;INPIT

Description

  The present invention relates to an information recording apparatus, an information reproducing apparatus, an information recording method, an information reproducing method, and a computer program. More specifically, the present invention relates to a content recording medium with usage restrictions added for the purpose of copyright protection and the like. The present invention relates to an information recording device, an information reproducing device, an information recording method, an information reproducing method, and a computer program that are improved in the storage processing for and the reproduction processing from a recording medium.

  With the advancement and development of digital signal processing technology, in recent years, recording devices and recording media for digitally recording information are becoming widespread. According to such a digital recording apparatus and recording medium, for example, recording and reproduction can be repeated without degrading images and sound. In this way, digital data can be copied over and over again while maintaining image quality and sound quality, so when recording media that have been illegally copied are distributed to the market, various contents such as music, movies, etc. The profits of the copyright holders or the rightful sales rights holders will be harmed. In recent years, in order to prevent such illegal copying of digital data, various processing configurations for preventing illegal copying in a digital recording apparatus and a recording medium have been realized or proposed.

  In order to prevent illegal copying, copy control information associated with content is used. Typical copy control information includes SCMS: Serial Copy Management System and CGMS: Copy Generation Management System. The contents of these copy control information include copy-free (Copy Free), which indicates that copying is permitted for the data with the information added, and one-generation copy permission (One Generation) that permits copying of only one generation. Information such as “Copy Allowed” and “Copy Prohibited” which prohibits copying.

  In the case of an analog video signal (referred to as CGMS-A), the CGMS system is a specific horizontal section within the vertical blanking period of the luminance signal, for example, in the case of an NTSC signal, an effective video portion in the twentieth horizontal section. 2 bits of 20-bit additional information to be superimposed on are superimposed as information for duplication control, and if it is a digital video signal (referred to as CGMS-D), additional information to be inserted and added to the digital video data, This is a method of transmitting information including 2-bit information for duplication control.

The meaning content of 2-bit information (hereinafter referred to as CGMS information) in the case of this CGMS method is [00] …… replicatable [10] …… replicatable once (replicatable only for one generation)
[11] ... Prohibition of duplication (absolute duplication prohibition)
It is.

  When the CGMS information added to the video information is [10], the CGMS compatible recording apparatus determines that the video information can be duplicated and recorded, and executes the recording. Is appended with the CGMS information rewritten to [11]. If the CGMS information added to the video information to be recorded is [11], the CGMS-compatible recording apparatus is prohibited from executing the recording because the copying of the image signal is prohibited. As an interface for digital video data, there is an IEEE 1394 interface. In this interface, a method for protecting copyright using CGMS information has been proposed.

  In addition, for example, SCMS (Serial Copy Management System) is adopted as a method for preventing illegal copying in an MD (mini disk) (MD is a trademark) device. SCMS outputs an SCMS signal from the digital interface (DIF) together with audio data on the data reproduction side, and controls recording of audio data from the reproduction side on the data recording side based on the SCMS signal from the reproduction side. This is a system that prevents illegal copying.

  Specifically, whether the SCMS signal is audio data that is copy-free data that can be copied any number of times or data that is allowed to be copied only once (copy once allowed). Or a signal indicating whether copying is prohibited (copy prohibited) data. On the data recording side, when audio data is received from the DIF, an SCMS signal transmitted together with the audio data is detected. If the SCMS signal is copy free, the audio data is recorded on the mini disc together with the SCMS signal. If the SCMS signal is allowed to be copied only once (copy once allowed), the SCMS signal is changed to copy prohibited and recorded on the mini disk together with the audio data. Further, when the SCMS signal is copy prohibited, audio data is not recorded. By performing such control using SCMS, the mini-disc apparatus prevents illegal copying of copyrighted audio data by SCMS.

  As a configuration to which the above-described copy control information is specifically applied, copy control information according to 5C-DTCP (Digital Transmission Content Protection) proposed by a consortium of five companies including Sony Corporation, which is the present patent applicant. CCI: Copy Control Information). This specifies the transmission method of copy control information (CCI: Copy Control Information) for content in the case of content input from the IEEE 1394 interface or in satellite / terrestrial digital television broadcasting, etc. Defines copy control processing in the playback apparatus.

  In addition to the above-described method, there is an additional configuration of copy control information using a digital watermark (watermark (WM)). Digital watermarks (watermarks (WM)) superimpose data that is difficult to see or perceive in normal content (image data or audio data) in the playback state. It detects and controls. Even if the content is analog data, it is possible to embed and detect a digital watermark, and the usage is wide. However, a configuration dedicated to digital watermark detection and embedding processing is required.

  As described above, there are various methods for adding copy control information to the content for the purpose of protecting the copyright of the content. The recording / playback apparatus for storing and playing back the content can also process the various copy control information described above. There are various devices such as possible compatible devices and non-compatible devices.

  In the current situation where such various devices exist, when content input / output and copy processing between devices are executed, it may be difficult to accurately handle copy control information. For example, both copy control information (CCI: Copy Control Information) proposed in the above-mentioned 5C-DTCP (Digital Transmission Content Protection) system and copy control information using a digital watermark (watermark (WM)) are added. When executing processing on content, if the content processing apparatus is a device that cannot detect digital watermark (watermark (WM)), detection of digital watermark (watermark (WM)) is possible, but embedding is performed. When the device cannot perform processing, or when the device is capable of both detection and embedding, the CCI and digital watermark copy control information reading and rewriting processes are executed in different modes depending on the device, and accurate A situation occurs in which the update process is not executed.

  For example, there is a device that rewrites CCI according to a detection value of a digital watermark (watermark (WM)), and only rewrite of CCI without obtaining a detection value of a digital watermark (watermark (WM)). Various processes are executed according to the processable state of the device, such as rewriting both the digital watermark (watermark (WM)) and the CCI. As a result, a problem such as inconsistency between CCI and WM may occur, and correct copy control may not be performed.

  Furthermore, depending on the input source of the recorded content, there is a source that provides the content with a request for limiting the output mode of the content recorded on the recording medium. In such a case, if the information of the input source is discarded, there is a possibility that the reproduction restriction defined in advance according to the input source is not accurately executed, and the content reproduction and content copying are executed irregularly.

  The present invention has been made in view of the above-described problems, and there are various content input sources, and in the current situation where various copy control information handling devices coexist, the present invention is given to the content according to the input source. It is an object of the present invention to provide an information recording apparatus, an information reproducing apparatus, an information recording method, an information reproducing method, and a computer program that can execute accurate content control according to the copy control information.

The first aspect of the present invention is:
An information recording device that executes content recording processing on a recording medium,
A processing unit that generates copyright information corresponding to the content to be recorded and stores the copyright information in a recording medium that stores the content to be recorded;
The copyright information is stored in an information recording apparatus including the strictest copy control information among the copy control information set for each constituent unit of the recording target content and information on the change point of the copy control information in the recording target content. is there.

  Furthermore, in one embodiment of the information recording apparatus of the present invention, the recording target content recorded on the recording medium is encrypted with a title key which is a title unit encryption key set corresponding to the recording target content The copyright information is set corresponding to the encrypted content encrypted with one title key, and is included in the copy control information of the content constituent unit included in the encrypted content. It contains the most severe copy control information and information regarding the change point of the copy control information.

  Furthermore, in one embodiment of the information recording apparatus of the present invention, the information relating to the change point is a packet identifier of a content configuration packet.

  Furthermore, in one embodiment of the information recording apparatus of the present invention, the information recording apparatus generates falsification check data corresponding to the copyright information and stores it on the recording medium together with the copyright information.

Furthermore, the second aspect of the present invention provides
An information playback apparatus that executes content playback processing from a recording medium,
A processing unit that reads copyright information corresponding to the reproduction target content from the recording medium and performs reproduction control corresponding to the copyright information of the reproduction target content;
The copyright information includes the strictest copy control information among the copy control information set for each structural unit of the reproduction target content, and information regarding the change point of the copy control information in the reproduction target content,
The processing unit is in an information reproducing apparatus that executes content reproduction processing according to the strictest copy control information and content selection output processing to which the change point is applied.

  Furthermore, in one embodiment of the information reproducing apparatus of the present invention, the reproduction target content recorded on the recording medium is encrypted with a title key which is a title unit encryption key set corresponding to the reproduction target content. The copyright information is set corresponding to the encrypted content encrypted with one title key, and is included in the copy control information of the content constituent unit included in the encrypted content. It contains the most severe copy control information and information regarding the change point of the copy control information.

  Furthermore, in one embodiment of the information reproducing apparatus of the present invention, the information regarding the change point is a packet identifier of a content configuration packet.

  Furthermore, in one embodiment of the information reproducing apparatus of the present invention, the information reproducing apparatus generates falsification check data corresponding to the copyright information based on the copyright information read from the recording medium, and the generation The content reproduction processing is executed on the condition that the verification of the copyright information is performed by collating the data with the tampering check value stored in the recording medium, and the result is obtained without tampering. To do.

Furthermore, the third aspect of the present invention provides
An information recording method for executing a content recording process on a recording medium in an information recording apparatus,
Copyright information generation processing for generating copyright information corresponding to the content to be recorded;
A copyright information storage process for storing the copyright information in a recording medium for storing the content to be recorded;
In the copyright information generation process, the strictest copy control information among the copy control information set for each constituent unit of the recording target content and information on the change point of the copy control information in the recording target content are included. There is an information recording method for executing a copyright information generation process.

Furthermore, the fourth aspect of the present invention provides
An information playback method for executing content playback processing from a recording medium in an information playback device,
A copyright information reading process for reading the copyright information corresponding to the content to be reproduced from the recording medium;
Executing reproduction control processing for performing reproduction control corresponding to copyright information of the content to be reproduced;
The copyright information includes the strictest copy control information among the copy control information set for each structural unit of the reproduction target content, and information regarding the change point of the copy control information in the reproduction target content,
In the generation control process, there is an information reproduction method for executing a content reproduction process in accordance with the strictest copy control information and a content selection output process to which the change point is applied.

Furthermore, the fifth aspect of the present invention provides
In an information recording device, a program for executing content recording processing on a recording medium,
Copyright information generation processing for generating copyright information corresponding to the content to be recorded;
A copyright information storage process for storing the copyright information in a recording medium for storing the content to be recorded;
In the copyright information generation process, the strictest copy control information among the copy control information set for each constituent unit of the recording target content and information on the change point of the copy control information in the recording target content are included. It is in a program that executes copyright information generation processing.

Furthermore, the sixth aspect of the present invention provides
A program for executing content reproduction processing from a recording medium in an information reproduction apparatus,
A copyright information reading process for reading the copyright information corresponding to the content to be reproduced from the recording medium;
Executing reproduction control processing for performing reproduction control corresponding to copyright information of the content to be reproduced;
The copyright information includes the strictest copy control information among the copy control information set for each structural unit of the reproduction target content, and information regarding the change point of the copy control information in the reproduction target content,
The generation control process is a program for executing a content reproduction process according to the strictest copy control information and a content selection output process to which the change point is applied.

  The computer program of the present invention is a recording medium provided in a computer-readable format for a computer system capable of executing various program codes, for example, a recording medium such as a CD, FD, or MO. A computer program that can be provided by a medium or a communication medium such as a network. By providing such a program in a computer-readable format, processing corresponding to the program is realized on the computer system.

  Other objects, features, and advantages of the present invention will become apparent from a more detailed description based on embodiments of the present invention described later and the accompanying drawings. In this specification, the system is a logical set configuration of a plurality of devices, and is not limited to one in which the devices of each configuration are in the same casing.

It is a block diagram which shows the structural example (the 1) of the recording / reproducing apparatus of this invention. It is a block diagram which shows the structural example (the 2) of the recording / reproducing apparatus of this invention. It is a figure which shows the data recording processing flow of the recording / reproducing apparatus of this invention. It is a figure which shows the data reproduction process flow of the recording / reproducing apparatus of this invention. It is a figure explaining the data format processed in the recording / reproducing apparatus of this invention. It is a block diagram which shows the structure of the transport stream (TS) process means in the recording / reproducing apparatus of this invention. It is a figure explaining the structure of the transport stream processed in the recording / reproducing apparatus of this invention. It is a block diagram which shows the structure of the transport stream (TS) process means in the recording / reproducing apparatus of this invention. It is a block diagram which shows the structure of the transport stream (TS) process means in the recording / reproducing apparatus of this invention. It is a figure which shows the structural example of the block data as additional information of the block data processed in the recording / reproducing apparatus of this invention. It is a figure which shows the example of a rule of the output restriction | limiting of an input source. It is a figure which shows the EMI storage position (5CDTCP standard) in the transmission 1394 packet processed in the recording / reproducing apparatus of this invention. It is a figure which shows the structural example of the copy control information change point information as data of the copyright information in the recording / reproducing apparatus of this invention. It is a tree block diagram explaining the encryption process of keys, such as a master key and a media key, with respect to the recording / reproducing apparatus of this invention. It is a figure which shows the example of the enabling key block (EKB) used for distribution of keys, such as a master key and a media key, with respect to the recording / reproducing apparatus of this invention. It is a figure which shows the example of distribution using the key block (EKB) of the master key in the recording / reproducing apparatus of this invention, and a decoding process example. It is a figure which shows the decoding processing flow using the validation key block (EKB) of the master key in the recording / reproducing apparatus of this invention. It is a figure which shows the generation comparison process flow of the master key in the content recording process in the recording / reproducing apparatus of this invention. FIG. 6 is a block diagram (part 1) for explaining an encryption process during a data recording process in the recording / reproducing apparatus of the present invention. FIG. 7 is a block diagram (part 2) for explaining an encryption process during a data recording process in the recording / reproducing apparatus of the present invention. It is a figure explaining the example of a production | generation of the disk specific key in the recording / reproducing apparatus of this invention. It is a flowchart explaining the process which determines whether the content recording in the recording / reproducing apparatus of this invention is performed by a data analysis recording system (Cognizant Mode) or a data non-analysis recording system (Non-Cognizant Mode). It is a figure which shows the example of a title specific key production | generation process at the time of data recording in the recording / reproducing apparatus of this invention. It is a figure explaining the production | generation method of the block key in the recording / reproducing apparatus of this invention. It is a flowchart which shows the copyright information storage processing example (Example 1) in the recording / reproducing apparatus of this invention. It is a flowchart which shows the copyright information storage processing example (example 2) in the recording / reproducing apparatus of this invention. It is a flowchart which shows the copyright information storage processing example (Example 3) in the recording / reproducing apparatus of this invention. It is a figure which shows the copyright information MAC calculation process example in the recording / reproducing apparatus of this invention. 5 is a flowchart for explaining data recording processing in the recording / reproducing apparatus of the present invention. It is a figure which shows the production | generation processing flow of the title specific key in the recording / reproducing apparatus of this invention. It is a block diagram explaining the content data decoding process at the time of a data reproduction process in the recording / reproducing apparatus of this invention. 6 is a flowchart for explaining data reproduction processing in the recording / reproducing apparatus of the present invention. 5 is a flowchart showing details of a reproducibility determination process in a data reproduction process in the recording / reproducing apparatus of the present invention. 5 is a flowchart showing a reproducibility determination process (Example 1) based on copyright information in a data replay process in the recording / reproduction apparatus of the present invention. 6 is a flowchart showing a reproducibility determination process (example 2) based on copyright information in a data replay process in the recording / reproduction apparatus of the present invention. 10 is a flowchart showing a reproducibility determination process (example 3) based on copyright information in a data reproduction process in the recording / reproducing apparatus of the present invention. It is a figure which shows the production | generation processing flow of the title specific key at the time of data reproduction in the recording / reproducing apparatus of this invention. 6 is a flowchart showing a reproduction process (Example 1) based on copyright information in a data reproduction process in the recording / reproducing apparatus of the present invention. 6 is a flowchart showing a reproduction process (example 2) based on copyright information in a data reproduction process in the recording / reproducing apparatus of the present invention. It is a figure which shows the example of distribution using the key block (EKB) of media key in the recording / reproducing apparatus of this invention, and a decoding process example. It is a figure which shows the decoding processing flow using the key block (EKB) of the media key in the recording / reproducing apparatus of this invention. It is a figure which shows the content recording processing flow using the media key in the recording / reproducing apparatus of this invention. FIG. 7 is a block diagram (part 1) for explaining an encryption process during a data recording process using a media key in the recording / reproducing apparatus of the present invention. FIG. 7 is a block diagram (part 2) for explaining an encryption process during a data recording process using a media key in the recording / reproducing apparatus of the present invention. 6 is a flowchart for explaining data recording processing using a media key in the recording / reproducing apparatus of the present invention. It is a block diagram explaining the encryption process at the time of the data reproduction process using a media key in the recording / reproducing apparatus of this invention. 6 is a flowchart for explaining data reproduction processing using a media key in the recording / reproducing apparatus of the present invention. 6 is a flowchart showing details of a reproducibility determination process in a data reproduction process using a media key in the recording / reproducing apparatus of the present invention. It is the block diagram which showed the processing means structure of the information recording / reproducing apparatus.

Hereinafter, the configuration of the present invention will be described in detail with reference to the drawings. The explanation procedure is performed according to the following items.
1. 1. Configuration of recording / reproducing apparatus 2. Recording and playback processing 3. Transport stream (TS) processing 4. Watermark (WM) processing Copyright information 6. Tree structure as key distribution configuration 7. Recording and playback of content by encryption processing using a master key 8. Recording and playback of content by encryption processing using a media key Recording / playback device hardware configuration

[1. Configuration of recording / reproducing apparatus]
FIG. 1 is a block diagram showing a configuration of an embodiment of a recording / reproducing apparatus 100 as an information processing apparatus of the present invention. For example, the recording / reproducing apparatus 100 is equipped with a RAM disk capable of recording / reproducing data, and a DVR system that reads / writes data from / to the RAM disk or a hard disk capable of recording / reproducing data, and reads / writes data from / to the hard disk. It is an HDR system that executes, and performs data recording and playback on media that can store digital data, such as optical disks such as DVD and CD, magneto-optical disks, magnetic disks such as HD, magnetic tapes, and semiconductor memories such as RAM. Device.

  The recording / reproducing apparatus 100 includes a USB compatible input / output I / F (Interface) 121, an IEEE 1394 compatible input / output I / F (Interface) 122, and an MPEG (Moving Picture Experts Group) codec as input / output I / F (Interface). 130, input / output I / F (Interface) 140 corresponding to analog data provided with A / D, D / A converter 141, encryption processing means 150, ROM (Read Only Memory) 160, CPU (Central Processing Unit) 170, memory 180, drive 190 of recording medium 195, transport stream processing means (TS processing means) 300, digital watermark (watermark (WM)) detection, embedding means 185, and terrestrial tuner for receiving terrestrial RF signals, Converter 501, satellite wave tuner for receiving satellite wave RF signal, converter 502, which are connected to bus 110 Therefore, they are connected to each other.

  The input / output I / Fs 121 and 122 receive digital signals constituting various contents such as images, sounds, and programs supplied from the outside via the USB and IEEE 1394 buses, and output them on the bus 110 and also on the bus 110. The digital signal is received and output to the outside. The MPEG codec 130 MPEG-decodes MPEG-encoded data supplied via the bus 110 and outputs the decoded data to the input / output I / F 140 and MPEG-encodes a digital signal supplied from the input / output I / F 140. Output on the bus 110. The input / output I / F 140 includes an A / D and D / A converter 141. The input / output I / F 140 receives an analog signal as content supplied from the outside and performs A / D (Analog Digital) conversion by the A / D and D / A converter 141, thereby converting the MPEG codec 130 as a digital signal. In addition, the digital signal from the MPEG codec 130 is D / A (Digital Analog) converted by the A / D and D / A converter 141 to be output to the outside as an analog signal.

  The encryption processing unit 150 is configured by, for example, a one-chip LSI (Large Scale Integrated Circuit), and encrypts or decrypts a digital signal as content supplied via the bus 110 and outputs the encrypted signal to the bus 110. have. The cryptographic processing means 150 is not limited to a one-chip LSI, and can be realized by a configuration combining various types of software or hardware. The configuration as the processing means by the software configuration will be described later.

  The ROM 160 includes, for example, a leaf key that is a device key unique to each recording / playback device or a group of a plurality of recording / playback devices, and a node key that is a device key shared by a plurality of recording / playback devices or a plurality of groups. Is remembered. Furthermore, digital watermark generation information of the recording / reproducing apparatus is stored. The digital watermark generation information will be described in detail later.

  The CPU 170 controls the MPEG codec 130, the encryption processing unit 150, and the like by executing a program stored in the memory 180. The CPU 170 executes copyright information generation processing, which will be described later, together with the cryptographic processing means 150 and the like. The memory 180 is, for example, a non-volatile memory, and stores a program executed by the CPU 170 and data necessary for the operation of the CPU 170. Further, the memory 180 stores output restriction rule data corresponding to an input source described later.

  The drive 190 drives a recording medium 195 capable of recording / reproducing digital data, thereby reading (reproducing) the digital data from the recording medium 195, outputting the data to the bus 110, and supplying the digital data via the bus 110. Data is supplied to the recording medium 195 and recorded. Further, the program may be stored in the ROM 160 and the device key may be stored in the memory 180.

  The recording medium 195 is a medium capable of storing digital data, such as an optical disk such as a DVD or CD, a magneto-optical disk, a magnetic disk such as an HD, a magnetic tape, or a semiconductor memory such as a RAM. Suppose that the drive 190 is detachable. However, the recording medium 195 may be built in the recording / reproducing apparatus 100.

  The transport stream processing means (TS processing means) 300 will be described in detail later with reference to the drawings. For example, a transport stream in which a plurality of TV programs (contents) are multiplexed into a specific program (contents). The corresponding transport packet is taken out, data processing for storing the appearance timing information of the extracted transport stream together with each packet in the recording medium 195, and appearance timing control processing at the time of reproduction processing from the recording medium 195 are performed.

  In the transport stream, ATS (Arrival Time Stamp) as the appearance timing information of each transport packet is set, and this timing is a virtual decoder defined by MPEG2 Systems T- It is determined at the time of encoding so that STD (Transport stream System Target Decoder) does not break down, and at the time of reproducing the transport stream, the appearance timing is controlled by the ATS added to each transport packet. The transport stream processing means (TS processing means) 300 executes these controls. For example, when a transport packet is recorded on a recording medium, it is recorded as a source packet with the interval between the packets being reduced. However, by storing the appearance timing of each transport packet together on the recording medium, Packet output timing can be controlled. The transport stream processing means (TS processing means) 300 adds and records an ATS (Arrival Time Stamp) indicating the input timing of each transport packet when recording data on a recording medium 195 such as a DVD. To do.

  The recording / reproducing apparatus 100 of the present invention executes encryption processing in the encryption processing unit 150 on the content configured by the above-described transport stream to which ATS is added, and stores the encrypted content on the recording medium 195. Processing to store is possible. Further, the encryption processing unit 150 executes a decryption process for the encrypted content stored in the recording medium 195. Details of these processes will be described later.

  The electronic watermark (watermark (WM)) detection and embedding unit 185 executes processing for embedding and embedding copy control information corresponding to content to be stored in the recording medium or content to be reproduced from the recording medium as an electronic watermark. The detected digital watermark is detected. A digital watermark embedding process is also executed as a copy control information rewriting process. Details of these processes will be described later.

  In the recording medium 195, for example, a stamper ID set for each stamper at the time of manufacture of the disc, a disc ID set differently for each disc, a content ID set differently for each content, or a key for encryption processing, etc. Various identification data and secret information such as cryptographic processing keys are stored.

  Various secret information stored in the recording medium 195 is decrypted by the encryption processing means 150 when they are encrypted information, and an encryption processing key applied at the time of recording and reproducing the content on the recording medium using the decrypted information. Is generated. The secret information is used only in content encryption key generation executed in the encryption processing means 150, and the secret information is prevented from leaking outside.

  The encryption processing means 150, TS processing means 300, digital watermark (WM) detection and embedding means 185 shown in FIG. 1 are shown as separate blocks for easy understanding. Alternatively, it may be configured as a plurality of LSIs, or any of the functions may be realized by a configuration combining software or hardware.

  As a configuration example of the recording / reproducing apparatus of the present invention, the configuration shown in FIG. 2 is possible in addition to the configuration shown in FIG. In the recording / reproducing apparatus 200 shown in FIG. 2, the recording medium 205 can be attached / detached from a recording medium interface (I / F) 210 as a drive apparatus, and even if this recording medium 205 is attached to another recording / reproducing apparatus, data Is configured to be capable of reading and writing.

[2. Recording and playback processing]
Next, a data recording process on the recording medium and a data reproducing process from the recording medium in the recording / reproducing apparatus of FIG. 1 or 2 will be described with reference to the flowcharts of FIGS. In the case of recording content of an external digital signal on the recording medium 195, recording processing according to the flowcharts of FIGS. 3A and 3B is performed. FIG. 3A shows a case where digital signal processing protected by copy control information (CCI) proposed by a 5C-DTCP (Digital Transmission Content Protection) system as a joint proposal of five companies is executed. FIG. 3B is a processing flow when executing digital signal processing that is not protected by copy control information (CCI) proposed in the 5C-DTCP system.

  The flow shown in FIG. 3A will be described. When digital signal content (digital content) is supplied to the input / output I / F 122 via, for example, an IEEE (Institute of Electrical and Electronics Engineers) 1394 serial bus, the input / output I / F 120 is The supplied digital content is received and output to the TS processing means 300 via the bus 110.

  In step S302, the TS processing unit 300 generates block data in which ATS (Arrival Time Stamp) is added to each transport packet constituting the transport stream, and performs encryption processing via the bus 110. Output to means 150.

  In step S <b> 303, the encryption processing unit 150 executes encryption processing for the received digital content, and outputs the resulting encrypted content to the drive 190 or the recording medium I / F 210 via the bus 110. The encrypted content is recorded on the recording medium 195 via the drive 190 or the recording medium I / F 210 (S304), and the recording process is terminated. The cryptographic processing in the cryptographic processing unit 150 will be described later.

  Note that 5CDTCP (Five Company Digital Transmission Content Protection) is defined as a standard for protecting digital contents when transmitting digital contents between devices connected via an IEEE 1394 serial bus. In DTCP, when digital content that is not copy-free is transmitted between devices, prior to data transmission, the transmission side and the reception side mutually authenticate whether or not copy control information (CCI) for controlling copying can be handled correctly. After that, the transmitting side encrypts and transmits the digital content, and the receiving side decrypts the encrypted digital content (encrypted content) and executes processing according to the copy control information (CCI). And update the copy control information (CCI) You have me.

  For copy control information (CCI) defined by DTCP, for example, 2-bit information is added to a transport packet, and the data to which the information is added is copy-free indicating that copying is permitted without limitation. Information such as “Free”, “1 Generation Copy Allowed” that permits copying of only one generation, and “Copy Prohibited” that prohibits copying. Specifically, in the case of the CGMS system, the meaning content of the 2-bit information is [00]... Copy free, [10].

  If the recording / playback apparatus is a DTCP compliant apparatus, it is determined whether content can be stored (copied) based on the CCI of the input information, and processing according to the determination is executed. For example, in the case of CCI: 11 (copy prohibited) set for the input content, the storage processing for the content recording medium is not executed. If the CCI set for the input content is 10 (one copy generation is possible), the CCI is rewritten when the content is stored, and the content storage process is executed with CCI: 11 (copy prohibited). It will be.

  In data transmission / reception based on the DTCP standard, the input / output I / F 122 on the data receiving side receives the encrypted content via the IEEE1394 serial bus in step S301, and the encrypted content conforms to the DTCP standard. Are decrypted and output to the encryption processing means 150 as plain text content.

  Encryption of digital content by DTCP is performed using a key that changes over time. The encrypted digital content including the key used for the encryption is transmitted on the IEEE1394 serial bus, and the reception side decrypts the encrypted digital content using the key included therein.

  According to DTCP, precisely, an initial value of a key and a flag indicating a change timing of a key used for encrypting digital content are included in the encrypted content. On the receiving side, the key used for encryption is generated by changing the initial value of the key included in the encrypted content at the timing of the flag included in the encrypted content. The encrypted content is decrypted. However, here, since it may be considered that the encrypted content includes a key for performing the decryption, it is assumed that it is equivalent in the following. Here, for DTCP, for example, outline information is disclosed in a Web page specified by a URL (Uniform Resource Locator) of https://www.dtcp.com.

  The flow shown in FIG. 3B will be described. The flow in FIG. 3B is a processing flow in the case of executing digital signal processing that is not protected by copy control information (CCI) proposed in the 5C-DTCP system, and the content of the digital signal (digital content) is For example, when supplied to the input / output I / F 121 via USB or the like, or supplied to the input / output I / F 122 via the IEEE 1394 bus, the supplied digital content is received in step S 311 and sent via the bus 110. , Output to the electronic watermark detection / embedding means 185.

  The digital watermark detection / embedding means 185 detects copy control information as a digital watermark embedded in the input content, and executes processing according to the copy control information. In the digital watermark (WM: Watermark), when content is first produced, a primary mark is embedded in the content as copy information of the original content. This is, for example, 2-bit information of 11 (copy prohibited), 10 (1 generation copy allowed), and 00 (copy free). When the recording apparatus makes a copy, a 1-bit value 1 called a copy mark is added to 10 primary marks, and a value of 101 is added to re-embed the digital watermark in the content. To indicate that the content is a copy. When the primary mark is 00 (copy free), it is not necessary to add a copy mark. When the primary mark is 11 (copy prohibited), copying is prohibited and the recording device does not make a copy. In this way, content is recorded in accordance with the copy control information embedded as a digital watermark.

However, there are devices that can process digital watermarks and devices that cannot. These are classified as follows, for example, as three-generation devices.
First generation: A device that does not detect and embed digital watermarks.
Second generation: Devices that can only be detected (primary mark detection is possible, copy mark addition processing is not possible).
Third generation: Devices that can be detected and embedded (primary mark and copy mark addition processing is possible).
In these devices, the processes to be executed are different. Specific modes of these processes will be described later.

  The description of the flow in FIG. When the digital watermark processing is executed in step S312, the digital watermark is output to the TS processing means 300 in step S313.

  The processing in the TS processing means 300 includes a copy control information (CCI) setting process for transport stream data stored in the recording medium. The input data in FIG. There is a possibility that the CCI added to the input data is a digital signal that has not been executed and cannot be trusted. In this case, a new CCI setting is executed for the transport stream data stored in the recording medium based on the copy control information based on the digital watermark detected in the digital watermark process in step S312 described above.

  That is, when CCI non-protected data is input, it is determined whether content can be stored (copied) based on the digital watermark of the input information, and processing according to the determination is executed. For example, if the digital watermark embedded in the input content is 11 (copy prohibited), the storage process for the content recording medium is not executed. Also, if the digital watermark set for the input content is 10 (one generation of copy is possible), the TS processing means 300 sets the CCI to 11 (copy prohibited) when storing the content and executes the content storage processing Will do.

  Thus, in the processing of CCI unprotected data, the CCI in the transport stream is set based on the digital watermark (WM).

  The processes in steps S314 and S315 below are the same as S303 and S304 in FIG. In a device that can embed a digital watermark, the content in which the updated copy control information is embedded as a digital watermark is stored in the recording medium.

  Next, processing when external analog signal content is recorded on the recording medium 195 will be described with reference to the flowchart of FIG. When the content of the analog signal (analog content) is supplied to the input / output I / F 140, the input / output I / F 140 receives the analog content in step S321, proceeds to step S322, and includes the built-in A / D, The digital signal content (digital content) is A / D converted by the D / A converter 141.

  This digital content is supplied to the MPEG codec 130, MPEG encoding, that is, encoding processing by MPEG compression is executed in step S 323, and supplied to the encryption processing means 150 via the bus 110.

  Thereafter, in steps SS324, S325, and S326, processing similar to the processing in steps S312, S313, and S314 in FIG. 3B is performed. That is, digital watermark detection, detection and update of digital watermark by the embedding unit 185, addition of ATS to the transport packet by the TS processing unit 300, addition of CCI (copy control information) based on the detected digital watermark, and encryption processing by the encryption processing unit 150 Is executed, the encrypted content obtained as a result is recorded on the recording medium 195, and the recording process is terminated.

  As described above, the content recording process in the recording / playback apparatus as the information processing apparatus of the present invention is executed by changing the input source of the content. A method for transmitting copy control information (CCI) of content, such as the case of content input from IEEE 1394 using 5CDTCP and satellite / terrestrial digital television broadcasting, is defined, and the information is protected. In this case, the CCI of the recorded content is determined based on the result. On the other hand, in IEEE 1394 input or analog input in which content and CCI are not protected by 5CDTCP, it is necessary to continuously detect the digital watermark of the input content during the recording process in order to determine the CCI of the content. is there. As a result, depending on the determined CCI, processing for stopping recording may be executed. That is, the content is not recorded when the copy control information acquired from the digital watermark detection information is copy prohibited.

  In the recording / reproducing apparatus of the present invention, copyright information (Copyright Information) is recorded on a recording medium in association with the stored content when recording the content. Copyright information to be stored is acquired from, for example, input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), each recording mode information described later, and content. The strictest strictest copy control information selected from CCI as copy control information (copy control information by title), and the corresponding packet number as information indicating the change point of copy control information in the recorded content and copy control at the change point One or more pieces of information are set as copyright information and stored in the recording medium. Details of these pieces of information and a storage processing example will be described later.

  The title-specific copy control information will be described. In general, various contents are mixed in the content, and there are a copy-prohibited part, a copy-free part, and a part set to allow one generation of copying. The strictest copy control information selected as the most restrictive from these detected various copy control information is set as the title-specific copy control information and stored in the recording medium in association with the content. In the recording / reproducing apparatus of the present invention, the content stored in the recording medium has a title key as an encryption processing key generated for each title set corresponding to the content associated with the content on the recording medium. Stored and encryption processing using the title key is executed. These processes will be described later.

  The severely restricted copy control information is, for example, in the order of copy prohibition, one generation copy permitted, and copy free. When the content to be recorded stored in the recording medium in association with one title key includes, for example, two pieces of copy control information that can be copied for one generation and copy free, the copy control information for each title is [1 generation. [Copyable] is set. When copy prohibition is included, [copy prohibit] is set. Only in the case of only copy free, “copy free” is set as the title-specific copy control information.

  Next, a process of playing back content recorded on the recording medium 195 and outputting it as digital content or analog content will be described with reference to the flow of FIG. Processing at the time of reproduction depends on input source information that is information in copyright information (Copyright Information) stored in a recording medium in association with the reproduction target content, that is, information on which input source is the content. Also, it is changed depending on whether title-specific copy control information is recorded.

  First, when title-specific copy control information is recorded, a processing mode as a content copy control mode is determined based on the information, and it is determined whether or not the content can be reproduced. When title-specific copy control information is not recorded, reproduction processing is performed while detecting a digital watermark, and whether or not reproduction is allowed is determined according to the result. If playback is possible, output is performed in a form according to the rules determined by each input source depending on the input source. Generally, when content is not copy-free, it is necessary to protect the content at the time of output. In the case of digital output, for example, the CCI is set for the transport stream in accordance with 5CDTDP, and in the case of analog output, for example, a macrovision signal is output while being added to the content. In the case of a video signal, for example, additional information of the CGMS system (hereinafter referred to as CGMS information) and an AGC pulse signal for disabling normal use of the copied video signal by using the difference of the AGC system. (Macrovision method duplication prevention pseudo-synchronization signal) is added and output.

  The processing flow in FIG. 4A shows a processing procedure for reproducing and outputting the recording data from the recording medium when the data input from the CCI protection input source is stored in the recording medium.

  First, in step S401, the encrypted content recorded on the recording medium 195 and the copyright information corresponding to the encrypted content are read by the drive 190 or the recording medium I / F 210. Among the copyright information, as described above, the most severe selected from the input source information, the digital watermark generation information of the recording device, each information of the recording mode to be described later, and the CCI as copy control information acquired from the content The title-specific copy control information as the strictest copy control information, the corresponding packet number as information indicating the change point of the copy control information in the recorded content, and at least one information of the copy control information at the change point are stored. Whether or not the content can be reproduced and output is determined based on the information. These processes will be described later. If playback output is possible, the encrypted content is output to the encryption processing means 150 via the bus 110.

  In the encryption processing unit 150, decryption processing of the encrypted content supplied from the drive 190 or the recording medium I / F 210 is executed in step S 402, and decrypted data is output to the TS processing unit 300 via the bus 110.

  In step S403, the TS processing unit 300 determines the output timing from the ATS of each transport packet constituting the transport stream, executes control according to the ATS, and performs the input / output I / F 120 via the bus 110. To supply. Further, copy control information (CCI) in the transport stream is detected, and control based on CCI is performed.

  In step S404, it is determined whether the output form is analog or digital. If digital output, the digital content from the TS processing means 300 is output to the outside via the digital input / output I / F 121, 122. Then, the reproduction process ends. The processing of the TS processing unit 300 and the digital content decryption processing in the encryption processing unit 150 will be described later.

  When the digital content is output via the IEEE1394 serial bus in step S405, the input / output I / F 120 performs authentication with the counterpart device in accordance with the DTCP standard as described above. After each other, the digital content is encrypted and transmitted.

  When outputting as analog content, the decrypted digital content obtained by the encryption processing means 150 is supplied to the MPEG codec 130 via the bus 110.

  In step S 406, the digital content is MPEG-decoded, that is, decompressed by the MPEG codec 130 and supplied to the input / output I / F 140. In step S407, the input / output I / F 140 performs D / A conversion (S425) on the digital content MPEG-decoded by the MPEG codec 130 in the built-in A / D and D / A converter 141 to obtain analog content. In step S408, the input / output I / F 140 outputs the analog content to the outside, and ends the reproduction process.

  On the other hand, the processing flow of FIG. 4B shows a processing procedure for reproducing and outputting the recording data from the recording medium when the data input from the CCI non-protected input source is stored in the recording medium. In this case, reproduction control based on copy control information acquired by detecting the digital watermark of the content is executed instead of the CCI added to the block data in the transport stream.

  The processing flow in FIG. 4B is different from the processing shown in FIG. 4A in that there is a digital watermark (WM) processing in step S414 as a step after the TS processing (S413). This digital watermark (WM) process is a process of detecting a digital watermark in the data of the reproduction content, reading copy control information from the digital watermark, and performing reproduction control based on the read digital watermark. For example, when an electronic watermark indicating copy prohibition is detected, control is performed such that reproduction with external output is not executed.

  In the recording / reproducing apparatus of the present invention, as described above, copyright information (Copyright Information) is stored in the recording medium when recording the content on the recording medium, and at the time of reproduction, the copyright information (Copyright Information) corresponding to the content to be reproduced is stored. ) Is acquired and control is performed according to various information in the copyright information. These processes will be described later.

[3. Transport stream (TS) processing]
Next, the data format on the recording medium in the present invention will be described with reference to FIG. The data format described here is, for example, a data format stored in media in a DVR system. Hereinafter, the minimum unit for reading and writing data on the recording medium is called a block. One block has a size of 192 * X (X) bytes (for example, X = 32).

  In the present invention, an ATS is added to an MPEG2 TS (transport stream) packet (188 bytes) to form 192 bytes, and X is collected to form one block of data. ATS is data indicating the arrival time of 24 to 32 bits, and is an abbreviation for Arrival Time Stamp as described above. The ATS is configured as random data according to the arrival time of each packet. In one block (sector) of the recording medium, X TS (transport stream) packets to which ATS is added are recorded. In the configuration of the present invention, a block key for encrypting data of a block (sector) is generated using the ATS added to the first TS packet of each block constituting the transport stream.

  By generating a block key for encryption using a random ATS, a unique key different for each block is generated. An encryption process for each block is executed using the generated block unique key. Further, by adopting a configuration in which the block key is generated using ATS, an area on the recording medium for storing the encryption key for each block becomes unnecessary, and the main data area can be used effectively. Furthermore, it is not necessary to access data other than the main data portion during data recording and reproduction, and the processing becomes efficient.

  Note that the block seed shown in FIG. 5 is additional information including ATS. The block seed is added with not only ATS but also copy control information (CCI). In this case, the block key can be generated using ATS and CCI.

  Here, copy restriction information (CCI: Copy Control Information) included in the block seed is copy control information (CCI: Copy Control Information) proposed in the 5C DTCP (Digital Transmission Content Protection) system described above, Copy control embedded in content applied in a format in which two types of information according to the capabilities of the device, that is, EMI (Encryption Mode Indicator), or a place where the copy control information is sent in advance are secured. Any information of embedded CCI (Embedded CCI) which is information (CCI) is reflected.

  In the configuration of the present invention, when data is stored on a recording medium such as a DVD, most of the data of the content is encrypted. However, as shown in the bottom of FIG. Bytes (for example, m = 8 or 16) are recorded without being encrypted as plain text (Unencrypted data), and the remaining data (m + 1 bytes and after) are encrypted. This is because the encryption process is a process in units of 8 bytes, and the encryption data length (Encrypted data) is restricted. If the encryption process can be performed in units of 1 byte instead of in units of 8 bytes, all parts other than the block seed may be encrypted with m = 4.

  Here, the function of the ATS will be described in detail. The ATS is an arrival time stamp added to store the appearance timing of each transport packet in the input transport stream as described above.

  That is, for example, when one or several TV programs (contents) are extracted from a transport stream in which a plurality of TV programs (contents) are multiplexed, transport packets constituting the extracted transport stream are: Appear at irregular intervals (see FIG. 7A). The transport stream has an important meaning in the appearance timing of each transport packet, and this timing is a T-STD (Transport stream System) which is a virtual decoder defined in MPEG2 Systems (ISO / IEC 13818-1). It is determined at the time of encoding so as not to break down Target Decoder).

  When the transport stream is reproduced, the appearance timing is controlled by the ATS added to each transport packet. Therefore, when recording a transport packet on a recording medium, it is necessary to store the input timing of the transport packet. When recording a transport packet on a recording medium such as a DVD, the input timing of each transport packet is set. ATS is added and recorded.

  FIG. 6 is a block diagram illustrating processing executed in the TS processing unit 300 when a transport stream input via a digital interface is recorded on a storage medium such as a DVD. From the terminal 600, a transport stream is input as digital data such as digital broadcasting. In FIG. 1 or FIG. 2, the transport stream is input from the terminal 600 via the input / output I / F 120 or the input / output I / F 140 and the MPEG codec 130.

  The transport stream is input to a bitstream parser 602. The bit stream parser 602 detects a PCR (Program Clock Reference) packet from the input transport stream. Here, the PCR packet is a packet in which PCR defined by MPEG2 Systems is encoded. PCR packets are encoded at time intervals within 100 msec. PCR represents the time at which a transport packet arrives at the receiving side with an accuracy of 27 MHz.

  Then, in the 27 MHz PLL 603, the 27 MHz clock of the recording / reproducing device is locked to the PCR of the transport stream. The time stamp generation circuit 604 generates a time stamp based on the count value of the 27 MHz clock. Then, the block seed addition circuit 605 adds the time stamp when the first byte of the transport packet is input to the smoothing buffer 606 as an ATS and adds it to the transport packet.

  The transport packet to which the ATS is added passes through the smoothing buffer 606 and is output from the terminal 607 to the encryption processing means 150. After the encryption processing described later is executed, the drive 190 (FIG. 1), the recording medium The data is recorded on a recording medium 195 that is a storage medium via the I / F 210 (FIG. 2).

  FIG. 7 shows an example of processing when an input transport stream is recorded on a recording medium. FIG. 7A shows the input of transport packets constituting a specific program (content). Here, the horizontal axis is a time axis indicating the time on the stream. In this example, the input of the transport packet appears at irregular timing as shown in FIG.

  FIG. 7B shows the output of the block seed addition circuit 605. A block seed addition circuit 605 adds a block seed including an ATS indicating the time on the stream of each packet to the transport packet, and outputs a source packet. FIG. 7C shows a source packet recorded on the recording medium. As shown in FIG. 7C, the source packets are recorded on the recording medium with a small interval. In this way, the recording area of the recording medium can be effectively used by recording with a small interval.

  FIG. 8 is a block diagram showing the processing configuration of the TS processing means 300 when the transport stream recorded on the recording medium 195 is reproduced. From terminal 800, the transport packet with ATS decrypted by the encryption processing means described later is input to block seed separating circuit 801, and the ATS and transport packet are separated. The timing generation circuit 804 calculates a time based on the clock counter value of the 27 MHz clock 805 that the regenerator has.

  At the start of reproduction, the first ATS is set in the timing generation circuit 804 as an initial value. The comparator 803 compares the ATS and the current time input from the timing generation circuit 804. When the time generated by the timing generation circuit 804 is equal to the ATS, the output control circuit 802 outputs the transport packet to the MPEG codec 130 or the digital input / output I / F 120.

  FIG. 9 shows a configuration in which the input AV signal is MPEG-encoded by the MPEG codec 130 of the recording / reproducing device 100 and the transport stream is encoded by the TS processing unit 300. Therefore, FIG. 9 is a block diagram showing both processing configurations of the MPEG codec 130 and the TS processing means 300 in FIG. 1 or FIG. A video signal is input from the terminal 901 and input to the MPEG video encoder 902.

  The MPEG video encoder 902 encodes the input video signal into an MPEG video stream and outputs it to the buffer video stream buffer 903. In addition, the MPEG video encoder 902 outputs access unit information regarding the MPEG video stream to the multiplexing scheduler 908. The access unit of the video stream is a picture, and the access unit information is the picture type, the encoded bit amount, and the decoding time stamp of each picture. Here, the picture type is I / P / B picture information. The decode time stamp is information defined by MPEG2 Systems.

  An audio signal is input from the terminal 904 and input to the MPEG audio encoder 905. The MPEG audio encoder 905 encodes the input audio signal into an MPEG audio stream and outputs it to the buffer 906. Also, the MPEG audio encoder 905 outputs access unit information about the MPEG audio stream to the multiplexing scheduler 908. The access unit of the audio stream is an audio frame, and the access unit information is an encoded bit amount and a decoding time stamp of each audio frame.

  The multiplexing scheduler 908 receives video and audio access unit information. The multiplexing scheduler 908 controls a method for encoding the video stream and the audio stream into transport packets based on the access unit information. The multiplexing scheduler 908 internally has a clock for generating a reference time of 27 MHz accuracy, and satisfies the T-STD, which is a virtual decoder model defined by MPEG2, so as to satisfy the packet code of the transport packet. Control information is determined. The packet encoding control information is the type of stream to be packetized and the length of the stream.

  When the packet encoding control information is a video packet, the switch 976 is on the a side, and the video data of the payload data length indicated by the packet encoding control information is read from the video stream buffer 903, and the transport packet encoder 909 is input.

  When the packet encoding control information is an audio packet, the switch 976 is on the b side, and the audio data having the payload data length indicated by the audio stream buffer 906 is read out and input to the transport packet encoder 909.

  When the packet encoding control information is a PCR packet, the transport packet encoder 909 takes in the PCR input from the multiplexing scheduler 908 and outputs the PCR packet. When the packet encoding control information indicates that the packet is not encoded, nothing is input to the transport packet encoder 909.

  The transport packet encoder 909 does not output a transport packet when the packet encoding control information indicates that the packet is not encoded. In other cases, a transport packet is generated and output based on the packet coding control information. Therefore, the transport packet encoder 909 intermittently outputs transport packets. Arrival time stamp calculation means 910 calculates ATS indicating the time at which the first byte of the transport packet arrives at the receiving side, based on the PCR input from multiplexing scheduler 908.

  Since the PCR input from the multiplexing scheduler 908 indicates the arrival time of the transport packet defined by MPEG2 at the 10th byte reception side, the ATS value is 10 bytes before the PCR time arrives. It becomes time to do.

  A block seed addition circuit 911 adds ATS to the transport packet output from the transport packet encoder 909. The transport packet with ATS output from the block seed addition circuit 911 is input to the encryption processing means 150 through the smoothing buffer 912, and after the encryption processing described later is executed, the storage packet is stored. It is stored in a recording medium 195 that is a medium.

  The transport packet with ATS stored in the recording medium 195 is input in a state of being narrowed as shown in FIG. 7C before being encrypted by the encryption processing means 150, and then stored in the recording medium 195. Stored. Even when transport packets are recorded at intervals, by referring to the ATS, the input time of the transport packet to the receiving side can be controlled.

  By the way, the size of the ATS is not limited to 32 bits, but may be 24 bits to 31 bits. The longer the ATS bit length, the longer the period for which the ATS time counter goes around. For example, when the ATS is a 27-MHz precision binary counter, the time required for the 24-bit ATS to make a round is about 0.6 seconds. This time interval is sufficiently large for a general transport stream. This is because the packet interval of the transport stream is determined to be a maximum of 0.1 seconds according to the MPEG2 standard. However, the ATS may be set to 24 bits or more with a sufficient margin.

  As described above, when the bit length of the ATS is various, several configurations are possible as the configuration of the block seed that is the additional data of the block data. A configuration example of the block seed is shown in FIG. Example 1 in FIG. 10 is an example using 32 bits of ATS. Example 2 in FIG. 10 is an example in which ATS is 30 bits and copy control information (CCI) is used for 2 bits. The copy control information is information representing the copy control status of the data to which the copy control information is added, and is famous for SCMS: Serial Copy Management System and CGMS: Copy Generation Management System. In these copy control information, the data with the added information is copy-free, which indicates that copying is permitted without restriction, and one-generation copy permission (One Generation Copy Allowed) that allows copying of only one generation. ), And information such as “Copy Prohibited” that does not allow copying.

  Example 3 shown in FIG. 10 is an example in which ATS is 24 bits, CCI is 2 bits, and other information is 6 bits. As other information, for example, when this data is output in analog, various information such as information indicating on / off of Macrovision, which is a copy control mechanism of analog video data, is used. Is possible.

[4. Digital watermark (WM) processing]
Next, copy control processing using digital watermark will be described. A digital watermark (WM: Watermark) embeds a digital watermark pattern in content, detects the presence or absence of a digital watermark based on, for example, a correlation value with the same digital watermark pattern, and acquires bit information in response to the detection. . In accordance with the detected bit information, control information such as copy free, copy 1 generation permitted, copy prohibited, etc. is indicated. The copy control information based on the digital watermark can leave the copy information even in the analog area, and the copy control information can be transmitted even if D / A or A / D conversion is performed.

  A process for setting copy control information using a digital watermark will be described. First, when content is produced, a primary mark is embedded in the content as copy control information of the original content. This is 2-bit information, for example, 11 (copy prohibited), 10 (1 generation copy allowed), 00 (copy free). When the recording apparatus makes a copy, when recording content to which a primary mark of 10 (1 generation copy is possible) is recorded, it is referred to as a copy mark for 10. A 1-bit value of 1 is added to a value of 101, and the digital watermark is re-embedded and recorded on the recording medium. This process indicates that the content stored in the recording medium is a copy. When the primary mark is 00, there is no need to add a copy mark (Copy Mark). When the primary mark is 11, copying is prohibited and the recording device does not make a copy.

  Further, the digital watermark (WM) can be used not only for copy restriction as described above but also for reproduction restriction. That is, it is possible to execute control such that if there is a content in which information of 11 indicating copy prohibition is originally embedded as a digital watermark on a user writable disc, the content is not reproduced. In addition, when content having copy information of 10 indicating that 1st generation copying is possible is recorded on a user writable disc, the copy mark (Copy Mark) is used as described above. ) Is added, and the digital watermark with the copy information of 101 is normally embedded. Therefore, when the content having the copy information of 10 indicating the 1st generation copy is on a user writable disc It is also possible to adopt a configuration in which it is restricted so as not to reproduce it.

  However, various methods for handling copy control information using digital watermarks have been proposed depending on the content mode, and there are many methods even for moving image content. At present, nothing has been widely standardized or de facto standardized. Considering the current industry trend, it is considered that only the primary mark (Primary Mark) is initially standardized or de facto standardized, and then a copy mark (Copy Mark) is also included. That is, from the present time to the future, it is predicted that products corresponding to the digital watermark (Watermak) method will appear on the market as the method is determined.

That is, the recording / reproducing apparatus is divided into the following three generations as described above with respect to the correspondence of the digital watermark (WM: Watermark).
First generation: Digital watermark (WM) is not supported. (Neither detection nor addition)

Second generation: Only the primary mark is supported. (Although it can be detected but not added) Specific control at the time of data recording in the second generation device is as follows.
When recording: The digital watermark of the recorded content is detected.
11 (copy prohibited) content: not recorded 10 (copy 1 generation allowed) content: recorded The digital watermark is not updated.
00 (copy free) content: Recorded. The digital watermark is not updated.

Specific control at the time of data reproduction in the second generation device is as follows.
During playback: A digital watermark of content to be played back that is recorded on a user writable disc is detected.
11 (copy prohibited) content: not reproduced.
Content of 10 (one generation of copy is possible): Reproduce.
00 (copy-free) content: Played.

Third generation: Corresponds including the copy mark. Specific control at the time of data recording in the third generation device (both detection and addition can be performed) is as follows.
When recording: The digital watermark of the recorded content is detected.
11 (copy prohibited) content: not recorded 10 (copy 1 generation allowed) content: recorded Update the digital watermark to 101 (more copy prohibited) (rewrite digital watermark).
00 (copy free) content: Recorded. The digital watermark remains as it is.
101 (more copy prohibited) content: not recorded.

Specific control at the time of data reproduction in the third generation device is as follows.
During playback: An electronic watermark of content to be played back that is recorded on a user writable disc is detected.
11 (copy prohibited) content: not reproduced.
Content of 10 (one generation of copy is possible): not reproduced.
00 (copy-free) content: Played.
101 (more copy prohibited) content: Play.

  The basic recording / reproducing rules of each generation of recording / reproducing apparatuses are as described above. However, when such processing is performed, when content recorded on one generation device is played back on another generation device, accurate processing according to the copy control information recorded as a digital watermark is performed. There are cases where it is not. For example, if a second-generation device tries to play back a medium on which content having a primary mark of 10 (1 generation of copying is possible) is played on a third-generation device, the playback rules of the third-generation device Based on this, the content cannot be reproduced.

[5. Copyright information]
The present invention prevents erroneous processing in the copy control processing such as the above problem, and copyright information (Copyright Information) is recorded on the recording medium at the time of content storage processing on the recording medium, and copyrighted at the time of reproduction. The copyright information is referred to, and control is performed based on various types of information stored in the copyright information. Copyright information includes content input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), recording mode information, and copy control acquired from the content. Copy control information by title as the strictest strictest copy control information selected from information CCI, and corresponding packet number as information indicating a change point of copy control information in the recorded content and copy control information at the change point, etc. Among these pieces of information, one or more pieces of information are set as copyright information and stored in a recording medium. Copyright information (Copyright Information) is stored in a recording medium with a MAC (Message Authentication Code) added as a validity check code so as not to be easily tampered with. In the recording / reproducing apparatus as the information processing apparatus of the present invention, when recording the content, the copyright information associated with the content is generated and stored in the recording medium, and when reproducing the content, the copyright information stored corresponding to the content is stored. After the MAC verification, reproduction and output control are performed in accordance with the copyright information that has been confirmed not to be falsified.

(1) Digital watermark generation information Each information that can be included in copyright information will be described. The generation information of the digital watermark is the above-described first generation, second generation, and third generation information, and the digital watermark generation information is stored in the ROM in the recording device that records the content. Digital watermark generation information is acquired from ROM and stored in copyright information.

  By acquiring the digital watermark generation information in the copyright information when reproducing the content and confirming the generation of the recording device, it is possible to prevent erroneous copy control at the time of data output. Specifically, for example, when a second generation device tries to play back a medium on which content having a primary mark (Primary Mark) of 10 (one generation of copy is possible) is played back on the third generation device, the third generation The device reads the copyright information corresponding to the reproduction content, and confirms that the content is the content recorded in the second generation device based on the digital watermark generation information stored in the copyright information. In the second generation device, since the writing of the digital watermark is not executed, it is confirmed that the primary mark (10) remains as the digital watermark as it is. Therefore, in the reproduction process in the third generation device, the digital watermark control information (10) stored in the content is determined to be a code corresponding to 101 as the control code in the third generation, and can be reproduced. . As described above, by storing the digital watermark generation information of the content recording device as copyright information at the time of recording the content, it is possible to perform a correct process according to the generation of the recording device in the reproduction process.

(2) Input source information Next, input source information stored as copyright information will be described. The input source information indicates the input source of the content to be recorded. For example, it is content from an input source compliant with 5CDTCP described above, satellite distribution content such as BS and CS, or terrestrial digital content. Or input source information such as terrestrial analog content.

  The input source information includes information indicating whether or not the content input has copy control information via the IEEE 1394 interface, and includes information indicating whether the input is digital data input or analog data input. . These can be identified by the input interface through which data is input. Further, whether the input content has copy control information compliant with 5CDTCP, specifically, has copy control information added to a TS packet as digital data, or has copy control information added as a digital watermark It is preferable to include information that can discriminate the mode of copy control information set in the content, such as information indicating. A configuration in which the copy control information mode is distributed as additional information to the content has been realized or studied for digital data input conforming to 5CDTCP or distributed content such as BS and CS. Detailed information of copy control information can be acquired from the information.

  The reason for storing the input source information as copyright information will be described. This is because the handling rules of the content may differ depending on the input source, and what source is input from is acquired at the time of the reproduction process, and is used as an output form determination and reproduction restriction information in the reproduction process. For example, in a content protection scheme such as 5CDTCP, the output mode of the stored content is defined for a device that has received content protected by that scheme.

  FIG. 11 shows an output restriction example corresponding to the input source. For example, when the input source is a data input from a source conforming to 5CDTCP, the reproduction output of the recorded data is an analog output. (MacroVision) signal is added to allow output. In the case of digital output, output is permitted only when the content is protected by the content protection method approved by 5C. In addition, the modes of analog output and digital output are regulated in accordance with data recording input data from BS and CS, terrestrial data, and data from various other input sources, respectively. Note that the example shown in FIG. 11 is shown as one example of regulation, and does not necessarily match the actual regulation content.

  The output restriction regulations differ depending on the protection method, so if you want to handle them in a unified way, you must match the one with the strongest restrictions. However, since we want to provide users with better image quality and sound quality, if the playback side knows the source of each content recorded on the disc and refers to the output regulations to be followed based on it, it will An arbitrary method can be selected. By including the source information in the copyright information stored in the recording medium corresponding to the content, it is possible to perform reproduction output in accordance with the regulations at the time of reproduction processing. The reproduction output process will be described later.

(3) Title-specific copy control information Next, title-specific copy control information will be described. Consider copying content stored on a recording medium from one device to another at high speed. The content is recorded in an encrypted state. Since decryption and re-encryption require processing, we would like to perform high-speed copying while still being encrypted. However, when the content has control information of “copy prohibited”, copying cannot be performed, and only “copy free” content (or part) can be processed. Copy control information (CCI) is written for each block, which is a unit of content recording, but this is protected by a mechanism that, if tampered, the content cannot be correctly decrypted.

  However, when copying is performed without decrypting the content, there is a risk that correct copy control based on the copy control information will not be executed. That is, for content that contains a block with copy control information of “copy prohibited”, an unauthorized user 1) rewrites the CCI of that block to “copy free”, 2) performs high-speed copying, and 3) By following the procedure of rewriting the copy control information of both the copy source block and the copy destination block to “copy prohibited”, there is a possibility that illegal copy processing of making a copy of “copy prohibited” content may be performed. .

  For this reason, in order to enable effective copy control even for a copy without decryption processing, the title-specific copy control information is linked to the content and recorded. As will be described later, in the recording / reproducing apparatus of the present invention, one storage processing content for a recording medium is associated with a title key as an encryption processing key. The title-specific copy control information is the most restrictive strictest copy control information selected from the CCI of the block included in one storage processing content for the recording medium. For example, when copy free and 1st generation copy permission are detected as copy control information for stored content, “more copy prohibited” (after copying 1st generation copy permitted) is recorded as copy control information by title Is done. In this way, at least the content whose final copy control information is copy-free can be found to be copy-free for any copy control information contained in it, so it can be sent for high-speed copying without decryption It is possible to reduce the processing.

  Next, the recording mode included in the copyright information will be described. The recording mode is data that distinguishes whether the content recording is performed in a data analysis recording method (Cognizant Mode) or a data non-analysis recording method (Non-Cognizant Mode).

  Each content is specified in advance by the content provider under what conditions it can be copied. Therefore, it is necessary to correctly communicate the specified conditions to the other device in the network connection. In the 5C DTCP (Digital Transmission Content Protection) system as a joint proposal of five companies, copy control information (CCI: Copy Control Information) ). As for copy control information (CCI), two types of transmission methods are defined according to the capability of the device.

  The encryption mode indicator (EMI) is a mechanism for sending copy control information (CCI) using the upper 2 bits of the Sy bit in the packet header, and at the same time the receiving device can easily access it. Since this value acts on the key for encrypting the content, it can be sent safely.

  The encryption mode of the packet is indicated by EMI, and the content encryption / decryption key generation mode is designated. By placing EMI in the IEEE1394 packet header, the receiving device can easily select the content in any mode without taking out embedded copy control information (Embedded CCI) (described later) embedded in, for example, an MPEG transport stream. Can know if is encrypted.

  FIG. 12 shows the IEEE 1394 packet format. Various contents such as music data and image data are stored in the data field, and an encryption mode indicator (EMI) as copy control information (CCI) is in the packet header. Set to upper 2 bits of Sy bit.

  The EMI 2-bit information defines different handling of content depending on the set value. Specifically, the value 00 indicates that neither authentication nor encryption is required, the content can be freely copied (Copy Free), and the value 01 can be used to create a one-generation copy. One Generation), a value of 10 indicates No More Copies where re-copying is prohibited after the aforementioned Copy One Generation is recorded once, and a value of 11 indicates a never-copying content from the time of release. Represents a copy (Never Copy).

  Update embedded CCI (Embedded CCI) at the time of recording (ex. Copy One Generation to No More so that a bitstream recorder that does not recognize the format of recorded data such as D-VHS or hard disk can correctly handle the copyrighted work. The non-cognizant recording method is a recording method that does not require (to Copies) and only needs to update the EMI.

  On the other hand, in a format (for example, DV format: DV format) in which a place for sending copy control information is secured in advance, the CCI can be transmitted as a part of the content. In this way, copy control information (CCI) embedded in content as part of the content is referred to as embedded CCI (Embedded CCI). Normally, when content is encrypted and transferred, embedded CCI (Embedded CCI) is also encrypted and transferred in the same manner as the content, and it is difficult to intentionally change the embedded CCI (Embedded CCI).

  Here, in the case of content having both the above-described EMI 2-bit copy control information and embedded CCI (Embedded CCI), a recording device that performs content recording has both EMI and embedded CCI (Embedded CCI). Update the copy control information. However, in the case of a recording device having no embedded CCI (Embedded CCI) analysis capability, the EMI is updated, but the embedded CCI (Embedded CCI) is not updated.

  A recording method in which a recording device updates embedded CCI (Embedded CCI) transmitted as a part of content and records the content together with the content at the time of content recording is called a data analysis (Cognizant) recording method. In the data analysis (Cognizant) and non-cognizant recording methods, the data non-analysis (Non-Cognizant) recording method does not require updating embedded CCI (Embedded CCI). Although it is light and easy to implement, the 5C DTCP rule is that the device must be in data analysis recording mode (Cognizant Mode) in order for the device to MPEG decode the content and display the video signal from the analog terminal Therefore, a device having a decoding / display function is required to have a function of executing a data analysis recording method (Cognizant Mode).

  However, in order to execute the data analysis recording method (Cognizant Mode), it is necessary to know the position and meaning of embedded CCI (Embedded CCI) embedded as a part of the content. For new or updated data formats that have been enacted after being released, it may be very difficult for older devices to perform data analysis and recording (Cognizant Mode) on the new data format. .

  Therefore, when a certain device that records content performs a specific data format or implements a specific function, a data analysis recording method (Cognizant Mode) is executed, and when content of a different data format is recorded, data non-recording is performed. It is conceivable to execute both recording methods, such as executing an analysis recording method (Non-Cognizant Mode).

  In addition, there are devices that only record data in a non-cognizant mode for all content. On the other hand, there may be a device that executes only content processing having a format that can understand embedded CCI, that is, a device that executes only the data analysis and recording method (Cognizant Mode).

  In this way, there are two copy control information, that is, EMI and embedded CCI (Embedded CCI), and a device that executes content recording and a device that executes a data analysis recording method (Cognizant Mode) and data non-analysis In a situation where devices that perform recording in the recording method (Non-Cognizant Mode) coexist, content recorded in the data analysis recording method (Cognizant Mode) and content recorded in the data non-analysis recording method (Non-Cognizant Mode) Are preferably clearly distinguished.

  That is, when content is recorded by the data analysis recording method (Cognizant Mode), both copy control information of the embedded CCI (Embedded CCI) is updated, but the data non-analysis recording method (Non-Cognizant Mode) is used. When content recording is executed, only EMI is updated, and embedded CCI (Embedded CCI) is not updated. As a result, there is a mismatch between EMI and embedded CCI (Embedded CCI) on the recording medium, and confusion occurs when both are mixed. Therefore, in order not to cause inconsistency between the two copy control information, the content recorded in the data analysis recording method (Cognizant Mode) is subjected to recording / playback processing in the data analysis recording method (Cognizant Mode), The content recorded in the data non-analysis recording mode (Non-Cognizant Mode) needs to be configured to execute a recording / reproduction process in the data non-analysis recording mode (Non-Cognizant Mode).

  For this purpose, it is also one idea to make this data analysis recording method (Cognizant Mode) and data non-analysis recording method (Non-Cognizant Mode) completely different, but in this case, one device In order to allow both modes to be selectively executed, it is necessary to equip one device with an execution processing configuration for both modes, which causes a problem of increasing the cost of the device.

  In the recording / reproducing apparatus of the present invention, content encryption is performed depending on which of these two recording methods, that is, the data analysis recording method (Cognizant Mode) or the data non-analysis recording method (Non-Cognizant Mode) is applied. By creating and using processing keys as different keys, the two recording methods are clearly distinguished according to the device and recording method, eliminating the situation where both methods are executed in a random manner. In addition, a content processing configuration based on any one unified recording method corresponding to the device and the recording method is realized without increasing the equipment and processing load of the device.

  Specifically, the encryption and decryption processing key generation key (Cognizant Key) is used as the secret information for data analysis recording (Cognizant Mode) recording (required for playback). Provided only to devices that have the function of recording or playback in the analysis recording method (Cognizant Mode) and stored in the device, while the non-cognizant mode recording secret information (reproduction) Encryption / decryption processing key generation key (Non-Cognizant Key) can be recorded or played back by Non-Cognizant Mode (Non-Cognizant Mode). It was configured to provide only to devices with functions and store them in the devices.

  By storing the recording mode in the copyright information, for example, data recorded in the data analysis and recording method (Cognizant Mode) can be used for data caused by bugs, or by falsification of data or illegal modification of recording / playback programs. In a device having only a non-analytic recording method (Non-Cognizant Mode) recording / reproducing function, it is possible to prevent erroneous or unauthorized recording / reproducing.

(4) Copy Control Information Change Point Next, the corresponding packet number as information indicating the change point of the copy control information in the recorded content stored in the copyright information and the copy control information at the change point will be described. In general, various contents are mixed in the content, and there are a copy-prohibited part, a copy-free part, and a part set to allow one generation of copying. The detected change points of the various copy control information are recorded in the copyright information together with the changed copy control information.

  Specifically, the packet No as the identifier of the TS packet constituting the transport stream can be used as the change point. FIG. 13 shows an example of copy control information change point data stored in the copyright information. In the example shown in FIG. 13, the TS packet number [00] is copy-free (00), and then the TS packet number [30000] is extracted as a change point. At this change point, the copy 1 generation is possible (10). Furthermore, the change point: the content is changed to copy-free (00) in the TS packet [100000], and further changed to the copy 1 generation possible (10) in the change point: TS packet [1234567]. Yes.

  By storing such a change point of the copy control information in the copyright information, for example, it is possible to efficiently execute a process of extracting and copying (stored in a recording medium) only a copy-free part, particularly a high-speed copy. Effective in processing.

  As described above, the copyright information (Copyright Information) is acquired from the content input source information, the digital watermark generation information of the recording device (the first, second, and third generations described above), the recording mode information, and the content. Copy control information by title as the strictest strictest copy control information selected from the CCI that is the copy control information to be performed, and the corresponding packet number and change point as information indicating the change point of the copy control information in the recorded content There is copy control information. One or more pieces of information are set as copyright information, and a MAC (Message Authentication Code) is generated, added, and stored in a recording medium. These copyright information storage processing and usage processing will be described in detail again in the description of the content recording / playback processing in the subsequent stage.

[6. About tree structure as key distribution configuration]
The recording / reproducing apparatus according to the present invention has a configuration capable of performing content encryption processing and storing the content in a recording medium, and receives a valid license for a key applied directly or indirectly to content encryption processing. A tree structure as a key distribution configuration is used for safe distribution only to the recording / reproducing apparatus. The key distribution configuration will be described below.

  A configuration in which the recording / reproducing apparatus shown in FIG. 1 or 2 distributes a master key necessary for recording data on a recording medium or reproducing data from the recording medium to each device will be described. FIG. 14 is a diagram showing a key distribution configuration of a recording / reproducing apparatus in a recording system using this method. Numbers 0 to 15 shown at the bottom of FIG. 14 are individual recording / reproducing apparatuses. That is, each leaf of the tree structure shown in FIG. 14 corresponds to each recording / reproducing apparatus.

  Each device 0 to 15 itself has a key (node key) assigned to a node from its leaf to the root and a leaf key of each leaf in its initial tree at the time of manufacture (shipment). Store. K0000 to K1111 shown at the bottom of FIG. 14 are leaf keys assigned to the devices 0 to 15, respectively. Keys written in the second clause (node) from the top KR to KR to K111 Is a node key.

  In the tree configuration shown in FIG. 14, for example, the device 0 has a leaf key K0000 and node keys: K000, K00, K0, and KR. The device 5 owns K0101, K010, K01, K0, and KR. The device 15 owns K1111, K111, K11, K1, and KR. Note that only 16 devices 0 to 15 are shown in the tree of FIG. 14 and the tree structure is shown as a balanced configuration with a four-stage configuration, but more devices are configured in the tree. In addition, it is possible to have a different number of stages in each part of the tree.

  Further, each recording / reproducing device included in the tree structure of FIG. 14 includes various types of recording / reproducing devices using various recording media such as DVD, CD, MD, HD, Memory Stick (trademark) and the like. ing. Furthermore, it is assumed that various application services coexist. The key distribution configuration shown in FIG. 14 is applied on such a coexistence configuration of different devices and different applications.

  In a system in which these various devices and applications coexist, for example, the portions surrounded by dotted lines in FIG. 14, that is, devices 0, 1, 2, and 3 are set as one group using the same recording medium. For example, for devices included in the group surrounded by the dotted line, the common content is encrypted and sent from the provider, the master key used in common is sent, or the provider is sent from each device. Alternatively, a process for encrypting and outputting content fee payment data to a settlement organization or the like is executed. An institution that performs data transmission / reception with each device, such as a content provider or a payment processing institution, sends data collectively as a group of the parts surrounded by the dotted lines in FIG. 14, that is, devices 0, 1, 2, and 3. Execute the process. There are a plurality of such groups in the tree of FIG.

  Note that the node key and leaf key may be managed by a single key management center, or may be managed for each group by a provider, a settlement institution, or the like that performs various data transmission / reception with respect to each group. These node keys and leaf keys are updated when, for example, a key is leaked, and this updating process is executed by a key management center, a provider, a settlement organization, or the like.

  In this tree structure, as is apparent from FIG. 14, the three devices 0, 1, 2, 3 included in one group have common keys K00, K0, KR as node keys. By using this node key sharing configuration, for example, a common master key can be provided only to devices 0, 1, 2, and 3. For example, if the common node key K00 itself is set as the master key, only the devices 0, 1, 2, and 3 can set the common master key without executing new key transmission. Further, if the value Enc (K00, Kmaster) obtained by encrypting the new master key Kmaster with the node key K00 is stored in the recording medium via the network or distributed to the devices 0, 1, 2, 3, the device 0, Only 1, 2 and 3 can use the shared node key K00 possessed by each device to break the encryption Enc (K00, Kmaster) to obtain the master key: Kmaster. Enc (Ka, Kb) indicates data obtained by encrypting Kb with Ka.

  Further, at a certain time t, when it is discovered that the keys possessed by the device 3: K0011, K001, K00, K0, KR are analyzed and exposed by an attacker (hacker), the system (devices 0, 1) , 2 and 3), the device 3 needs to be disconnected from the system. For this purpose, the node keys: K001, K00, K0, KR are updated to new keys K (t) 001, K (t) 00, K (t) 0, K (t) R, respectively, and devices 0, 1, 2 must be notified of the update key. Here, K (t) aaa indicates that the key is a renewal key of Generation: t.

  The update key distribution process will be described. The key update is performed, for example, by storing a table constituted by block data called an enabling key block (EKB) shown in FIG. 2 is executed.

  The enabling key block (EKB) shown in FIG. 15A is configured as block data having a data configuration that can be updated only by a device that requires updating of the node key. The example of FIG. 15 is block data formed for the purpose of distributing generation t update node keys in the devices 0, 1, and 2 in the tree structure shown in FIG. As is apparent from FIG. 14, device 0 and device 1 require K (t) 00, K (t) 0, and K (t) R as update node keys, and device 2 uses K (t) as an update node key. ) 001, K (t) 00, K (t) 0, K (t) R are required.

  As shown in the EKB of FIG. 15A, the EKB includes a plurality of encryption keys. The lowest encryption key is Enc (K0010, K (t) 001). This is an update node key K (t) 001 encrypted with the leaf key K0010 of the device 2, and the device 2 can decrypt this encryption key with the leaf key of itself and obtain K (t) 001. . Also, using K (t) 001 obtained by decryption, the second-stage encryption key Enc (K (t) 001, K (t) 00) from the bottom of FIG. 15A can be decrypted and updated. The node key K (t) 00 can be obtained. Subsequently, the encryption key Enc (K (t) 00, K (t) 0) in the second stage from the top in FIG. 15A is decrypted in order, and the update node key K (t) 0, as shown in FIG. The first-stage encryption key Enc (K (t) 0, K (t) R) is decrypted to obtain K (t) R. On the other hand, for the devices 0 and 1, the node key K000 is not included in the update target, and K (t) 00, K (t) 0, and K (t) R are required as the update node keys. The devices 0 and 1 decrypt the encryption key Enc (K000, K (t) 00) in the third row from the top of FIG. 15A to obtain K (t) 00. ) Is decrypted from the second encryption key Enc (K (t) 00, K (t) 0) from the top, and the update node key K (t) 0 is the first encryption from the top in FIG. The decryption key Enc (K (t) 0, K (t) R) is decrypted to obtain K (t) R. In this way, the devices 0, 1, and 2 can obtain the updated key K (t) R. Note that the index in FIG. 15A indicates the absolute addresses of node keys and leaf keys used as decryption keys.

  When it is not necessary to update the node keys: K0 and KR in the upper level of the tree structure shown in FIG. 14 and only the node key K00 needs to be updated, the enabling key block (EKB: Enabling) of FIG. By using (Key Block), the updated node key K (t) 00 can be distributed to the devices 0, 1, and 2.

  The EKB shown in FIG. 15B can be used, for example, when distributing a new master key shared in a specific group. As a specific example, it is assumed that a recording medium having devices 0, 1, 2, and 3 in a group indicated by a dotted line in FIG. 14 is used and a new common master key K (t) master is required. At this time, the data Enc (K (t (K)) is obtained by encrypting a new common update master key: K (t) master using K (t) 00 obtained by updating the common node key K00 of the devices 0, 1, 2, and 3. ), K (t) master) is distributed together with the EKB shown in FIG. This distribution enables distribution as data that is not decrypted in other groups of devices such as the device 4.

  That is, the devices 0, 1, and 2 can obtain the master key K (t) master at time point t by decrypting the ciphertext using K (t) 00 obtained by processing the EKB. .

(Distribution of master key using EKB)
In FIG. 16, as an example of processing for obtaining a master key K (t) master at time t, data Enc (K (t (K)) is obtained by encrypting a new common master key K (t) master using K (t) 00. ) 00, K (t) master) and the EKB shown in FIG. 15B via the recording medium.

  As shown in FIG. 16, the device 0 uses the EKB at the time of generation: t stored in the recording medium and the node key K000 stored in advance by the EKB process similar to the above to perform the node key K (t ) 00 is generated. Further, the update master key K (t) master is decrypted by using the decrypted update node key K (t) 00, and is encrypted and stored with the leaf key K0000 that only oneself has in order to use it later. If the device 0 can safely store the updated master key K (t) master in itself, it is not necessary to encrypt it with the leaf key K0000.

  The update master key acquisition process will be described with reference to the flowchart of FIG. The recording / reproducing apparatus is given the latest master key: K (c) master at the time of shipment, and is securely stored in its own memory (specifically, for example, encrypted with its own leaf key). Shall.

  When the recording medium storing the updated master key K (n) master and EKB is set in the recording / reproducing apparatus, first, in step S1401, the recording / reproducing apparatus stores the recording medium from the recording medium into the recording medium. The current master key K (n) master (generation) number: n (this will be referred to as pre-recording recording generation information (Generation # n)) is read out. The recording medium stores in advance the time (generation) number: n of the master key K (n) master. Further, the encrypted master key C held by itself is read, and in step S1402, the generation of the encrypted master key: c is compared with the generation: n represented by the pre-record generation information Generation # n. Determine before and after generations.

  If it is determined in step S1402 that the generation: n represented by the pre-record generation information Generation # n is not later (not new) than the generation: c of the encrypted master key C stored in its own memory, That is, if the generation: c of the encrypted master key C stored in the memory is the same as or later than the generation: n represented by the pre-record generation information Generation # n, the steps S1403 to S1408 are skipped and the master key is skipped. The update process ends. That is, in this case, there is no need to update the master key K (c) master (encrypted master key C) stored in its own memory, so that the update is not performed.

  On the other hand, if it is determined in step S1402 that the generation: n represented by the pre-record generation information Generation # n is later (newer) than the generation: c of the encrypted master key C stored in the memory, That is, if the generation of the encrypted master key C stored in the memory is a generation before the generation n represented by the pre-recording generation information Generation # n, the process proceeds to step S1403, and the recording / reproducing apparatus Read the enabling key block (EKB).

  In step S1404, the recording / reproducing apparatus reads the EKB read in step S1403, the leaf key (K0000 in device 0 in FIG. 14) and the node key (K000, K00 in device 0 in FIG. 14) stored in the memory itself. ) Is used to calculate the key K (t) 00 of the node 00 at the time of pre-record generation information Generation # n (t in FIG. 16).

  In step S1405, it is checked whether K (t) 00 is obtained in step S1404. If not obtained, it indicates that the recording / reproducing apparatus is revoked (excluded) from the group of the tree structure at that time, so that steps S1406 to S1408 are skipped and the master key update process is terminated.

  If K (t) 00 is obtained, the process advances to step S1406 to use Enc (K (t) 00, K (t) master) from the recording medium, that is, the master key at time t using K (t) 00. Read the encrypted value. In step S1407, the ciphertext is decrypted using K (t) 00 to calculate K (t) master.

  In step S1408, K (t) master is encrypted and stored in the memory using the leaf key possessed only by itself (K0000 in device 0 in FIG. 14). This completes the master key update process.

  By the way, although the master key is used in ascending order from the time point (generation) 0, it is desirable that each device in the system is obtained by calculating the old generation master key from the new generation master key. That is, the recording / reproducing apparatus holds a unidirectional function f, and in the unidirectional function f, the master key of the recording / playback apparatus is set to the difference between the generation of the master key and the generation of the necessary master key. Create a master key for the examined generation by applying the corresponding number of times.

  Specifically, for example, the generation of the master key MK stored in the recording / reproducing apparatus is the generation i + 1, and the generation of the master key MK necessary for reproducing certain data (used during recording) is the generation i-1. In this case, the master key K (i−1) master is generated by calculating f (f (K (i + 1) master)) by using the one-way function f twice in the recording / reproducing apparatus. .

  When the master key generation stored in the recording / reproducing apparatus is generation i + 1 and the required master key generation is generation i-2, the master key K (i-2) master is a one-way function. It is generated by calculating f (f (f (K (i + 1) master))) using f three times.

  Here, as the one-way function, for example, a hash function can be used. Specifically, for example, MD5 (Message Digest 5), SHA-1 (Secure Hash Algorithm-1), or the like can be employed. A key issuing organization that issues a key can use these one-way functions to generate a generation prior to its own generation of master keys K (0) master, K (1) master, K (2) master,.・ K (N) master is obtained in advance. That is, first, by setting an Nth generation master key K (N) master and applying a one-way function to the master key K (N) master once, Generation master keys K (N-1) master, K (N-2) master,..., K (1) master, K (0) master are sequentially generated. Then, the master key K (0) master with the smallest generation is used in order. It is assumed that the one-way function used to generate the master key of the generation before the own generation is set in all the recording / reproducing apparatuses.

  As the one-way function, for example, public key cryptography can be adopted. In this case, the key issuing organization owns a secret key of the public key cryptosystem, and gives the public key corresponding to the secret key to all the playback devices. Then, the key issuing organization sets the 0th generation master key K (0) master and uses it from the master key K (0) master. In other words, the key issuing organization generates a master key K (i) master of the first generation or later by converting the master key K (i-1) master of the previous generation with a secret key. To use. In this case, the key issuing organization does not need to generate N generation master keys in advance using a one-way function. Also, according to this method, theoretically, an unlimited generation of master keys can be generated. If the recording / reproducing apparatus has a master key of a certain generation, the master key of the generation before that generation can be obtained by converting the master key with the public key.

[7. Recording and playback of content by encryption using a master key]
Next, content recording / playback processing by encryption processing using a master key will be described. First, a master key determination process executed when the recording / playback apparatus records content on its own recording medium will be described with reference to the flowchart of FIG. The content data is encrypted with a generation master key and distributed from the content provider to each recording / reproducing device via a network or a recording medium.

  First, in step S1501, the recording / reproducing apparatus reads pre-recording generation information Generation #n from the recording medium. Also, the generation c of the encrypted master key C stored in its own memory is acquired, and in step S1502, the generation c of the encrypted master key is compared with the generation n represented by the pre-recorded generation information Generation # n. Then, determine before and after the generation.

  If it is determined in step S1502 that the generation c of the encrypted master key C stored in the memory is not after the generation n represented by the pre-record generation information Generation # n, that is, the encrypted master key C stored in the memory. If the generation c is a generation older than the generation n indicated by the pre-recording generation information Generation # n, step S1503 is skipped, that is, the processing is terminated without performing the content data recording process.

  On the other hand, if it is determined in step S1502 that the generation of the encrypted master key C stored in the memory in its own recording / reproducing apparatus is after generation n represented by the pre-recording generation information Generation # n, that is, the memory If the generation of the encrypted master key C stored in is equal to or newer than the generation n indicated by the pre-recording generation information Generation # n, the process advances to step S1503 to perform content data recording processing.

  In the content data recording process, as described above, a digital watermark detection process and an embedding process according to the corresponding digital watermark processing mode of the recording apparatus itself are executed. According to the first generation, second generation, and third generation described above, if the first generation, digital watermark detection, non-embedding processing is not executed, if the second generation, only detection, If there are three generations, detection and embedding are executed. Further, the digital watermark generation information of the recording device is stored in the copyright information generated corresponding to the content.

  In parallel with the processing for these digital watermarks, encryption processing for content storage is executed. Details of the content encryption process using the master key will be described below. The master key is a generation-managed key as described above. Here, a description will be given of a process of generating a block key using a generation-managed master key for the data constituted by the transport stream described above, encrypting the content data with the block key, and storing the data in a recording medium. .

  This will be described with reference to the block diagrams of FIGS. FIGS. 19 and 20 are diagrams showing each data and process in a block form in order to explain the process in the encryption processing unit 150. Here, an optical disk is taken as an example of the recording medium. In this embodiment, in order to prevent bit-by-bit copying of data on the recording medium, a disk ID (Disc ID) as identification information unique to the recording medium is made to act on a key for encrypting the data. .

  The recording / reproducing apparatus 1600 has a master key 1601, a data analysis recording method key (Cognizant Key) 1631 or a data non-analysis recording method key (non-non-analysis recording method) stored in its own memory 180 (see FIGS. 1 and 2). Read out a non-cognizant key 1632.

  The master key 1601 is a secret key stored in the memory of the recording / reproducing apparatus in accordance with the flow of FIG. 17 described above. Generation management is performed as described above, and a generation number is associated with each. This master key is a key common to a plurality of recording / reproducing apparatuses, for example, a key common to devices belonging to the group of dotted lines shown in FIG. The device ID is an identifier of the recording / reproducing apparatus 1600, and is an identifier such as a manufacturing number stored in the recording / reproducing apparatus in advance. This device ID may be disclosed. A data analysis / recording system key (Cognizant Key) 1631 and a data non-analysis / recording system key (Non-Cognizant Key) 1632 are keys corresponding to each recording mode, and are common to a plurality of recording / reproducing apparatuses. . These are stored in advance in the memory of the recording / reproducing apparatus 1600.

  The recording / reproducing apparatus 1600 checks whether or not a disc ID (Disc ID) 1603 as identification information is already recorded on a recording medium 1620 that is an optical disc, for example. If recorded, the disk ID (Disc ID) 1603 is read (corresponding to FIG. 19), and if not recorded, the disk ID is randomly determined by the encryption processing means 150 or by a predetermined method such as random number generation. (Disc ID) 1701 is generated and recorded on the disc (corresponding to FIG. 20). Since there is only one disc ID 1603 for the disc, it can be stored in the lead-in area or the like.

  Next, the recording / reproducing apparatus 1600 uses a master key, a stamper ID 1680 recorded as secret information that can be read from the disc only by a special reading method, and a disc ID 1603 to use a disc unique key (Disc Unique key). Key) is generated 1602.

  A specific method for generating a disk unique key (Disc Unique Key) using a master key, a stamper ID 1680 as secret information, and a disk ID 1603 will be described with reference to FIG. As shown in FIG. 21, the method of Example 1 using a result obtained by inputting a master key, a stamper ID, and a disc ID into a hash function using a block cipher function. Or, data generated by bit concatenation of a master key, a stamper ID (Stamper ID), and a disc ID (Disc ID) is input to the hash function SHA-1 defined in FIPS 180-1, and its 160 bits The method of Example 2 in which only the necessary data length is used as the disk unique key (Disc Unique Key) can be applied.

  As described above, the stamper ID 1680 is advanced secret information recorded in advance on the disc, and the disc unique key (Disc Unique) using the read and read stamper ID (Stamper ID). Calculation processing such as generation of (Key) is executed inside the cryptographic processing means so as to keep secret. That is, the secret information read from the disk is securely protected in the cryptographic processing means.

  As described above, in the configuration of the present invention, only a legitimate device is used for content encryption processing under secure protection in an encryption processing unit that executes generation of a highly protected encryption key, for example, mounted in an LSI. The key generation process is executed, and illegal content reproduction processing can be effectively prevented.

  Next, the recording / reproducing apparatus 1600 randomly generates a title key (Title Key) 1604, which is a unique key for each recorded content, in the encryption processing unit 150 (see FIGS. 1 and 2) or generates a predetermined random number, for example. The data is generated 1604 by the above method and recorded on the disk 1620.

  The recording / reproducing apparatus 1600 further acquires the generation number of the master key to be used, that is, the generation number of the master key stored therein [generation number at recording (Generation # n)] 1650 and stores it in the recording medium 1620. Stored as a generation number 1651 at the time of recording.

  On the disc, there is a data management file in which information about what data constitutes what title is stored. In this file, a title key 1605, a recording mode flag 1635, a generation number of a master key [generation number at recording ( Generation # n)] 1651 can be stored.

  Note that a pre-recording generation number is stored in the recording medium 1620 in advance, and the content is encrypted and stored using a master key of the same generation as the pre-generation number or newer than the pre-generation number. Only the reproduction is possible. This configuration will be described later in the column of reproduction processing.

  Next, a disc unique key (Disc Unique Key) and title key (Title Key), a data analysis recording method key (Cognizant Key), or a disc unique key (Disc Unique Key) and title key (Title Key), and data A title unique key (Title Unique Key) is generated from any combination of the non-analysis recording method key (Non-Cognizant Key).

  In other words, when the recording mode is the data analysis recording method (Cognizant Mode), the title unique from the disc unique key (Disc Unique Key), the title key (Title Key), and the data analysis recording method key (Cognizant Key) When a key (Title Unique Key) is generated and the recording mode is a non-cognizant recording method (Non-Cognizant Mode), a disc unique key (Disc Unique Key), a title key (Title Key), and data non-analysis A title unique key is generated from the recording method key (Non-Cognizant Key).

  As described above, the encryption / decryption key generation key for data analysis / recording method (Cognizant Mode) recording (the key for data analysis / recording method (Cognizant Key) is the data analysis / recording method (Cognizant Mode) ) Only has equipment that has the function of recording or playing back, while the non-cognizant mode (encryption / decryption key generation key for data non-cognizant mode recording) The recording key (Non-Cognizant Key) is only available on devices that have the function of recording or playing data in the non-cognizant mode (Non-Cognizant Mode). The content recording is executed by selecting only one of the modes, that is, using the data analysis recording method key (Cognizant Key) or the data non-analysis recording method key ( Only one of the non-cognizant keys is used.

  However, in a device that stores both keys and can execute the recording method in both modes, a process for determining which mode is to be executed is required. FIG. 22 shows the process for determining the mode determination process, that is, the process for determining whether the content recording is executed by the data analysis recording method (Cognizant Mode) or the data non-analysis recording method (Non-Cognizant Mode). I will explain.

  Basically, it is desirable to perform content recording by a data analysis recording method (Cognizant Mode) as much as possible. This is because, as described above, inconsistency between EMI and embedded CCI (Embedded CCI) does not occur. However, as mentioned above, there is a possibility of data analysis error due to the appearance of a new data format, etc. In such a case, the recording process in the non-cognizant mode is executed. To do.

  Each step of FIG. 22 will be described. In step S5001, the recording apparatus determines whether the data format can be analyzed. As described above, the embedded CCI (Embedded CCI) is embedded in the content, and if the data format cannot be analyzed, the embedded CCI (Embedded CCI) cannot be read. In this case, a recording process in a data non-analysis recording method (Non-Cognizant Mode) is executed.

  If the data format can be analyzed, the process advances to step S5002, and the recording apparatus determines whether data (content) decoding processing, embedded CCI (Embedded CCI) reading, and updating processing are possible. Content and embedded CCI (Embedded CCI) are normally encoded (encoded), and decoding (decoding) is required to read embedded CCI (Embedded CCI). For example, in the case of multi-channel simultaneous recording or the like, if the device is not capable of decoding processing because the decoding circuit is used elsewhere, the embedded CCI (Embedded CCI) cannot be read, so the data non-analytic recording method ( Execute recording processing in Non-Cognizant Mode).

  If it is determined in step S5002 that the data (content) decoding process, the embedded CCI (Embedded CCI) reading, and the updating process are possible, in step S5003, during the user input to the recording apparatus, in the data non-analysis mode. It is determined whether or not there is a recording process execution designation input. This process is a step that is executed only in a device that allows mode selection by the user's specification, and is not executed in a normal device, that is, a device that does not allow mode specification by the user. When a recording process is designated in the data non-analysis recording method (Non-Cognizant Mode) by user input, a recording process in the data non-analysis recording method (Non-Cognizant Mode) is executed.

  Next, in step S5004, it is determined whether or not the content packet (ex. Received data) is designated to execute a recording process in the data non-analysis mode. If the execution specification of the recording process in the data non-analysis mode is included in the data, the recording process in the data non-analysis recording method (Non-Cognizant Mode) is executed. If there is no designation, recording processing in the data analysis recording method (Cognizant Mode) is executed.

  In a device that can selectively execute both recording processing in the data analysis recording method (Cognizant Mode) and recording processing in the data non-analysis recording method (Non-Cognizant Mode), the above-described mode determination process processing It is determined in which mode recording is to be executed. However, as can be understood from the processing flow of FIG. 21, when recording in the data analysis recording method (Cognizant Mode) is possible, processing in the data analysis recording method (Cognizant Mode) is basically executed. It will be.

  As described above, when the recording mode is the data analysis recording method (Cognizant Mode), the title is determined from the disc unique key (Disc Unique Key) and title key (Title Key), and the data analysis recording method key (Cognizant Key). When a unique key (Title Unique Key) is generated and the recording mode is set to non-cognizant recording mode (Non-Cognizant Mode), the disc unique key (Disc Unique Key), title key (Title Key), and data non-analysis A title unique key is generated from the recording method key (Non-Cognizant Key).

  A specific method for generating a title unique key is shown in FIG. As shown in FIG. 23, a hash function using a block cipher function includes a title key (Title Key), a disc unique key (Disc Unique Key), and a data analysis recording method key (Cognizant Key) (data analysis recording method (Cognizant In the case of Mode), or the method of Example 1 using the result obtained by inputting the data non-analysis recording method key (Non-Cognizant Key) (in the case of data non-analysis recording method (Non-Cognizant Mode)) Or the hash function SHA-1 defined in FIPS 180-1 with a master key, a disc ID (Disc ID), and a data analysis recording method key (Cognizant Key) (in the case of a data analysis recording method (Cognizant Mode)) ) Or data non-analysis recording method key (Non-Cognizant Key) (in case of data non-analysis recording method (Non-Cognizant Mode)) The main data length only can be applied the method of Example 2 to be used as the title unique key (Title Unique Key).

  In the above description, a disc unique key is generated from a master key, a stamper ID and a disc ID, and a title key and data are generated. Title unique key is generated from analysis key (Cognizant Key) or data non-analysis key (Non-Cognizant Key). Disc unique key (Disc Unique Key) From the master key, disc ID, title key, data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key) A title unique key (Title Unique Key) may be generated directly, and without using a title key (Title Key), a master key (Master Key), a disc ID (Disc ID), Data analysis recording keys (indicates cognizant Key Canada) or data nonparsed title unique key from a recording system (Non-Cognizant Key) (Title Unique Key) may generate considerable key.

  For example, when one of the transmission formats defined in the 5CDTCP is used, data may be transmitted in MPEG2 TS packets. For example, when a set top box (STB) that has received a satellite broadcast transmits this broadcast to a recorder using 5CDTCP, the STB transmits an MPEG2 TS packet transmitted on the satellite broadcast channel on the IEEE 1394. Transmission is desirable because there is no need for data conversion.

  The recording / reproducing apparatus 1600 receives the content data to be recorded in the form of this TS packet, and the above-described TS processing means 300 adds ATS which is time information when each TS packet is received. As described above, the block seed added to the block data may be composed of a combination of ATS, copy control information, and other information.

  A block data of one block is formed by arranging X (for example, X = 32) TS packets to which ATS is added (see the upper diagram of FIG. 5), and as shown in the lower part of FIGS. The first to fourth bytes of the block data input as data are separated (selector 1608) and output as a block seed including 32-bit ATS (Block Seed) and the title unique key (Title Unique) generated previously. From the key, a block key (Block Key) that is a key for encrypting the data of the block is generated 1607.

  An example of a method for generating a block key is shown in FIG. FIG. 24 shows two examples in which a 64-bit block key (Block Key) is generated from a 32-bit block seed (Block Seed) and a 64-bit title unique key (Title Unique Key). Yes.

  In Example 1 shown in the upper part, a cryptographic function having a key length of 64 bits and an input / output of 64 bits is used. The title unique key (Title Unique Key) is used as the key for this cryptographic function, and the result of encryption by inputting the concatenation of the block seed (Block Seed) and 32-bit constant (constant) is used as the block key (Block Key). Yes.

  Example 2 is an example using the hash function SHA-1 of FIPS 180-1. A value obtained by concatenating a title unique key (Title Unique Key) and a block seed (Block Seed) is input to SHA-1, and the 160-bit output is reduced to 64 bits, for example, using only the lower 64 bits. Is a block key.

  In the above description, an example of generating a disc unique key, a title unique key, and a block key has been described. For example, a disc unique key and a title are generated. Master key, stamper ID, disc ID, title key, and block seed (Block) without generating unique key (Title Unique Key) Seed) and data analysis recording method key (Cognizant Key) (in case of Cognizant Mode) or data non-analysis recording method key (in case of non-cognizant mode) It may be used to generate a block key.

  When the block key is generated, the block data is encrypted using the generated block key. As shown in the lower part of FIG. 19 and FIG. 20, the first 1 to m bytes (for example, m = 8) of the block data including the block seed (Block Seed) are separated (selector 1608) and are not to be encrypted. Encrypt 1609 from the (m + 1) th byte to the final data. The m bytes that are not encrypted include the first to fourth bytes as a block seed. The block data after the (m + 1) th byte separated by the selector 1608 is encrypted 1609 according to an encryption algorithm set in advance in the encryption processing means 150. As an encryption algorithm, for example, DES (Data Encryption Standard) defined by FIPS 46-2 can be used.

  Further, as described above, the block seed can include copy restriction information (CCI: Copy Control Information), and when the recording process in the data analysis recording method (Cognizant Mode) is executed, Copy control information corresponding to embedded CCI (Embedded CCI), which is copy control information (CCI) embedded in the content data, is recorded, and recording processing is performed in a non-cognizant data recording method (Non-Cognizant Mode) In this case, copy control information reflecting EMI (Encyrption Mode Indicator) on the packet header described in FIG. 20 is recorded.

  That is, in the case of information recording processing by the data analysis recording method (Cognizant Mode), recording in which a block seed including copy control information based on the embedded copy control information (CCI) in the data part is added to block data composed of one or more packets In the case of information recording processing by executing data generation processing and non-cognizant data (Non-Cognizant Mode), it includes copy control information based on an encryption mode indicator (EMI) as copy control information included in the packet A recording information generation process is executed in which a block seed is added to block data composed of one or more packets.

  Here, when the block length (input / output data size) of the encryption algorithm to be used is 8 bytes as in DES, X is set to, for example, 32, and m is set to a multiple of 8, for example, so that the (m + 1) th byte without a fraction. The entire subsequent block data can be encrypted.

  That is, when the number of TS packets stored in one block is X, the input / output data size of the encryption algorithm is L bytes, and n is an arbitrary natural number, X, X, so that 192 * X = m + n * L holds. By determining m and L, fraction processing becomes unnecessary.

  The encrypted block data after the (m + 1) th byte are combined by the selector 1610 together with the 1st to m-th byte data not subjected to encryption processing, and stored in the recording medium 1620 as the encrypted content 1612.

  Furthermore, in the recording / reproducing apparatus of the present invention, copyright information (Copyright Information) corresponding to the content related to the recording process is generated, and further, a MAC (Message Authentication Code) as a tamper check value is generated 1651, The copyright information & MAC 1652 is recorded on the disk 1620.

  As described above, copyright information (Copyright Information) is acquired from, for example, input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), information on recording modes, and content. Copy control information by title, which is the strictest strictest copy control information selected from the CCI as copy control information to be copied, and the corresponding packet number as information indicating the change point of the copy control information in the recorded content and the copy at the change point Control information, etc. One or more pieces of information are set as copyright information and stored in a recording medium.

  Various copyright information generation processing examples will be described with reference to FIGS. 25, 26, and 27. FIG. FIG. 25 is an example of storing input source information, recording device digital watermark generation information, and recording mode as copyright information. The recording mode indicates whether the information recording mode to be executed is a data analysis recording mode (Cognizant Mode) or a data non-analysis recording mode (Non-Cognizant Mode).

  In step S5101, the input source is determined, and 8-bit input source information is generated and stored. Input source information is input source information such as whether the content is from an input source compliant with 5CDTCP, satellite distribution content such as BS, CS, terrestrial digital content, or terrestrial analog content. It is. A configuration example of input source information is shown below.

Input source:
0x00: IEEE1394 with 5C
0x01: IEEE1394 without 5C
0x02: USB with 5C
0x03: USB without 5C
0x04: Built-in BS Tuner
0x05: Built-in CS Tuner
0x06: Built-in terrestrial tuner
0x07: Analog
0x08-ff: Reserve

  In step S5102, the digital watermark generation information (8 bits) of the recording device stored in the ROM of the own apparatus is acquired. As described above, the digital watermark generation information of the recording device indicates the first to third generation devices classified according to the processing mode of the digital watermark, and indicates information of the own device that performs content recording. A configuration example of digital watermark generation information is shown below.

Digital watermark generation information for recording equipment:
0x00: 1st generation
0x01: Second generation
0x02: 3rd generation
0x03-ff: Reserve

  In step S5103, the content recording mode is acquired. The recording mode is 1-bit information indicating whether the data analysis recording method (Cognizant Mode) or the data non-analysis recording method (Non-cognizant). An example of the information structure of the recording mode is shown below.

Recording mode:
0: Data analysis recording method (Cognizant Mode)
1: Data non-analysis recording method (Non-cognizant)

  In step S5104, 47 bits of reserve data “0” is stored as the remaining bits in order to make the copyright information have a 64-bit configuration. With this process, 64-bit copyright information is generated.

  In FIG. 26, the strictest strictest copy control information is selected from the CCI acquired from each block data in the content to be recorded as the copyright information, and this is stored as copy control information for each title. This is an example of storing. The recording mode indicates whether the information recording mode to be executed is a data analysis recording mode (Cognizant Mode) or a data non-analysis recording mode (Non-Cognizant Mode).

  In step S5201 of FIG. 26, the copy control information (CCI) given to each block data is verified during the recording operation, and the strictest strictest copy control information is selected. Strict copy control information is in the order of copy prohibition, one generation copy permit, copy prohibition further, and copy free. The selected copy control information is set as 8-bit title-specific copy control information. A configuration example of title-specific copy control information is shown below.

Copy control information by title:
0x00: Copy free
0x01: No more copies
0x02: 1 generation copy allowed
0x03: Copy prohibited
0x04-ff: Reserve

  In step S5202, the content recording mode is acquired. The recording mode is information indicating whether the data analysis recording method (Cognizant Mode) or the data non-analysis recording method (Non-cognizant).

  In step S5203, 55 bits of reserve data “0” is stored as the remaining bits in order to make the copyright information have a 64-bit configuration. With this process, 64-bit copyright information is generated.

  FIG. 27 is an example of storing change point information of the recording mode and copy control information as copyright information.

  In step S5301, the content recording mode is acquired. The recording mode is information indicating whether the data analysis recording method (Cognizant Mode) or the data non-analysis recording method (Non-cognizant).

  Next, in step S5302, a CCI change point acquired from each block data in the recording target content is acquired, and a packet No. indicating the position information of the change point is acquired. And obtain copy control information data at the change point. This is, for example, data described above with reference to FIG. 13, and is data in which the bucket number indicating the change point is 30 bits and the corresponding copy control information is 2 bits.

  In step S5303, “0” is stored in the adjustment bit as padding processing of the remaining bits in order to make the copyright information have a 64-bit or multiple of 64-bit configuration. By this process, copyright information of multiples of 64 bits is generated.

  As described above, the data structure stored as the copyright information can have various modes. Although not described in the above example, as input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), each information of the recording mode, and copy control information acquired from the content The title-specific copy control information, which is the strictest strictest copy control information selected from the CCI, and the corresponding packet number as information indicating the change point of the copy control information in the recorded content and the copy control information at the change point are all written. It may be stored as right information.

  A MAC as falsification verification value data is generated for the various copyright information described above, and the copyright information is stored in the recording medium together with the MAC. An example of the MAC generation process will be described with reference to FIG. As shown in FIG. 28, the method of Example 1 in which MAc is a result calculated by inputting a disc unique key and a title key and the above-described copyright information into a hash function using a 64-bit block cryptographic function, or FIPS 180 The data generated by bit concatenation of the disc unique key, title key, and copyright information is input to the hash function SHA-1 defined in -1, and only the necessary data length is written from the 160-bit output. The method of Example 2 used as the right information MAC value is applicable.

  Through the above processing, the content is encrypted in block units with a generation-managed master key, a block key generated based on a block seed including ATS, etc., and stored in a recording medium. Corresponding copyright information is stored together with the MAC for falsification check.

  As described above, in this configuration, since the content data is encrypted by the generation-managed master key and stored in the recording medium, the reproduction processing of the recording medium in another recording / reproducing device is at least the same generation or A condition that the recording / reproducing device having a newer generation than the generation of the master key used when data is recorded is a condition that enables decoding, that is, reproduction.

  Furthermore, the copyright information is stored in the recording medium corresponding to the content, and it becomes possible to acquire the copyright information without performing decryption of the encrypted content stored in the recording medium at the time of playback and output. Output control is executed correctly. Even when the recording medium is set to another playback device and played back, the copy control information set in the content recording device can be correctly set by referring to the source information or digital watermark generation information in the copyright information. Since it can be determined, correct regeneration control is executed. Details of the content reproduction process will be described later.

  Next, according to the flowchart shown in FIG. 29, the overall flow of the ATS and CCI addition processing in the TS processing means 300 and the encryption processing in the encryption processing means 150 executed along with the data recording processing will be described together. Note that the processing in the digital watermark detection / embedding processing means 185 is performed in parallel with the processing flow shown in FIG. 29 in accordance with the digital watermark generation of the recording device. That is, if the device is the first generation, neither digital watermark detection nor embedding is executed. If it is the second generation, only detection is executed. If it is the third generation, both detection and embedding processing are executed. Shall be. The processing flow of FIG. 29 is a flow for explaining the ATS and CCI addition processing in the TS processing means 300 and the encryption processing in the encryption processing means 150, which are executed in parallel with the digital watermark processing.

  In S1801 in FIG. 29, the recording / reproducing apparatus stores the master key stored in its own memory 180 and a data analysis / recording method key (in the case of a data analysis / recording method (Cognizant Mode)) or a data non-analysis recording method. The key (Non-Cognizant Key) (in case of non-cognizant mode) is read. Also, a stamper ID is read from the disc.

  In S1802, it is checked whether or not a disc ID (Disc ID) as identification information has already been recorded on the recording medium. If it has been recorded, this disk ID is read in S1803. If it has not been recorded, a disk ID is generated randomly or by a predetermined method and recorded on the disk in S1804. In step S1805, a disc unique key is generated using the master key, stamper ID, and disc ID. As described above with reference to FIG. 21, for example, a method using the hash function SHA-1 defined by FIPS 180-1 or a method using a hash function based on a block cipher is applied to the disk unique key. Ask for it.

  In step S1806, a title key (Title Key) is generated as a unique key for each recording, and is recorded on the disc together with the generation number of the master key.

  In step S1807, the disc unique key and title key, and a data analysis recording system key (Cognizant Key) (in the case of a data analysis recording system (Cognizant Mode)) or a data non-analysis recording system key (Non-Cognizant Key). ) (In the case of non-cognizant mode), a title specific key is generated.

  A detailed flow of generating the title unique key is shown in FIG. In step S2001, the encryption processing unit 150 branches depending on the recording mode. This branch is determined based on the program of the recording / reproducing device or instruction data input by the user using the recording / reproducing device.

  If the recording mode is data analysis recording method (Cognizant Mode) in S2001, that is, Cognizant recording, the process proceeds to step S2002, and a disc unique key (Disc Unique Key), a title key (Title Key), and a data analysis recording method key. A title unique key is generated from (Cognizant Key).

  If the recording mode is non-cognizant recording mode in S2001, that is, non-cognizant recording, the process proceeds to step S2003, the disc unique key (Disc Unique Key), title key (Title Key), and data non- A title unique key (Title Unique Key) is generated from the analysis recording method key (Non-Cognizant Key). For key generation, a method using SHA-1 or a hash function based on a block cipher is used.

  In S1808, the recording / reproducing apparatus receives the encrypted data of the content data to be recorded in the form of a TS packet. In S1809, the TS processing unit 300 adds ATS, which is time information when each TS packet is received. Alternatively, a value obtained by combining the copy control information CCI and ATS and other information is added. In step S1810, TS packets to which ATS is added are sequentially received, and it is determined whether, for example, X = 32 forming one block has been reached or identification data indicating the end of the packet has been received. If any of the conditions is satisfied, the process proceeds to step S1811, where X packets or packets up to the end of the packet are arranged to form one block of block data.

  Next, in step S1812, the encryption processing unit 150 uses the first 32 bits of the block data (block seed including ATS) and the title unique key generated in step S1807 to generate a block that is a key for encrypting the block data. Generate a key.

  In S1813, the block data formed in S1811 is encrypted using the block key. As described above, the object of encryption is from the (m + 1) th byte of the block data to the final data. As the encryption algorithm, for example, DES (Data Encryption Standard) defined by FIPS 46-2 is applied.

  In S1814, the encrypted block data is recorded on the recording medium. In step S1815, it is determined whether all data has been recorded. If all the data has been recorded, the recording process is terminated. If all the data has not been recorded, the process returns to S1808 to execute the remaining data.

  Furthermore, in steps S1816 and S1817, copyright information (Copyright Information) corresponding to the content related to the recording process is generated, and further, a MAC (Message Authentication Code) as a tamper check value is generated, and the copyright is recorded on the disc. Record right information & MAC. As described above, copyright information (Copyright Information) is acquired from, for example, input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), information on recording modes, and content. Copy control information by title, which is the strictest strictest copy control information selected from the CCI as copy control information to be copied, and the corresponding packet number as information indicating the change point of the copy control information in the recorded content and the copy at the change point Control information or the like, and one or more pieces of information are set as copyright information and stored in a recording medium. Examples of copyright information generation processing are as described above with reference to FIGS. 25, 26, and 27. The MAC generation processing is executed according to the processing described with reference to FIG.

  According to the above processing, copyright information is stored in the recording medium corresponding to the content, and it is possible to acquire the copyright information without decrypting the encrypted content stored in the recording medium at the time of reproduction and output. Playback control and output control are executed correctly. Even when the recording medium is set to another playback device and played back, the copy control information set in the content recording device by referring to the source information stored in the copyright information or the digital watermark generation information Therefore, the correct reproduction control is executed.

  Next, processing for decrypting and reproducing the encrypted content recorded on the recording medium as described above will be described with reference to the processing block diagram of FIG. 31 and the flow of FIG.

  With reference to the flowchart shown in FIG. 32, the flow of processing for decoding processing and reproduction processing will be described. In S2401 of FIG. 32, the recording / reproducing apparatus 2300 (see FIG. 31) reads the disc ID 2302, the pre-recording recording generation number, and the stamper ID 2380 from the disc 2320, and the master key 2301 from its own memory. Then, the data analysis recording method key (Cognizant Key) 2331 and / or the data non-analysis recording method key (Non-Cognizant Key) 2332 are read out. As is clear from the description of the previous recording process, the disc ID is recorded on the disc in advance, or otherwise generated by the recording / reproducing device and recorded on the disc.

  The pre-recording generation number 2360 is disc-specific generation information stored in advance on a disc that is a recording medium. The pre-recording generation number is compared with the generation number of the master key at the time of data recording, that is, the generation number 2350 at the time of recording, to control the propriety of reproduction processing. The master key 2301 is a secret key that is stored in the memory of the recording / reproducing apparatus according to the flow of FIG. The key for data analysis recording method (Cognizant Key) and the key for data non-analysis recording method (Non-Cognizant Key) are common to the system corresponding to the data analysis (Cognizant) recording mode and data non-analysis (Non-Cognizant) recording mode, respectively. Secret key.

  Next, in S2402, the recording / reproducing apparatus 2300 records the title key of the data to be read from the disc, the copyright information with the MAC added as tampering check data, and the generation number of the master key used when the data is recorded. (Generation #), that is, the generation number 2350 at the time of recording is read. Copyright information includes content input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), recording mode information, and copy control acquired from the content. Copy control information by title as the strictest strictest copy control information selected from CCI as information, and corresponding packet number as information indicating a change point of copy control information in the recorded content and copy control information at the change point 1 or more information is included. Also, copyright information (Copyright Information) is stored in a recording medium with a MAC (Message Authentication Code) added as a validity check code so as not to be tampered with easily.

  In step S2403, a disk unique key (Disc Unique Key) is generated 2302 using a disk ID (Disc ID), a master key (Master Key), and a stamper ID (Stamper ID). This key generation method is as described above with reference to FIG. 21. For example, bit combination of a master key and a disc ID (Disc ID) is added to the hash function SHA-1 defined in FIPS 180-1. Input the data generated by, and use only the necessary data length from the 160-bit output as the Disc Unique Key, or the master key for the hash function using the block cipher function And a result obtained by inputting a disc ID (Disc ID). The master key used here is the master key of the generation (time point) indicated by the generation number at the time of recording of the data read from the recording medium in step S2402 of FIG. If the recording / reproducing apparatus holds a master key of a newer generation than this, a disc unique key may be generated using the master key.

  Next, in step S2404, the copyright information MAC is calculated. The MAC calculation is executed by the process described above with reference to FIG. 28. As shown in FIG. 28, the disk unique key, title key, and copyright information are input to the hash function using the 64-bit block cryptographic function. Data generated by bit concatenation of the disc unique key, title key, and copyright information is input to the method of Example 1 using the obtained result or the hash function SHA-1 defined in FIPS 180-1. The method of Example 2 in which only the necessary data length is used as the copyright information MAC value from the 160-bit output can be applied.

  If it is determined that the MAC value stored in the recording medium together with the copyright information is equal to the newly generated MAC value based on the read copyright information, it is determined that the copyright information has not been falsified.

  In step S2405, the reproducibility determination is executed based on the determination result including the MAC determination. A detailed flow of the determination process is shown in FIG.

  In step S2501 of FIG. 33, the recording / reproducing apparatus determines whether the pre-generation number read in step S2401 and the new generation number of the recording generation number read in step S2402. When it is determined that the generation indicated by the recording generation number is not after the generation indicated by the pre-recording generation information, that is, when the generation indicated by the data recording generation information is older than the generation indicated by the pre-recording generation information. Therefore, it is determined that the reproduction is impossible, and the process from step S2406 in FIG. 32 is skipped, and the process is terminated without performing the reproduction process. Therefore, when the content recorded on the recording medium is encrypted based on a master key of a generation older than the generation represented by the pre-recording generation information, the reproduction is not permitted and the reproduction is performed. Absent.

  In other words, this process is an unauthorized recording device in which fraud is detected and the latest generation master key is no longer given, and data is encrypted and recorded on the recording medium based on the old generation master key. In this process, the recording medium on which data is recorded by such an unauthorized device is determined not to be reproduced. Thereby, use of an unauthorized recording device can be eliminated.

  On the other hand, if it is determined in step S2501 in FIG. 33 that the generation indicated by the recording generation number is after the generation indicated by the pre-recording generation number, that is, the generation indicated by the recording generation information has the pre-recording generation number. When the generation n is the same as or newer than the generation n to be represented, and the content recorded on the recording medium is encrypted based on the master key of the generation after the generation represented by the pre-recording generation information In step S2502, the recording / reproducing apparatus acquires the generation information of the encrypted master key C stored in its own memory, and compares the generation of the encrypted master key with the generation represented by the generation information at the time of encryption. And determine before and after the generation.

  If it is determined in step S2502 that the generation of the master key C stored in the memory is not after the generation indicated by the recording time generation information, that is, the generation of the master key C stored in the memory indicates that the recording generation information is If the generation is older than the indicated generation, it is determined that reproduction is not possible, and step S2406 and subsequent steps in FIG. 32 are skipped, and the process ends without performing the reproduction process.

  On the other hand, if it is determined in step S2502 that the generation of the encrypted master key C stored in the memory is after the generation indicated by the recording generation information, that is, the generation of the master key C stored in the memory is If the generation information is the same as or newer than the generation information at the time of recording, the process proceeds to step S2503, and the key corresponding to the mode at the time of recording, that is, the key for data analysis recording method (Cognizant Key) or data non-analysis recording method It is determined whether or not the playback device itself owns the key (Non-Cognizant Key).

  In step S2503, if the playback device itself owns a data analysis recording method key (Cognizant Key) or a data non-analysis recording method key (Non-Cognizant Key), which is a key corresponding to the recording mode, It is determined that playback is possible. If the playback device itself does not own the key corresponding to the recording mode (data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key)) judge.

  In step S2503. If it is determined that the playback device owns the key corresponding to the recording mode (data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key)) In step S2504, it is determined whether or not the MAC calculated in step S2404 in FIG. 32 is correct, that is, whether or not the MAC stored in the recording medium is the same as the calculated value. If they are equal, the process proceeds to step S2505. If they do not match, it is determined that the copyright information has been tampered with, and the process cannot be reproduced.

  In step S2505, copyright information read from the recording medium is examined, and it is determined whether reproduction is possible based on the copyright information.

  As described above, copyright information has various forms of information storage, and the reproducibility determination process varies depending on the information form. FIG. 34 is a processing flow for determining whether or not playback is possible based on input source information in copyright information, and FIG. 35 is a processing flow for determining whether playback is possible or not based on digital watermark generation information in copyright information. 36 shows a processing flow in the case of determining whether or not reproduction is possible based on the title-specific copy control information in the copyright information. The reproduction permission / inhibition based on the copyright information is executed by selecting one or more of the flows of FIGS. 34, 35 and 36 according to the information included in the copyright information.

  First, the flow of FIG. 34 will be described. FIG. 34 shows a case where it is determined whether or not playback is possible based on input source information. First, in step S5501, it is determined whether or not an output form has been designated by the user. The output form is, for example, an output via IEEE1394 I / F as a digital output, such as an output conforming to 5CDTCP, a digital output via USB I / F, or an analog output via analog I / F.

  If the user designates the output form, the process advances to step S5502, and the input source information in the copyright information corresponding to the content to be reproduced from the recording medium is referred to and stored in the memory in the recording / reproducing apparatus in advance. Whether output is possible or not is determined based on the correspondence with the output restriction information. The output restriction information stored in the memory in the recording / reproducing apparatus is the same as the output restriction information regarding the input source described above with reference to FIG.

  For example, if the output specified by the user is an output conforming to 5CDTCP and the input source information stored in the copyright information of the content to be played (output) is 5CDTCP data, the uppermost line shown in the table of FIG. The output is permitted. For example, when the output specified by the user is digital output and the input source information stored in the copyright information of the reproduction (output) content is BS, the output is not permitted by the rule shown in FIG. So no playback is done. In step S5503, it is determined whether or not output is possible based on the input source stored in the copyright information.

  On the other hand, if it is determined in step S5501 that the user has not designated the output form, in steps S5504 and S5505, the presence / absence of an outputable form based on the input source information is stored in the memory in the recording / playback apparatus. The determination is made based on the output restriction information (corresponding to the information shown in FIG. 11). If there is a form that can be output, it is determined Yes in step S5505, and playback is possible. If there is no form that can be output, it is determined that playback is not possible.

  Next, the flow of FIG. 35 will be described. FIG. 35 shows a case where it is determined whether or not playback is possible based on digital watermark generation information. The digital watermark generation information is the digital watermark generation (first, second, and third generation) of the recording device that records the content to be played back, and is stored in the copyright information corresponding to the content at the time of recording the content. It is.

  This determination is effective in an apparatus for detecting a digital watermark from content, and is executed only in the so-called second and third generation recording / reproducing apparatuses described above as the digital watermark generation. When the digital watermark is detected and embedded in the decrypted content instead of the encrypted content, the determination processing shown in FIG. 35 is executed in a step after the block data decrypting processing in step S2409 in the processing flow in FIG. Will be. When the digital watermark is embedded in the encryption processing data, it is executed in the reproducibility determination step of S2405 in FIG.

  The flow of FIG. 35 will be described. First, in step S5601, it is determined whether the detected electronic watermark information indicates copy prohibition, one generation copy is permitted, or other (copy free or no more copy prohibition). When copy prohibition is indicated, reproduction output is prohibited. When copy free or copy prohibition is indicated, it is determined that reproduction is possible. If a digital watermark that can be copied by one generation is detected, the process advances to step S5602 to read the digital watermark generation information of the recording device in the copyright information, and the digital watermark generation information of the recording device that recorded the content is the first. If it is 2 generations or less, it is determined that playback is possible, and if it is 3rd generation or more, it is determined that playback is not possible.

  If the content is a content recorded in the second generation device, the digital watermark is not updated, so the primary mark (10) indicating that one copy can be copied to the content copied to the user-writable recording medium. Remains as a digital watermark. If the recording device is the third generation, when the content of the primary mark (10) indicating that one generation of copying is possible is copied, the content is updated to (101) indicating that copying is no longer possible.

  The device that is to execute the reproduction acquires the digital watermark generation information of the content recording device from the copyright information, so that the processing of the recording device can be grasped. For example, it is copyrighted that the recording device is a second generation device. If it is determined based on the digital watermark generation information in the information, playback is executed. With this process, even when recording and reproduction are performed in different generation devices, accurate copy control based on the electronic watermarking is performed.

  Next, the flow of FIG. 36 will be described. FIG. 36 shows a case where the propriety of reproduction is determined based on the title-specific copy control information. The title-specific copy control information is information corresponding to the strictest strictest copy control information selected from the CCI as copy control information acquired from the content.

  In step S5701, the title-specific copy control information in the copyright information corresponding to the content to be reproduced is acquired, and if the title-specific copy control information indicates copy prohibition, it is determined that reproduction is not possible, otherwise In this case, it is determined that reproduction is possible.

  The processing flows in FIGS. 34, 35, and 36 individually describe the determination processing flow based on one piece of information stored in the copyright information. For example, a plurality of pieces of information are included in the content to be played back. Correspondingly, if it is included in the copyright information stored on the recording medium, the judgment process based on a plurality of pieces of information is executed sequentially or in parallel, and only when it is judged that reproduction is possible in all judgments If any one of the determinations determines that no reproduction is possible, a process for prohibiting reproduction is performed.

  Based on the results of these determinations, the reproducibility determination process in FIG. 33 ends. If it is determined that all conditions are satisfied and reproducible, the process proceeds to step S2406 shown in FIG. As described above, when the digital watermark determination process is executed based on the digital watermark detection on the decoded data, the reproduction possibility determination based on the digital watermark is performed by the block data decoding process in step S2409 in FIG. Run later.

  Returning to the flow of FIG. 32, the description of the reproduction processing will be continued. In step S2406, a title unique key is generated. FIG. 37 shows a detailed flow of generating the title unique key. In step S2601, the encryption processing unit 150 determines the recording mode. This determination is executed based on the recording mode stored in the copyright information read from the disc.

  If it is determined in S2601 that the recording mode is the data analysis recording method (Cognizant Mode), the process proceeds to step S2602, and the disc unique key (Disc Unique Key), title key (Title Key), and data analysis recording method are used. A title unique key (Title Unique Key) is generated from the key (Cognizant Key).

  If it is determined in S2601 that the recording mode is the non-cognitive recording mode (Non-Cognizant Mode), the process proceeds to step S2603, where the disc unique key, title key, A title unique key (Title Unique Key) is generated from the analysis recording method key (Non-Cognizant Key). For key generation, a method using SHA-1 or a hash function based on a block cipher is used.

  In the above description, a disc unique key is generated from a master key, a stamper ID, and a disc ID, and a title key and data are generated. Title unique key is generated from analysis key (Cognizant Key) or data non-analysis key (Non-Cognizant Key). Disc unique key (Disc Unique Key) Master key, stamper ID, disc ID, title key, data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Title Unique Key) may be generated directly from (Non-Cognizant Key), and without using the title key (Title Key) Tamper ID (Stamper ID), disc ID (Disc ID), data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key) equivalent to Title Unique Key A key may be generated.

  In step S2407, block data (Block Data) is sequentially read from the encrypted content 2312 encrypted and stored from the disk. In step S2408, the first 4 bytes of block seed (Block Seed) of the block data is selected by the selector 2310. The block key is generated using the block seed and the title unique key generated in S2406.

  The configuration of FIG. 24 described above can be applied to a method for generating a block key. That is, a configuration in which a 64-bit block key is generated from a 32-bit block seed and a 64-bit title unique key can be applied.

  In the above description, an example in which a disc unique key, a title unique key (Title Unique Key), and a block key (Block Key) are generated has been described. For example, a disc unique key (Disc Unique Key) Master key, stamper ID, disc ID, title key, and block seed for each block without generating a title unique key (Title Unique Key) A block key may be generated using (Block Seed) and a data analysis / recording system key (Cognizant Key) or a data non-analysis / recording system key (Non-Cognizant Key).

  When the block key is generated, in step S2409, the block data encrypted using the block key (Block Key) is decrypted 2309 and output as decrypted data via the selector 2308. In the decoded data, ATS is added to each transport packet constituting the transport stream, and the above-described TS processing means 300 executes stream processing based on ATS. The data can then be used, for example, displaying an image or playing music.

  As described above, the encrypted content encrypted in units of blocks and stored in the recording medium is decrypted with the block key generated based on the block seed including the ATS in units of blocks and can be reproduced. The block data encrypted using the block key is decrypted. In S2410, it is determined whether all the data has been read. If all the data has been read, the process ends. If not, the process returns to S2407 to read the remaining data. .

  As shown in FIG. 31, the recording / reproducing apparatus described above includes a data analysis / recording method (Cognizant Mode) recording encryption / decryption processing key generation key (data analysis / recording method key (Cognizant Key)) and , It is possible to selectively use both encryption for data non-analysis recording method (Non-Cognizant Mode) recording and key for generating decryption processing key (Non-Cognizant Key) In the configuration example, only one of the keys, ie, the data analysis recording method key (Cognizant Key) or the data non-analysis recording method key (Non-Cognizant Key) is stored. Only a method corresponding to the storage key is executed, and a block key for content decryption processing is generated based on the storage key.

  As described above, the playback apparatus as the information processing apparatus according to the present invention determines whether playback or output is possible based on the copyright information generated and stored corresponding to the content. The copyright information is selected from input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), recording mode information, and CCI as copy control information acquired from the content. Copy control information by title, which is the strictest strictest copy control information, and corresponding packet number as information indicating the change point of copy control information in the recorded content and copy control information at the change point. One or more pieces of information are acquired from the above to determine whether playback is possible.

  Also, by using the title-specific copy control information included in the copyright information, the content copy process can be efficiently executed. In the playback process described above, block data is decoded and output. For example, when the entire content is copy-free, copy control information (CCI) added to each block and digital watermark are detected. There is no problem even if the content is moved (copied) to another device without doing so.

  Whether or not the entire reproduction target content is copy-free can be determined based on the title-specific copy control information in the copyright information stored corresponding to the content. As described above, the title-specific copy control information is the strictest strictest copy control information selected from the CCI as copy control information acquired from the content. Therefore, when the title-specific copy control information is copy-free, all of the corresponding content is copy-free. Accordingly, it can be determined that the content can be copied to another device without confirming the CCI added to the block data in the content.

  FIG. 38 shows a content reproduction output process flow to which the title-specific copy control information is applied. In step S6101, the title-specific copy control information is acquired from the copyright information associated with the content to be played back, and it is determined whether the acquired title-specific copy control information is copy-free. If it is copy free, the process advances to step S6102 to execute reproduction output of the entire content. In this case, CCI determination for each block data becomes unnecessary. Therefore, the decoding process can be omitted. On the other hand, if the title-specific copy control information is not copy-free, the process advances to step S6103 to extract and output a portion permitted to be copied. In this case, it is necessary to execute predetermined processing such as detection of each CCI or digital watermark information.

  Further, even when various copy control information is included in the content, the change point information of the copy control information in the recorded content included in the copyright information is applied to enable high-speed copy processing. As described above with reference to FIG. 13, the change point information of the copy control information is data in which the TS packet number in which the copy control information changes and the copy control information at the change point are associated with each other.

  FIG. 39 shows a content reproduction output process flow to which the change point information of the copy control information is applied. In step S6201 of FIG. 39, copy control information change point information is acquired from the copyright information associated with the content to be reproduced, and based on the acquired copy control information change point information, a copy-free portion such as a copy free part in the content is copied. Extract allowed content areas. Specifically, the packet No. Based on the above, the copyable part of the content is specified.

  In step S6202, the copyable part extracted in step S6201 is selectively output. In this case, since it is clear that the extracted portion can be copied, the CCI determination for each block data is unnecessary. Therefore, the decoding process can be omitted. However, the CCI or digital watermark information update process may be executed as necessary.

  In this way, it is possible to acquire the copy control information for each title stored in the copyright information associated with the content and the change point information of the copy control information, and to determine the copy control mode of the content. Processing efficiency is realized.

[8. Recording and playback of content by encryption processing using media key]
In the above embodiment, a master key is transmitted to each recording / reproducing apparatus using an enabling key block (EKB), and the recording / reproducing apparatus uses this to record and reproduce data. It was an example.

  The master key is a key that is valid for the entire data recording at that time, and the recording / reproducing apparatus that was able to obtain the master key at a certain time decrypts the data recorded by this system at that time and before that time. It becomes possible. However, due to the nature of being effective in the entire system, there is also a problem that the influence when the master key is exposed to the attacker reaches the entire system.

  On the other hand, the key that is transmitted using EKB (Enabling Key Block) of the recording medium is not a master key that is effective for the entire system, but a media key that is effective only for the recording medium. Can be suppressed. In the following, a method using a media key instead of a master key will be described as a second embodiment. However, only the changes from the first embodiment will be described.

  In FIG. 40, as an example similar to FIG. 16, the update node key K (t (t) is obtained using the EKB at the time t when the device 0 is stored in the recording medium, the leaf key K0000 and the node keys K000, K00 stored in advance. ) 00 is generated, and the update media key: K (t) media is obtained using the generated 00. The K (t) media obtained here is used at the time of recording and reproducing data on the recording medium.

  Note that the pre-record generation number (Generation #n) in FIG. 40 is not essential and is set as an option in the media key because there is no concept of generation new and old unlike the master key.

  Each recording / reproducing apparatus calculates, for example, a media key: K (t) media for the recording medium according to the flowchart shown in FIG. 41 when the recording medium is inserted into the recording / reproducing apparatus for recording or reproducing data. And later used to access the recording medium.

  The reading of EKB in step S2801 in FIG. 41 and the processing of EKB in S2802 are the same as steps S1403 and S1404 in FIG. 17, respectively.

  In step S2803, the recording / reproducing apparatus reads the ciphertext Enc (K (t) 00, K (t) media) obtained by encrypting the media key K (t) media with the node key K (t) 00 from the recording medium, and step S2804. Decrypt this to get the media key. If this recording / reproducing apparatus is excluded from the group having the tree structure shown in FIG. 14, that is, revoked, the media key cannot be obtained, and recording and reproduction on the recording medium cannot be performed.

  Next, a process for generating a key by applying a media key and performing an encryption process using the generated key to record data on a recording medium will be described. In a media key, a generation is old and new like a master key. Since there is no concept, the pre-record generation information described with reference to FIG. 18 in the first embodiment and the master key generation stored in the recording / playback apparatus itself are not checked to check whether they can be recorded. If the media key is obtained, it is determined that recording can be performed. That is, the processing flow shown in FIG. 42 is obtained. In the processing flow of FIG. 42, the acquisition of the media key is determined in S2901, and only when it is acquired, the content recording process is executed in step S2902.

  Content data recording processing by encryption processing using a media key will be described with reference to the block diagrams of FIGS. 43 and 44 and the flowchart of FIG.

  In this embodiment, as in the first embodiment, an optical disk is taken as an example of the recording medium. In this embodiment, in order to prevent bit-by-bit copying of data on the recording medium, a disc ID (Disc ID) as identification information unique to the recording medium is made to act on a key for encrypting the data. The same applies to the point.

  FIGS. 43 and 44 are diagrams corresponding to FIGS. 19 and 20 in the first embodiment, respectively, except that a media key is used instead of a master key. Also, the difference is that the recording generation number (Generation #) indicating the generation of the master key is not used. The difference between FIG. 43 and FIG. 44 is the difference in whether or not the disk ID write is executed, similar to the difference between FIG. 19 and FIG.

  FIG. 45 shows data recording processing in the present embodiment using a media key, and corresponds to the flowchart of FIG. 29 (embodiment 1) described above. Hereinafter, the processing flow of FIG. 45 will be described focusing on differences from the first embodiment.

  In S3201 of FIG. 45, the recording / reproducing apparatus 3000 stores the data analysis recording method key (Cognizant Key) and / or the data non-analysis recording method key (Non-Cognizant Key) stored in its own memory, and FIG. The media key K (t) media calculated and temporarily stored in S2804 is read. Also, a stamper ID is read from the disc.

  In S3202, the recording / reproducing apparatus checks whether or not a disc ID (Disc ID) as identification information is already recorded on the recording medium (optical disc) 3020. If recorded, the disk ID (Disc ID) is read in S3203 (corresponding to FIG. 43). If not recorded, the disk ID (Disc ID) is randomly or in a predetermined method in S3204. It is generated and recorded on the disc (corresponding to FIG. 44). Since there is only one disc ID (Disc ID) for the disc, it can be stored in the lead-in area or the like. In either case, the process proceeds to S3205.

  In S3205, a disc unique key (Disc Unique Key) is generated using the media key, stamper ID (Stamper ID), and disc ID (Disc ID) read in S3201. As a specific method for generating a disc unique key (Disc Unique Key), a media key may be used instead of a master key in the same manner as the method used in the first embodiment.

  In step S3206, a unique key: Title Key is generated randomly or by a predetermined method for each recording, and recorded on the disc.

  On the disc, there is a data management file that stores information on what data constitutes what title, and the title key can be stored in this file.

  Steps S3207 to S3215 are the same as S1807 to S1815 in FIG.

  Further, in steps S3216 and S3217, copyright information (Copyright Information) corresponding to the content related to the recording process is generated, and further, a MAC (Message Authentication Code) as a tampering check value is generated, and the copyright is written on the disc. Record right information & MAC. As described above, copyright information (Copyright Information) is acquired from, for example, input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), information on recording modes, and content. Copy control information by title, which is the strictest strictest copy control information selected from the CCI as copy control information to be copied, and the corresponding packet number as information indicating the change point of the copy control information in the recorded content and the copy at the change point Control information or the like, and one or more pieces of information are set as copyright information and stored in a recording medium. Examples of copyright information generation processing are as described above with reference to FIGS. 25, 26, and 27. The MAC generation processing is executed according to the processing described with reference to FIG.

  According to the above processing, copyright information is stored in the recording medium corresponding to the content, and it is possible to acquire the copyright information without decrypting the encrypted content stored in the recording medium at the time of reproduction and output. Playback control and output control are executed correctly. Even when the recording medium is set to another playback device and played back, the copy control information set in the content recording device by referring to the source information stored in the copyright information or the digital watermark generation information Therefore, the correct reproduction control is executed.

  In the above description, a disc unique key is generated from a media key, a stamper ID and a disc ID, and a title key and data. Title unique key is generated from analysis key (Cognizant Key) or data non-analysis key (Non-Cognizant Key). Disc unique key (Disc Unique Key) Media key, stamper ID, disc ID, title key, data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Title Unique Key) may be generated directly from (Non-Cognizant Key), and without using the title key (Title Key), the media key and media key are generated. Equivalent to title unique key (Tiper ID) from discriminator ID (Stamper ID), disc ID (Disc ID), data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key) A key may be generated.

  As described above, data can be recorded on the recording medium using the media key.

  Next, processing for reproducing the data recorded as described above will be described with reference to the block diagram of FIG. 46 and the flowchart of FIG.

  FIG. 46 is a diagram corresponding to FIG. 31 in the first embodiment, in which a media key (Media Key) is used instead of a master key, and therefore the generation number (Generation #) at the time of recording is omitted. Is different.

  In S3401 of FIG. 47, the recording / reproducing device 3400 obtains a stamper ID and disc ID from the disc 3420 as a recording medium, and a data analysis recording method key (Cognizant Key) and / or from its own memory. Alternatively, the data non-analysis recording method key (Non-Cognizant Key) and the media key calculated and temporarily stored in S2804 in FIG. 41 are read.

  When the recording medium is inserted, the process of FIG. 41 is performed, and if the media key cannot be obtained, the process ends without performing the reproduction process.

  Next, in step S3402, the title key (Title Key) of data to be read from the disc and the copyright information recorded corresponding to the content data and added with the MAC as the tamper check data are read. Copyright information includes content input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), recording mode information, and copy control acquired from the content. Copy control information by title as the strictest strictest copy control information selected from CCI as information, and corresponding packet number as information indicating a change point of copy control information in the recorded content and copy control information at the change point 1 or more information is included. In addition, copyright information (Copyright Information) is added with a MAC (Message Authentication Code) as a validity check code so as not to be easily tampered with.

  In step S3403, a disk unique key (Disc Unique Key) is generated using a disk ID (Disc ID), a media key, and a stamper ID (Stamper ID). This key generation method is realized by replacing the master key with a media key in the processing described above with reference to FIG. For example, data generated by bit concatenation of a media key and a disc ID (Disc ID) is input to the hash function SHA-1 defined by FIPS 180-1, and the necessary data length is obtained from the 160-bit output. Or a method using only a media key and a disc ID (Disc ID) as a hash function using a block cipher function. .

  Next, in step S3404, the copyright information MAC is calculated. The MAC calculation is executed by the process described above with reference to FIG. 28. As shown in FIG. 28, the disk unique key, title key, and copyright information are input to the hash function using the 64-bit block cryptographic function. Data generated by bit concatenation of the disc unique key, title key, and copyright information is input to the method of Example 1 using the obtained result or the hash function SHA-1 defined in FIPS 180-1. The method of Example 2 in which only the necessary data length is used as the copyright information MAC value from the 160-bit output can be applied.

  If it is determined that the MAC value stored in the recording medium together with the copyright information is equal to the newly generated MAC value based on the read copyright information, it is determined that the copyright information has not been falsified.

  In step S3405, the reproducibility determination is executed based on the determination result including the MAC determination. FIG. 48 shows a detailed flow of the determination process.

  In step S3501, it is determined whether a media key is obtained. If the media key cannot be obtained, playback is impossible. If the media key is obtained, the process advances to step S3502. The processing of step S3502 is the same as that of S2503 in FIG. 33, and the key corresponding to the recording mode used at the time of recording the data (in the case of the data analysis recording method (Cognizant Mode), the key for the data analysis recording method (Cognizant Key)) In the case of the data non-analysis recording method (Non-Cognizant Mode), if the playback device has a data non-analysis recording method key (Non-Cognizant Key), the process proceeds to step S3503.

  In step S3503, it is determined whether or not the MAC calculated in step S3404 of FIG. 32 is correct, that is, whether or not the MAC stored in the recording medium is equal to the calculated MAC. If they are equal, the process proceeds to step S3505. If they do not match, it is determined that the copyright information has been tampered with, and the process cannot be reproduced.

  In step S3505, the copyright information read from the recording medium is examined, and it is determined whether reproduction is possible based on the copyright information.

  As described above, the copyright information has various forms of information storage. Depending on the information form, the reproduction permission determination process based on the input source information shown in FIG. 34 and the digital watermark generation shown in FIG. At least one of the reproduction permission / inhibition determination process based on the information and the reproduction permission / inhibition determination process based on the title-specific copy control information in the copyright information shown in FIG. 36 is executed. If the copyright information stored on the recording medium corresponding to the content to be played back contains multiple pieces of information, judgment processing based on the multiple pieces of information can be executed sequentially or in parallel, and playback can be performed for all judgments. Only when it is determined that the reproduction is possible, it is determined that the reproduction is finally possible. If any one of the determinations indicates that the reproduction is impossible, a process for making the reproduction impossible is performed.

  Based on the results of these determinations, the reproducibility determination process in FIG. 48 ends. If it is determined that all conditions are satisfied and reproducible, the process proceeds to step S3406 shown in FIG. As described above, when the digital watermark determination process is executed based on the digital watermark detection on the decoded data, the reproduction possibility determination based on the digital watermark is performed by the block data decoding process in step S3409 in FIG. Run later.

  The subsequent processing of the flow of FIG. 47 and the processing of steps S3406 to S3410 are the same as S2406 to S2410 of FIG.

  In the above description, a disc unique key is generated from a media key, a stamper ID, and a disc ID, and a title key, Title unique key is generated from data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key), but disc unique key (Disc Unique Key) ) Is not required, Media Key, Stamper ID, Disc ID, Title Key, and Data Analysis Recording Method Key (Cognizant Key) or Data Non-Analysis Recording Method A title unique key (Title Unique Key) may be generated directly from a key (Non-Cognizant Key), and without using a title key (Title Key), Tamper ID (Stamper ID), disc ID (Disc ID), data analysis recording method key (Cognizant Key) or data non-analysis recording method key (Non-Cognizant Key) equivalent to Title Unique Key A key may be generated.

  As described above, recording of data on the recording medium and reproduction processing from the recording medium are executed.

  As described above, the playback apparatus as the information processing apparatus according to the present invention determines whether playback or output is possible based on the copyright information generated and stored corresponding to the content. The copyright information is selected from input source information, digital watermark generation information of the recording device (the first, second, and third generations described above), recording mode information, and CCI as copy control information acquired from the content. Copy control information by title, which is the strictest strictest copy control information, and corresponding packet number as information indicating the change point of copy control information in the recorded content and copy control information at the change point. One or more pieces of information are acquired from the above to determine whether playback is possible.

[9. Hardware configuration of recording / reproducing apparatus]
A configuration example of an information processing apparatus as a recording / reproducing apparatus that executes the above-described series of processes will be described. The processing described with reference to each flow and block diagram described above can be executed by a combination of hardware and software. For example, the encryption processing means in the recording / reproducing apparatus can be configured as an encryption / decryption LSI, but can be configured to execute a program by a general-purpose computer or a one-chip microcomputer. Similarly, the TS processing means can execute processing by software. When a series of processing is performed by software, a program constituting the software is installed in a general-purpose computer, a one-chip microcomputer, or the like. FIG. 49 shows a configuration example of an embodiment of a computer in which a program for executing the series of processes described above is installed.

  The program can be recorded in advance in a hard disk 4205 or a ROM 4203 as a recording medium built in the computer. Alternatively, the program is temporarily or permanently stored in a removable recording medium 4210 such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto optical) disc, a DVD (Digital Versatile Disc), a magnetic disc, or a semiconductor memory. Can be stored (recorded). Such a removable recording medium 4210 can be provided as so-called package software.

  The program is installed on the computer from the removable recording medium 4210 as described above, or transferred from the download site to the computer wirelessly via a digital satellite broadcasting artificial satellite, or a LAN (Local Area Network), The program can be transferred to a computer via a network such as the Internet, and the computer can receive the program transferred in this way by the communication unit 4208 and install it in the built-in hard disk 4205.

  The computer includes a CPU (Central Processing Unit) 4202. An input / output interface 4211 is connected to the CPU 4202 via the bus 4201, and the CPU 4202 is operated by the user via the input / output interface 4210 to operate an input unit 4207 including a keyboard, a mouse, and the like. When a command is input by the above, a program stored in a ROM (Read Only Memory) 4203 is executed accordingly.

  Alternatively, the CPU 4202 reads the program stored in the hard disk 4205, the program transferred from the satellite or the network, received by the communication unit 4208, installed in the hard disk 4205, or read from the removable recording medium 4210 attached to the drive 4209. Then, the program installed in the hard disk 4205 is loaded into a RAM (Random Access Memory) 4204 and executed.

  Thus, the CPU 4202 performs processing according to the above-described flowchart or processing performed by the configuration of the above-described block diagram. Then, the CPU 4202 outputs the processing result from the output unit 4206 configured by an LCD (Liquid Crystal Display), a speaker, or the like, for example, via the input / output interface 4211 as necessary, or from the communication unit 4208. Transmission and further recording on the hard disk 4205.

  Here, in this specification, the processing steps for describing a program for causing a computer to perform various types of processing do not necessarily have to be processed in time series in the order described in the flowchart, but in parallel or individually. This includes processing to be executed (for example, parallel processing or processing by an object).

  Further, the program may be processed by a single computer, or may be processed in a distributed manner by a plurality of computers. Furthermore, the program may be transferred to a remote computer and executed.

  In the present embodiment, the block for performing content encryption / decryption has been described mainly with respect to an example in which the block is configured by a single-chip encryption / decryption LSI, but the block for performing content encryption / decryption is, for example, It can also be realized as a single software module executed by the CPU 170 shown in FIGS. Similarly, the processing of the TS processing means 300 can be realized as one software module executed by the CPU 170.

  The present invention has been described in detail above with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiments without departing from the gist of the present invention. In the examples, the present invention has been disclosed in the form of examples, and should not be construed as limiting. In order to determine the gist of the present invention, the claims section described at the beginning should be considered.

As described above, in the configuration of the present invention, the copyright information related to the content is stored in association with the content stored in the recording medium.
As copyright information, a recording medium is generated by generating copyright information including the most severe copy control information among the copy control information set for each unit of the recorded content and information regarding the change point of the copy control information in the recorded content. Stored. When playing back the content corresponding to the title, playback control according to the strictest copy control information among the copy control information is executed, and partial content output is executed by applying information on the change point. It becomes possible.

  Also, according to the configuration of the present invention, the copyright information related to the content is stored in association with the content stored in the recording medium, and the MAC as the tamper check value for the copyright information is also stored. It is possible to maintain the reliability of copyright information. In addition, an activation key block (EKB) according to a tree structure key distribution configuration is used to generate a disk unique key to be used as a MAC generation key as a tamper check value for copyright information. Since the master key and the media key that can be acquired only by a device with a valid license are applied by the processing of the transmitted EKB, MAC verification can be performed only with a valid license device, The right usage configuration is realized.

100, 200 Recording / reproducing device 110 Bus 121, 122 Digital input / output I / F
130 MPEG codec 140 Analog I / O I / F
141 A / D, D / A converter 150 Cryptographic processing means 160 ROM
170 CPU
180 memory 190 drive 195 recording medium 210 recording medium I / F
300 TS processing means 501 Terrestrial tuner, converter 502 Satellite wave tuner converter 600, 607 terminal 602 Bit stream parser 603 PLL
604 Time stamp generation circuit 605 Block seed addition circuit 606 Smoothing buffer 800, 806 terminal 801 Block seed separation circuit 802 Output control circuit 803 Comparator 804 Timing generation circuit 805 27 MHz clock 901, 904, 913 terminal 902 MPEG video encoder 903 Video stream buffer 905 MPEG audio encoder 906 Audio stream buffer 908 Multiplexing scheduler 909 Transport packet encoder 910 Arrival time stamp calculation means 911 Block seed addition circuit 912 Smoothing buffer 976 Switch 4202 CPU
4203 ROM
4204 RAM
4205 hard disk 4206 output unit 4207 input unit 4208 communication unit 4209 drive 4210 removable recording medium 4211 input / output interface

Claims (10)

An information recording apparatus that performs recording processing of encrypted content on a recording medium,
A processing unit that generates copyright information corresponding to encrypted content encrypted by a title key that is a title unit encryption key, and stores the copyright information in a recording medium storing the encrypted content; Have
The copyright information is information set corresponding to the encrypted content encrypted with one title key,
(A) title-specific copy control information that is the strictest copy control information among the copy control information set for each content constituent unit included in the encrypted content ;
(B) Correspondence information between copy control information and change point identification data at a change point of copy control information in the encrypted content;
An information recording apparatus including the information (a) and (b) . The information recording apparatus according to claim 1, wherein the change point identification data is a packet identifier of a content configuration packet. The information recording device includes:
The information recording apparatus according to claim 1, wherein falsification check data corresponding to the copyright information is generated and stored together with the copyright information on a recording medium. An information playback apparatus that executes content playback processing from a recording medium,
A processing unit for reading out copyright information corresponding to the reproduction target content encrypted by a title key, which is an encryption key for each title, from the recording medium, and performing reproduction control corresponding to the copyright information of the reproduction target content; Have
The copyright information is information set corresponding to the encrypted content encrypted with one title key,
(A) title-specific copy control information that is the strictest copy control information among the copy control information set for each content constituent unit included in the encrypted content ;
(B) Correspondence information between copy control information and change point identification data at a change point of copy control information in the encrypted content;
Including the information of (a) and (b) above ,
The processor is
When the entire content to be reproduced is output, the content output processing according to the title-specific copy control information is executed,
An information playback apparatus that executes content selection output processing to which correspondence information between copy control information and change point identification data is applied when performing partial output of the playback target content . 5. The information recording / reproducing apparatus according to claim 4 , wherein the change point identification data is a packet identifier of a content configuration packet. The information reproducing apparatus includes:
The falsification check data corresponding to the copyright information is generated based on the copyright information read from the recording medium, and the verification is performed by comparing the generated data with the falsification check value stored in the recording medium. 5. The information reproducing apparatus according to claim 4 , wherein the information reproducing apparatus is configured to execute information reproduction processing on the condition that execution of information falsification verification is performed and a result obtained without falsification is obtained. An information recording method for executing an encrypted content recording process on a recording medium in an information recording device,
Copyright information generation processing for generating copyright information corresponding to encrypted content encrypted by a title key that is an encryption key for each title ;
Performing copyright information storage processing for storing the copyright information in a recording medium for storing the encrypted content;
In the copyright information generation process, as copyright information corresponding to the encrypted content encrypted with one title key,
(A) title-specific copy control information that is the strictest copy control information among the copy control information set for each content constituent unit included in the encrypted content ;
(B) Correspondence information between copy control information and change point identification data at a change point of copy control information in the encrypted content;
An information recording method for executing a generation process of copyright information including each information of (a) and (b) . An information playback method for executing content playback processing from a recording medium in an information playback device,
A copyright information reading process for reading the copyright information corresponding to the content to be reproduced encrypted by the title key, which is a title unit encryption key, from the recording medium;
Executing reproduction control processing for performing reproduction control corresponding to copyright information of the content to be reproduced;
The copyright information is information set corresponding to the encrypted content encrypted with one title key,
(A) title-specific copy control information that is the strictest copy control information among the copy control information set for each content constituent unit included in the encrypted content ;
(B) Correspondence information between copy control information and change point identification data at a change point of copy control information in the encrypted content;
Including the information of (a) and (b) above ,
In the generation control process,
When the entire content to be reproduced is output, the content output processing according to the title-specific copy control information is executed,
An information playback method for executing content selection output processing applying correspondence information between copy control information and change point identification data when performing partial output of the playback target content . In the information recording apparatus, a program for executing an encrypted content recording process on a recording medium,
Copyright information generation processing for generating copyright information corresponding to encrypted content encrypted by a title key that is an encryption key for each title ;
A copyright information storage process for storing the copyright information in a recording medium for storing the encrypted content;
In the copyright information generation process, as copyright information corresponding to the encrypted content encrypted with one title key,
(A) title-specific copy control information that is the strictest copy control information among the copy control information set for each content constituent unit included in the encrypted content ;
(B) Correspondence information between copy control information and change point identification data at a change point of copy control information in the encrypted content;
The program which performs the production | generation process of the copyright information containing each information of said (a), (b) . A program for executing content reproduction processing from a recording medium in an information reproduction apparatus,
A copyright information reading process for reading the copyright information corresponding to the content to be reproduced encrypted by the title key, which is a title unit encryption key, from the recording medium;
Executing reproduction control processing for performing reproduction control corresponding to copyright information of the content to be reproduced;
The copyright information is information set corresponding to the encrypted content encrypted with one title key,
(A) title-specific copy control information that is the strictest copy control information among the copy control information set for each content constituent unit included in the encrypted content ;
(B) Correspondence information between copy control information and change point identification data at a change point of copy control information in the encrypted content;
Including the information of (a) and (b) above ,
In the generation control process,
When performing the entire output of the content to be reproduced, the content output processing according to the title-specific copy control information is executed,
A program for executing content selection output processing to which correspondence information between copy control information and change point identification data is applied when partial output of the reproduction target content is performed.