JPH11289526A - Illegal data detection method and pay broadcast receiver using the method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide the illegal data detection method where an inexpensive single memory with a large capacity is employed and falsification is difficult and to provide the pay broadcast receiver using the method. SOLUTION: The receiver is provided with a single body memory 520 that stores data and with an error detection information memory 550 that is hardly accessed from an external device in comparison with the single body memory 520. The error detection information memory 550 is accessible only via a memory control section 510. The error detection information memory 550 stores an error check code with respect to part of data or the data. An error detection section 540 compares storage contents of the error detection information memory 550 with storage contents of the single body memory 520 or uses data of the single body memory 520 and the error check code of the error detection information memory 550 to detect illegal falsification of the single body memory 520.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an unauthorized data detection method for detecting unauthorized alteration of data recorded and managed in a storage device, and a pay broadcast receiving apparatus using the same.

[0002]

2. Description of the Related Art Conventionally, in pay broadcasting in which a fee is charged according to a viewing channel or a viewing time, for example, Japanese Unexamined Patent Publication No.
As shown in Japanese Patent No. 68251, viewing management is performed according to a contract with a broadcaster for each subscriber by viewing control information called individual information. The individual information provides, for example, viewing and service in units of programs, and a fee is charged based on the viewing information as the history.

[0003] Normally, individual information and viewing information are recorded in a memory in a receiving apparatus as shown in, for example, Japanese Patent Application Laid-Open No. 3-210843. The data recorded and managed in the memory of the receiving device is important data related to the viewing contract and the billing, and it is necessary to prevent such recorded information from being easily tampered with or to be tampered with. Even in such a case, it is extremely important to prevent the unauthorized use by detecting this.

For the purpose of preventing unauthorized use (viewing) by falsification of the recorded information, for example, a smart card or a memory and a microcomputer for reading and writing from / to this memory are formed into a one-chip IC, so that data in the memory can be externally stored. A recording means that cannot easily read / write illegally is used.

FIG. 14 is a block diagram showing a configuration example of a conventional pay broadcast receiving system. The pay broadcast receiving system includes an antenna 100, a pay broadcast receiving device (hereinafter abbreviated as a receiving device) 200, a television receiver 300, and a receiving device 20.
0 and the receiving device 2
00 is a tuner 210, a demodulator 220, a controller 23
0, and a modem 240 connected to the telephone line 150.

Generally, pay programs are scrambled and transmitted so that non-subscribers cannot easily view them. In this case, the descrambling process is performed in demodulation section 220 of receiving apparatus 200.

Here, the individual information and the viewing information are recorded in an IC card 400 attached to the receiving device 200.
The memory control unit 410 controls reading and writing of the memory 420 and includes a microcomputer and the like.

Normally, the memory control unit 410 and the memory 420
The portion enclosed by the broken line including the above is integrated into one chip as a one-chip microcomputer with built-in memory. However, compared to a general-purpose single memory, the number of bits of the built-in memory is generally small, and the unit cost per bit becomes extremely expensive. It will be.

[0009]

As described above, in the prior art, in order to prevent unauthorized tampering with a memory, the memory and a portion for controlling read / write to / from this memory are one chip. The use of a simplified recording means has a problem that the storage capacity that can be accommodated is smaller than that of a general-purpose single memory, and it is difficult to apply to various services in which individual information and viewing information are increased. Was.

[0010] Further, if a variety of services are provided by storing the individual information and the viewing / listening information by using a large-capacity single memory with a low unit price per bit, unauthorized tampering cannot be prevented, and There was a problem that collection was difficult.

In view of the above problems, it is an object of the present invention to easily detect unauthorized tampering of stored data by using an inexpensive and large-capacity single memory and by using a relatively small-scale additional circuit and additional processing. To provide a method for detecting unauthorized data. It is another object of the present invention to provide a pay broadcast receiving apparatus capable of easily detecting unauthorized tampering of individual information or billing information.

[0012]

In order to achieve the above object, the present invention provides a first storage means including at least one single memory, and a second storage means in which address lines and / or data lines are not exposed to terminals. A comparison means for comparing the storage contents read from the first storage means with the storage contents read from the second storage means, wherein the first storage means A part of the data to be stored in the means is also stored in the second storage means, and the data read from the second storage means and the corresponding data read from the first storage means are compared with the comparison means. And if the results of the comparison do not match, it is determined that the contents of the first storage means have been tampered with illegally.

Further, the present invention provides a first storage means including at least one single memory, a second storage means in which an address line and / or a data line is not exposed to a terminal, and a data stored in the first storage means. Error detection code generation means for generating an error detection code based on the data, and error detection means for detecting an error in the data based on data and an error detection code corresponding to the data; And storing the error detection code generated by the error detection code generation means in the second storage means based on the data stored in the first storage means,
Based on the data read from the first storage means and the error detection code read from the second storage means corresponding to the data, the error detection means detects the presence or absence of an error. For example, there is an unauthorized data detection method that determines that the contents of the first storage unit have been tampered with illegally.

[0014] The present invention is also a pay-broadcast receiving apparatus, which is intended to detect at least unauthorized tampering of individual recipient information or billing information by the above-described method for detecting unauthorized data.

According to the present invention having the above-described structure, while data which cannot be tampered with illegally is recorded on a large-capacity single memory, error detection information relating to this data is stored in the memory.
For example, a CRC code, a checksum, a horizontal / vertical parity, etc. or a part of the data is recorded in a small-capacity storage element which is integrated with a microcomputer, for example, on one chip and cannot be easily read and written illegally from the outside. At a predetermined timing based on the error detection information, an error of the data in the single memory is detected, and the presence or absence of the error is used to determine whether or not the stored data has been tampered with.

[0016]

Embodiments of the present invention will now be described in detail with reference to the drawings. FIG. 1 is a block diagram showing a first embodiment of a pay broadcast receiving apparatus according to the present invention. The first embodiment of the fraudulent data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the first embodiment.

In FIG. 1, pay broadcast receiving apparatus 200 includes antenna 100, telephone line 150, television receiver 3
00 is connected. The pay broadcast receiving apparatus 200 includes a tuner section 210 and a demodulation section 2 having a descrambling function.
20, a control unit 2 for controlling the entire pay broadcast receiving apparatus 200
30, a modem 240 connected to the telephone line 150, a single memory 520, and a memory management unit 500 for storing and managing individual information and viewing information.

A single memory 520 as the first storage means
Consists of a memory chip having only a memory function or a package thereof, usually called a memory chip,
The address line and the data line directly enter and exit the chip or package, so that access from outside to try to falsify the contents can be easily made.

The memory management unit 500 includes a memory control unit 51
0, error detection section 540, error detection information memory 550
It has. The error detection information memory 550, which is the second storage unit, has a smaller storage capacity than the single memory 520, but is accessible only through the memory control unit 510. Then, the error detection information memory 550
Is packaged or integrated into one chip at least with the memory control unit 510, so that the address signal lines and data signal lines of the error detection information memory 550 cannot be directly accessed. As a result, the error detection information memory 550 is more difficult to access from the outside than the single memory 520, and cannot be read or written easily.

In the single memory 520, for example, data such as individual information and viewing information of a subscriber in a pay broadcast are recorded, and the memory control unit 510 uses, for example, one of these pieces of individual information for individual reception. The terminal ID of the receiving device for identifying the device or the subscriber is also recorded in the error detection information memory 550 as error detection information.

The error detector 540 compares the data stored in the error detection information memory 550 with the data recorded in the corresponding single memory 520, and if there is a match, there is no tampering, and if there is no match, there is tampering. To determine whether there is tampering.

Hereinafter, the memory management unit 50 according to the first embodiment will be described.
The operation of 0 will be described. For example, the terminal ID is stored in the single memory 520 and the error detection information memory 55 in advance.
0, and when the viewer newly views the pay program by the pay broadcast receiving apparatus 200 of FIG. 1, the view information of the program corresponding thereto is newly generated. It is stored in the single memory 520 in the unit 500.

The error detection unit 540 compares the terminal ID stored in the single memory 520 at a predetermined timing with the terminal ID read from the error detection information memory 550 via the memory control unit 510 to check for an error.

Here, if the single memory 520 is
For example, if the entire data in the single memory of another receiving device is illegally copied, the terminal ID stored in the single memory is also rewritten at the same time.
Since a mismatch is detected as a result of the terminal ID comparison by 40, it is possible to determine whether or not the single memory has been tampered with.

Further, the error detecting section 540 is thus provided.
Accordingly, when tampering is found, it is possible to expect an effect of suppressing unauthorized use due to tampering by, for example, making it impossible to view the content thereafter through the control unit 230 or sending a warning message from the television receiver 300.

The data for error detection recorded in the error detection information memory 550 is not limited to the terminal ID. A plurality of types may be used. Some data may be used, or data that is updated sequentially.

FIG. 2 shows the memory management unit 500 in FIG.
This is a modification example in which a single memory 520 is incorporated in an IC card 400 and can be attached to and detached from a receiving apparatus main body. Except for this mounting difference, the functions of the components of each unit in FIG. 2 have the same functions as the components of each unit in FIG.
That is, the memory control unit 410 corresponds to the memory control unit 5 in FIG.
10, the error detection unit 440 is the error detection unit 54 of FIG.
0, the single memory 450 becomes the single memory 520 of FIG.
The error detection information memory 460 corresponds to the error detection information memory 550 of FIG. 1, respectively, and thus the detailed description is omitted.

FIG. 3 is a block diagram showing a second embodiment of the pay broadcast receiving apparatus according to the present invention. The second embodiment of the unauthorized data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the second embodiment.

In FIG. 3, the pay broadcast receiving apparatus 200 includes an antenna 100, a telephone line 150, and a television receiver 3.
00 is connected. The pay broadcast receiving apparatus 200 includes a tuner section 210 and a demodulation section 2 having a descrambling function.
20, a control unit 2 for controlling the entire pay broadcast receiving apparatus 200
30, a modem 240 connected to the telephone line 150, a single memory 520, and a memory management unit 500 for storing and managing individual information and viewing information.

Single memory 520 as first storage means
Consists of a memory chip having only a memory function or a package thereof, usually called a memory chip,
The address line and the data line directly enter and exit the chip or package, so that access from outside to try to falsify the contents can be easily made.

The memory management unit 500 includes a memory control unit 51
0, error detection information generation section 530, error detection section 54
0, an error detection information memory 550 is provided. Although the error detection information memory 550 as the second storage means has a smaller storage capacity than the single memory 520, the memory control unit 51
It is a memory that can be accessed only through the "0". The error detection information memory 550 is packaged or integrated into one chip at least with the memory control unit 510, so that the address signal lines and data signal lines of the error detection information memory 550 cannot be directly accessed. I have. Thereby, the error detection information memory 550
Are difficult to access from outside than the single memory 520, and cannot be easily read and written.

In the single memory 520, for example, data such as individual information and viewing information of a subscriber in a pay broadcast are recorded. The error detection information generation unit 530 uses, for example, a block code such as a cyclic code (CRC code), a BCH code, or a Reed-Solomon code, or an error detection information generation algorithm such as horizontal, vertical parity, or a checksum, to generate a single memory 520. And generating error detection information for the data stored in the. The memory control unit 510 writes this error detection information on the error detection information memory 550 or reads it out.

The error detecting section 540 has a single memory 520
Based on the above data and the error detection information read via the memory control unit 510, the presence or absence of an error is detected, and tampering is determined.

Generally, pay programs are scrambled and transmitted so that non-subscribers cannot easily view them.
In this case, the descrambling process is performed in the demodulation unit 220 of the pay broadcast receiving apparatus 200.

The operation of the memory management section 500 according to the second embodiment will be described below. When the viewer newly views pay programs by using the receiving device of FIG. 3, and the viewing information of the programs corresponding to the viewing programs is newly generated, the viewing information is stored in the single memory 520 in the memory management unit 550. And
On the other hand, the error detection information generation unit 530 generates error detection information for the viewing information. This error detection information is written into the error detection information memory 550 by the memory control unit 510.

Thereafter, the error detection unit 540 sends the viewing information on the single unit 520 and the memory control unit 510 at a predetermined timing.
The presence / absence of an error is checked based on the error detection information read via the device. This makes it possible to determine whether data has been tampered with. In this way, if the error detection unit 540 finds tampering, the control unit 230 disables viewing, for example, or sends a warning message from the television receiver 300.
The effect of suppressing unauthorized use due to tampering can be expected.

FIG. 4 shows the memory management unit 500 in FIG.
This is a modification example in which a single memory 520 is incorporated in an IC card 400 and can be attached to and detached from a receiving apparatus main body. Except for this mounting difference, the functions of the components of each unit in FIG. 4 have the same functions as the components of each unit in FIG.
That is, the memory control unit 410 corresponds to the memory control unit 5 in FIG.
10, the error detection information generation section 430 is in the error detection information generation section 530 in FIG. 3, the error detection section 440 is in the error detection section 540 in FIG. 3, the single memory 450 is in the single memory 520 in FIG. Since the memory 460 corresponds to the error detection information memory 550 of FIG.
Detailed description is omitted.

FIG. 5 is a data storage diagram for explaining a third embodiment of the unauthorized data detecting method according to the present invention.
Unit memory 520 and error detection information memory 550
2 shows an example of data recorded in the data.

The structure of the pay broadcast receiving apparatus to which the unauthorized data detection method of the third embodiment is applied is the same as that of the second embodiment shown in FIG.
Or it is the same as FIG.

In FIG. 5, information to be stored in pay broadcast receiving apparatus 200 is, for example, d1, d2,.
Consists of three blocks. Of which d1, d
3 and d5 are stored in the single memory 520 and input to the error detection information generation unit 530, and corresponding error detection information EC1, EC2, and EC3 are generated. The generated error detection information EC1, EC2, EC3
Are stored in the error detection information memory 550. Also,
Of the viewing information to be stored, d2, d4, and d6 indicated by oblique lines not stored in the single memory 520 are directly stored in the error detection information memory 550.

Accordingly, in order to falsify the data on the single memory 520, data in a hatched portion which cannot be easily read from the outside must be taken into consideration and error detection information must be equalized. Falsification becomes very difficult. Thus, even if unauthorized tampering has been performed, it can be reliably detected.

FIG. 6 is a block diagram showing a fourth embodiment of the pay broadcast receiving apparatus according to the present invention. The fourth embodiment of the fraudulent data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the fourth embodiment.

In FIG. 6, the pay broadcast receiving apparatus 200 includes an antenna 100, a telephone line 150, and a television receiver 3.
00 is connected. The pay broadcast receiving apparatus 200 includes a tuner section 210 and a demodulation section 2 having a descrambling function.
20, a control unit 2 for controlling the entire pay broadcast receiving apparatus 200
30, a modem 240 connected to the telephone line 150, a single memory 520, and a memory management unit 500 for storing and managing individual information and viewing information.

The memory management unit 500 includes a memory control unit 51
0, an encryption processing unit 531, a decryption processing unit 532, an error detection unit 540, and an error detection memory 550.

The encryption processing unit 531 includes a single memory 520
The decryption processing unit 532 performs a process of encrypting data to be recorded in the memory 520, and performs a process of decrypting the encrypted data read from the single memory 520. Other components have functions similar to those of the first embodiment shown in FIG.

Hereinafter, the operation of the memory management unit 500 will be described, but the description of the same parts as those in the first embodiment will be omitted.

For example, the terminal ID of the first embodiment is stored in advance in the single memory 520 and the error detection information 550.
However, the encryption processing unit 531 performs encryption processing on the single memory 520 and records the result. When the viewer of FIG. 6 views a new pay program by using the receiving apparatus, and new viewing information of the program corresponding thereto is generated, the viewing information is sequentially encrypted by the encryption processing unit 531. Single memory 52 via memory control unit 510
0 is stored.

The error detection unit 540 includes a memory control unit 51
0, the terminal ID is read from the single memory 520 at a predetermined timing, and is decoded by the decoding processing unit 532.
The presence / absence of an illegal tampering is determined by comparing the terminal ID read from the terminal 50 and checking for an error.

Since the data stored in the single memory 520 is encrypted, it is difficult to analyze the meaning even if it is read from the outside, and it is possible to detect tampering more effectively and prevent unauthorized use. Can be prevented.

The error detection information recorded in the error detection information memory 550 for error detection can use the error detection codes described in the first to third embodiments. However, a plurality of these types may be used. As long as the data is also recorded in the memory 520, a part of the above-described viewing information may be used, or the data may be sequentially updated.

FIG. 7 is a block diagram showing a fifth embodiment of the pay broadcast receiving apparatus according to the present invention. The fifth embodiment of the fraudulent data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the fifth embodiment.

In FIG. 7, the pay broadcast receiving apparatus 200 includes an antenna 100, a telephone line 150, and a television receiver 3.
00 is connected. The pay broadcast receiving apparatus 200 includes a tuner section 210 and a demodulation section 2 having a descrambling function.
20, a control unit 2 for controlling the entire pay broadcast receiving apparatus 200
30, a modem 240 connected to the telephone line 150, a single memory 520, and a memory management unit 500 for storing and managing individual information and viewing information.

The memory management unit 500 includes a memory control unit 51
0, error detection information generation section 530, error detection section 54
0, an error detection information memory 550, an error detection information generation algorithm management table 560, and a timer 570.

The error detection information generation section 530 has an error detection information generation algorithm that can be changed or includes a plurality of error detection information generation algorithms in advance. The error detection unit 540 includes the error detection information generation unit 53
Similarly, the error detection algorithm can be changed corresponding to 0, or a plurality of error detection algorithms are provided in advance.

As described in the first embodiment, the plurality of error detection algorithms include, for example, a cyclic code (C
RC codes), BCH codes, Reed-Solomon codes, and other block codes, and error detection algorithms such as horizontal, vertical parity, and checksums. The switching or change of the error detection algorithm can be realized. When parity is used for error detection information, switching between even parity and odd parity is also possible.

The error detection information generation algorithm management table 560 manages the management of the algorithms of the error detection information generation unit 530 and the error detection unit 540 and the change of the algorithm. The timer 570 is used to change the error detection algorithm every time a predetermined time elapses.
A predetermined time is notified to the memory control unit 510. Other components have functions similar to those of the first embodiment shown in FIG.

Hereinafter, the operation of the fifth embodiment will be described, but portions which are the same as those of the fifth embodiment will be omitted.
The memory control unit 510 generates an error each time a certain period of time passes using a predetermined timing, for example, using a timer 570, or causes the control unit 230 to count the number of programs watched, and every time a certain number of programs are viewed. A new error detection information generation algorithm is selected from the detection information generation algorithm management table 560.

Then, with the newly selected algorithm, new error detection information is generated for the viewing information already recorded on the single memory 520, and the error detection information memory 550 is generated via the memory control unit 510. Update the above error detection information.

Here, the error detection information memory 550
The above data update process may be performed after checking whether data on the single memory has been tampered with by the error detection information generation algorithm before the update.

In the present embodiment, a plurality of error detection information generation algorithms and a plurality of error detection algorithms corresponding thereto are stored in advance in the error detection information generation algorithm management table 560, and, for example, every predetermined time, a predetermined number of Since the algorithms of the error detection information generation unit 530 and the error detection unit 540 are updated for each viewing program, the security against unauthorized alteration of the data on the single memory 520 can be further improved.

FIG. 8 is a block diagram showing a pay broadcasting system including a sixth embodiment of the pay broadcast receiving apparatus according to the present invention. The sixth embodiment of the unauthorized data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the sixth embodiment.

Referring to FIG. 8, a pay broadcasting system includes a center device 600 for supplying a program and a satellite 70 for transmitting the program.
0 and a subscriber terminal 900 of each viewer.
The subscriber terminal 900 includes the antenna 100, the pay broadcast receiving device 200, and the television receiver 300.

The pay broadcast receiving apparatus 200 has a decoding processing unit 580 added between the memory control unit 510 and the error detection information generation algorithm management table 560. The other configurations of the pay broadcast receiving apparatus 200 are the same as those of the receiving apparatus of FIG.

Memory management unit 5 of pay broadcast receiving apparatus 200
00 manages the storage of the individual information and the viewing information. The error detection information generation algorithm management table 560 of the memory management unit 500 stores an algorithm for generating error detection information multiplexed and transmitted to the broadcast. It is a rewritable management table to be stored.

In center device 600, algorithm data 640 for generating error detection information such as a CRC code and a checksum is transmitted to encryption processing section 630.
After the program content 62 is scrambled by
0 and multiplexed by the multiplexing processing unit 650,
0, transmitted to the satellite 700 via the antenna 610.

In the subscriber terminal 900, radio waves from the satellite 700 are fetched by the antenna 100, a target signal is selected by the tuner 210 by the controller 230, and the signal is reproduced by the demodulator 220. The memory control unit 510 in the memory management unit 500 appropriately extracts the multiplexed and transmitted error detection information generation algorithm information, performs descrambling processing by the decoding processing unit 580, and downloads it to the error detection information algorithm management table 560. .

The algorithm data 640 for generating error detection information is transmitted from the center 600 to the subscriber terminal 900 via the telephone line 150 via the modem 670, and may be received by the modem 240 of the pay broadcast receiving apparatus 200. .

As described above, an effective error detection algorithm can be appropriately used, and illegal tampering can be detected effectively.

Next, a seventh embodiment will be described.
Regarding the error detection information, for example, if a checksum is taken as an example, generally, there are a plurality of data strings having the same data length and the same checksum value. In such a case, there is a possibility that illegal tampering cannot be detected by error detection using only the checksum. The same applies to the CRC code and other error detection codes. In order to improve this, the following memory management is performed.

FIG. 9 is a block diagram showing a seventh embodiment of the pay broadcast receiving apparatus according to the present invention. The seventh embodiment of the fraudulent data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the seventh embodiment. In FIG. 9, constraint information memory 590 is added to pay broadcast receiving apparatus 200. Other configurations are the same as those of the pay broadcast receiving apparatus 200 in FIG.

In the constraint information memory 590, for example, FIG.
The constraint information, which is fixed data to be stored at a specific address of the single memory 520 as shown in FIG. 0, is stored in advance in a format in which the address information and the fixed data are paired.

Based on the constraint information stored in the constraint information memory 590, the fixed data of the specific address is stored in the single memory 520 as shown in FIG.
That is, avoiding a portion where fixed data such as AA at address 1, BB at address 2, and CC at address 3 is stored,
Data d1, d2, d3,... Such as viewing information are recorded.

The hatched portion in FIG. 11 indicates the single memory 52 in FIG.
0 indicates a position where a value is written according to the contents of the constraint information memory, and the error detection information generation unit 530 in FIG.
Generates error detection information in consideration of the position of the hatched portion.
It also checks whether the value at a given position on 0 is correct.

By imposing restrictions on values stored at specific address positions on the single memory 520 in advance in this way, it becomes difficult to satisfy these restrictions and falsify data. This can be more reliably detected even when it is performed.

FIG. 12 is a block diagram showing a pay broadcast system including an eighth embodiment of the pay broadcast receiving apparatus according to the present invention. The eighth embodiment of the unauthorized data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus according to the eighth embodiment.

The portion surrounded by a broken line of the pay broadcast receiving apparatus 200 is a memory management section 500. The restriction information memory 590 stores, from the center apparatus 600, restriction information data 660 in the format shown in FIG. After being encrypted at 670, it is multiplexed with the program content 620 and the like by the multiplexing processing section 650, and transmitted to the satellite 700 via the modulation section 680 and the antenna 610.

In the subscriber terminal 900, radio waves from the satellite 700 are fetched by the antenna 100 and
After the channel is tuned by the tuner section 210 of the demodulation section 220,
Then, the constraint information data is taken out, and the memory management unit 500
Are stored in the constraint information memory 590 after being decoded by the decoding processing unit 580.

Here, the constraint information data 660 is
0, and may be transmitted from the center 600 via the telephone line 150 and received via the modem 240 of the pay broadcast receiving apparatus. Thus, even if the constraint information is broken, it can be updated, so that the security of the memory management is not impaired.

FIG. 13 is a block diagram showing a pay broadcast system including a ninth embodiment of the pay broadcast receiving apparatus according to the present invention. The ninth embodiment of the unauthorized data detection method according to the present invention will be described through the description of the pay broadcast receiving apparatus of the ninth embodiment.

The subscriber terminal 900 includes the antenna 100, the pay broadcast receiving apparatus 200, and the television receiver 300. The modem 240 of the pay broadcast receiver 200 is connected to the individual information supply source 680 via the telephone line 150. The configuration inside pay broadcast receiving apparatus 200 is the same as that in FIG. The individual information supply source 680 includes a database 681 for storing personal information management data, a control unit 682, and a modem 683.

Error detecting section 5 of pay broadcast receiving apparatus 200
At 40, for example, when an error is detected in the data relating to personal information on the single memory 520, the control unit 230 reads out the individual information in the single memory 520 by the memory control unit 510, and reads this through the telephone line 150 by the modem 240. To the source 680 of the individual information.

At the personal information supply source 680, the individual information data sent from the subscriber terminal 900 is received by the modem 683, and the control unit 682 compares the sent information with the managed individual information management data 681. By performing comparison and checking for the presence or absence of an error, the presence or absence of tampering is detected.

Thus, the supplier who originally manages the individual information can also grasp the presence or absence of unauthorized tampering.
This can be used for the operation of the pay broadcasting system.

While the preferred embodiments have been described above, they do not limit the present invention. For example,
In the third and subsequent embodiments, data to be stored and managed may be stored in an IC card as shown in FIGS. 2 and 4, or a plurality of single memories may be used. Further, the unauthorized data detection method of the present invention can be applied to detect unauthorized data tampering or the like in not only the pay broadcast receiving apparatus but also other apparatuses.

[0085]

As described above, according to the present invention, since a general-purpose single memory is used, a large amount of data can be recorded and managed at low cost, and if the recorded information on the single memory is illegally tampered with. This can be detected even if it occurs. Therefore, for example, even when the individual information and the viewing information on the single memory are illegally copied as a whole, this can be detected, and unauthorized viewing and use due to tampering can be prevented.

[Brief description of the drawings]

FIG. 1 is a block diagram illustrating a pay broadcast receiving apparatus according to a first embodiment of the present invention.

FIG. 2 is a block diagram showing a modification of the first embodiment.

FIG. 3 is a block diagram illustrating a pay broadcast receiving apparatus according to a second embodiment of the present invention.

FIG. 4 is a block diagram showing a modification of the second embodiment.

FIG. 5 is a data storage diagram illustrating a third embodiment of the pay broadcast receiving apparatus according to the present invention.

FIG. 6 is a block diagram illustrating a pay broadcast receiving apparatus according to a fourth embodiment of the present invention.

FIG. 7 is a block diagram showing a fifth embodiment of the pay broadcast receiving apparatus according to the present invention.

FIG. 8 is a block diagram illustrating a pay broadcast receiving apparatus according to a sixth embodiment of the present invention.

FIG. 9 is a block diagram illustrating a pay broadcast receiving apparatus according to a seventh embodiment of the present invention.

FIG. 10 is an example of storage contents of a constraint information memory according to a seventh embodiment.

FIG. 11 is an example of data storage on a single memory based on constraint information according to a seventh embodiment.

FIG. 12 is a block diagram showing an eighth embodiment of the pay broadcast receiving apparatus according to the present invention.

FIG. 13 is a block diagram showing a ninth embodiment of the pay broadcast receiving apparatus according to the present invention.

FIG. 14 is a block diagram showing a configuration example of a conventional pay broadcast receiving apparatus and a part for managing a memory thereof.

[Explanation of symbols]

100 antenna, 150 telephone line, 200 pay broadcasting receiver, 300 television receiver, 210 tuner section, 220 demodulation section, 230 control section, 240 modem, 500 memory management section, 510 memory Control unit, 5
20: Single memory, 540: Error detection unit, 550: Error detection information memory.

Claims (9)

[Claims] A first memory including at least one single memory;
A second storage unit in which an address line and / or a data line is not exposed to a terminal; a storage content read from the first storage unit;
And a comparing means for comparing the stored content read from the storage means of the first storage means. A part of the data stored in the first storage means is stored in the second storage means. The data read from the second storage means and the corresponding data read from the first storage means are compared by the comparison means. If the comparison results do not match, the first data is read. A method for detecting unauthorized data, characterized in that it is determined that the content of the storage means has been tampered with illegally. 2. A first memory including at least one single memory.
Storage means, an address line and / or a data line are not exposed to terminals, an error detection code generation means for generating an error detection code based on data stored in the first storage means, And an error detecting means for detecting an error of the data based on an error detecting code corresponding to the data, wherein the method comprises the steps of: The error detection code generated by the error detection code generation means is stored in the second storage means, and the data read from the first storage means and the error detection read from the second storage means corresponding to this data The error detection means detects the presence or absence of an error based on the code, and if there is an error in the detection result, the content of the first storage means has been tampered with. Bad data detection method characterized in that it is determined that. 3. When storing data in the first storage means, a part of the data is not stored in the first storage means but is stored in the second storage means. 3. The method for detecting unauthorized data according to claim 1 or 2. 4. The apparatus according to claim 1, wherein at least a part of data stored in said first storage means is encrypted, and encrypted data read from said first storage means is decrypted. The unauthorized data detection method according to claim 1. 5. The code generation algorithm of the error detection code generation means is updatable, and the contents of the second storage means already stored at the time of updating are updated so as to correspond to the updated code generation algorithm. 3. The method for detecting unauthorized data according to claim 2, wherein 6. A restriction information storage means for storing restriction information for preliminarily restricting a value recorded at a predetermined position on the first storage means, wherein the first storage means stores the restriction information in accordance with the restriction information. 3. The method according to claim 2, wherein recording is performed, and a code generation algorithm of the error detection code generation means also takes into account the constraint information. 7. The method according to claim 5, wherein the code generation algorithm or the constraint information is updated using information transmitted from a broadcasting station by broadcasting or communication. 8. A pay-broadcast receiving apparatus characterized by detecting at least unauthorized tampering of individual recipient information or billing information by the unauthorized data detection method according to any one of claims 1 to 7. 9. Transmitting data in the first storage means to a source of individual information when a mismatch is detected by the comparison means or when an error is detected by the error detection means. 9. The pay broadcast receiving apparatus according to claim 8, wherein: