JP4843686B2 - Transmission device, reception device, and transmission method - Google Patents

Description

  The present invention relates to a transmission device, a reception device, and a transmission method for transmitting or receiving various types of content that require copyright protection.

  With the spread of computer networks such as broadband and wireless LAN and the advancement of digital technology, products called digital information devices (hereinafter referred to as digital home appliances) having communication functions are becoming popular. In addition, with the start of terrestrial digital broadcasting, digital broadcasting compatible televisions, set-top boxes, DVD recorders, and the like are expected to become more widespread in the future. If multiple digital home appliances are connected to the network, users can enjoy content via the network, which is beneficial.

  Here, the content refers to various digital data, for example, moving image data such as MPEG-2 and MPEG-4, audio data, document data such as text data and image data. While content of this kind of digital data has the advantage that it can be easily copied without degradation, attention must be paid to the copyright of the content. For example, consider a case in which a content whose copyright is to be protected is moved from a certain transmitting device to a receiving device. When moving content that should be protected by copyright, the content transmitted to the receiving device moves without remaining in the transmitting device and is not copied in plain text to other devices other than the receiving device on the communication path. It is desirable. As means for preventing copying of content on a communication path, there is a method in which a key is shared between a transmitting device and a receiving device, and the content is encrypted using the key and transmitted (see Non-Patent Document 1).

In the multicast or broadcast model in which the same content is simultaneously delivered from a transmitting device to a plurality of receiving devices, it is more efficient from the viewpoint of communication efficiency to encrypt the content with the same key. Therefore, a situation occurs in which a plurality of receiving apparatuses share the same key. However, when moving with a key distributed to a plurality of receiving apparatuses, the contents to be moved can be decrypted by the plurality of receiving apparatuses, and the content movement is not normally executed.
DTCP-IP specification “DTCP, Volume 1, Supplement E, Mapping DTCP to IP (Information Version)” (http://www.dtcp.com)

  As described above, in the conventional content transmission / reception system, there is a possibility that the content is not moved normally and the copyright cannot be protected.

  The present invention has been made in view of the above problems, and an object of the present invention is to provide a content transmission device, a content reception device, and a content transmission method capable of preventing unauthorized use of content and efficiently using content. It is to be.

  In order to solve the above problems and achieve the object, the present invention uses the following means.

According to one embodiment of the present invention, in a transmission method for transmitting content from a transmission device to the first receiving device, a first step of the transmitting device transmits the content reception request to the first receiving apparatus, said first authentication for the second key for specific moved to the first key or said first receiving apparatus for common rendering the plurality of receiving devices, including receiving device the first receiving apparatus, the request to start the key exchange A second step of transmitting to the transmitting device; a third step of transmitting to the first receiving device the first key or the second key obtained by the authentication and key exchange; and the first receiving device. key but according to the label contained in the authentication, and a fourth step of transmitting the content reception confirmation to the transmission apparatus including the label of the key obtained by the key exchange, the transmitting device is the content reception confirmation Used to anda fifth step of transmitting to the first receiver device encrypts the content.

According to another embodiment of the present invention, common to a plurality of receiving apparatus including a first means for transmitting a content reception request to the first receiving apparatus, said first receiver device sent from the first receiver device A second means for receiving an authentication and key exchange start request for the first key for rendering or the second key for movement unique to the first receiving device; and the second means obtained by the authentication and key exchange. A third means for transmitting one key or the second key to the first receiving device and a content reception confirmation including the key label obtained by the authentication and key exchange transmitted from the first receiving device are received. a fourth means, transmitting anda fifth means for encrypting and transmitting to the first receiver device the content by using the key corresponding to the label included in the content reception confirmation is provided.

According to another embodiment of the present invention, a first means for receiving a content reception request transmitted from a transmitting device, a first key for rendering common to a plurality of receiving devices, or a move unique to the receiving device. authentication for the second key of receiving a second means for transmitting a start request of the key exchange to the transmitting device, the authentication, the first key or the second key obtained by the key exchange from said transmitting device third means, the authentication, using a fourth means for transmitting a content reception confirmation including the label of the key obtained by the key exchange to the transmitting device, a key corresponding to the label included in the content reception confirmation encryption receiving apparatus is provided comprising a fifth means for receiving of content from the transmitting device.

  According to the present invention, it is possible to provide a content transmission device, a content reception device, and a content transmission method that can prevent unauthorized use of content and that can efficiently use content.

  Hereinafter, embodiments of a content transmission device, a content reception device, and a content transmission method according to the present invention will be described with reference to the drawings.

  The present embodiment relates to a content transmission / reception system for moving, rendering, or copying content from a content transmission device (hereinafter referred to as a transmission device) to a content reception device (hereinafter referred to as a reception device). “Move” is to invalidate (delete) content on the transmission side after transmission of the content, but does not invalidate rendering / copying. Copying means that a plurality of identical contents exist in the system. In the rendering, the content stored in the transmission device is displayed by the reception device, and there are not a plurality of the same content in the system. In the following, for convenience of description, when simply referred to as rendering, both copying and rendering are included.

  Since the transmission device stores content, the transmission device is also called a source and the reception device is also called a sink. The first embodiment is an example in which content transmission or rendering is requested from the reception device to the transmission device side. Since the user is on the reception device side, the reception device is also called a client, and the transmission device is also called a server. The second embodiment is an example in which content transmission or rendering is requested from the transmission device to the reception device side. Since the user is on the transmission device side, the transmission device is also called a client, and the reception device is also called a server.

First Embodiment FIG. 1 is a block diagram illustrating a schematic configuration of a transmission device 100 according to a first embodiment. As shown in FIG. 1, the transmission apparatus 100 includes a content supply unit 12, an authentication / key exchange processing unit 14, a content list management unit 16, a key selection processing unit 18, an encryption processing unit 20, and a network interface processing unit. 22, a content transmission connection management unit 24, a content management connection management unit 26, and an authentication / key exchange connection management unit 28.

  The content supply unit 12 accumulates content and a content list.

  The authentication / key exchange processing unit 14 performs authentication / key exchange processing with the receiving device. In the present embodiment, as shown in FIG. 2, the presence of a plurality of receiving devices A, B, and C (or D and E) is allowed for one transmitting device X (or Y). The authentication / key exchange processing unit 14 generates a secret key for encrypting the content to be transmitted to each receiving device when the authentication / key exchanging processing with the receiving device is successful. In the present embodiment, content is encrypted using separate secret keys for rendering and moving. Hereinafter, a secret key used for encrypting the rendering content is referred to as a common key Kx, and a secret key used for encrypting the move content is referred to as a move key Kxm.

  The common key Kx and the move key Kxm generated by the authentication / key exchange processing unit 14 are encrypted with a key shared between the transmission device and the reception device by key exchange and transmitted to the reception device. The common key Kx and the move key Kxm are stored in the authentication / key exchange processing unit 14 with the common key label and the move key label, respectively. As will be described later, since the presence of a plurality of keys (common key, move key) is allowed, the common key label and the move key label are identification information for distinguishing each key.

  The transmitting apparatus shares the same common key Kx with all the receiving apparatuses that have succeeded in the authentication / key exchange process. That is, there is only one common key Kx for each transmission device. In a multicast or broadcast model in which the same content is simultaneously delivered from a transmitting device to a plurality of receiving devices, it is preferable to encrypt the content with the same key from the viewpoint of communication efficiency. Therefore, the transmitting device transmits the same common key Kx to a plurality of receiving devices.

  On the other hand, the transmitting apparatus shares a move key Kxm different from the common key Kx with each receiving apparatus. When performing a move on a plurality of receiving apparatuses, a plurality of move keys Kxm may be held corresponding to each receiving apparatus.

  Here, the authentication / key exchange process is a common method when the transmitting device and the receiving device mutually authenticate that they are properly licensed from a license institution and confirm that they are valid devices. Refers to the process of generating a key. As the authentication method, there are known methods such as ISO / IEC 9798-3 and ISO / IEC 9798-2.

  The content list management unit 16 manages a list of content stored in the content supply unit 12 or presents a list of stored content in response to a content search request from the receiving device.

  The key selection processing unit 18 determines whether to encrypt the content with the common key Kx or the move key Kxm depending on whether the content request received from the receiving device is a rendering request or a move request. Processing is performed, and an appropriate key is selected from the keys shared with the receiving apparatus stored in the authentication / key exchange processing unit 14 and supplied to the encryption processing unit 20.

  The encryption processing unit 20 encrypts the content using the key supplied from the key selection processing unit 18. As an encryption algorithm for encrypting / decrypting these data, there is a known method such as AES.

  The network interface processing unit 22 executes physical layer processing, data link layer processing, and network layer / transport layer processing for communication with the receiving apparatus. The physical layer and the link layer can take various forms such as a wireless LAN conforming to IEEE 802.11, Ethernet (registered trademark), IEEE 1394, and the like. The network layer may be IPv4 or IPv6 when an Internet protocol (hereinafter simply referred to as IP) is used.

  The content transmission connection manager 24 manages content transmission connections. The content management connection management unit 26 manages a connection for presenting a content list or presenting a URL of content in response to a request from the receiving device. For example, a protocol such as UPnP (Universal Plug and Play) is used as a method for presenting a list of contents to the receiving apparatus. For example, a URL is used as a means for representing the location of the content.

  The authentication / key exchange connection management unit 28 manages an authentication / key exchange connection.

  FIG. 3 is a block diagram illustrating a schematic configuration of the receiving apparatus 102 according to the first embodiment. As shown in FIG. 3, the receiving apparatus 102 includes a content processing unit 32, an authentication / key exchange processing unit 34, a content selection unit 36, a key selection processing unit 38, an encryption processing unit 40, and a network interface processing unit. 42, a content transmission connection management unit 44, a content management connection management unit 46, and an authentication / key exchange connection management unit 48.

  The network interface processing unit 42, the content transmission connection management unit 44, the content management connection management unit 46, and the authentication / key exchange connection management unit 48 have the same functions as the corresponding blocks in the transmission device. It can be composed of similar blocks.

  The content processing unit 32 performs processing for outputting the received content to a display device or the like, or accumulating it in a storage unit (not shown).

  The authentication / key exchange processing unit 34 performs authentication / key exchange processing with the transmission apparatus. When the authentication / key exchange processing is successful, the authentication / key exchange processing unit 34 receives the common key Kx and the move key Kxm, which are secret keys used for decrypting the content, from the transmitting device, and labels them. Store.

  The content selection unit 36 communicates with the transmission device, searches for content stored in the content supply unit 12 of the transmission device, and manages a list of search results and the location of each content on the network. As means for acquiring a list of contents stored in the transmission apparatus from the transmission apparatus or a device on the network, means such as UPnP is used. As a means for specifying the location of the content on the network, a means such as a URL is used. The content for the move and the content for the rendering may be distinguished by the URL.

  The key selection processing unit 38 determines whether the content request from the content selection unit 36 is a move request or a rendering request. If the request is a move request, the key selection processing unit 38 identifies the move key label and requests the content request to the transmitting apparatus. Send. On the other hand, if the request is a rendering request, the content request is transmitted without adding anything. That is, when acquiring content from the transmission device, the URL of the corresponding content is acquired from the content selection unit 36, and the key selection processing unit 18 transmits a GET request to the URL using, for example, the HTTP protocol. Get content from

  The encryption processing unit 40 decrypts the content using the common key or the move key.

  FIG. 4 is a sequence diagram showing a processing procedure of the content transmission / reception system according to the present embodiment. In the present embodiment, three communication connections A, B, and C are provided between the transmission device 100 and the reception device 102. Connection A is used for content management, connection B is used for authentication and key exchange, and connection C is used for content transmission.

  First, the receiving apparatus 102 requests a content search from the transmitting apparatus 100 using the connection A (step # 2). Prior to this content search, a well-known method such as UPnP is used to search for an IP address of a transmission device on the network or to specify a transmission destination IP address or port number of a message to be searched for content. Used.

  The transmission apparatus 100 presents a content list and the URL of the content as a result of the content search (step # 4). At this time, if the transmitting apparatus 100 distinguishes the moving contents and the rendering contents by the URL, the receiving apparatus 102 can know the contents that can be moved.

  As a content search protocol, a method defined by UPnP Content Directory Service (UPnP CDS) may be used. It should be noted that the IP address and TCP port number of the transmission device for the authentication and key exchange between the reception device and the transmission device may be added as URL additional information indicating the location of the content. Further, when the transmitting device presents a list of contents to the receiving device, the same content may be listed by distinguishing the rendering address and the moving address. As a means for distinguishing between the address for the move and the address for the rendering, (a) a method of adding additional information indicating that the address is a move address to the address of the content, and (b) attaching a move key label to the address of the content Method, etc.

  The receiving apparatus 102 selects desired content from the content list. Here, it is assumed that the content for the move is selected. The receiving apparatus obtains the address and port number of the transmitting apparatus that should perform the authentication / key exchange process from the additional information of the content location, and uses the connection B to start the authentication / key exchange process for the move to the transmitting apparatus. Request (step # 6). If the authentication / key exchange process is successful, the transmitting device 100 generates a common key Kx and a move key Kxm, which are secret keys used to encrypt content with each receiving device, and is shared by the receiving devices. The key Kx and the move key Kxm are transmitted together with the label information (step # 8).

  In order to ensure security, the authentication / key exchange processing unit 34 generates a different value each time as the move key Kxm, and the generated move key Kxm is only once on the network regardless of whether or not the receiving devices are the same. It is desirable not to send.

  The same move key Kxm may be transmitted if it can be confirmed by authentication / key exchange that the receiving apparatus is the same as the apparatus that performed the previous authentication / key exchange, but at least for the different receiving apparatuses, the same move key It is important that Kxm is not passed. Thereby, it can be guaranteed that the content encrypted using the move key Kxm can be decrypted by only one receiving device.

  For example, when the transmitting device X shown in FIG. 2 receives a request for moving content a from the receiving device A and a rendering request for content b from the receiving device B, the transmitting device X transmits the request to the receiving device A to the receiving device A. The content a is encrypted using the move key Kxm1, and the content b is encrypted and transmitted to the receiving device B using the common key Kx1.

  In this way, the rendering content b may be decrypted when the receiving devices A and C having the common key Kx1 other than the receiving device B receive the content by some means. However, the moving content a is decrypted by the receiving device A having the move key Kxm1, but cannot be decrypted by the receiving devices B and C that do not have the move key Kxm1, even if they can be received. . For this reason, it is possible to prevent the content a to be moved from being decrypted by two or more receiving devices.

  In addition, since the transmission apparatus can simultaneously receive a rendering request and a move request for different contents, it is possible to improve both security and user-friendliness. Also, even when the transmitting device receives different content move requests from multiple receiving devices, it is only necessary to encrypt each content using the key transmitted to each receiving device. can do.

  The move key label is label information corresponding to each move key, and each move when the transmission device (for example, the transmission device X in FIG. 2) has a plurality of move keys (for example, Kxm1, Kxm2, and Kxm3). When distinguishing keys or when a receiving device moves content from multiple transmitting devices, it performs authentication and key exchange for moving with which transmitting device, and which move key is used for decryption. It is used to determine if it should be done. The move key is encrypted and transmitted using the key shared by the authentication / key exchange process, but the move key label itself is not a secret value and may be transmitted over the network as plain text.

  As a means for requesting the move key Kxm from the receiving apparatus to the transmitting apparatus, for example, the following examples can be considered.

(1) In addition to the authentication / key exchange request for receiving the common key (FIG. 5A), the authentication / key exchange request for receiving the move key is made (FIG. 5B).
(2) An authentication / key exchange request for receiving the common key is made, and once the common key is received, the move key request is transmitted to the transmitting device and encrypted with the same key as the common key is encrypted. Receive move key ((a) of FIG. 6)
(3) Based on the authentication / key exchange request for receiving the common key, the transmitting device transmits both the common key and the move key ((b) of FIG. 6).
In consideration of compatibility with a receiving apparatus that can receive only the common key or a transmitting apparatus that does not have the function of transmitting a move key, in the case of FIG. 6A, the receiving apparatus transmits a move key request. Before the transmission, in the case of FIG. 6B, the functions of each other may be confirmed in advance before the transmission device transmits the common key / move key.

  In addition, when it is known that the move key Kxm has already been acquired by performing authentication / key exchange with the transmission device, based on the IP address of the transmission device, etc., authentication / key exchange of the move key Kxm This process may be skipped. In that case, in order to confirm whether or not the transmission device has the move key possessed by the reception device, the reception device may make an inquiry to the transmission device prior to the content request. In this case, the inquiry includes the move key label, and the transmitting apparatus performs a search process to determine whether or not the move key label is stored in the own apparatus, and returns the search result to the receiving apparatus.

  Returning to FIG. 4, when the receiving apparatus 102 receives the move key Kxm and the move key label, the receiving apparatus 102 transmits a content move request to the transmitting apparatus 100 using the connection C (step # 10). The move request includes a move key label indicating which move key can be used to receive the encrypted content. An example of a move request (GET request) of the HTTP protocol is shown below. The fifth line shows the move key label.

Content-Type: application / x-dtcp1;
DTCP1HOST = <host>;
DTCP1PORT = <port>;
CONTENTFORMAT = <mimetype>;
DTCPKXM = <exchange_key_label>
The transmitting apparatus 100 looks at the move key label included in the move request to determine which move key should be used to encrypt the content, encrypts the content using the move key that matches the move key label, and receives the apparatus. 102 (step # 12).

  The format of the content to be transmitted is shown in FIG. The content is transmitted in the form of a pack composed of a header portion 5252 and an encrypted content portion 54. The header part 52 includes a move key label 58. In addition to this, in the header part 52, information such as copy control information 56 of content such as copy prohibition, copy of only one generation, move, and copy permission, and the length (content length) 60 of the content part before encryption May be included.

  If the move key designated by the receiving device does not exist in the transmitting device, the content is not transmitted and an error is returned. In addition to the move key label, the receiving device may attach to the content request additional information for distinguishing whether the content request is a move request or a rendering request from the transmitting device. The additional information may be a URL argument, or a new request header may be defined and inserted as a parameter.

  The transmission device deletes or disables (invalid) the content that has been moved and transmitted after the content transmission is completed.

  When the receiving device receives the encrypted content, the move key label 58 attached to the header portion 52 of the content is compared with the move key label stored in the authentication / key exchange processing unit 34. If the values match, the content decryption is performed. To start. If they do not match, the content reception is stopped. The case where the value of the move key label is different means that the value of the move key used by the transmitting apparatus for content encryption is different from the value of the move key held by the receiving apparatus. In the case of a move, the transmission device deletes or makes the transmitted content unusable (invalidated). Therefore, if the reception device cannot correctly decrypt the content, the content is lost. In order to avoid this, a move key label 58 is inserted into the header portion 52 of the content to determine whether or not the receiving device can correctly decrypt the content.

  Instead of determining whether or not the content can be decrypted based on the move key label 58 included in the header portion 52 of the content received by the receiving device, the transmitting device transmits a content response in response to the content request prior to transmitting the content. However, a move key label may be included in the content response. In this case, the receiving apparatus performs processing for determining whether or not the move key label in the content response matches the move key label of the own apparatus. When the content request is made by an HTTP protocol GET request, the move key label may be included in the HTTP Response header.

  In this way, since it is possible to determine whether or not the receiving device is a content that can be decrypted by the content response, if the receiving device is content that cannot be received, the receiving device can disconnect the connection before receiving the content. Since the connection can be disconnected before the content is transmitted, it is possible to prevent unnecessary transmission and prevent the content from being lost.

  FIG. 8 is a flowchart showing an operation procedure of the transmission apparatus. In the first embodiment, since the receiving apparatus is a model for selecting which content in the transmitting apparatus is to be moved, the transmitting apparatus 100 first receives a content search request from the receiving apparatus 102 through connection A (step S2). The content list is transmitted as a response (step S4).

  Thereafter, the transmitting apparatus 100 receives a move authentication / key exchange request from the receiving apparatus 102 over the connection B (step S6), and performs authentication / key exchange processing with the receiving apparatus 102. In step S8, the transmission device 100 determines whether the authentication / key exchange process is successful. If the authentication / key exchange process fails, the transmitting apparatus 100 performs an error process (transmits a message to that effect to the receiving apparatus) (step S10), and the subsequent processes are not performed.

  When the authentication / key exchange is successful, the transmitting device 100 encrypts the move key using the key shared with the receiving device 102 by the authentication / key exchange, attaches the label, and transmits the encrypted move key to the receiving device 102 over the connection B. (Step S12).

  Thereafter, the transmitting apparatus 100 receives a move request (including a move key label) for moving the actual content from the receiving apparatus 102 over the connection C (step S14), and is designated by the move key label included in the move request. It is searched whether or not there is a move key in the own device (step S16).

  If the move key specified by the move key label included in the move request does not exist in the own device, the transmitting device 100 performs error processing (transmits a message to that effect to the receiving device) (step S10). The content is not transmitted.

  If the designated move key exists in the own device, the transmitting device 100 encrypts the content using the move key (step S20), and transmits the encrypted content to the receiving device 102 via the connection C (step S22). ).

  FIG. 9 is a flowchart showing an operation procedure of the receiving apparatus 102. The receiving apparatus 102 transmits a content search request to the transmitting apparatus 100 via the connection A (step S32), and receives the content list transmitted from the transmitting apparatus 100 (step S4 in FIG. 8) as a response (step S34).

  Thereafter, the receiving apparatus 102 transmits a move authentication / key exchange request to the transmitting apparatus 100 via the connection B (step S36), and starts an authentication / key exchange process. In step S38, the receiving apparatus 102 determines whether the authentication / key exchange process is successful. If it is determined that the authentication / key exchange process has failed, the receiving apparatus 102 performs error processing (sends a message to that effect to the transmitting apparatus) (step S40), and does not perform the subsequent processes.

  When the authentication / key exchange is successful, the receiving apparatus 102 receives the encrypted move key and the move key label transmitted by the transmitting apparatus 100 (step S12 in FIG. 8) over the connection B (step S42). The receiving apparatus 102 decrypts the received encrypted move key using a key shared by authentication and key exchange, and stores it together with the move key label.

  Next, the receiving apparatus 102 selects the content to be moved from the content list (step S44), and sends a move request to the transmitting apparatus 100 through the connection C together with the move key label corresponding to the move key shared with the transmitting apparatus 100. Transmit (step S46). Then, the receiving device 102 receives the encrypted content transmitted from the transmitting device (step S22 in FIG. 8) as a response to the move request (step S48), and the move key label included in the header portion 52 of the content is the own. It is confirmed whether or not it matches the move key label of the device (step S50).

  If the move key label included in the header section 52 does not match the move key label of the own device, the receiving device 102 disconnects the content reception connection (step S52), and performs error processing (message to notify that). Transmission to the transmission device) (step S40), and the subsequent processing is not performed.

  When the move key label matches the move key label of the own device, the receiving device 102 uses the move key of the own device to decrypt the encrypted content received via the connection C from the transmitting device 100 (step S54). .

  As described above, according to the first embodiment, a rendering key and a move key are distinguished, and the same rendering key is distributed to a plurality of receiving devices. However, a separate key is assigned to each receiving device. Since it is distributed, unauthorized use of the content can be surely prevented, and at the same time, moving and rendering can be performed, so that the content can be effectively used. Moreover, since the same key is distributed only once, the security can be further improved.

  That is, when moving content, the number of receivable receiving devices is limited to one, and the transmitting device can transmit another content to another receiving device while moving a certain content. In addition, unauthorized use of content can be reliably prevented, and effective use of content can be achieved.

  In addition, since connections for content transmission / reception, content management, and key transmission / reception are separately connected and used, safety during transmission between transmission / reception devices is high.

  The receiving device determines whether or not the move key necessary for decrypting the content is stored before receiving the move content. If not, the receiving device stops receiving the content, and the transmitting device deletes the content after transmitting the content. Or invalidation, it is possible to prevent loss of content that has been moved by mistake.

  Furthermore, the transmitting device transmits a key and a key label for identifying the key to the receiving device, and when there is a request for designating the key by the key label from the receiving device, the content is encrypted using the key. The existence of a plurality of keys can be permitted in the entire system, the usage mode of content can be increased, and the content can be effectively used.

Second Embodiment The first embodiment is a model in which the receiving device transmits a request for moving and transmitting content to the transmitting device. The second embodiment is a model in which the transmitting device side requests the receiving device side to perform move reception.

  FIG. 10 is a block diagram showing a schematic configuration of the transmission apparatus 200 according to the second embodiment. As illustrated in FIG. 10, the transmission apparatus 200 includes a content supply unit 12, an authentication / key exchange processing unit 14, a content selection unit 66, a key selection processing unit 18, an encryption processing unit 20, and a network interface processing unit 22. A content transmission connection management unit 24, a content management connection management unit 26, and an authentication / key exchange connection management unit 28.

  Content supply unit 12, authentication / key exchange processing unit 14, encryption processing unit 20, network interface processing unit 22, content transmission connection management unit 24, content management connection management unit 26, and authentication / key exchange connection management unit 28 has the same function as in FIG. 1 and can be configured by the same blocks.

  The content selection unit 66 has a function of specifying a content to be moved and transmitting a message instructing the receiving device to prepare for receiving the content.

  FIG. 11 is a block diagram showing a schematic configuration of the receiving apparatus 202 according to the second embodiment. As illustrated in FIG. 11, the reception device 202 includes a content processing unit 32, an authentication / key exchange processing unit 34, a content accumulation management unit 68, a key selection processing unit 38, an encryption processing unit 40, and a network interface unit 42. A content transmission connection management unit 44, a content management connection management unit 46, and an authentication / key exchange connection management unit 48.

  Content processing unit 32, authentication / key exchange processing unit 34, encryption processing unit 40, network interface processing unit 42, content transmission connection management unit 44, content management connection management unit 46, and authentication / key exchange connection management unit About 48, it has the same function as FIG. 3, and can be comprised by the same block.

  The content storage management unit 68 has a function of receiving a message for instructing preparation for receiving content from the transmission device and transmitting a URL for storing content to the transmission device as a response.

  FIG. 12 is a flowchart showing a process (here, a move process) of the content transmission / reception system according to the present embodiment. Also in this embodiment, there are three communication connections A, B, and C between the transmission device 200 and the reception device 202, the connection A is used for content management, the connection B is used for authentication / key exchange, and the connection C Is used for content transmission.

  Unlike the first embodiment, in the second embodiment, first, the transmission device 200 transmits a message (content reception request) for instructing the reception device 202 to receive content using the connection A. (Step # 22). This message includes information indicating that the data to be transmitted is encrypted content, the IP address and TCP port number of the transmission device used for authentication and key exchange between the reception device 202 and the transmission device 200, MIME-Type, etc. Information indicating the type of content before encryption may be included. Prior to the transmission of this message, well-known methods such as UPnP are used to determine means for searching for a receiving device from the network, and to determine the IP address and port number for transmitting the message. For example, the following UPnP Create Object message is used to transmit a message instructing to receive content.

Content-Type: application / x-dtcp1;
DTCP1HOST = <host>;
DTCP1PORT = <port>;
CONTENTFORMAT = <mimetype>;
DTCOKXM = NULL
Next, the receiving apparatus 202 requests the transmitting apparatus 200 to start the move authentication / key exchange process using the connection B (step # 24). When the authentication / key exchange process is successful, the transmitting device 200 generates a common key Kx and a move key Kxm, which are secret keys used for encrypting content with each receiving device 202, and The common key Kx and move key Kxm are transmitted (step # 26). Similar to the first embodiment, the move key label information for distinguishing the move key is transmitted simultaneously with the transmission of the move key. If authentication / key exchange processing fails, error processing is performed and the following processing is not performed.

  When the authentication / key exchange is completed, the receiving apparatus 202 returns a content reception confirmation message indicating that preparation for receiving the content is completed using the connection B to the transmitting apparatus 200 (step # 28). At this time, the receiving device 202 receives address information indicating to which address the transmitting device 200 should transmit content in the reply message, and the receiving device 202 receives the authentication / key exchange processing result from the transmitting device. Include move key label. The address information may be shown in the form of URL, for example. An example of a reply message is shown below.

<service>: // <host>: <port> / <path> / <FileName>. <FileExtention>? CONTENTPROTECTIONTYPE = DTCP1 & DTCPKXM = <exchange_key_label>
Thereafter, the transmitting device 200 starts transmitting content to the address specified by the content reception confirmation message (steps # 30 and # 32). The transmitting apparatus 200 deletes or cannot use the transmitted content. As a key used for content encryption, a move key corresponding to the move key label included in the content reception confirmation message is used.

  If there is no move key corresponding to the move key label included in the content reception confirmation message, an error message is transmitted to the receiving apparatus. The format of the content may be the format shown in FIG. That is, a move key label 58 is attached to the content header portion 52, and the content is encrypted using the move key corresponding to the move key label 58.

  An HTTP protocol POST request is used for content transmission. At this time, a POST request may be transmitted with a move key label attached as HTTP header information. An example of a POST request is shown below.

Content-type: application / x-dtcp1;
DTCP1HOST = <host>;
DTCP1PORT = <port>;
CONTENTFORMAT = <mimetype>;
DTCPKXM = <exchange_key_label>
The receiving device 202 has the move key label defined in the HTTP header in the content header part 52 or the POST request, and the value of the move key label transmitted from the transmitting device and stored in the own device as a result of the authentication / key exchange process. If they match, the content is decrypted with the move key corresponding to the move key label. If they do not match, the reception of the content is stopped and the connection C for content transmission / reception is disconnected.

  The case where the value of the move key label is different is the case where the value of the move key used by the transmitting device for encrypting the content is different from the value of the move key held by the receiving device. As in the first embodiment, in order to prevent the content from being lost due to the difference between the content encryption key and the decryption key, by confirming that the keys match using the move key label, It is possible to prevent the content from being inadvertently lost.

  In the second embodiment, the process of selecting content to be moved is performed on the transmission device side. From the viewpoint of the user interface, it is preferable that the selection right of the content to be moved is on the content storage side, that is, the transmission device side. In the conventional method, the authentication / key exchange process is started on the receiving device side, and the authentication / key exchange cannot be started from the transmitting device side. However, in the present embodiment, this problem is solved by holding the right to select content to be moved on the transmission device side, and the reception device starting authentication / key exchange processing using a content reception request as a trigger. . Furthermore, by using the move key label to prevent the contents that cannot be decrypted from being moved, unnecessary disappearance of the contents can be avoided.

  FIG. 13 is a flowchart showing an operation procedure of the transmission apparatus. In the second embodiment, since the transmission device is a model for selecting which content in the own device is to be moved, the transmission device 200 first determines which content is to be moved (step S52).

  Thereafter, in order to instruct the receiving device 202 to prepare for receiving the content, the transmitting device 200 transmits a content reception request through the connection A (step S54). Thereafter, the transmitting apparatus 200 receives an authentication / key exchange request transmitted by the receiving apparatus through the connection B (step S56), and performs authentication / key exchange processing with the receiving apparatus. Thus, by starting the authentication / key exchange process immediately after the content reception request is transmitted (before the content reception confirmation is transmitted), the transmission device 200 can transmit the move request and the encrypted content immediately after the content reception confirmation is received. The content transmission can be started without waiting time (authentication / key exchange).

  In step S58, the transmission apparatus 200 determines whether the authentication / key exchange process is successful. If the authentication / key exchange process fails, the transmitting apparatus 200 performs an error process (transmits a message to that effect to the receiving apparatus) (step S60), and the subsequent processes are not performed.

  When the authentication / key exchange is successful, the transmitting device 200 generates an encrypted move key using a key shared by the authentication / key exchange, and attaches the move key label to the receiving device 202 via the connection B. Transmit (step S62).

  Thereafter, the transmission apparatus 200 receives a content reception confirmation as a response message corresponding to the content reception request from the reception apparatus 202 (step S64). This response message includes address information (connection C) to which the content is transmitted and a move key label possessed by the receiving device. The transmitting apparatus 200 searches for the move key specified by the move key label included in the response message in the own apparatus (step S66).

  If the search fails, the transmitting device 200 transmits a message notifying that to the receiving device 202, performs error processing (transmits a message notifying that) to the receiving device (step S68), Do not send. If the search is successful, the transmitting apparatus 200 encrypts the content using the move key (step S70) and transmits it to the receiving apparatus (step S72).

  FIG. 14 is a flowchart showing an operation procedure of the receiving apparatus 202. The receiving device 202 receives the content reception request transmitted from the transmitting device 200 (step S54 in FIG. 13) via the connection A (step S82). In step S84, the receiving apparatus 202 determines whether or not the move key has already been shared with the transmitting apparatus.

  If the move key is already shared with the transmission apparatus 200, the reception apparatus 202 transmits a content reception confirmation as a response message for the content reception request (step S94). If the move key is not already shared with the transmitting apparatus, the receiving apparatus transmits an authentication / key exchange request over connection B (step S86), and starts the authentication / key exchange process.

  In step S88, the receiving apparatus 202 determines whether the authentication / key exchange process is successful. If the authentication / key exchange process fails, the receiving apparatus 202 performs an error process (sends a message to that effect to the transmitting apparatus) (step S90), and does not perform the subsequent processes.

  When the authentication / key exchange is successful, the receiving apparatus 202 receives the encrypted move key and the move key label transmitted by the transmitting apparatus 200 (step S62 in FIG. 13) over the connection B (step S92). The encrypted move key is decrypted using the key shared by the authentication / key exchange, and the move key is stored in the authentication / key exchange processing unit 34 together with the move key label.

  Thereafter, the receiving device 202 transmits a content reception confirmation as a response message to the content reception request (step S94). Next, the receiving apparatus 202 receives a content move request for the address indicated in the content reception confirmation from the transmitting apparatus 200 (step S96). This move request includes a move key label. It is confirmed whether this move key label or the move key label included in the header portion 52 of the content received subsequent to the content move request matches the move key label of the own device (step S100). If it does not match the move key label of the own device, the content cannot be decrypted. Therefore, in order to stop the move, the receiving device 202 disconnects the content reception connection C and stops receiving the content (step S104). Error processing is performed (step S90), and the subsequent processing is not performed. If it matches the move key label of the own device, the receiving device 202 decrypts the content using the move key (step S102).

  As described above, according to the second embodiment, in addition to the effects of the first embodiment, the content is received by starting the authentication / key exchange process from the receiving device triggered by the content receiving request from the transmitting device. It is possible to give the right to select contents to the stored transmission device and to make the transmission device a client. In addition, after transmitting the content reception request, authentication / key exchange is started without waiting for the confirmation, and the content reception confirmation is received after the authentication / key exchange is completed. A move request and encrypted content can be transmitted, and content transmission can be started without waiting time (authentication / key exchange).

  The transmission device and the reception device described in the above-described embodiment may be configured by hardware or software. When configured by software, a program for realizing at least a part of the functions of the information processing apparatus may be stored in a recording medium such as a floppy (registered trademark) disk or CD-ROM, and read and executed by a computer. . The recording medium is not limited to a portable medium such as a magnetic disk or an optical disk, but may be a fixed recording medium such as a hard disk device or a memory.

  Further, a program that realizes at least part of functions of the transmission device and the reception device may be distributed via a communication line (including wireless communication) such as the Internet. Further, the program may be distributed in a state where the program is encrypted, modulated or compressed, and stored in a recording medium via a wired line such as the Internet or a wireless line. In addition, when a rendering request is generated, the description of moving may be changed to rendering for the above operation.

1 is a block diagram showing a schematic configuration of a transmission device according to a first embodiment. FIG. 3 is a block diagram showing a state of key sharing between the transmission device and the reception device according to the first embodiment. 1 is a block diagram showing a schematic configuration of a receiving device according to a first embodiment. The flowchart which shows the whole process sequence of the content transmission / reception system which concerns on 1st Embodiment. The flowchart which shows the process sequence regarding the authentication and key exchange of the content transmission / reception system which concerns on 1st Embodiment. The flowchart which shows the process sequence regarding the authentication and key exchange of the content transmission / reception system which concerns on 1st Embodiment. The figure which shows an example of the transfer format at the time of transmitting apparatus transmitting encrypted content to a receiving apparatus. The figure which shows an example of the flowchart of the transmitter which concerns on 1st Embodiment. The figure which shows an example of the flowchart of the receiver which concerns on 1st Embodiment. The block diagram which shows schematic structure of the transmitter which concerns on 2nd Embodiment. The block diagram which shows schematic structure of the receiver which concerns on 2nd Embodiment. The flowchart which shows the whole process sequence of the content transmission / reception system which concerns on 2nd Embodiment. The figure which shows an example of the flowchart of the transmitter which concerns on 2nd Embodiment. The figure which shows an example of the flowchart of the receiver which concerns on 2nd Embodiment.

  DESCRIPTION OF SYMBOLS 12 ... Content supply part, 14 ... Authentication and key exchange processing part, 16 ... Content list management part, 18 ... Key selection processing part, 20 ... Encryption processing part, 22 ... Network interface processing part, 24 ... Connection management for content transmission , 26... Content management connection management unit, 28... Authentication / key exchange connection management unit.

Claims (7)

In a transmission method for transmitting content from a transmission device to a first reception device,
A first step in which the transmission device transmits a content reception request to the first reception device;
Authentication for the second key for specific moved to the first key or said first receiving apparatus for common rendering the plurality of receivers which include the first receiver the first receiver device, the start of the key exchange a second step of transmitting a request to the transmitting device,
A third step in which the transmitting device transmits the first key or the second key obtained by the authentication and key exchange to the first receiving device;
It said first receiving apparatus is the authentication, and a fourth step of transmitting the content reception confirmation including the label of the key obtained by the key exchange to the transmitting device,
A fifth step in which the transmitting device encrypts content using a key corresponding to a label included in the content reception confirmation and transmits the content to the first receiving device;
A transmission method comprising: The fifth step when the key corresponding to the label included in the content reception confirmation does not exist in the transmission apparatus characterized by including the sub-step of sending a notification to that effect to the first receiver device The transmission method according to claim 1. A sixth step in which the transmitting device transmits an encryption key label to the first receiving device before transmitting the encrypted content;
If the key corresponding to the label transmitted from the transmitting apparatus in the sixth step is not present in the first receiving device is that it comprises a seventh step further sending notification to that effect to the transmitting device The transmission method according to claim 1. First means for transmitting a content reception request to the first receiving device;
Authentication, key to the second key for specific moved to the first key or said first receiving apparatus for common rendering the plurality of receivers which include the first receiver device sent from the first receiver device A second means for receiving an exchange start request;
A third means for transmitting the first key or the second key obtained by the authentication and key exchange to the first receiving device;
A fourth means for receiving a content reception confirmation including a key label obtained by the authentication and key exchange transmitted from the first receiving device;
A fifth means for encrypting content using a key corresponding to a label included in the content reception confirmation and transmitting the content to the first receiving device;
A transmission apparatus comprising:   5. The transmission apparatus according to claim 4, wherein when the fifth means does not have a key corresponding to the label included in the content reception confirmation, a notification to that effect is transmitted to the first reception apparatus.   A sixth means for transmitting an encryption key label to the first receiving device before transmitting the encrypted content;
  A seventh means for receiving from the first receiving apparatus a notification that the key corresponding to the label transmitted by the sixth means does not exist in the first receiving apparatus. Item 5. The transmission device according to Item 4. A first means for receiving a content reception request transmitted from a transmission device;
Second means for transmitting the authentication for the second key for specific moved to the first key or the receiving device for the common rendering the plurality of receiving devices, a start request of the key exchange to the transmitting device,
Third means for receiving from the transmitting device the first key or the second key obtained by the authentication and key exchange;
A fourth means for transmitting the authentication, a content reception acknowledgment including the label of the key obtained by the key exchange to the transmitting device,
A fifth means for receiving the encrypted content using the key corresponding to the label included in the content receiving confirmation from the transmitting device,
A receiving apparatus comprising:

Images