JP4891015B2 - Digital content recording / playback device - Google Patents

Description

  The present invention relates to a content management method, and relates to protection of copyrights such as video and music digitized for use in information equipment and software license management. Hereinafter, digitized video, music, software, etc. are referred to as contents, and protecting them from unauthorized copying and use. The present invention also relates to a technology for realizing high-speed copying as a backup in preparation for content loss due to a failure in the life of a storage medium or a power supply while maintaining content protection.

  In recent digital broadcasting, copy control information is added to protect the copyright of content, and copying is performed on devices that display content, output audio, store, play back, and write to removable media so that unlimited copying is not possible. Requests a function to control.

In other words, limit the total time, period, and number of times that the accumulated content can be played, limit the period and number of times that the accumulated content can be written to removable media,
When the limit is exceeded, there is a demand for a function that disables playback on the storage device and writing to removable media, such as deleting the original stored content.

  For example, “6.2.3.1 Prohibition of Copy Reuse” in TR-B14 Volume 3 Volume 8 Terrestrial Digital Television Broadcasting Content Protection Regulation (Non-Patent Document 1) states “Sequential bit by bit”. Even if the content of the recording medium is copied by a copying act such as copying, the copied content cannot be reused. "

  Conventionally, the hardware and software specifications of home appliances have not been released, and the inside has been made into a black box, and unlimited copying can be restricted without complicated protection of the contents accumulated inside the device. We were able to.

  On the other hand, functions that display, store and play back content such as video and export to removable media will be implemented not only on black box devices of conventional home appliances but also on open platforms such as personal computers. It has become.

  The open platform uses a standard storage device and a protocol with publicly available specifications, and when the content storage function is implemented, it is relatively easy to read out the stored content and copy in bit units. .

Therefore, content is protected by a method such as encryption using unique information possessed by each device.
TR-B14 Volume 3 Volume 8 Terrestrial Digital Television Broadcasting Content Protection Rules

  However, even if encryption is performed using device-specific information, there is a problem that an illegal copy is created as follows when the copy control information is stored in the storage device together with the content as in the prior art.

  For example, it is assumed that the copy control information of protected content restricts writing to a removable medium to one time.

  First, the storage device is removed from the device, and a plurality of storage devices are created by copying in bit units with another device. The one storage device is incorporated into the original device and written to a removable medium. Depending on the copy control information, the storage device cannot write to the removable media for the second time. However, if the storage device is replaced with another storage device that has been copied in bit units, the copy control information of the storage device remains unchanged. You can export to removable media. By repeating this, writing to removable media, which should be possible only once, can be performed by the number of storage devices copied in bit units.

  The content protection of video information has been explained as an example, but a function that restricts the number of executions, time, duration, etc. is required in order to prevent unauthorized use when software providers obtain compensation as a license fee from the user. There is a problem.

  Thus, conventionally, when management information is stored in the same storage device as the content and software stored in the storage device of the device, the data image of the storage device is copied in bit units as described above. For example, the number of exports to removable media cannot be limited.

  Backup is a general method for data loss countermeasures.

  A hard disk generally used as a storage device has a lifetime and may fail such that data cannot be read when the lifetime expires. For this reason, the hard disk data is copied to another storage device, and if the hard disk fails, it is replaced with a new hard disk, and the copied data is returned to the new hard disk (backup).

  For content that is to be stored for a long period of time, the risk of data loss can be reduced by moving the content from the hard disk to a removable medium.

  However, when copying or moving content that has a limited number of times of writing to removable media to removable media, not only the management information update process but also CPRM so that the content written to removable media is not further copied. It is necessary to apply media-specific encryption.

  For this reason, conventionally, it is necessary to decrypt the device-specific encrypted content and perform media-specific encryption. If the device processing performance is not high, content can be used for copy and move processing in extreme cases. It takes about the same time as playback, and high-speed processing is not possible.

  SUMMARY OF THE INVENTION An object of the present invention is to provide a content management method capable of limiting the number of times of writing to a removable medium even if the data image of content stored in a storage device is copied in bit units. .

  It is another object of the present invention to provide a content management method capable of performing content copying and moving processing at high speed.

  Of the inventions disclosed in the present application, the outline of typical ones will be briefly described as follows.

  The content management method according to the present invention encrypts content data and stores it in a first storage device, reproduction / execution processing of the content data stored in the first storage device, and bit unit to an external storage medium A content management method for a device that performs an export process, in which only authorized content management information for managing content data can be accessed, and during the export process to an external storage medium, storage information is stored together with the content data. Content data reproduction / execution processing based on content data stored in the second storage device that is not written and accumulated in the first storage device and content management information stored in the second storage device, and external Manages the writing process in units of bits to the storage medium.

  Among the inventions disclosed in the present application, effects obtained by typical ones will be briefly described as follows.

  According to the content management method of the present invention, even if a data image of content stored in a storage device is copied to another storage device in bit units, the management information is not copied, so that unauthorized copying of the content cannot be performed. It is.

  Further, according to the present invention, data obtained by copying the content in the storage device in bit units is subjected to device-specific encryption, and can be played back by the copy source device but cannot be played back by other devices. Therefore, it can be used as a method for backing up original data while maintaining strong content protection that can be reproduced only by the copied device.

  In addition, according to the present invention, it is possible to perform high-speed backup by copying in bit units that do not require decryption or encryption processing, and it is possible to maintain strong content protection that can be reproduced only by a device that has copied at the same time.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. Note that components having the same function are denoted by the same reference symbols throughout the drawings for describing the embodiment, and the repetitive description thereof will be omitted.

  The present invention aims to prevent unauthorized playback of content, unauthorized writing to removable media, and unauthorized execution of software programs as a minimum of content and software program management information rather than content and software programs themselves. By allowing only authorized data to be manipulated, this is achieved without significant equipment configuration changes.

(Embodiment 1)
1, a content information management unit 1 to which the content management method according to Embodiment 1 of the present invention is applied, a content management information registration / update / deletion request unit 2 connected to the content information management unit 1, and a content reproduction request The unit 3 and the content reproduction processing unit 64 will be described. FIG. 1 is a configuration diagram showing a content information management unit, a content management information registration / update / deletion request unit, a content reproduction request unit, and a content reproduction processing unit to which the content management method according to Embodiment 1 of the present invention is applied. .

  In FIG. 1, the content information management unit 1 includes a nonvolatile memory 11, an access arbitration unit 12, a random value generation unit 13, a registration / update / deletion authentication value calculation unit 14, an authentication authentication value calculation unit 15, and a comparison processing unit. 16 and a content authentication table 17.

  The content information management unit 1 is connected to a content management information registration / update / deletion request unit 2, a content reproduction request unit 3, and a content reproduction processing unit 64.

  Next, the operation of content management by the content management method according to Embodiment 1 of the present invention will be described with reference to FIG.

  The content management information registration / update / deletion request unit 2 requests the access arbitration unit 12 to register, update, or delete content.

  The content management information registration / update / deletion request unit 2 further passes the content management information to the access arbitration unit 12 when registering the content management information, and receives and updates the content management information when updating the content management information. Pass the information.

  The content management information includes a remaining time / time limit and the remaining number of reproducible times, a time limit for remaining writing to the removable medium, and the remaining number of times.

  Here, when content management information is registered, a predetermined initial value can be automatically registered in the content information management unit 1 without passing the content management information.

  In addition, when content management information is updated, a predetermined change instruction can be given and updated in the content information management unit 1 without receiving the content management information.

  The content management information registration / update / deletion request unit 2 registers the registration number of the content to be registered in the content information management unit 1. And the authentication CCI data to the registration / update / deletion authentication value calculation unit 14.

  The CCI data for authentication is part or all of the content, and this data is passed from the reset request from the content management information registration / update / deletion request unit 2 until the set request is issued.

  When a set request is issued, a random number value is passed from the random value generation unit 13 to the registration / update / deletion authentication value calculation unit 14.

  The registration number received when the set request is issued. Then, the authentication value is calculated from the random value / authentication CCI data.

  For the calculation of the authentication value, a digest algorithm and a target encryption algorithm are used.

  For the calculation of the authentication value, a digest algorithm and a non-target encryption algorithm can be used.

  The registration / update / deletion authentication value calculation unit 14 registers the registration number in the access arbitration unit 12. The random number value and the calculated authentication value are passed, and these pieces of information are stored in the content authentication table 17 of the nonvolatile memory 11 together with the content management information.

  The content reproduction request unit 3 stores the content registration No. registered in the authentication value calculation unit 15 for authentication. And CCI data for authentication of the content are passed, and a processing request such as reproduction or writing to removable media is issued to the content reproduction processing unit 64.

  The CCI data for authentication is passed between the reset request from the content reproduction request unit 3 and the set request.

  The authentication value calculation unit 15 for authentication uses the registration No. of the content. Is transferred to the access arbitration unit 12, and the access arbitration unit 12 stores the registration No. stored in the content authentication table 17. , And passes the random number value to the authentication value calculation unit 15 for authentication.

  In addition, the access arbitration unit 12 stores the registration No. stored in the content authentication table 17. Is sent to the comparison processing unit 16.

  The authentication value calculation unit 15 for authentication uses the content registration number. Then, the authentication value is calculated from the random number value and the CCI data for authentication and passed to the comparison processing unit 16.

  The comparison processing unit 16 receives the content registration number from the access arbitration unit 12 when the set request is received. And the authentication value calculated by the authentication value calculation unit 15 for authentication are compared, and the comparison result is returned to the access arbitration unit 12.

  At this time, if the authentication values match, the content registration number. The content arbitration unit 12 reads the content management information from the content authentication table 17 and passes it to the content reproduction request unit 3.

  As a result, the content playback request unit 3 can know the remaining time / time limit and the remaining number of times the content can be played back, the time limit and the remaining number of times that the content can be written to the removable medium, and the like.

  The access arbitration unit 12 receives the content registration number. The content management information is passed to the content reproduction processing unit 64 when the authentication values match.

  In this way, the content registration No. Only those who have CCI information for authentication and know how to perform authentication based on this information can access the content management information stored in the content authentication table 17.

  In the case of an open-architecture machine, a general user can copy all the content and data in the auxiliary storage device storing the authentication CCI data that is a part of each content bit by bit. Easy to do.

  However, the content management information in the content authentication table 17 cannot be copied.

  For this reason, even after the content is played back and written to removable media, even if all the copied data is restored, the content management information cannot be restored to the state at the time of full copy. It is not possible to prevent unauthorized playback / exporting to removable media.

  The content reproduction processing unit 64 updates the content management information by the amount that has been reproduced and written to the removable medium, and passes the information to the access arbitration unit 12.

  Furthermore, by making an update request, the access arbitration unit 12 stores the updated content management information in the content authentication table 17.

  This makes it possible to limit the remaining time / time limit and the remaining number of times that the content can be reproduced, the time limit for remaining writing to the removable medium, the remaining number of times, and the like.

  On the other hand, since the data copied in bit units is encrypted unique to this digital content recording / playback device, it cannot be played back by other devices, but the content of the updated content management information in the copied device The content can be played back and written to removable media according to the above.

  When exporting to normal removable media, media-specific encryption is required, so decryption / encryption processing requires approximately the same amount of time as playback time, but bit-wise copying requires decryption / encryption. Since no processing is required, high-speed writing / reading such as 4 × speed or 8 × speed is possible.

  When copying content in bit units, information indicating the correspondence between the copy and the content copy source device is added to the content.

  By having this content information management unit 1, the purpose of preventing unauthorized playback of content, unauthorized writing to removable media, and unauthorized execution of software programs is not the content or software program itself, It can be realized by operating only the software program management information that is allowed the minimum data.

  Next, the configuration of a digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied will be described with reference to FIG. FIG. 2 is a block diagram showing the configuration of the digital content recording / playback apparatus to which the content management method according to the first embodiment of the present invention is applied. The content information management unit 1, the content management information registration / update / deletion shown in FIG. The request unit 2, the content reproduction request unit 3, and the content reproduction processing unit 64 are applied.

  The digital content recording / playback apparatus 7 includes a digital TV tuner board 6, a content management information registration / update / delete request unit 2, a content playback request unit 3, a CCI information extraction unit 4, and content data 5.

  The digital TV tuner board 6 includes a digital tuner 61, a Multi2 decoding unit 62, a content recording processing unit 63, a content reproduction processing unit 64, a video / audio signal output unit 65, a video / audio data output unit 66, and a content information management unit 1.

  The content recording processing unit 63 includes a key seed generation unit 631, a short-term key generation unit 632, an encryption unit 633, and a CCI information addition processing unit 634.

  The content reproduction processing unit 64 includes a CCI information extraction unit 641, a decryption unit 642, a key seed extraction unit 643, and a short-term key regeneration unit 644.

  Next, the operation of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied will be described with reference to FIG.

  Broadcast data is extracted from the digital broadcast wave via the digital tuner 61. This broadcast data is Multi2 encrypted, and is passed to the Multi2 decryption unit 62 for decryption. The content recording processing unit 63 encrypts the decrypted broadcast data again with the encryption unit 633.

  Then, key seed data, which is information for generating key data for decrypting the encryption, is embedded in a predetermined part of the CCI information, and the CCI information addition processing unit 634 adds the CCI information to the encrypted broadcast data and stores it. The content data 5 is stored in a device or the like.

  In the content data 5, one or a plurality of sets of encrypted broadcast data to which CCI information is added are stored as some contents.

  The key used for the encryption processing performed by the encryption unit 633 is first generated by the key seed generation unit 631 as key seed data, which is the key source, and the short-term key generation unit 632 generates the key based on this data. Is generated.

  The key seed data generated by the key seed generation unit 631 and the key data generated by the short-term key generation unit 632 based on this key seed data are updated in a certain time and decrypted by this key data. The CCI information addition processing unit 634 adds the key seed data immediately before the broadcast data.

The accumulated content data 5 is decrypted by the content reproduction processing unit 64.
The decoded broadcast data is processed by the video / audio signal output unit 65 and output as a video / audio output signal.

  In the content reproduction processing unit 64, first, CCI information is extracted from the stored content data 5 by the CCI information extraction unit 641, and key seed data is extracted from the CCI information by the key seed extraction unit 643, and short-term key regeneration is performed. The unit 644 regenerates key data based on the key seed data.

  In the decryption unit 642, the encrypted broadcast data from immediately after the CCI information is added to immediately before the next CCI information is decrypted with the key data and passed to the video / audio signal output unit 65.

  The content reproduction processing unit 64 determines whether or not reproduction processing can be performed based on the content management information for the content data 5 to be reproduced.

  Management information for the content is delivered from the content information management unit 1.

  Further, the content reproduction processing unit 64 receives the CCI data for authentication of the content from the content information management unit 1 and passes it to the CCI information extraction unit 641.

  The CCI information extraction unit 641 extracts the data from the address where the authentication CCI data should be present in the content data, compares it with the received authentication CCI data, and if it is the same, extracts the extracted key seed data as a short-term It is passed to the key regeneration unit 644. If they are not the same, the content reproduction processing unit 64 stops reproduction of the content without passing the key seed data.

  By doing so, it is possible to prevent unauthorized reproduction / writing to removable media by replacing the content data while leaving the CCI data for authentication as it is.

  For registering / updating / deleting the content management information in the content information management unit 1 with respect to the content stored in the content data 5, the CCI data for authentication of the content extracted by the CCI information extraction unit 4 is used.

  First, the CCI data for authentication is acquired by the content management information registration / update / deletion request unit 2 and transferred to the content information management unit 1, where authentication processing is performed internally. If the authentication is successful, the content information management unit 1 makes a request for registration / update / deletion of content management information from the content management information registration / update / deletion request unit 2.

  The content reproduction requesting unit 3 requests the content reproduction processing unit 64 to reproduce the content stored in the content data 5 and write it to a removable medium, and the content reproduction processing unit 64 determines the content of the content management information. Determines whether the requested processing is possible.

  When reproducing the content, the content reproduction processing unit 64 passes the video / audio data from the decoding unit 642 to the video / audio signal output unit 65 based on the corresponding content management information, and outputs a video / audio signal.

  When the content is written to the removable media, the content reproduction processing unit 64 passes the video / audio data from the decoding unit 642 to the video / audio data output unit 66 based on the corresponding content management information, and the video for removable media writing is used. The audio data is transferred to the media write processing unit 8 and data write processing to the media is executed.

  The content reproduction request unit 3 requests the content information management unit 1 to deliver the content management information.

  At this time, the content registration No. The CCI data for authentication extracted by the CCI information extraction unit 4 is passed to the content information management unit 1. The content information management unit 1 performs an authentication process using the authentication CCI data, and when the authentication is successful, the content management information is passed to the content reproduction request unit 3. Thereby, the content reproduction request unit 3 can know how much the content is permitted to be reproduced and how much the content is permitted to be written on the medium.

  When the authentication process is performed using the CCI data for authentication and the authentication is successful, the content information management unit 1 passes the content management information to the content reproduction processing unit 64 at the same time.

  The content reproduction processing unit 64 is requested by the content reproduction request unit 3 to output reproduction data / media writing data, and outputs it in accordance with the content management information.

  At the time of reproduction, reproduction data is output to the video / audio signal output unit 65 as long as the number of times, time, period, etc., of the content management information can be reproduced, and the video / audio signal output unit 65 sends the video / audio output signal to an external device. Output.

  Further, at the time of media writing, the media writing data is output to the video / audio data output unit 66 as long as the number of times, time, period, etc. of the content management information that can be written allow, and the video / audio data output unit 66 outputs the media. Data is output to the media write processing unit 8.

  The content reproduction processing unit 64 requests the content information management unit 1 to update the content management information in accordance with the execution status of reproduction and writing to removable media. More specifically, the content management information is updated by subtracting, from the original content management information, the number of times the reproduction process has been performed, the time, the period, the number of times the move has been performed, and the like.

  Here, the definition of the move will be described.

  First, “Move” is defined as follows in the document: “Digital Terrestrial Television Broadcasting Operation Regulation Technical Document Vol. 3 Volume 8 Terrestrial Digital Television Broadcasting Content Protection Regulation 3 Definition of Terms”.

  The content is moved by disabling the reproduction after the content of “recopy prohibited” stored in the storage medium is stored in another storage medium.

  In addition, the document: “Digital Terrestrial Television Broadcasting Operation Regulation Technical Document Vol. 3 Volume 8 Terrestrial Digital Television Broadcasting Content Protection Regulation 5 Functional Requirements for Receiver 5.5.4 Move Function” includes “ “Move” conditions are defined.

  -During the move operation, content of a length exceeding 1 minute must not be playable simultaneously on both the move source and the move destination.

  -At the end of the move, usable content must not remain at the same time on both the move source and the move destination. In other words, after the move is completed, it is necessary to disable the reproduction of the original content.

  In order to implement a move function that satisfies the above-mentioned regulations, it is possible to realize a move function for a part of content by using the mechanism described with reference to FIGS.

  First, the content management information registration / update / deletion request unit 2 registers content in the content information management unit 1. Then, the content reproduction request unit 3 requests the content management information from the content information management unit 1, and requests the content reproduction processing unit 64 to output data for media writing. The content information management unit 1 communicates with the content reproduction processing unit 64, and updates the content management information as a non-reproducible part with a length of one minute or less as the content part output as media writing data.

  Further, in the content information management unit 1, the content management information in the content authentication table 17 can be simply decrypted key data of the content or data that is the source of the decryption key data.

  As a result, it is possible to perform simple management such as playback in units of content and whether or not writing to removable media is possible.

  Next, the operation of the content recording process of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied will be described with reference to FIG. FIG. 3 is a flowchart showing the operation of content recording processing of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied.

  First, when processing is started in the content recording processing start (step 101), encrypted data output from the content recording processing unit 63 of the digital TV tuner board 6 is stored in the content data file storage processing (step 102). Is recorded as content data 5.

  In the authentication CCI data extraction process (step 103), an authentication value created based on part or all of the content data by the CCI information extraction unit 4 is extracted as authentication CCI data of the content.

  In the content information registration process (step 104), the content management information registration / update / deletion request unit 2 acquires the CCI data for authentication, and the content registration No. Together with the content information management unit 1 and the content registration number in the internal content authentication table 17.・ Authentication value, random value, and management information are registered.

  Here, the initial setting values such as the number of times of reproduction / time / period of contents of the content management information and the number of times of writing to the removable medium can be determined according to the consideration obtained by the content provider.

  In the content recording process End (step 105), the recording process is terminated.

  Next, with reference to FIG. 4, the operation of the content playback / move process of the digital content recording / playback apparatus to which the content management method according to the first embodiment of the present invention is applied will be described. FIG. 4 is a flowchart showing an operation of content playback / move processing of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied.

  First, when processing is started in the content playback / move process start (step 111), the content management information difference information confirmation process (step 112) immediately after the content playback / move process start (step 111). In the processing, the content management information difference information is determined by the content reproduction request unit 3 and the content reproduction processing unit 64 as no difference.

  In this processing other than immediately after the content playback / move processing start (step 111), the content management information difference information is determined by the content playback request unit 3 and the content playback processing unit 64.

  The difference information at this time is determined from the number of times of content playback / time / period in the content playback / move process (step 118), the number of times of writing to removable media, and the like.

  In the authentication CCI data acquisition process (step 113), the content registration No. The CCI data for authentication extracted by the CCI information extraction unit 4 is passed to the content information management unit 1 via the content reproduction request unit 3.

  In the authentication process using the authentication CCI data (step 114), the content information management unit 1 sets the content registration number. Authentication processing is performed using the authentication CCI data.

  If the authentication is successful in step 114, the content management information update process (step 115) is continued.

  If the authentication fails in step 114, the process jumps to the content reproduction / move process End (step 119).

  In the content management information update process (step 115), the content playback processing unit 64 subtracts the number of times / time / period of playback processing, the number of times of writing to removable media, etc. from the original content management information, The content information management unit 1 is requested to update the content management information.

  The content information management unit 1 updates the requested content management information.

  The content information management unit 1 passes the content management information update result of the content to the content reproduction request unit 3 and the content reproduction processing unit 64.

  In the content reproduction / move permission determination process (step 116), the content reproduction request unit 3 and the content reproduction processing unit 64 have the remaining reproduction number / time / period and the remaining number of movements of the received content management information being 0 or less. If it is, it is determined that the content cannot be played or moved, and the process jumps to the content playback / move process End (step 119).

  In the content reproduction / move request process (step 117), the content reproduction request unit 3 requests the content reproduction processing unit 64 to output reproduction data.

  In content playback / move processing (step 118), at the time of content playback, the content playback processing unit 64 outputs playback data to the video / audio signal output unit 65, and the video / audio signal output unit 65 outputs the video / audio output signal to the outside. Output to the device.

  When the content is written to the media, the content reproduction processing unit 64 outputs the media writing data to the video / audio data output unit 66, and the video / audio data output unit 66 outputs the media writing data to the media write processing unit 8. Output to.

  After the process at step 118, the process returns to the content management information update process (step 112).

  The content reproduction / move process End (step 119) ends the reproduction process.

  Next, the operation of the content management information update process of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied will be described with reference to FIG. FIG. 5 is a flowchart showing the content management information update processing operation of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied.

  First, processing is started in the content management information update processing start (step 121), and content management information registration / update / deletion request unit 2 performs content management of the target content in content management information difference information confirmation processing (step 122). Determine the difference in information.

  Here, increments such as the number of times of content reproduction / time / period of content management information, the number of times of writing to removable media, and the like can be determined according to the consideration obtained by the content provider.

  In the authentication CCI data acquisition process (step 123), the content registration No. The CCI data for authentication extracted by the CCI information extraction unit 4 is passed to the content information management unit 1 via the content management information registration / update / deletion request unit 2.

  In the authentication process using the authentication CCI data (step 124), the content information management unit 1 registers the registration number of the content. And the authentication CCI data, the authentication process is performed.

  If the authentication is successful in step 124, the content management information update process (step 125) is continued.

  If authentication fails in step 124, the process jumps to the content management information update process End (step 126).

  In the content management information update process (step 125), the content management information registration / update / delete request unit 2 requests the content information management unit 1 to update the content management information based on the determined content management information difference information. .

  The content information management unit 1 updates the requested content management information.

  The content information management unit 1 reports the update result of the content management information to the content management information registration / update / deletion request unit 2.

  In the content management information update process End (step 126), the content management information update process is terminated.

  Next, the operation of the content management information deletion process of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied will be described with reference to FIG. FIG. 6 is a flowchart showing an operation of content management information deletion processing of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied.

  First, the process is started in the content management information deletion process start (step 131), and the content registration No. of the content is acquired in the authentication CCI data acquisition process (step 132). The CCI data for authentication extracted by the CCI information extraction unit 4 is passed to the content information management unit 1.

  In the authentication process using the authentication CCI data (step 133), the content information management unit 1 performs the authentication process using the authentication CCI data.

  If the authentication is successful in step 133, the content management information deletion process (step 134) is continued.

  If the authentication fails in step 133, the process jumps to the content management information deletion process End (step 136).

  In the content management information deletion process (step 134), the content management information registration / update / delete request unit 2 requests the content information management unit 1 to delete the content management information.

  The content information management unit 1 deletes the requested content management information.

  In the content data deletion process (step 135), the content data and the authentication CCI data are deleted.

  The processing ends at content management information deletion processing End (step 136).

  Next, the operation of the content management information forced deletion process of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied will be described with reference to FIG. FIG. 7 is a flowchart showing an operation of content management information forced deletion processing of the digital content recording / playback apparatus to which the content management method according to Embodiment 1 of the present invention is applied.

  First, processing is started in the content management information forced deletion processing start (step 141). In the content management information deletion processing (step 142), the content management information registration / update / deletion request unit 2 1 is requested to delete the content management information.

  The content information management unit 1 deletes the requested content management information.

  In the content data deletion process (step 143), the content data and the authentication CCI data are deleted.

  The processing ends at content management information processing End (step 144).

  In some implementations, the content information management unit 1 does not execute the deletion of the content management information unless the authentication process is performed as shown in FIG. 6, or the authentication process is performed for the deletion of the content management information as shown in FIG. Some implementations can run without it.

  An implementation that cannot delete the content management information without passing through the authentication process can delete the content management information only by the one having the CCI data for authentication, and can prevent unnecessary deletion.

  An implementation that deletes content management information without going through authentication processing can delete content management information even when the CCI data for authentication is lost, and prevent unused content management information from remaining Can do.

  As described above, in this embodiment, even if the data image of the content data 5 stored in the storage device is copied to another storage device in bit units, the content management information in the content authentication table of the nonvolatile memory 11 is Since it is not copied, it is possible to prevent unauthorized copying of content.

  Also, the data copied in bit units of the content data 5 in the storage device has been encrypted inherent to the device, and can be reproduced on the copy source device but cannot be reproduced on other devices. It can be used as a method for backing up original data while maintaining strong content protection that can only be played back on the device.

(Embodiment 2)
The configuration of the software program execution device to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG. FIG. 8 is a block diagram showing the configuration of the software program execution device to which the content management method according to the second embodiment of the present invention is applied. The content information management unit 1, the content management information registration / update / delete request shown in FIG. The unit 2 and the content reproduction request unit 3 are applied to prevent unauthorized use of the program.

  8, the software program execution device 9 includes a content information management unit 1, a content management information registration / update / deletion request unit 2, a content reproduction request unit 3, a CCI information extraction unit 4, a content data 5, And a program execution unit 91.

  Next, the operation of the software program execution apparatus to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG.

  Software program data is stored in the content data 5, part or all of the data is extracted by the CCI information extraction unit 4, and the content management information registration / update / deletion request unit 2 stores the data in the content information management unit 1. The software program is registered along with the management information.

  When executing the software program, the content reproduction request unit 3 passes both the execution request and the data extracted from the CCI information extraction unit 4 to the content information management unit 1. When the content information management unit 1 succeeds in authentication by the same method described in the first embodiment, the content information management unit 1 passes management information of the software program to the content reproduction request unit 3.

  Thereby, the remaining number of executions, time, and time limit can be known.

  Further, the content reproduction request unit 3 issues an execution request to the program execution unit 91, and the program execution unit 91 executes the program. In execution, the remaining number of executions, time, and time limit are received from the content information management unit 1, and the permitted number of software programs are executed.

  When the software license is limited by the number of executions, the executed amount is reported from the program execution unit 91 to the content management information registration / update / deletion request unit 2, and the update is performed by subtracting the executable portion from the management information of the software program. The updated management information is requested to update the content information management unit 1. Alternatively, the execution amount of the software program is directly reported to the content information management unit 1, and the content information management unit 1 subtracts the executable portion from the management information and updates it.

  The content management information registration / update / deletion request unit 2 also makes a request for newly adding the number of executions, time, and time limit to the consideration for the execution of the software program.

  Accordingly, a restricted software license can be realized by setting restrictions on the number of executions, time, and duration of the software program for the user.

  Next, the operation of the program registration process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG. FIG. 9 is a flowchart showing the operation of the program registration process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied.

  In the present embodiment, the program is regarded as content, and the same processing as in FIG. 3 of the first embodiment is performed.

  First, when the process is started in the program registration process start (step 151), the program and related data are encrypted and recorded as content data 5 in the program data file storage process (step 152).

  In the authentication CCI data extraction process (step 153), the CCI information extraction unit 4 extracts part or all of the program and related data as authentication CCI data of the content.

  In the program information registration process (step 154), the content management information registration / update / deletion request unit 2 acquires the authentication CCI data, and the content registration No. And the content information management unit 1 and the content registration number in the internal content authentication table 17.・ Authentication value, random value, and management information are registered.

  Here, the initial setting values such as the number of times of execution of the content management information program, the time, the period, and the number of times of writing to the removable medium can be determined according to the value obtained by the program provider.

  In the program registration process End (step 155), the program registration process is terminated.

  Next, the operation of the program execution / move process of the software program execution apparatus to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG. FIG. 10 is a flowchart showing the operation of the program execution / move process of the software program execution apparatus to which the content management method according to the second embodiment of the present invention is applied.

  In the present embodiment, the program is regarded as content, and the same processing as in FIG. 4 of the first embodiment is performed.

  First, when processing is started in the program execution / move process start (step 161), the program management information difference information confirmation process (step 162) immediately after the program execution / move process start (step 161) is performed for the first time. In the processing, the program management information difference information is determined by the program execution unit 91 as no difference.

  In this process other than immediately after the program execution / move process start (step 161), the number of times the program is executed / time / period in the program execution / move process (step 168), the number of times of writing to the removable media, and the like are stored in the program management information. Is determined by the program execution unit 91.

  In the authentication CCI data acquisition process (step 163), the content registration No. The CCI data for authentication extracted by the CCI information extraction unit 4 is passed to the content information management unit 1 via the content reproduction request unit 3.

  In the authentication process using the authentication CCI data (step 164), the content information management unit 1 sets the content registration number of the program. Authentication processing is performed using the authentication CCI data.

  If the authentication is successful in step 164, the program management information update process (step 165) is continued.

  If the authentication fails in step 164, the process jumps to the program execution / move process End (step 169).

  In the program management information update process (step 165), the program execution unit 91 reports the determined program management information difference information to the content reproduction request unit 3.

  The content reproduction request unit 3 requests the content information management unit 1 to update the content management information based on the program management information difference information.

  The content information management unit 1 updates the requested content management information.

  The content information management unit 1 reports the update result of the content management information to the content reproduction request unit 3.

  In the program execution / move permission determination process (step 166), the content reproduction request unit 3 reduces the remaining number of reproductions / time / period and the remaining number of times of writing to the removable media to 0 or less. If it is determined that the program cannot be executed or written to the removable medium, the process jumps to the program execution / move process End (step 169).

  In the program execution / move request process (step 167), the content reproduction request unit 3 requests the program execution unit 91 to execute the program or write it to a removable medium.

  In the program execution / move process (step 168), when the program is executed, the program execution unit 91 decrypts and executes the program as the content data 5 and its related data.

  Further, when the program is written to the removable medium, the program execution unit 91 outputs the removable medium writing data to the removable medium writing processing unit 8.

  The removable media write processing unit 8 writes a program on the removable media.

  After the process in step 168, the process returns to the program management information difference information confirmation process (step 162).

  At the program execution / move process End (step 169), the program execution / move process is terminated.

  Next, the operation of the program management information update process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG. FIG. 11 is a flowchart showing the operation of the program management information update process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied.

  In the present embodiment, the program is regarded as content, and the same processing as in FIG. 5 of the first embodiment is performed.

  First, processing is started in the program management information update process start (step 171), and in the program management information difference information confirmation process (step 172), the content management information registration / update / delete request unit 2 performs content management of the target program. Determine the difference in information.

  Here, increments such as the number of executions / time / period of the program of the content management information of the program, the number of times of writing to the removable medium, and the like can be determined according to the consideration obtained by the program provider.

  In the authentication CCI data acquisition process (step 173), the content registration No. The authentication CCI data extracted by the CCI information extraction unit 4 is passed to the content information management unit 1 via the content management information registration / update / deletion request unit 2.

  In the authentication process using the authentication CCI data (step 174), the content information management unit 1 sets the content registration number of the program. Authentication processing is performed using the authentication CCI data.

  If the authentication is successful in step 174, the program management information update process (step 175) is continued.

  If the authentication fails in step 174, the process jumps to the program management information update process End (step 176).

  In the program management information update process (step 175), the content management information registration / update / delete request unit 2 requests the content information management unit 1 to update the content management information based on the determined program management information difference information. .

  The content information management unit 1 updates the requested content management information.

  The content information management unit 1 reports the update result of the content management information to the content management information registration / update / deletion request unit 2.

  In the program management information update process End (step 176), the content management information update process is terminated.

  Next, the operation of the program management information deletion process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG. FIG. 12 is a flowchart showing the operation of the program management information deletion process of the software program execution device to which the content management method according to Embodiment 2 of the present invention is applied.

  In the present embodiment, the program is regarded as content, and the same processing as in FIG. 6 of the first embodiment is performed.

  First, the processing is started in the program management information deletion processing start (step 181), and the content registration No. of the content is acquired in the authentication CCI data acquisition processing (step 182). The CCI data for authentication extracted by the CCI information extraction unit 4 is passed to the content information management unit 1.

  In the authentication process using the authentication CCI data (step 183), the content information management unit 1 performs the authentication process using the authentication CCI data.

  If the authentication is successful in step 183, the program management information deletion process (step 184) is continued.

  If authentication fails in step 183, the process jumps to the program management information deletion process End (step 186).

  In the program management information deletion process (step 184), the content management information registration / update / deletion request unit 2 requests the content information management unit 1 to delete the content management information.

  The content information management unit 1 deletes the requested content management information of the program.

  In the program data deletion process (step 185), the content data and the authentication CCI data are deleted.

  In the program management information processing End (step 186), the process is terminated.

  Next, the operation of the program management information forced deletion process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied will be described with reference to FIG. FIG. 13 is a flowchart showing the operation of the program management information forced deletion process of the software program execution device to which the content management method according to the second embodiment of the present invention is applied.

  In the present embodiment, the program is regarded as content, and the same processing as in FIG. 7 of the first embodiment is performed.

  First, processing is started in the program management information forced deletion processing start (step 191). In the program management information deletion processing (step 192), the content management information registration / update / deletion request unit 2 To delete the content management information.

  The content information management unit 1 deletes the requested content management information.

  In the program data deletion process (step 193), the content data and the CCI data for authentication are deleted.

  In the program management information forced deletion process End (step 194), the process ends.

  In some implementations, the content information management unit 1 does not execute the deletion of program management information without passing through the authentication process as shown in FIG. 12, and the deletion of the program management information does not pass through the authentication process as shown in FIG. There is also an implementation to execute.

  An implementation that cannot delete the content management information without passing through the authentication process can delete the content management information only by the one having the CCI data for authentication, and can prevent unnecessary deletion.

  An implementation that deletes content management information without going through authentication processing can delete content management information even when the CCI data for authentication is lost, and prevent unused content management information from remaining Can do.

  As described above, in the present embodiment, even if the data image of the program serving as the content data 5 stored in the storage device is copied to another storage device in units of bits, the content in the content authentication table of the nonvolatile memory 11 Since management information is not copied, it is possible to prevent unauthorized copying of content.

  Data obtained by copying the program, which is the content data 5 in the storage device, in bit units is encrypted device-specific, and can be executed by the copy source device, but cannot be executed by other devices. It can be used as a method for backing up original data while maintaining strong program protection that can only be executed on the copied device.

  As mentioned above, the invention made by the present inventor has been specifically described based on the embodiment. However, the present invention is not limited to the embodiment, and various modifications can be made without departing from the scope of the invention. Needless to say.

  For example, in the first and second embodiments, the content authentication table 17 is stored in the non-volatile memory 11 in the content information management unit 1. However, the content authentication table 17 is provided outside the apparatus and is encrypted so that data cannot be copied. It is also possible to store the content authentication table 17 in an external storage device to which the content authentication table 17 has been applied and connect the external storage device in which the content authentication table 17 is stored to a device that reproduces and executes the content.

  The present invention relates to a content management method, and can be widely applied to devices that protect copyrights such as digitalized video and music and use software license management for use in information devices.

It is a block diagram which shows the content information management part to which the content management method which concerns on Embodiment 1 of this invention is applied, a content management information registration / update / deletion request part, a content reproduction request part, and a content reproduction process part. It is a block diagram which shows the structure of the digital content recording / reproducing apparatus to which the content management method which concerns on Embodiment 1 of this invention is applied. It is a flowchart which shows the operation | movement of the content recording process of the digital content recording / reproducing apparatus to which the content management method which concerns on Embodiment 1 of this invention is applied. It is a flowchart which shows the operation | movement of the content reproduction | regeneration / move process of the digital content recording / reproducing apparatus to which the content management method which concerns on Embodiment 1 of this invention is applied. It is a flowchart which shows the operation | movement of the content management information update process of the digital content recording / reproducing apparatus to which the content management method which concerns on Embodiment 1 of this invention is applied. It is a flowchart which shows the operation | movement of the content management information deletion process of the digital content recording / reproducing apparatus to which the content management method which concerns on Embodiment 1 of this invention is applied. It is a flowchart which shows the operation | movement of the content management information forced deletion process of the digital content recording / reproducing apparatus to which the content management method which concerns on Embodiment 1 of this invention is applied. It is a block diagram which shows the structure of the software program execution apparatus to which the content management method which concerns on Embodiment 2 of this invention is applied. It is a flowchart which shows the operation | movement of the program registration process of the software program execution apparatus to which the content management method which concerns on Embodiment 2 of this invention is applied. It is a flowchart which shows the operation | movement of the program execution and move process of the software program execution apparatus to which the content management method concerning Embodiment 2 of this invention is applied. It is a flowchart which shows the operation | movement of the program management information update process of the software program execution apparatus to which the content management method which concerns on Embodiment 2 of this invention is applied. It is a flowchart which shows the operation | movement of the program management information deletion process of the software program execution apparatus to which the content management method which concerns on Embodiment 2 of this invention is applied. It is a flowchart which shows the operation | movement of the program management information forced deletion process of the software program execution apparatus to which the content management method which concerns on Embodiment 2 of this invention is applied.

Explanation of symbols

  DESCRIPTION OF SYMBOLS 1 ... Content information management part, 2 ... Content management information registration / update / deletion request part, 3 ... Content reproduction request part, 4 ... CCI information extraction part, 5 ... Content data, 6 ... Tuner board, 7 ... Digital content recording / reproduction Device: 8 ... Media write processing unit, 9 ... Software program execution device, 11 ... Non-volatile memory, 12 ... Access arbitration unit, 13 ... Random value generation unit, 14 ... Registration / update / deletion authentication value calculation unit, 15 ... Authentication value calculation unit for authentication, 16 ... comparison processing unit, 17 ... content authentication table, 61 ... digital tuner, 62 ... multi2 decoding unit, 63 ... content recording processing unit, 64 ... content reproduction processing unit, 65 ... video / audio signal output , 66 ... Video / audio data output unit, 91 ... Program execution unit, 631 ... Key seed generation unit, 632 ... Short-term key generation Department, 633 ... encryption unit, 634 ... CCI information adding processing unit, 641 ... CCI information extracting section, 642 ... decoding unit, 643 ... key seed extraction unit, 644 ... short rekey unit.

Claims (5)

First storage device for storing the encrypted content data,
A content reproduction processing unit for managing reproduction / execution processing of the content data stored in the first storage device and write processing in units of bits to an external storage medium ;
A second storage device for storing content management information including information relating to authentication processing corresponding to a plurality of the content data, information relating to reproduction / execution processing, and information relating to writing processing to an external storage medium ;
A content information management unit that manages registration, update, and authentication of the content management information stored in the second storage device;
The content reproduction processing unit performs reproduction / execution processing of the content data and to an external storage medium based on information in the content management information authenticated as information corresponding to the content data by the content information management unit . The bit unit writing process is managed, and at the time of the bit unit writing process to the external storage medium, the content management information stored in the second storage device is not written to the external storage medium. A digital content recording / playback apparatus . The digital content recording / playback apparatus according to claim 1,
The content management information includes an authentication code of the content data, control information relating to the reproduction and execution processing of the content data, the constraint information on writing process in bits to said external storage medium,
The content reproduction processing unit reproduces and executes the content data based on information in the content management information authenticated as information corresponding to the content data by the content information management unit , and sends it to the external recording medium. A digital content recording / playback apparatus for restricting the writing of content. The digital content recording / playback apparatus according to claim 2,
The content reproduction processing unit stores the content data stored in the second storage device with respect to the content information management unit at the time of reproduction / execution processing of the content data and write processing in bit units to an external storage medium. digital content recording reproducing apparatus characterized by instructing the update of the content management information. The digital content recording / playback apparatus according to claim 1,
The content data stored in the first storage device is information indicating correspondence between the written content data and the digital content recording / playback device that is the source of writing when the content data is written to the external storage medium in bit units. Is added and written out, and the digital content recording / playback apparatus . The digital content recording / playback apparatus according to claim 4,
The content reproduction processing unit , based on the information in the content management information, the content data written to the external storage medium is authenticated as information corresponding to the content data by the content information management unit , A digital content recording / playback apparatus for performing playback / execution processing of the content data in the same manner as the content data stored in the first storage device .

Images