JP5787201B2 - Information processing apparatus and method, and recording medium - Google Patents

Description

  The present invention relates to an information processing apparatus and method, and a recording medium, and more particularly, to an information processing apparatus and method, and a recording medium that can limit use of content.

  In recent years, network systems represented by the Internet have become widespread. Thereby, the user can transmit information via the Internet, or can receive information.

  By the way, a user who desires to watch a copyrighted work such as a movie or music can receive the copyrighted work by paying a fee for it.

  However, there is a risk that copyrighted works such as movies and music will be viewed illegally not only by the owner but also by many users who have not paid for the copyrighted work through networks such as the Internet. .

  In addition, if the act of illegally viewing through the network is performed indefinitely, the content creation and distribution business may be hindered.

  The present invention has been made in view of such a situation, and makes it possible to prevent content from being illegally used via a network.

The information processing apparatus according to the present invention is an information processing apparatus that receives a content from another device, and outputs the content to the other device and an information processing device different from the information processing device. And the certificate, the permitted number of receptions that the information processing device wants to obtain a new reception permission, and the total number of permitted number of receptions and the permitted number of receptions that the information processing device has already obtained, The transmission unit to be transmitted to the device, and the certificate is valid, and the value obtained by adding the number of reception permitted or the total number to the number of the different information processing devices already permitted to receive is permitted to receive. If it is smaller than the upper limit number, a random number reception unit that receives a random number generated by the other device, on the basis of said random number and said received authorization number and the total number of sent, authentication information indicating the validity A generation unit for forming, generated based on the authentication information, and a transmission unit for transmitting to said another apparatus, to said random number received in the receiving Permitted Number and the total number in the other device And the authentication information is determined not to match in the other apparatus, the authentication process by the other apparatus fails, and the information generated in the other apparatus and the authentication information are In response to a match in the other device, key information necessary for decrypting the content is received from the other device when the authentication process by the other device is successful.

An information processing method of the present invention is an information processing method for an information processing apparatus, receiving content from another device, the content, and outputs to a different device with the other devices and the information processing apparatus, demonstrated , The number of reception permission that the information processing apparatus wants to obtain a new reception permission, and the total number of the permitted number of the information processing apparatus already obtained and the number of reception permission are transmitted to the other apparatus. When the certificate is valid, and the value obtained by adding the number of permitted receptions or the total number to the number of the different information processing apparatuses already permitted to receive is smaller than the upper limit number permitted to be received. , Receiving a random number generated by the other device, generating authentication information indicating validity based on the random number , the received permitted number of transmissions and the total number, and generating the authentication information as the other Dress Wherein the step of transmitting hand, the other with the random number in the device and the information generated on the basis of said received authorization number and the total number of received, the authentication information does not match with the other apparatus If the authentication process by the other device fails, the information generated by the other device matches the authentication information in the other device, and the other device responds. When the authentication process according to the above is successful, the key information necessary for decrypting the content is received from the other device.

The program recorded on the recording medium of the present invention is a program for an information processing device, which receives content from another device and transfers the content to the other device and a device different from the information processing device. Output the certificate, the number of reception permitted to be newly received by the information processing apparatus, and the total number of the permitted number of the information processing apparatus already obtained and the number of reception permitted. The value obtained by adding the number of permitted reception or the total number to the number of the different information processing apparatuses that are already authorized to be received, and that the certificate is valid, is an upper limit that can be permitted to be received. If the number is less than, receives a random number generated by the other device, on the basis of said random number and said received authorization number and the total number of transmitted, to generate authentication information indicating the validity, the The witness information comprises transmitting to said another apparatus, said other of the random number in the device and the information generated on the basis of said received authorization number and the total number of received, the authentication information When it is determined that the other device does not match, the authentication processing by the other device fails, and the information generated by the other device matches the authentication information by the other device. Accordingly, when the authentication process by the other device is successful, key information necessary for decrypting the content is received from the other device.

In the information processing apparatus, the information processing method, and the program recorded in the recording medium of the present invention, content is received from another device, and the content is output to the other device and a device different from the information processing device. The total number of certificates, the permitted number of receptions that the information processing device wants to receive and the total number of permitted information received by the information processing device and the permitted number of receptions are transmitted to other devices. If the certificate is valid and the number of different information processing devices that have already been permitted to receive plus the total number of permitted receptions or the total number is smaller than the maximum number that can be accepted, other devices The generated random number is received, authentication information indicating validity is generated based on the random number , the permitted number of received transmissions and the total number, and the authentication information is transmitted to another device. Then, when it is determined that the information generated based on the random number, the permitted number of received receptions and the total number in the other device does not match the authentication information, the authentication processing by the other device Key information required for decrypting the content when the authentication process by the other device succeeds when the authentication fails by the other device and the authentication information matches with the information generated by the other device. Are received from other devices.

  According to the present invention, it is possible to limit the use of content. In addition, it is possible to limit the output content receiving apparatus based on the obtained permitted number (received number).

It is a block diagram which shows the structural example of the network system to which this invention is applied. It is a block diagram which shows the detailed structural example of the source | sauce of FIG. It is a block diagram which shows the detailed structural example of the sink of FIG. It is a block diagram which shows the detailed structural example of the bridge | bridging of FIG. It is a figure explaining the authentication process of a source or a bridge | bridging, and a sink. It is a flowchart explaining the authentication process with respect to the source | sauce or bridge | bridging of a sink. It is a flowchart explaining the authentication process with respect to the source of a source or a bridge | bridging. It is a figure explaining the authentication process of the Rx bridge of a source or a Tx bridge. It is a flowchart explaining the authentication process with respect to the source of a Rx bridge or a Tx bridge. It is a flowchart explaining the authentication process with respect to the Rx bridge of a source or a Tx bridge.

  FIG. 1 is a block diagram showing a configuration example of a network system to which the present invention is applied. In this network system, the source 1 is connected to the sink 2-1 and the bridge 3-1 via the bus 4-1, and the bridge 3-1 is connected to the sink 2- via the bus 4-2. 2 and the bridge 3-2, and the bridge 3-2 is connected to the sinks 2-3 and 2-4 via the bus 4-3.

  The source 1 is an output device that outputs content. When outputting the content, the source 1 encrypts the content and then outputs it to the sinks 2-1 to 2-4 via the buses 4-1 to 4-3. The key information necessary for decrypting the encrypted content is passed only to the sink that has succeeded in the authentication process. This limits the number of sinks that receive content. Note that bridges 3-1 and 3-2, which will be described later, are only excluded from being counted because they only re-output the received signals.

  The sinks 2-1 to 2-4 (hereinafter, when the sinks 2-1 to 2-4 do not need to be individually distinguished are simply described as the sink 2. The same applies to other devices). It is a receiving device that receives supplied content. If the authentication process is successful, the sink 2 decrypts the received content based on the key information passed from the source 1. However, when the bridge 3-1 or 3-2 once decrypts the cipher, encrypts it with a new key, and outputs it, the sinks 2-2 to 2-4 are based on the key information passed from the directly connected bridge. Decrypt the received content.

  The bridges 3-1 and 3-2 receive the encrypted content output from the source 1, decrypt it, encrypt it again, and output it to the sinks 2-2 to 2-4. Therefore, the bridge 3-1 performs authentication processing with the source 1, acquires key information necessary for decrypting the encrypted content, and determines how many sinks 2 to receive the re-output content. Tell 1 When the bridge 3-1 obtains permission from the source 1, the bridge 3-1 limits the number of sinks 2-2 to 2-4 that receive the content on behalf of the source 1. The bridge 3-2 authenticates with the bridge 3-1, and similarly restricts the number of sinks 2-3 and 2-4 received.

  FIG. 2 is a block diagram illustrating a detailed configuration example of the source 1.

  When the media 12 is loaded, the content player 11 plays the content recorded on the media 12 and outputs it to the encryption unit 13 under the control of the control unit 15. The encryption unit 13 encrypts the content input from the content player 11 and outputs the encrypted content to the outside via the communication I / F (interface) 14. Instead of the content player 11 and the medium 12, a source having a tuner that receives and outputs broadcast content is also conceivable.

  The control unit 15 controls the content player 11, the encryption unit 13, the communication I / F 14, and the storage unit 16. The control unit 15 also causes the storage unit 16 to store content reproduced by the content player 11 as necessary.

  FIG. 3 is a block diagram illustrating a detailed configuration example of the sink 2.

  The control unit 24 controls the image / sound output unit 21, the decoding unit 22, the communication I / F 23, and the storage unit 25. The control unit 24 also sends the encrypted content transmitted via the communication I / F 23 to the decryption unit 22.

  The decryption unit 22 acquires key information transmitted from the source 1 via the communication I / F 23. The decrypting unit 22 also decrypts the content based on the acquired key information. The image / sound output unit 21 outputs the content decoded by the decoding unit 22.

  FIG. 4 is a block diagram illustrating a detailed configuration example of the bridge 3.

  The control unit 35 controls the communication I / F 31, the decryption unit 32, the encryption unit 33, the communication I / F 34, and the storage unit 36. The control unit 35 also sends the encrypted content transmitted via the communication I / F 31 to the decryption unit 32.

  The decrypting unit 32 acquires key information transmitted from the source 1 via the communication I / F 31 and decrypts the received content based on the acquired key information.

  The encryption unit 33 encrypts the content decrypted by the decryption unit 32 and outputs it to the outside via the communication I / F 34.

  It is assumed that public key encryption technology is used for authentication, and the source 1, sink 2 and bridge 3 are digital certificates (hereinafter referred to as “Certificate”) issued by the key management organization and for each device. It shall have a private key and a public key of a key management organization. The certificate includes a public key for each device corresponding to the secret key for each device, a unique ID of the device, and an electronic signature by the key management organization for the two data.

  FIG. 5 is a diagram for explaining an authentication process when the source 1 and the sink 2-1 (FIG. 1) are directly connected.

  First, the sink 2-1 transmits its certificate to the source 1. Specifically, the control unit 24 of the sink 2-1 reads the certificate from the storage unit 25 and transmits it as a communication command to the source 1 via the communication I / F 23 (corresponding to 1 in FIG. 5).

  When the source 1 receives this communication command, the source 1 determines whether or not the data is valid. Specifically, the control unit 15 of the source 1 uses the public key of the key management organization stored in the storage unit 16 and the data in the certificate received via the communication I / F 14 and the accompanying data. Check whether the electronic signature of the key management organization is supported. That is, the control unit 15 determines the validity of the received data by executing a DSA (Digital Signature Algorithm) Verify calculation process of public key cryptography. If the determination result is valid, the authentication process is continued; otherwise, the authentication process is terminated.

  When the processing is continued, the control unit 15 of the source 1 checks whether or not the partner ID in the certificate is already registered in the authenticated ID list (hereinafter referred to as an ID list) held in the storage unit 16. If already registered, 0 is substituted into the variable CntUp.

  On the other hand, when the ID of the partner in the certificate is not registered in the ID list, the control unit 15 of the source 1 counts the number of sinks 2 permitted to receive (hereinafter referred to as variable SinkCnt) and the upper limit number that can permit reception ( Hereinafter, the variable MaxSink) is compared, and if the variable SinkCnt is smaller, 1 is substituted into the variable CntUp.

  If SinkCnt = MaxSink, the authentication process is terminated. Further, the variable MaxSink may not be a variable (that is, may be a constant).

  Then, the control unit 15 of the source 1 generates a pseudo random number Random_challenge by a pseudo random number generation algorithm, and transmits it as a communication command to the sink 2-1 (corresponding to 2 in FIG. 5).

  When the control unit 24 of the sink 2-1 receives this communication command, the control unit 24 executes DSASign calculation processing of public key cryptography on the value using its own private key held in the storage unit 25. To calculate an electronic signature. The control unit 24 of the sink 2-1 transmits the calculated electronic signature to the source 1 as a communication command (Response data) (corresponding to 3 in FIG. 5).

  When the control unit 15 of the source 1 receives this communication command, the control unit 15 of the source 1 determines whether the pseudo random number Random_challenge sent by itself corresponds to the electronic signature, that is, executes the above-described DSA Verify operation process to verify the validity of the data. Determine sex. However, here, the public key of the other party in the certificate received from the other party is used instead of the public key of the previous key management organization. If the determination result is valid, the authentication process is continued. If not, the authentication process is terminated.

  When the process is continued, the control unit 15 of the source 1 transmits key information necessary for decrypting the encryption applied to the content to the sink 2-1 as a communication command (corresponding to 4 in FIG. 5), and the value of the variable SinkCnt Is increased by the value of the variable CntUp. Then, the control unit 15 of the source 1 checks whether or not the partner ID in the certificate has already been registered in the authenticated ID list held in the storage unit 16, and if it has been registered, 0 is substituted into the variable CntUp. . On the other hand, if the partner ID in the certificate is not registered in the ID list, the variable SinkCnt is compared with the variable MaxSink. If the variable SinkCnt is smaller, 1 is assigned to the variable CntUp.

  The sink 2-1 can receive the content by receiving the key information and using it to decrypt the encryption applied to the content.

  Further, when the content output from the source 1 is received by the sink 2-2 after passing through the bridge 3-1, like the source 1 and the sink 2-2 shown in FIG. -2 and the bridge 3-1 perform the authentication process as shown in FIG. That is, even when content is transmitted via two or more bridges, such as source 1 and sink 2-3 or source 1 and sink 2-4, sinks 2-3 and 2-4 and the last bridge 3-2 (the bridge directly connected to the sinks 2-3 and 2-4) performs the same authentication process.

  The processing flow of the sink 2 in the above authentication processing is shown in FIG. 6, and the processing flow of the source 1 is shown in FIG.

  The authentication process of the sink 2 is exactly the same as that of the source 1 even if the partner is the bridge 3. The authentication process of the bridge 3 is different from that of the source 1 in the process shown in step S15 of FIG. Specifically, when SinkCnt = MaxSink, the bridge 3 increases the value of the variable MaxSink, so that the source 1 or bridge 3 (FIG. 1) that is the source of the content it receives (inputs). In the case of the example, authentication processing is performed to request reception permission from the source 1 for the bridge 3-1 and to the bridge 3-1) for the bridge 3-2. In this case, addition of one or more reception units is required. If this authentication process is successful, the processes after step S16 in FIG. 7 are continued.

  FIG. 8 is a diagram for explaining an authentication process when the source 1 and the bridge 3-1 (FIG. 1) are directly connected.

  First, the control unit 35 of the bridge 3-1 transmits its certificate, variable RelCnt, and variable AbsCnt to the source 1 (corresponding to 1 in FIG. 8). Here, the variable RelCnt represents the number of reception permission newly desired by the bridge 3-1, and the variable AbsCnt represents the total number of the permitted number and the number of permission to be obtained this time.

  When receiving this, the control unit 15 of the source 1 determines whether or not the certificate is valid by executing the above-described DSA Verify operation process. If the determination result is not valid, the authentication process is terminated.

  When continuing the processing, the control unit 15 of the source 1 checks whether or not the partner ID in the certificate has been registered in its own ID list, and if it has been registered, substitutes the variable RelCnt for the variable CntUp.

  On the other hand, when the partner ID in the certificate is not registered in the ID list, the control unit 15 of the source 1 substitutes the variable AbsCnt for the variable CntUp. Then, the control unit 15 of the source 1 determines whether or not the value obtained by adding the variable CntUp to the variable SinkCnt is smaller than the variable MaxSink.

  Then, the control unit 15 of the source 1 generates a pseudo random number Random_challenge and transmits it as a communication command to the bridge 3-1 (corresponding to 2 in FIG. 8).

  When receiving the communication command, the control unit 35 of the bridge 3-1 uses the private key held in the storage unit 36 for the value, the transmitted variable RelCnt and the variable AbsCnt, and The digital signature is calculated by executing the DSA Sign calculation process. The control unit 35 of the bridge 3-1 transmits the calculated electronic signature to the source 1 as a communication command (Response data) (corresponding to 3 in FIG. 8).

  When the control unit 15 of the source 1 receives this communication command, whether or not this electronic signature corresponds to the pseudo random number Random_challenge sent by itself, the received variable RelCnt and the variable AbsCnt, that is, the above-described DSA Verify An arithmetic process is executed to determine the validity of the data. However, here, the public key of the other party in the certificate received from the other party is used instead of the public key of the previous key management organization. If the determination result is not valid, the authentication process is terminated.

  When the processing is continued, the control unit 15 of the source 1 transmits key information necessary for decrypting the encryption applied to the content to the bridge 3-1 as a communication command (corresponding to 4 in FIG. 8), and the value of the variable SinkCnt Is increased by the value of the variable CntUp, and if the partner's ID is not registered in the ID list, it is added.

  The bridge 3-1 receives the key information, uses it to decrypt the encryption applied to the content, and then encrypts it again and outputs the content. Then, the control unit 35 of the bridge 3-1 increases the value of the variable MaxSink by the value of the variable RelCnt.

  The processing flow of the bridge 3 in the above authentication processing is shown in FIG. 9, and the processing flow of the source 1 is shown in FIG.

  In addition, content output from the source 1 passes through two or more bridges 3-1 and 3-2, such as the source 1 and the sink 2-3 or the source 1 and the sink 2-4 shown in FIG. After that, when received by the sinks 2-3 and 2-4, the bridge 3-1 (hereinafter referred to as Tx bridge) that outputs the content and the bridge 3-2 (hereinafter referred to as Rx bridge) that receives the content are again used. (To describe) performs an authentication process as shown in FIG.

  Note that the authentication process of the Rx bridge is exactly the same as when the partner is the source 1.

  The Tx bridge authentication process is different from that of the source 1 in the process shown in step S46 of FIG. Specifically, when SinkCnt + CntUp> MaxSink, the Tx bridge authenticates the source 1 or the bridge 3 that is the transmission source of the content input by itself to request reception permission in order to increase the value of the variable MaxSink. Processing is performed (in the case of the example in FIG. 1, the bridge 3-1 requests authentication from the source 1). In this case, the addition of the number of receptions equal to or more than ((SinkCnt + CntUp) −MaxSink) is required. When this authentication process is successful, the processes after step S50 in FIG. 10 are continued.

  As another example of processing, the variable RelCnt and the variable AbsCnt may be transmitted separately from the certificate. For example, there is a method of transmitting together with the Response shown in 3 of FIG. 8 or a method of transmitting with a completely different communication command.

  Further, when the bridges 3-1 and 3-2 authenticate with the newly connected source 1 or bridge 3 in step S15 of FIG. 7 or step S46 of FIG. There is also a method that does not continue this process. That is, the new authentication can be positioned as a thing for succeeding the authentication after the next time.

  Furthermore, if the sink 2 stops receiving its output and loses the information necessary for decryption, the source 1 or bridge 3 can reduce the variable SinkCnt by that sink 2. For example, if the encryption key information applied to the content by the source 1 or the bridge 3 is changed, the sink 2 can set its own variable SinkCnt to 0.

As described above, since the source 1 or the bridge 3 limits the number of sinks 2 that can receive the output, the following effects can be obtained.
(1) The right holder regarding the content can prevent unauthorized viewing and recording of the content.
(2) Even when a signal is re-output using a bridge, the number of sources including the sink at the end of the bridge can be limited.
(3) By limiting the number of devices using a device-specific ID, the number of devices will not be increased by mistake, no matter how many times the same sink authenticates.
(4) When a bridge requests a source or another bridge for permission to receive, the source or another bridge has been authenticated as that bridge by notifying the increase or decrease in the number of receptions and the total number of receptions. In this case, or in the case where the user has never been authenticated, the variable SinkCnt can be easily changed to a correct value.
(5) By using the public key encryption technology, the device unique ID and the required number can be safely passed to other devices, and the correct number management can be performed.

  The series of processes described above can be executed by hardware, but can also be executed by software. When a series of processing is executed by software, a program constituting the software executes various functions by installing a computer incorporated in dedicated hardware or various programs. For example, it is installed from a recording medium in a general-purpose personal computer or the like.

  This recording medium is distributed to provide a program to the user separately from the computer, and includes a magnetic disk (including a floppy disk) on which the program is recorded, an optical disk (CD-ROM (Compact Disk-Read Only Memory)) , DVD (Digital Versatile Disk)), magneto-optical disk (including MD (Mini-Disk)), or package media consisting of semiconductor memory, etc. It is composed of a ROM, hard disk, etc., where the program is recorded.

  In the present specification, the step of describing the program recorded on the recording medium is not limited to the processing performed in chronological order according to the described order, but is not necessarily performed in chronological order. It also includes processes that are executed individually.

  Further, in this specification, the system represents the entire apparatus constituted by a plurality of apparatuses.

  1 source, 2-1 to 2-4 sink, 3-1, 3-2 bridge, 11 content player, 12 media, 13 encryption unit, 14 communication I / F, 15 control unit, 16 storage unit, 21 image / sound Output unit, 22 decryption unit, 23 communication I / F, 24 control unit, 25 storage unit, 31 communication I / F, 32 decryption unit, 33 encryption unit, 34 communication I / F, 35 control unit, 36 storage unit

Claims (8)

An information processing apparatus,
A receiver for receiving content from another device;
An output unit that outputs the content to an information processing device different from the other device and the information processing device;
Certificate, the number of reception permitted to be newly received by the information processing device, and the total number of the permitted number of the information processing device already obtained and the number of reception permission are given to the other device. A transmission unit for transmission;
When the certificate is valid and the value obtained by adding the number of reception permitted or the total number to the number of different information processing apparatuses already permitted to receive is smaller than the upper limit number that can be permitted for reception, A random number receiver for receiving random numbers generated by other devices;
Based on the random number , the transmitted permitted number of transmissions and the total number, a generating unit that generates authentication information indicating validity;
A transmission unit that transmits the authentication information to the other device;
When it is determined that the information generated based on the random number, the permitted number of received receptions and the total number received in the other device does not match the authentication information, the other device The authentication process by the other device failed,
The key required for decrypting the content when the authentication processing by the other device succeeds when the information generated by the other device matches the authentication information by the other device. An information processing device that receives information from the other device. The content is broadcast content,
The information processing apparatus according to claim 1, wherein the other apparatus includes a tuner that receives the broadcast content. The content is recorded on a medium that can be attached to the other device,
The information processing apparatus according to claim 1, wherein the other apparatus reproduces the content recorded on the medium. When the authentication process is successful, the identification information of the information processing apparatus is registered in the identification information list in which the identification information of the information processing apparatus permitted to receive the content is registered in the other apparatus. The information processing apparatus described. From the other device,
When the identification information of the information processing apparatus being authenticated has already been registered in the identification information list, a value obtained by adding the reception permitted number to the number of the different information processing apparatuses already permitted to receive is received. Is less than the maximum number allowed.
When the identification information of the other device being authenticated has not been registered in the identification information list, the value obtained by adding the total number to the number of the different information processing devices already permitted to receive is permitted to be received. When less than the maximum number you can,
The information processing apparatus according to claim 4, wherein the random number is transmitted. Decryption means for decrypting the content using the key information;
The information processing apparatus according to claim 1, further comprising encryption means for encryption of the content decoded by said decoding means. An information processing method for an information processing apparatus,
Receive content from other devices,
Outputting the content to a device different from the other device and the information processing device;
Certificate, the number of reception permitted to be newly received by the information processing device, and the total number of the permitted number of the information processing device already obtained and the number of reception permission are given to the other device. Send
When the certificate is valid and the value obtained by adding the number of reception permitted or the total number to the number of different information processing apparatuses already permitted to receive is smaller than the upper limit number that can be permitted for reception, Receive random numbers generated by other devices,
Based on the random number and the transmitted number of permitted receptions and the total number , generate authentication information indicating validity,
Transmitting the authentication information to the other device;
When it is determined that the information generated based on the random number, the permitted number of received receptions and the total number received in the other device does not match the authentication information, the other device The authentication process by the other device failed,
The key required for decrypting the content when the authentication processing by the other device succeeds when the information generated by the other device matches the authentication information by the other device. An information processing method for receiving information from the other device. A program for an information processing device,
Receive content from other devices,
Outputting the content to a device different from the other device and the information processing device;
Certificate, the number of reception permitted to be newly received by the information processing device, and the total number of the permitted number of the information processing device already obtained and the number of reception permission are given to the other device. Send
When the certificate is valid and the value obtained by adding the number of reception permitted or the total number to the number of different information processing apparatuses already permitted to receive is smaller than the upper limit number that can be permitted for reception, Receive random numbers generated by other devices,
Based on the random number and the transmitted number of permitted receptions and the total number , generate authentication information indicating validity,
Transmitting the authentication information to the other device;
When it is determined that the information generated based on the random number, the permitted number of received receptions and the total number received in the other device does not match the authentication information, the other device The authentication process by the other device failed,
The key required for decrypting the content when the authentication processing by the other device succeeds when the information generated by the other device matches the authentication information by the other device. A recording medium on which a computer-readable program that receives information from the other device is recorded.

Images