JP7617427B2 - Recording system, storage device, image receiving device, and program - Google Patents

Description

The present invention relates to a recording system, a storage device, an image receiving device, and a program.

When moving content (Move), from the perspective of protecting the copyright of the content, it is necessary to make the content unavailable at the destination until the transfer from the source to the destination is complete.

Patent document 1 discloses a technology that transmits encrypted content from a source to a destination, and when the transmission is complete, the source and destination share an encryption key to enable the content at the destination.

JP 2007-272862 A

However, the above conventional technology does not take into consideration the case where the power to the storage device storing the recorded data, etc. is turned off while the recorded data, etc. is being moved. In other words, the conventional technology does not guarantee operation when, for example, a power interruption occurs while the process of verifying a file after transfer is being performed.

The present invention has been made in consideration of the above-mentioned circumstances, and one of its objectives is to provide a recording system, storage device, image receiving device, and program that can protect recorded data even if the power is interrupted during transfer.

One aspect of the present invention that solves the problems of the above conventional examples is a recording system that includes a receiving device capable of receiving television programs, a first storage device, and a second storage device, and when the receiving device moves recorded data from the first storage device to the second storage device, the receiving device sets a predetermined password in the recording section of the second storage device in which the recorded data is recorded, and when the second storage device is powered off or disconnected from the receiving device, the set password is used to restrict the reading of recorded data from the recording section.

In addition, during the transfer of the recorded data, the recorded data transferred to the second storage device may be set as unreadable data. Furthermore, the recording unit may be a bare drive, and the restriction on reading the recorded data may be a restriction on locking with an ATA password.

Another aspect of this embodiment is a storage device connected to a receiving device capable of receiving television programs, the storage device having a means for accepting recorded data of the received television program from a source storage device, a means for accepting a predetermined password setting when accepting the recorded data, and a means for accepting the password setting and setting the accepted password in a recording unit that records the recorded data, and when a password is set, the recording unit restricts the reading of the recorded data from the recording unit using the set password when the power is turned off or the connection from the receiving device is released.

Another aspect of this embodiment is a receiving device capable of receiving television programs, which is connected to a first storage device and a second storage device capable of recording recorded data of the received television programs, and when the recorded data is transferred from the first storage device to the second storage device, a predetermined password is set for the recording section of the second storage device in which the recorded data is recorded, and when the second storage device is powered off or disconnected from the receiving device, the password is used to restrict the reading of the recorded data from the recording section of the second storage device.

Yet another aspect of the present invention is a program that causes a receiving device capable of receiving television programs, the receiving device being connected to a first storage device and a second storage device capable of recording recorded data of the received television programs, to function as: means for copying and moving the recorded data from the first storage device to the second storage device; and means for setting a predetermined password for a recording section of the second storage device in which the recorded data is recorded when the recorded data is moved from the first storage device to the second storage device, and for restricting the reading of the recorded data from the recording section of the second storage device using the password when the second storage device is powered off or disconnected from the receiving device.

According to each aspect of the present invention, even if the power is interrupted during transfer, the recorded data is protected because an ATA password lock or the like is set on the second storage device to which the data is transferred.

With this invention, recorded data is protected even if the power is interrupted during transfer.

1 is a configuration block diagram illustrating an example of a data recording system according to an embodiment of the present invention. FIG. 1 is a functional block diagram illustrating an example of an image receiving device according to an embodiment of the present invention. 3 is an explanatory diagram illustrating an example of an information table used in the data recording system according to the embodiment of the present invention. FIG. 4 is a flowchart illustrating an example of the operation of the data recording system according to the embodiment of the present invention. 4 is a flowchart illustrating an example of a migration process of the data recording system according to the embodiment of the present invention. 5 is a flowchart illustrating an example of a transfer process in the data recording system according to the embodiment of the present invention.

The following describes an embodiment of the present invention with reference to the drawings. As shown in FIG. 1, a data recording system 1 according to an embodiment of the present invention includes a receiving device 10, a first storage device 20 for recording recorded data, and a second storage device 30.

Here, the first and second storage devices 20, 30 are information recording devices such as hard disk drives and SSD (Solid State Disk) drives, and at least the second storage device 30 includes a bear drive that functions as a recording unit for recording video data, etc. Furthermore, at least the second storage device 30 is assumed to be compatible with the ATA password lock function. Note that the ATA password lock function is widely known, so a description of it will be omitted here.

The receiving device 10 is capable of receiving television programs, and as shown in FIG. 1, includes a control unit 11, a memory unit 12, an operation unit 13, an output unit 14, an interface unit 15, and a receiving circuit unit 16.

Here, the control unit 11 is a program-controlled device such as a CPU, and operates according to a program stored in the storage unit 12. In one example of this embodiment, the control unit 11 executes a program for the Android (registered trademark) OS, and executes various application programs under the management of this OS.

Specifically, the control unit 11 of this embodiment performs processing such as setting the file system for the storage device connected via the interface unit 15 and storing the recorded data (a data file in which a program is recorded). In this embodiment, the control unit 11 also executes a program stored in the storage unit 12 to acquire product-related information related to the manufacturer of the image receiving device 10. The control unit 11 also refers to the acquired product-related information and executes a predetermined process including a process of moving the recorded data from one storage device (first storage device) to another storage device (second storage device). When the control unit 11 performs a process of moving the recorded data, it also sets an ATA password lock using a predetermined ATA password for the second storage device 30. As a result, when the second storage device 30 is powered off or disconnected from the image receiving device, the ATA password lock is applied and the device is controlled not to accept a request to read the recorded data until the predetermined ATA password is input again. The detailed operation of the control unit 11 will be described later.

The storage unit 12 is a memory device or the like, and holds a program executed by the control unit 11. This program may be provided stored in a computer-readable and non-transitory recording medium and copied to the storage unit 12, or it may be received via a network or the like and stored in the storage unit 12. The storage unit 12 also operates as a work memory for the control unit 11.

The operation unit 13 accepts operations by the user. The output unit 14 outputs images and audio of the received program according to instructions from the control unit 11.

The interface unit 15 includes, for example, a USB (Universal Serial Bus) interface, and is connected to the first storage device 20 and the second storage device 30. The interface unit 15 may also include a network interface, and transmits and receives information via a network according to instructions input from the control unit 11.

The image receiving circuit unit 16 includes a tuner circuit for receiving television programs. In this embodiment, the image receiving circuit unit 16 outputs the video and audio of the received television program to the output unit 14, and also to the control unit 11 for processing such as generating recorded data.

Next, the operation of the control unit 11 of the image receiving device of this embodiment will be described. In this embodiment, the control unit 11 executes a program stored in the storage unit 12, and functionally includes an information acquisition unit 21, a movement processing unit 22, and a lock processing unit 23, as illustrated in FIG. 2.

The information acquisition unit 21 acquires product-related information related to the manufacturer of the image receiving device 10 itself. The product-related information may include information identifying the manufacturer of the image receiving device 10, as well as information indicating the model of the image receiving device 10.

The movement processing unit 22 moves the recording data from the first storage device 20 to the second storage device 30 in accordance with instructions input by the user. Specifically, the movement processing unit 22 executes a sector copy (movement process) from the first storage device 20 to the second storage device 30.

In one example of this embodiment, the movement processing unit 22 may copy each sector in a predetermined order, for example, in the order of sector numbers, similar to a typical sector copy. In this case, the movement processing unit 22 records the last successfully copied sector number in a storage area that is not erased by reboot (such as a system storage area or non-volatile memory).

The movement processing unit 22 may also copy sectors in a predetermined unit rather than in the order of sector numbers for partitions that hold recorded data and partitions that hold corresponding management data (data including information such as the file name of the recorded data, a list of sectors in which the data constituting the file is stored, and access rights for the file). The unit of copying here may be, for example, a predetermined amount of data (sector size, buffer size, etc.), or it may be a unit of one minute of recording time, or a unit of one piece of recorded data. For convenience, the unit of data copied at one time when copying data will be referred to as a block below.

For each block of data stored in the first storage device 20, the movement processing unit 22 identifies the sector in which the data constituting that block is held, and performs processing to write the contents of that sector to the corresponding sector in the second storage device 30. That is, the movement processing unit 22 refers to the management data, obtains a list of information identifying the sectors that hold the blocks, and generates a list of information (sector numbers, etc.) identifying the sectors that indicate the order of copying. The movement processing unit 22 records this list in a storage area that is not erased by rebooting (such as a system storage area or non-volatile memory).

Then, the movement processing unit 22 reads data in sectors from the first storage device 20 in the order shown in this list, and writes it to the corresponding sectors of the second storage device 30. Each time writing is completed, the movement processing unit 22 deletes information identifying the sector to which writing has been completed from the list. Also in this case, when copying of the sector of the management data corresponding to the block to be copied is completed, the movement processing unit 22 sets the access authority data represented by the management data to a "read-unavailable" state. However, this is just one example, and as another example, the entire contents of the second storage device 30 may be set to "read-unavailable" when starting the movement process to the second storage device 30.

Then, after the copying of the corresponding block is completed (which may be immediately after the copying of all sectors that hold the data constituting the corresponding block of recorded data is completed, or after the copying of all sectors in which data is held out of all sectors of the first storage device 20 is completed), the movement processing unit 22 sets the access authority data of the corresponding management data to a "readable" state.

Note that in this example, no copying is performed on sectors of blocks that do not contain data.

In this manner, in this embodiment, during sector copy processing, the last copied sector number (when copying is performed in sector number order) or a list of information identifying the sector is recorded in a storage area that is not erased by reboot (such as a system storage area or non-volatile memory). Thus, when the movement processing unit 22 receives an instruction to resume processing from the lock processing unit 23 (described later), if the last copied sector number is held in the storage area, it resumes the copying process from the sector with the next sector number after the sector number in question.

When the movement processing unit 22 receives an instruction to resume processing from the lock processing unit 23 (described later), if a list of information identifying a sector is stored in the above-mentioned memory area, the movement processing unit 22 resumes the copying process from the sector identified by the information at the top of the list.

After the sector copy is completed, the movement processing unit 22 verifies the file system of the second storage device 30. This verification may be a typical file system verification process, for example, a process executed by the fsck command in Linux (registered trademark).

If the file system verification is successful, the movement processing unit 22 performs processing to make the recorded data stored in the first storage device 20 unplayable. In this embodiment, the movement processing unit 22 performs processing to make the recorded data stored in the first storage device 20 unplayable, using a method that is predetermined according to the product-related information acquired by the information acquisition unit 21.

As an example, the storage unit 12 of the image receiving device 10 of this embodiment stores an information table (hereinafter referred to as processing information) that records the file system type (T), information about partitions (N), and information about post-processing (P) in association with product-related information (A), as illustrated in FIG. 3.

Here, the information about the partitions includes, for example, information about the partition structure and information indicating in which partitions the recording data and management data (such as data that records the storage positions of blocks) are to be stored.

From this processing information, the movement processing unit 22 acquires the type of file system (T), partition information (N), and post-processing information (P) recorded in association with the product-related information acquired by the information acquisition unit 21. The movement processing unit 22 then checks whether the partition in which the recorded data is stored and the partition in which the management data is stored, which are indicated by the acquired partition-related information, are different partitions, and if they are different partitions, it deletes the partition containing the management data and makes it impossible to play the recorded data.

The method of deletion here may be, for example, a method of overwriting the partition by filling it with predetermined data such as "00" or "FF" or random data (hereinafter referred to as the complete deletion method). For example, a method stipulated in the UK HMG Infosec Standard 5, Baseline Standard is known as such a process.

In addition, if the partition in which the recording data is stored and the partition in which the management data is stored, as indicated by the acquired partition-related information, are not different partitions, the movement processing unit 22 makes it impossible to play the recording data, for example by deleting the data in the partition in which the recording data and the management data are stored, using a complete erasure method.

Furthermore, if the acquired information about the partition includes information indicating the existence of a partition that backs up data including management data, the movement processing unit 22 also deletes the contents of the partition that backs up the data including the management data by using a complete deletion method.

Furthermore, when the product-related information acquired by the information acquisition unit 21 satisfies a predetermined condition, the movement processing unit 22 may execute a process of expanding the recording area of the video recording data on the second storage device 30 in a predetermined manner according to the product-related information.

When the movement processing unit 22 executes the movement processing, specifically, immediately before the movement processing unit 22 starts to execute the movement processing, the lock processing unit 23 issues a SECURITY SET PASSWORD command to the second storage device 30 to set an ATA password lock using a specific, predetermined ATA password, and executes the movement processing of the recorded data in an unlocked state in which the disk can be accessed.

As a result, when the second storage device 30 is powered off or disconnected from the image receiving device 10 during the transfer process of the recorded data (when the connection is released by unplugging the USB cable, etc.), the second storage device 30 goes from an unlocked state to a locked state, and even if it is connected to another device, reading of the recorded data is restricted until the above-mentioned specified ATA password is entered again (the ATA password is locked). The ATA password lock is set in the bare drive, which is the recording unit. Therefore, even if the bare drive, which is the recording unit, is removed from the second storage device 30 and placed in the case of another storage device and used as the recording unit of the other storage device, the locked state will be maintained. This makes it possible to prevent unauthorized use of data being transferred by, for example, removing the device midway through the data transfer.

When the connected second storage device 30 is in an ATA password locked state, the lock processing unit 23 releases the ATA password lock using the above-mentioned specified ATA password and issues an instruction to resume the process of transferring the recorded data.

In addition, when the movement processing unit 22 finishes the movement processing, or when the movement processing unit 22 completes disabling playback of the recorded data in the first storage device 20, the lock processing unit 23 disables the ATA password lock by issuing a SECURITY DISABLE PASSWORD command to the second storage device 30.

As a result, even if the second storage device 30 is powered off or disconnected from the image receiving device 10 after the recording data transfer process or during the transfer process and the recording data stored in the first storage device 20 becomes unplayable, the recording data can be accessed by turning the power on again or reconnecting without entering an ATA password.

[Action]
The data recording system 1 of this embodiment operates as follows: The receiver 10 generates recording data based on the video and audio of a television program received by its receiver circuit section 16, and stores the data in the first storage device 20 according to a user's instruction. At this time, the second storage device 30 does not necessarily have to be connected.

The image receiving device 10 stores the recording data in the first storage device 20 in a manner determined by the manufacturer of the image receiving device 10. As an example, one manufacturer records the recording data in a partition of Microsoft's NTFS file system, while another manufacturer records the recording data in a partition of the ext4 file system used by Linux (registered trademark).

In the following example, the storage unit 12 of the image receiving device 10 stores processing information that records the file system type (T), partition information (N), post-processing information (P), and the like, in association with product-related information (A) including manufacturer information, as illustrated in FIG. 3.

When a user replaces the first storage device 20 with the second storage device 30 due to insufficient capacity or other reasons, the user connects the second storage device 30 to the image receiving device 10 and starts a program for migration processing, and the image receiving device 10 operates as follows.

First, as shown in FIG. 4, the image receiving device 10 checks whether the second storage device 30 has suspended migration processing (S1), and if the migration processing has not been suspended (S1: No), starts normal migration processing (S2). The details of this normal migration processing will be explained later.

On the other hand, if the second storage device 30 is in the middle of migration (S1: Yes), it is checked whether the first storage device 20 is connected (S3), and if the first storage device 20 is connected (S3: Yes), the migration process is resumed (S4). This process will also be described later. Note that if the first storage device 20 is not connected in process S3 (S3: No), the process is terminated.

When the normal migration process is started, the image receiving device 10 acquires product-related information related to its own manufacturer (S11), as shown in FIG. 5. The image receiving device 10 records this information in a storage area that is not erased by rebooting.

Then, the image receiving device 10 issues a SECURITY SET PASSWORD command to the second storage device 30 to set an ATA password lock using a specific, predetermined ATA password (S12), and starts copying (moving) sectors from the first storage device 20 to the second storage device 30 (S13).

In this process, as shown in FIG. 6, the image receiving device 10 determines for each partition formed in the first storage device 20 whether the partition is a partition that holds recording data or corresponding management data (S131), and if not (S131: No), that is, if the partition contains GPT or the like, copies each sector in a predetermined order, for example, in the order of sector numbers, as in a general sector copy.

That is, the image receiving device 10 reads the data in the sectors of the first storage device 20 in the order of the sector numbers, writes it to the corresponding sectors of the second storage device 30 (S132), and records the sector numbers of the sectors that were successfully written in a memory area that will not be erased by rebooting (S133).

When the image receiving device 10 has completed copying all sectors in one partition, it starts processing the next partition for which copying has not been completed. If there is no next partition for which copying has not been completed (if sector copy processing has been completed for all partitions), it ends the move processing.

On the other hand, in process S131, if the partition is a partition that holds recorded data or corresponding management data (S131: Yes), the image receiving device 10 refers to the management data to identify the sectors that hold the data that constitutes each recorded data file, and generates, for each recorded data, a list of information that identifies the sectors that hold the management data for that recorded data file and a list of information that identifies the sectors that hold the recorded data, concatenates these together, and generates a list of information (sector numbers, etc.) that identifies the sectors that indicate the order of copying (S134).

The image receiving device 10 records this list in a storage area that will not be erased by reboot (S135), and reads data in sectors from the first storage device 20 in the order shown in the list, and writes it to the corresponding sectors of the second storage device 30 (S136).

Each time writing to a sector is completed, the image receiving device 10 deletes the information identifying the sector for which writing has been completed from the top of the list (S137).

The image receiving device 10 checks whether copying of the partition is complete (S138) and sets the access authority data to an unrestorable state (S139).

When copying of all sectors included in the list generated in process S134 is complete, the image receiving device 10 sets the access authority for the management data of each copied block to "read allowed" (S1310). The image receiving device 10 then starts processing the next partition for which copying has not been completed. If there is no next partition for which copying has not been completed (if sector copy processing has been completed for all partitions), the move processing ends. Note that after processing of all partitions is complete, the access authority for the management data of each copied file may be set to "read allowed".

When the image receiving device 10 has not completed copying the sectors of the management data for one file in step S138, that is, when it is in the process of copying sectors that hold data that constitutes the management data, or when it is in the process of copying recorded data (S138: No), it skips step S139.

When the sector copy is complete, the image receiving device 10 verifies the file system of the second storage device 30 (S14), and if the verification fails (S14: Failed), it reports an error (S15) and ends the process.

On the other hand, if the verification is successful in process S14 (S14: successful), the image receiving device 10 acquires the file system type (T), partition information (N), and post-processing information (P) recorded in the processing information in association with the product-related information acquired in process S11 (S16).

Then, the image receiving device 10 checks whether the partition in which the recorded data is to be stored and the partition in which the management data is to be stored are different partitions (S17).

If the partition in which the recorded data is stored and the partition in which the management data is stored are different (S17: Yes), the partition containing the management data recorded in the first storage device 20 is erased using a complete erasure method, making it impossible to play the recorded data in the first storage device 20 (S18). At this time, if the information about the partition acquired in process S16 includes information indicating the existence of a partition (backup partition) that backs up data including the management data, the image receiving device 10 also deletes the contents of the backup partition using the complete erasure method.

When the image receiving device 10 completes the process of disabling playback of the recorded data stored in the first storage device 20, it disables the ATA password lock by issuing a SECURITY DISABLE PASSWORD command to the second storage device 30 (S19).

As a result, even if the second storage device 30 is powered off or disconnected from the image receiving device 10 after the recording data transfer process or during the transfer process and the recording data stored in the first storage device 20 becomes unplayable, the recording data can be accessed by turning the power on again or reconnecting without entering an ATA password.

When the image receiving device 10 resumes the transfer process in step S4, it releases the ATA password lock using a predetermined ATA password. If the sector number for which copying has been completed is stored in a storage area that will not be erased by rebooting, the image receiving device 10 proceeds to step S132 in FIG. 6 and resumes the transfer process from the sector next to that sector number (A). If the image receiving device has a list of sectors to be transferred stored in a storage area that will not be erased by rebooting, it proceeds to step S136 in FIG. 6 and continues processing (B).

[Example of operation]
Therefore, if a user of the receiving device 10 of this embodiment cuts off the power supply to the second storage device 30 while the recorded data is being transferred from the first storage device 20 to the second storage device 30 for the purpose of illegally obtaining a copy of the recorded data, the following state will occur.

In this embodiment, an ATA password is set in the second storage device 30 when the transfer of recording data from the first storage device 20 to the second storage device 30 begins, so if the power supply to the second storage device 30 is cut off during the transfer, an ATA password lock is set.

Therefore, even if a user connects this second storage device 30 to a personal computer or another type of image receiving device and attempts to obtain the recorded data, the ATA password lock has been set and the recorded data cannot be played back.

Furthermore, even if the ATA password lock is released for some reason, at least the recording data being copied will have unreadable permissions set, so reading will be restricted.

On the other hand, when the transfer of the recorded data is completed and the recorded data in the first storage device 20 becomes unplayable, the ATA password is invalidated, and the recorded data in the second storage device 30 can then be played back on other types of video receivers.

[Storage manufacturer restrictions]
In addition, in this embodiment, the control unit 11 performing the migration process of the recorded data may obtain manufacturer information (which may further include model information) of the first storage device 20, which is the source storage device, and manufacturer information (which may further include model information) of the second storage device 30, which is the destination storage device, prior to the migration process, and may control the migration process not to be executed if these do not satisfy specified conditions.

This condition may be, for example, that the manufacturers of the first and second storage devices 20, 30 are both predetermined manufacturers. Another condition may be that the model of the second storage device 30 is a newer model than the model of the first storage device 20.

In addition, although the manufacturer and model information are used as conditions here, the control unit 11 may determine the condition that the recording capacity of the second storage device 30 is equal to or greater than the recording capacity of the first storage device 20 in place of or in addition to the above manufacturer conditions, etc., and may control the migration process not to be executed if any of the conditions are not satisfied.

[Resuming processing when processing is interrupted]
In this embodiment, if the first storage device 20 is removed or the power of the image receiving device 10 is turned off during the process of making the recorded data in the first storage device 20 unplayable in process S18 or process S23 of Figure 5, and the process is interrupted, the process of making the data unplayable is re-executed when the first storage device 20 is subsequently reattached.

Alternatively, for example, if there are multiple partitions that need to be completely erased in order to make them unplayable, information identifying those partitions will be recorded as a list of partitions to be erased in a storage area that will not be erased by rebooting (such as a system storage area or non-volatile memory), and information identifying partitions that have been completely erased will be removed from that list of partitions to be erased.

In this way, when the first storage device 20 is attached again, the list of partitions to be erased can be referenced and the process of completely erasing the partitions that should be completely erased in order to make them unplayable can be continued.

In the examples of this embodiment so far, an example using an ATA password lock has been shown, but other methods may be adopted as long as the data in the recording section of the second storage device 30 cannot be retrieved when the power is turned off or the connection is released from the image receiving device 10. For example, a hardware function such as data encryption using a bridge IC may be used. In this case, too, even if the product is disassembled and the recording section such as a bare drive is removed, it is possible to prevent the data from being read.

In the above embodiment, an ATA password lock is set only on the second storage device, but an ATA password lock may also be set on the first storage device. In this example, the timing for setting the ATA password lock on the first storage device may be the same as that for the second storage device. However, it is preferable that the ATA password lock is set at least before data is deleted from the first storage device.

1 Data recording system, 10 Image receiving device, 11 Control unit, 12 Memory unit, 13 Operation unit, 14 Output unit, 15 Interface unit, 16 Image receiving circuit unit, 20 First storage device, 21 Information acquisition unit, 22 Movement processing unit, 23 Lock processing unit, 30 Second storage device.

Claims (6)

A recording system including a receiving device capable of receiving television programs, a first storage device, and a second storage device,
when transferring the recorded data from the first storage device to the second storage device, the image receiving device sets a predetermined password in a recording section of the second storage device in which the recorded data is recorded;
A recording system in which the second storage device restricts reading of recorded data from the recording unit using a set password when the second storage device is powered off or disconnected from the image receiving device. 2. The recording system of claim 1,
The recording system, wherein the recorded data moved to the second storage device is set as unreadable data during the movement of the recorded data. A recording system according to claim 1 or 2,
A recording system in which the recording unit is a bear drive, and reading of the recorded data is restricted by locking with an ATA password. A storage device connected to a receiving device capable of receiving television programs, comprising:
means for receiving the recorded data of the television program from a source storage device;
a means for accepting a predetermined password when accepting the recorded data;
means for accepting the setting of the password and setting the accepted password in a recording unit that records the video recording data;
A storage device in which, when a password is set for the recording unit, when the power is turned off or the connection to the receiving device is disconnected, the reading of recorded data from the recording unit is restricted by the set password. A receiving device capable of receiving television programs,
a first storage device and a second storage device that are connected to the first storage device and the second storage device that are capable of recording the recorded data of the received television program;
When transferring the recorded data from the first storage device to the second storage device, a predetermined password is set for the recording section of the second storage device in which the recorded data is recorded, and when the second storage device is powered off or disconnected from the receiving device, the receiving device restricts the reading of the recorded data from the recording section of the second storage device using the password. A receiving device capable of receiving a television program, the receiving device being connected to a first storage device and a second storage device capable of recording recorded data of the received television program,
A means for copying and transferring the recording data from the first storage device to a second storage device;
a means for setting a predetermined password for a recording section of said second storage device in which said video recording data is recorded when said video recording data is transferred from said first storage device to said second storage device, and restricting reading of said video recording data from said recording section of said second storage device by said password when said second storage device is powered off or disconnected from a video receiving device;
A program that functions as a

Images