WO2005013550A1 - 著作権保護システム - Google Patents
著作権保護システム Download PDFInfo
- Publication number
- WO2005013550A1 WO2005013550A1 PCT/JP2004/011303 JP2004011303W WO2005013550A1 WO 2005013550 A1 WO2005013550 A1 WO 2005013550A1 JP 2004011303 W JP2004011303 W JP 2004011303W WO 2005013550 A1 WO2005013550 A1 WO 2005013550A1
- Authority
- WO
- WIPO (PCT)
- Prior art keywords
- key
- data
- content
- category
- encrypted
- Prior art date
Links
- 238000000034 method Methods 0.000 claims description 63
- 230000008569 process Effects 0.000 claims description 19
- 150000001875 compounds Chemical class 0.000 claims 2
- 230000000717 retained effect Effects 0.000 claims 2
- 238000003860 storage Methods 0.000 description 43
- 238000010586 diagram Methods 0.000 description 42
- CJOXJJYSFBAIOV-WMZJFQQLSA-N (z)-4-(5-chloro-1h-indol-3-yl)-4-hydroxy-2-oxobut-3-enoic acid Chemical compound C1=C(Cl)C=C2C(C(/O)=C/C(=O)C(=O)O)=CNC2=C1 CJOXJJYSFBAIOV-WMZJFQQLSA-N 0.000 description 19
- 101100275670 Saccharomyces cerevisiae (strain ATCC 204508 / S288c) TFS1 gene Proteins 0.000 description 19
- 230000008520 organization Effects 0.000 description 16
- 238000004519 manufacturing process Methods 0.000 description 12
- 230000006870 function Effects 0.000 description 11
- 238000004458 analytical method Methods 0.000 description 9
- 230000003287 optical effect Effects 0.000 description 8
- 230000008859 change Effects 0.000 description 5
- 238000005516 engineering process Methods 0.000 description 3
- 239000008186 active pharmaceutical agent Substances 0.000 description 2
- 241000282994 Cervidae Species 0.000 description 1
- 241000948268 Meda Species 0.000 description 1
- 230000008901 benefit Effects 0.000 description 1
- 238000006243 chemical reaction Methods 0.000 description 1
- VWTINHYPRWEBQY-UHFFFAOYSA-N denatonium Chemical compound [O-]C(=O)C1=CC=CC=C1.C=1C=CC=CC=1C[N+](CC)(CC)CC(=O)NC1=C(C)C=CC=C1C VWTINHYPRWEBQY-UHFFFAOYSA-N 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000001404 mediated effect Effects 0.000 description 1
- 238000003825 pressing Methods 0.000 description 1
- 230000033764 rhythmic process Effects 0.000 description 1
- 238000010200 validation analysis Methods 0.000 description 1
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N7/00—Television systems
- H04N7/16—Analogue secrecy systems; Analogue subscription systems
- H04N7/162—Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
- H04N7/165—Centralised control of user terminal ; Registering at central
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F17/00—Digital computing or data processing equipment or methods, specially adapted for specific functions
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00217—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
- G11B20/00246—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is obtained from a local device, e.g. device key initially stored by the player or by the recorder
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00217—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source
- G11B20/00253—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is stored on the record carrier
- G11B20/00362—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier the cryptographic key used for encryption and/or decryption of contents recorded on or reproduced from the record carrier being read from a specific source wherein the key is stored on the record carrier the key being obtained from a media key block [MKB]
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00485—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier
- G11B20/00492—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein content or user data is encrypted
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B20/00—Signal processing not specific to the method of recording or reproducing; Circuits therefor
- G11B20/00086—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy
- G11B20/0021—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier
- G11B20/00485—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier
- G11B20/00492—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein content or user data is encrypted
- G11B20/00536—Circuits for prevention of unauthorised reproduction or copying, e.g. piracy involving encryption or decryption of contents recorded on or reproduced from a record carrier characterised by a specific kind of data which is encrypted and recorded on and/or reproduced from the record carrier wherein content or user data is encrypted wherein encrypted content data is subjected to a further, iterated encryption, e.g. interwoven encryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/258—Client or end-user data management, e.g. managing client capabilities, user preferences or demographics, processing of multiple end-users preferences to derive collaborative data
- H04N21/25808—Management of client data
- H04N21/2585—Generation of a revocation list, e.g. of client devices involved in piracy acts
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/20—Servers specifically adapted for the distribution of content, e.g. VOD servers; Operations thereof
- H04N21/25—Management operations performed by the server for facilitating the content distribution or administrating data related to end-users or client devices, e.g. end-user or client device authentication, learning user preferences for recommending movies
- H04N21/266—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel
- H04N21/26613—Channel or content management, e.g. generation and management of keys and entitlement messages in a conditional access system, merging a VOD unicast channel into a multicast channel for generating or managing keys in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/433—Content storage operation, e.g. storage operation in response to a pause request, caching operations
- H04N21/4334—Recording operations
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
- H04N21/4405—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/43—Processing of content or additional data, e.g. demultiplexing additional data from a digital video stream; Elementary client operations, e.g. monitoring of home network or synchronising decoder's clock; Client middleware
- H04N21/44—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs
- H04N21/4408—Processing of video elementary streams, e.g. splicing a video clip retrieved from local storage with an incoming video stream or rendering scenes according to encoded video stream scene graphs involving video stream encryption, e.g. re-encrypting a decrypted video stream for redistribution in a home network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/40—Client devices specifically adapted for the reception of or interaction with content, e.g. set-top-box [STB]; Operations thereof
- H04N21/45—Management operations performed by the client for facilitating the reception of or the interaction with the content or administrating data related to the end-user or to the client device itself, e.g. learning user preferences for recommending movies, resolving scheduling conflicts
- H04N21/462—Content or additional data management, e.g. creating a master electronic program guide from data received from the Internet and a Head-end, controlling the complexity of a video stream by scaling the resolution or bit-rate based on the client capabilities
- H04N21/4623—Processing of entitlement messages, e.g. ECM [Entitlement Control Message] or EMM [Entitlement Management Message]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N21/00—Selective content distribution, e.g. interactive television or video on demand [VOD]
- H04N21/80—Generation or processing of content or additional data by content creator independently of the distribution process; Content per se
- H04N21/83—Generation or processing of protective or descriptive data associated with content; Content structuring
- H04N21/835—Generation of protective data, e.g. certificates
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
- H04N5/91—Television signal processing therefor
- H04N5/913—Television signal processing therefor for scrambling ; for copy protection
-
- G—PHYSICS
- G11—INFORMATION STORAGE
- G11B—INFORMATION STORAGE BASED ON RELATIVE MOVEMENT BETWEEN RECORD CARRIER AND TRANSDUCER
- G11B2220/00—Record carriers by type
- G11B2220/20—Disc-shaped record carriers
- G11B2220/25—Disc-shaped record carriers characterised in that the disc is based on a specific recording technology
- G11B2220/2537—Optical discs
- G11B2220/2562—DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
- H04N5/91—Television signal processing therefor
- H04N5/913—Television signal processing therefor for scrambling ; for copy protection
- H04N2005/91357—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal
- H04N2005/91364—Television signal processing therefor for scrambling ; for copy protection by modifying the video signal the video signal being scrambled
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04N—PICTORIAL COMMUNICATION, e.g. TELEVISION
- H04N5/00—Details of television systems
- H04N5/76—Television signal recording
- H04N5/84—Television signal recording using optical recording
- H04N5/85—Television signal recording using optical recording on discs or drums
Definitions
- Copyright protection system Copyright protection system, key generation device, recording device, reproduction device, readout device, decryption device, recording medium, recording method, reproduction method, and program
- the present invention relates to a system for recording digital content such as a movie or music on a large-capacity recording medium such as an optical disk and reproducing the content. Prevent copyright protection system. Background art
- encryption technology is used to protect the copyright of content, that is, to prevent unauthorized use such as unauthorized reproduction or copying of content.
- the content is encrypted using a certain encryption key, recorded on a recording medium such as an optical disk, and distributed.
- a recording medium such as an optical disk
- only the terminal that has the decryption key corresponding to the encryption key can decrypt the data read from the recording medium using the decryption key and reproduce the content.
- the content itself is encrypted with an encryption key corresponding to the decryption key held by the terminal.
- the decryption key held by the terminal must be strictly managed so as not to be exposed to the outside, but there is a risk that a certain key may be exposed to the outside by analysis of the inside of the terminal by an unauthorized person.
- a key has been exposed to an unauthorized person, it is conceivable to create a playback device or software that abuse the content and distribute it over the Internet.
- the copyright owner wants to ensure that once the key is exposed, it will not be able to provide the content that will be provided.
- a technology for realizing this is called a key revocation technology
- Patent Document 1 Japanese Patent Application Laid-Open No. 2002-281103 discloses a system for realizing key revocation.
- a so-called consumer player having a function of reading encrypted content from a recording medium and a function of decrypting the read encrypted content
- Some computers read encrypted content from a recording medium using an optical disk drive connected to or built into a personal computer, and decrypt the read encrypted content using an application program running on a personal computer host and play it back.
- Non-Patent Document 1 (Cont e n t P r o t e c t i o n f o r P r e r e c e r d e d M e d i a D D D B o o k, 4 C En t it y t, L L C) is disclosed.
- each reproduction apparatus invalidates the invalidation data.
- Memory for reading the entire data from the recording medium and storing it at least temporarily in the device Must be provided.
- the decryption process and key are implemented as software as an application program on a personal computer
- the built-in decryption algorithm and key are updated or added as compared to the case where the hardware is generally implemented as hardware. Is easy, but robust implementation of decryption algorithms and keys is difficult.
- application programs running on a personal computer host were illegally analyzed, exposing algorithms and many keys. Even in this case, it is virtually impossible to change the encryption / decryption algorithm or key length. This means that the invalidation function does not work properly, which leads to the spread of illegal use of contents by unauthorized devices.
- the keys and algorithms of the applications used on personal computers have been exposed, this may extend to consumer devices and prevent the invalidation function from working properly in all devices.
- the size of a memory provided in a playback device can be reduced, and an application program operating on a personal computer host is illegally analyzed, and an algorithm and a large number of keys are used. Even if exposed, encryption ⁇ Provide a copyright protection system that can maintain the invalidation function of the entire system by changing the decryption algorithm and key length. Disclosure of the invention
- the present invention provides a recording device for encrypting and recording content,
- a copyright protection system comprising: a recording medium on which content is recorded; and a reproducing apparatus for reading and decoding the encrypted content recorded on the recording medium, wherein the number of the reproducing apparatuses is N (N is 2
- the recording device is a specific playback device of each category from a media key and device key data held by playback devices belonging to each of the N categories. Generating invalidation data for revoking the device key held by each of the N categories, and generating encrypted content obtained by encrypting the content based on the media key. At least the N pieces of invalidated data and the encrypted content are recorded on the recording medium, and the reproducing device is configured to perform the reproduction of the N pieces of invalidated data from the recording medium. Read invalid data and encryption content above for force categories which the device belongs, and wherein to decode the previous SL encrypted Konten' based on the read the invalid data.
- the present invention is also the copyright system, wherein each of the N pieces of invalidation data is encrypted media key data obtained by encrypting the media key with device key data held by a playback device of a corresponding category.
- the playback device of each of the categories reads the corresponding encrypted media key data and the encrypted content from the recording medium, decrypts the encrypted media key data with a device key, and reads the encrypted media key data.
- a key is obtained, and the encrypted content is decrypted based on the obtained media key.
- the present invention is also the copyright system, wherein the recording device generates an encryption key based on the media key, encrypts the content based on the encryption key,
- the reproducing device of the present invention generates a decryption key based on the obtained media key, and decrypts the encrypted content based on the generated decryption key.
- the recording device may generate the encrypted content key by encrypting the content with a content key, encrypting the content key with the media key, and generating the encrypted content key.
- the encrypted content key is recorded on the recording medium, and the playback device of each category reads the encrypted content key from the recording medium, decrypts the encrypted content key with the media key, and decrypts the content key.
- each of the N pieces of invalidation data is an encryption obtained by encrypting the media key for the corresponding category with device key data held by a playback device of the corresponding category.
- the recording device encrypts the content with a content key, encrypts the content key with the N media keys, and generates N encrypted content keys. Generating and recording at least the N encrypted media key data, the N encrypted content keys, and the encrypted content on a recording medium, wherein the playback device of each category includes a corresponding power from the recording medium.
- Reading the content supplying the intermediate data and the first invalidated data, which have been subjected to a part of the decryption processing of the encrypted content based on the second invalidated data, to the first category decryption device,
- the first category decoding device performs a decoding process on the intermediate data supplied from the second category reading device based on the first invalidated data. And obtains the content.
- the present invention also relates to a recording device for encrypting and recording content, wherein the recording device includes a media key and a playback device belonging to each of N (N is a natural number of 2 or more) categories. Invalidate the device key held by the specific playback device of each category from the held device key data Generating invalidation data for each of the N categories, generating encrypted content obtained by encrypting the content based on the media key, and generating at least the N pieces of invalidation data. The encrypted content is recorded on the recording medium.
- N is a natural number of 2 or more
- each of the N pieces of invalidation data is encrypted media key data obtained by encrypting the media key with device key data held by a playback device of a corresponding category.
- the recording device generates an encryption key based on the media key, and encrypts the content based on the encryption key.
- the recording device may encrypt the content with a content key, generate an encrypted content key by encrypting the content key with the media key, and record the generated encrypted content key on the recording medium.
- the present invention is also the recording apparatus, wherein each of the N pieces of invalidation data is an encryption obtained by encrypting the media key for the corresponding category with device key data held by a playback apparatus of the corresponding category.
- the recording device encrypts the content with a content key, encrypts the content key with the N media keys, and generates N encrypted content key data. At least, the N encrypted media key data, the N encrypted content keys, and the encrypted content are recorded on a recording medium.
- the recording device may further include a first invalidation device for invalidating a device key held by the specific decryption device of the first category from the media key and the device key data held by the decryption device of the first category. Generates the encrypted data, and invalidates the device key held by the specific device of the second category from the media key and the device key data held by the device of the second category. Generating second invalidation data for encrypting the content, generating encrypted content obtained by performing an encryption process on the content based on the media key, and generating at least the first invalidation data; .2 and the encrypted content are recorded on the recording medium. '
- the present invention is the recording medium, wherein the N pieces of invalidation data are encrypted media key data obtained by encrypting the media key with device key data held by a playback device of a corresponding category. It is characterized by the following. Further, the present invention is the recording medium, wherein the encrypted content is generated by encrypting the content based on an encryption key generated based on the media key. It is characterized by.
- the present invention is the recording medium, wherein the encrypted content is generated by encrypting the content with a content key, and the recording medium is configured to encrypt the content key with the media key.
- the encrypted content key generated by the encryption is recorded.
- each of the N pieces of invalidation data is an encryption obtained by encrypting the media key for the corresponding category with device key data held by a playback device of the corresponding category.
- Encrypted content key data wherein the encrypted content is generated by encrypting the content with a content key
- the recording medium includes the content key N encrypted content keys generated by encrypting with the N media keys are recorded.
- the recording medium has a device key held by a specific decryption device of the first category generated from at least a media key and device key data held by a decryption device of the first category.
- Device key held by the specific device of the second category which is generated from the first revocation data for performing the operation, and the media key and the device key data held by the device of the second category.
- Second encrypted data and encrypted content generated by performing an encryption process on the content based on the media key are recorded.
- the present invention relates to a reproducing apparatus for reproducing encrypted content recorded on a recording medium, wherein the reproducing apparatuses are classified into N (N is a natural number of 2 or more) categories, and In order to invalidate the device key held by the specific playback device of each category generated from at least the media key and the device key data held by the playback device of each of the N categories described above, Data and encrypted content generated by encrypting the content based on the media key.
- the playback device is configured to perform the playback of the N pieces of invalidation data from the recording medium. Reading the invalidation data and the encrypted content for the category to which the device belongs, and decrypting the encrypted content based on the read invalidation data.
- each of the N pieces of invalidation data is encrypted media key data obtained by encrypting the media key with device key data held by a playback device of a corresponding category.
- the playback device reads the corresponding encrypted media key data and the corresponding encrypted content from the recording medium, and reads the corresponding encrypted media key data with a device key stored therein. And decrypting the encrypted content on the basis of the acquired media key.
- the present invention is the playback device, wherein the encrypted content is generated by encrypting the content based on an encryption key generated based on the media key,
- the playback device generates a decryption key based on the acquired media key, and decrypts the encrypted content based on the generated decryption key.
- the present invention is the playback device, wherein the encrypted content is generated by encrypting the content with a content key, and the recording medium includes: the content key with the media key.
- the playback device reads out the encrypted content key from the recording medium, decrypts the encrypted content key with the media key, and decrypts the encrypted content key. And decrypting the encrypted content with the acquired content key.
- the present invention is the playback device, wherein the N pieces of invalidation data are an encrypted media key obtained by encrypting the media key for the corresponding category with device key data held by the playback device of the corresponding category.
- Data wherein the encrypted content is generated by encrypting the content with a content key
- the storage medium includes N content generated by encrypting the content key with the N media keys.
- Pieces of encrypted content keys are recorded, and the playback device reads the encrypted media key data for the corresponding category, the encrypted content key for the corresponding category, and the encrypted content from the recording medium. And decrypts the encrypted media key data with the device key held to obtain a media key for the corresponding category. It said in a serial Meda key for the corresponding category encryption Kako Decrypting the content key to obtain the content key, and decrypting the encrypted content with the obtained content key.
- the present invention also relates to a playback device, wherein the recording medium has at least a first key category generated from a media key and device key data held by a first key category decryption device.
- Second revocation data for revoking a device key held by a specific device of a category, and encrypted content generated by performing an encryption process based on the media key are recorded.
- the playback device belongs to the second category, reads the second invalidated data and the encrypted content from the recording medium, and reads the encrypted content based on the second invalidated data. Is decoded.
- the present invention is a reading device constituting a reproducing device for reproducing the encrypted content recorded on a recording medium, wherein the recording medium has at least a media key and a decryption device of a first category.
- First revocation data for revoking a device key held by a specific decryption device of the first category generated from device key data to be decrypted, and a device of the media key and a second category.
- the readout device belongs to the second category, the first invalidated data from the recording medium, and the second encrypted data. Enabling reads the data and the encrypted content, the generated intermediate data subjected to some of the decoding processing of the encrypted Konten' based on the second revocation data, the intermediate data and the first generated It is characterized in that 1 invalidation data is output.
- the present invention is a decryption device constituting a playback device for playing back encrypted content recorded on a recording medium, wherein the recording medium has at least a media key and a decryption device of a first category.
- First key revocation data for revoking a device key held by the specific decryption device of the first category generated from the device key data to be decrypted, and the media key and the device of the second category.
- the generated encrypted content is recorded, and the reading device of the second category reads the first invalidated data, the second invalidated data, and the second invalidated data from the recording medium.
- Read the encrypted content generate intermediate data obtained by performing a part of the decryption processing of the encrypted content based on the second invalidated data, and generate the generated intermediate data and the first invalidated data.
- the decoding device outputs data, and performs a decoding process on the intermediate data belonging to the first category and supplied from the reading device of the second category based on the first invalidated data. To obtain the content.
- the present invention is a reproducing apparatus for reproducing encrypted content recorded on a recording medium, comprising: a reading apparatus according to claim 25 and a decoding apparatus according to claim 26. I do.
- the present invention provides a key generation device that generates and records invalidation data necessary for encrypting and decrypting content, a recording device that encrypts and records the content,
- a copyright protection system comprising: a recording medium on which the encrypted content is recorded; and a playback device for reading and decrypting the encrypted content recorded on the recording medium.
- the recording device and the playback device are classified into N (N is a natural number of 2 or more) categories, and the key generation device includes a media key and a device owned by the recording device or the playback device belonging to each category. From the key data, the specific recording device or playback device of each category holds the invalidation data for invalidating the device key owned by each of the above N categories.
- the N pieces of invalidated data are recorded on the recording medium, and the recording device reads out, out of the N pieces of the invalidated data, invalidated data for a category to which the recording device belongs, and reads the data.
- the present invention also relates to a key generation device, comprising a media key and device key data held by a recording device or a playback device belonging to each of N categories (N is a natural number of 2 or more). Then, invalidation data for invalidating a device key held by a specific recording device or reproduction device of each category is generated for each of the N categories, and the generated N invalidations are generated. Data is recorded on the recording medium.
- the present invention relates to a recording apparatus for encrypting and recording contents, wherein the recording apparatus or the reproducing apparatus belonging to each category of media key and N (N is a natural number of 2 or more) categories are held. Recording of invalidation data for invalidating a device key held by a specific recording device or playback device of each category generated from device key data to be generated. From the medium, read out the invalidation data for the category to which the recording device belongs out of the N pieces of invalidation data, encrypt the content based on the read out invalidation data, and generate the encrypted content. The encrypted content is recorded on the recording medium.
- the present invention relates to a recording method used for a recording device for encrypting and recording content, wherein the reproducing device belonging to each of the categories classified into a media key and N (N is a natural number of 2 or more) categories is provided.
- the present invention also relates to a reproducing method used for a reproducing apparatus for reproducing encrypted content recorded on a recording medium, wherein the reproducing apparatuses are classified into N (N is a natural number of 2 or more) categories.
- N is a natural number of 2 or more
- a device key held by a specific playback device of each category generated from at least a media key and device key data held by playback devices of each of the N categories is invalidated.
- Data and encrypted content generated by encrypting the content based on the media key are recorded, and the reproducing method includes the steps of transmitting the N pieces of invalidated data from the recording medium.
- the present invention is used for a recording apparatus for encrypting and recording contents.
- a specific playback device of each category is obtained from a media key and device key data held by playback devices belonging to each category classified into N (N is a natural number of 2 or more) categories.
- the present invention is a program used for a reproducing apparatus for reproducing encrypted content recorded on a recording medium, wherein the reproducing apparatuses are classified into N (N is a natural number of 2 or more) categories.
- N is a natural number of 2 or more
- the program is configured to execute the reproduction from the N pieces of the invalidated data from the recording medium.
- FIG. 2 is a block diagram showing a recording medium and a first category of playback device according to Embodiment 1 of the present invention.
- FIG. 3 is a block diagram showing a recording medium and a second category of playback device according to Embodiment 1 of the present invention.
- FIG. 4 is a schematic diagram showing a specific example of data recorded on a recording medium according to Embodiment 1 of the present invention. "
- FIG. 5 is a schematic diagram showing a specific example 1 of a system update according to the first embodiment of the present invention.
- FIG. 6 is a schematic diagram showing a specific example 2 of the system update according to the first embodiment of the present invention. >
- FIG. 7 is a block diagram showing a key generation device and a recording medium according to Embodiment 2 of the present invention.
- FIG. 8 is a block diagram showing a recording device and a recording medium of a first category according to Embodiment 2 of the present invention.
- FIG. 9 is a block diagram showing a recording device and a recording medium of a second category according to Embodiment 2 of the present invention.
- FIG. 10 is a block diagram showing a recording medium and a first category reproducing apparatus according to Embodiment 2 of the present invention.
- FIG. 11 is a block diagram showing a recording medium and a second category playback device according to Embodiment 2 of the present invention.
- FIG. 12 is a schematic diagram showing a specific example of data recorded on a recording medium according to Embodiment 2 of the present invention.
- FIG. 13 is a block diagram showing a recording device and a recording medium according to Embodiment 3 of the present invention.
- FIG. 14 is a block diagram showing a recording medium and a first category reproducing apparatus according to Embodiment 3 of the present invention.
- FIG. 15 is a block diagram showing a recording medium and a second reproducing device according to Embodiment 3 of the present invention.
- FIG. 16 is a schematic diagram showing a specific example of data recorded on a recording medium according to Embodiment 3 of the present invention.
- FIG. 17 is a schematic diagram showing a specific example 1 of system update according to the third embodiment of the present invention.
- FIG. 18 is a schematic diagram showing a specific example 2 of the system update according to the third embodiment of the present invention.
- FIG. 19 is a block diagram showing a recording device and a recording medium according to Embodiment 4 of the present invention.
- FIG. 21 is a block diagram showing a recording medium and a second playback device according to Embodiment 4 of the present invention.
- FIG. 22 is a schematic diagram showing a specific example of data recorded on a recording medium according to Embodiment 4 of the present invention.
- FIG. 23 is a schematic diagram showing a specific example 1 of a system update according to the fourth embodiment of the present invention.
- FIG. 24 is a schematic diagram showing a specific example 2 of the system update according to the fourth embodiment of the present invention.
- FIG. 25 is a block diagram showing a recording device and a recording medium according to Embodiment 5 of the present invention.
- FIG. 26 is a block diagram showing a recording medium and a first playback device according to Embodiment 5 of the present invention.
- FIG. 27 is a block diagram showing a recording medium and a second reproducing device according to Embodiment 5 of the present invention.
- FIG. 30 is a schematic diagram showing a specific example 2 of the system update according to the fifth embodiment of the present invention.
- FIG. 31 is a block diagram showing a recording device and a recording medium according to Embodiment 6 of the present invention.
- FIG. 32 is a block diagram showing a recording medium and a first playback device according to Embodiment 6 of the present invention.
- FIG. 33 is a block diagram showing a recording medium and a second reproducing device according to Embodiment 6 of the present invention.
- FIG. 34 is a schematic diagram showing a specific example of data recorded on a recording medium according to Embodiment 6 of the present invention.
- FIG. 35 is a schematic diagram showing a specific example 1 of the system update according to the sixth embodiment of the present invention.
- FIG. 36 is a schematic diagram showing a specific example 2 of the system update according to the sixth embodiment of the present invention.
- FIG. 37 is a block diagram showing a recording device and a recording medium according to Embodiment 7 of the present invention.
- FIG. 39 is a block diagram showing a recording medium and a second playback device according to Embodiment 7 of the present invention.
- FIG. 40 is a schematic diagram showing a specific example of data recorded on a recording medium according to Embodiment 7 of the present invention.
- FIG. 41 is a schematic diagram showing a specific example 1 of the system update in the embodiment of the present invention.
- FIG. 42 is a schematic diagram showing a specific example 2 of the system update according to the seventh embodiment of the present invention.
- Embodiment 1 of the present invention is an example in which the present invention is applied to a system that distributes contents using a recording medium such as a reproduction-only DVD and reproduces the contents with a reproducing device.
- the first and second categories are provided on the playback device side, and invalidation is performed using a different device key for each category. For this reason, the invalidation system used for the same recording medium can be classified according to the category of the playback device, and even if one invalidation system is broken, the invalidation system belonging to another category can be maintained.
- FIG. 1 shows a recording device 100 and a recording medium 120 for encrypting and recording the content
- FIG. 2 shows a first category of reading and decrypting the encrypted content from the recording medium 120
- FIG. 3 shows a second category of playback device 300 that reads encrypted content from the recording medium 120 and decrypts the content
- FIG. 4 shows specific examples of various data recorded on the recording medium 120.
- the recording device 100 is, for example, a device that records contents on each DVD at the time of manufacture, and a first device key storage for storing a device key secretly held by each playback device of the first category.
- Unit 101 a second device key storage unit 102 for storing a device key secretly held by each playback device of the second category, and a device used for encrypting the media key.
- a first device key selection unit 103 for selecting a key, a second device key selection unit 104, and a device key selected from a media key input from the outside by the first device key selection unit 103 A first media key encryption unit 105 that encrypts with the device key and a second media key encryption unit 100 that encrypts the media key with the device key selected by the second device key selection unit 104 6, a content key encryption unit 107 for encrypting a content key input from the outside with a media key, and a content encryption unit 108 for encrypting content also input from the outside.
- the first media key encryption unit 105 stores information on the playback device to be invalidated among the playback devices of the first category in the second media key encryption unit.
- the section 106 information on the playback device to be invalidated among the playback devices of the second category is input, and when generating the encrypted media key, the correct media is used for the playback device to be invalidated.
- Generate an encrypted media key so that the key cannot be decrypted.
- each time a recording medium is manufactured for a media key a different key data is selected for a content key for each content.
- the recording medium 120 has a first encrypted media key data recording area 12 1 for recording the first encrypted media key data generated by the first media key encrypting section 105,
- the second encrypted media key data recording area 122 that records the second encrypted media key data generated by the media key encryption unit 106 of the second unit, and the content key encryption unit 107 that is generated It has an encrypted content key recording area 123 for recording the encrypted content key, and an encrypted content recording area 124 for recording the encrypted content generated by the content encryption unit 108.
- a playback device that is implemented by software, such as an application program on a personal computer, is a playback device belonging to the first category.
- the playback device 300 of the second category includes a device key storage unit 301 that keeps the device key secret, and second encrypted media key data read from the recording medium 120 using the device key.
- Media key decryption unit 302 that decrypts encrypted content key read from recording medium 1202 using acquired media key, and content key decryption that acquires content key Unit 303 and a content decryption unit that decrypts the encrypted content read from the recording medium 120 using the obtained content key.
- the hardware :! The playback device implemented by the keyer is a playback device belonging to the second category.
- Fig. 4 shows that m playback devices in the first category and n playback devices in the second category each have only one unique device key, and playback devices 2 in the first category and 9 shows specific examples of various data recorded on the recording medium 120 when the playback devices 3 of the second category are invalidated.
- E a (X, Y), E b (X, Y), E c (X, ⁇ ) and E d (X, ⁇ ) are data ⁇ Means a function for encrypting using key data X.
- the encryption algorithm used can be realized by a known technique, and in the present embodiment, DES encryption having a key length of 56 bits is used.
- a media key (MK) encrypted with the device keys (DKA1 to DKAm) held by the playback device of the first category is recorded.
- the playback device 2 of the first category is invalidated, and data “0”, which is completely unrelated to the media key (MK), is encrypted and recorded in the DKA 2.
- the playback device 2 is input as information of a playback device to be invalidated in the first category, This is the result of processing performed by the playback device 2 so that a correct media key cannot be obtained.
- the second encrypted media key data recording area 122 a media key (MK) encrypted with a device key (DKB1 to DKBn) held by a playback device of the second category is recorded. .
- the playback device 3 of the second category is invalidated, and the data “0”, which is completely unrelated to the media key (MK), is encrypted and recorded in the DKB 3.
- the second media key encryption unit 106 inputs the playback device 3 as information of the playback device to be invalidated in the second category, and performs playback. This is the result of processing performed so that the correct media key cannot be obtained in device 3.
- playback devices other than the playback device 2 of the first category and the playback device 3 of the second category can obtain the correct media key (MK). That it can be decrypted
- the playback device 2 of the first category and the playback device 3 of the second category can be eliminated from the system.
- a content key (CK) encrypted with a media key (MK) is recorded.
- the encrypted content recording area 124 the content encrypted with the content key (CK) is recorded.
- a large number of device keys assigned to the playback devices of the first category and an algorithm for decrypting the first encrypted media key data are transmitted on the Internet. If it is determined that the invalidation of the playback device of the first category has stopped functioning, the system for disabling the playback device of the first category will be updated.
- specific examples thereof will be described.
- a new device key is assigned to the playback device 200 of the first category that has not been revoked, and is stored in the device key storage unit 201.
- the playback device m of the first category holds a newly assigned device key (DKA 'm) in the device key storage unit 201 in addition to the device key (DKA m) previously held.
- the playback device m uses the device key DKA m when playing the recording medium shown in Fig. 4, and uses the device key DKA 'm when playing the recording medium shown in Fig. 5 after updating the invalidation system.
- the media key (MK) is obtained by decrypting the first encrypted media key read from the recording medium, and the content key (CK) is decrypted by using the obtained media key (MK) to decrypt the encrypted content key. ) Is obtained, and the encrypted content is decrypted and reproduced using the obtained content key (CK).
- FIG. 6 shows a specific example 2 of various data to be recorded on the newly created recording medium 120 after it is determined that the invalidation of the playback device of the first category has stopped functioning.
- the difference from Fig. 4 is that the device key used to generate the first encrypted media key was changed from DKA1 to DKAm to DKA'1 to DKA, m, and the encryption algorithm was changed to Ea (X , Y) to E a '(X, Y).
- each device key of the new device keys (DKA '1-DKA' m) does not match any of the device keys (DKA 1-DKA m) before the system update.
- a new device key is assigned to each playback device 200 of the first category that has not been revoked and stored in the device key storage unit 201.
- the media key decryption unit 202 includes a decryption algorithm D a (X, Y) for decrypting the first encrypted media key data of FIG.
- a decryption algorithm D a ′ (X, Y) for decrypting the first encrypted media key data is embedded.
- the playback device m of the first category holds a newly assigned device key (DKA'm) in addition to the device key (DKAm) previously held.
- the playback device m uses the device key DKA m and the encryption algorithm D a (X, Y) when playing the recording medium in FIG.
- Ea (X, Y) and Da '(X, Y) used an encryption with a key length of 1 12 bit called a two-key triple DES.
- the device keys of the new device keys do not match any of the device keys (DKA1 to DKAm) before the system update, Even if the device key exposed by the unauthorized analysis before the update exists in a device other than DKA 2, the first encryption method read from the recording medium in Fig. 5 using that device key The media key (MK) cannot be obtained by decrypting the media key data, and the content cannot be reproduced.
- the encryption length can be increased by changing the key length and encryption algorithm of the device key, it is possible to make it difficult to analyze the system and obtain the device key illegally.
- the playback device of the first category determines the device key or algorithm of any generation based on this information. Determine whether to use it.
- the playback device 200 of the first category and the playback device 300 of the second category perform playback of different categories, respectively. Since it is not necessary to read the first or second encrypted media key data for invalidating the device, the memory capacity provided in the device can be reduced, and the processing time can be shortened. In addition, since the encryption algorithm used to generate the first encrypted media key data can be different from the encryption algorithm used to generate the second encrypted media key data, the first category In the event that the system for revoking the playback device of the first category is exposed, the key length of the device key assigned to the playback device of the first category and the algorithm for generating the first encrypted media key data are changed.
- the first category is a decryption algorithm.
- Reproducers implemented with software that is difficult to implement, but are robust and the second category is those that are implemented with hardware that is robust but difficult to update and add keys to decryption algorithms. It is particularly effective in such cases.
- a playback device belonging to the first category is a PC that realizes content decoding by an application
- a playback device belonging to the second category is a consumer such as a DVD player that realizes content decoding by hardware. Equipment.
- the media key and the content key are input from outside the recording device 100, but the present invention is not limited to this configuration.
- the recording device 100 may have a storage unit that stores a media key and a content key.
- the recording apparatus 100 may have a configuration including a generation unit that generates a media key and a content key each time.
- the content is encrypted with the content key and the content key is encrypted with the media key.
- the present invention is not limited to this.
- a one-layer configuration in which contents are directly encrypted with a media key may be used.
- a configuration may be adopted in which a key is added to further increase the number of encryption layers.
- a device key storage unit, a media key encryption unit, a content key encryption unit, a content encryption unit, and a data encryption unit for each category are stored in each category.
- the recording is configured as an integral unit, the present invention is not limited to this, and the recording device may be configured separately.
- the device key storage unit, media key encryption unit, and content key encryption unit (parts enclosed by broken lines in Fig. 1) in each category require high confidentiality in management and operation. Installed in an organization that operates key management for the entire system and issues keys to playback devices, etc.
- the recording of each data in the content encryption unit and the recording medium may be performed by a device installed in the content manufacturing organization or the recording medium manufacturing organization.
- data is also allocated to a playback device that has been invalidated at the time of system update, as described in (3).
- the position of the encrypted media key to be used by the playback device that has not been revoked is also updated, and new position information is added when a new device key is added, so that encryption is performed before and after the system update.
- a playback device that has not been invalidated can use appropriate data and obtain a correct media key.
- the capacity of data to be stored in the first encrypted media key data recording area after the system update can be reduced.
- the maximum value of the capacity is limited, it is possible to newly increase the number of playback devices belonging to the first category.
- DES with a key length of 56 bits is used as the encryption algorithm
- 2-key triple DES with a key length of 112 bits is used as the encryption algorithm after the system is updated.
- the present invention is not limited to this, and other encryption algorithms, for example, AES with a key length of 128 bits, which is a next-generation standard encryption, may be used. (Embodiment 2)
- the second embodiment of the present invention is directed to a rewritable or write-once type recording medium such as a DVD-RAM or a DVD-R, which records a content encrypted with a content key by a recording device such as a DVD recorder and a reproducing device.
- the present invention is characterized in that the present invention is applied to a system in which the encrypted content is decrypted with the content key and played back.
- FIG. 7 shows a key generation apparatus 700 for generating and recording key information and a recording medium 720
- FIG. 8 shows a first method for encrypting and recording contents on a recording medium 720
- FIG. 9 shows a recording device 900 of a second category for encrypting and recording content on a recording medium 720
- FIG. 10 shows a recording device 900 of the second category.
- a first category reproducing apparatus 1000 for reading and decrypting the encrypted content from the medium 720 is shown
- m 11 is a second apparatus for reading and decrypting the encrypted content from the recording medium 720.
- a category playback device 110 is shown.
- FIG. 12 shows specific examples of various data recorded on the recording medium 720.
- the key generation device 700 stores the device key secretly held by each device of the first category in the first device key storage unit 701, and stores the second device key in the second device key storage unit 702.
- the device keys that are secretly held by each device in the category are stored.
- the encryption of the media key and the content key is the same as that of the recording device according to the first embodiment, and therefore, the description thereof is omitted.
- the recording device 800 of the first category includes a device key storage unit 800 that holds the device key secretly, and a first encrypted media key that is read from the recording medium 720 using the device key.
- a media key decryption unit 802 that decrypts data to obtain a media key
- a content key decryption unit 8 that decrypts an encrypted content key read from a recording medium using the obtained media key to obtain a content key
- a content encryption unit 804 for encrypting content input from the outside using the acquired content key.
- a recording device implemented by V software such as an application program on a personal computer, is a recording device belonging to the first category.
- the recording device 900 of the second category includes a device key storage unit 901 that keeps the device key secret, and a second encrypted media key that is read from the recording medium 720 using the device key.
- a media key decryption unit 902 that decrypts data to obtain a media key
- a content key decryption unit 9 that decrypts an encrypted content key read from a recording medium using the obtained media key to obtain a content key
- a content encryption unit 904 for encrypting content input from the outside using the acquired content key.
- the first category playback device 100 and the second category playback device 110 are the first category playback device according to the first embodiment of the present invention. It has the same configuration as the Gori playback device 200 and the playback device 300 of the second category, and the same components are denoted by the same reference numerals and description thereof will be omitted.
- Figure 12 shows that m devices of the first category and n devices of the second category each have only one unique device key, and that devices 2 and 1 of the first force category A specific example of various data recorded on the recording medium 720 when the device 3 of the category 2 is invalidated is shown. In Fig.
- the first encrypted media key data recording area 7 21, the second encrypted media key data recording area 7 2 2, the encrypted content key data recording area 7 2 3, and the encrypted content recording area 7 2 4 are recorded in the first encrypted media key data recording area 121, the second encrypted media key data recording area 122, and the encryption component in the first embodiment of the present invention. Since the data is the same as the data recorded in the key data recording area 123 and the encrypted content recording area 124, the description is omitted.
- devices other than the device 2 of the first category and the device 3 of the second category can decrypt the correct media key (MK), and Device 2 of the second category and device 3 of the second category can be eliminated from the system.
- MK media key
- the system for disabling the device of the first category is updated.
- the same method as in the case of the first embodiment of the present invention described above can be employed, and therefore the description thereof is omitted.
- the device keys (DKB1 to DKBn) used to generate the second encrypted media key were not changed. There is no need to make any changes to the recording devices and playback devices that belong to this category.
- the apparatus of the first category (recording apparatus 800 and the reproducing apparatus 100 0) and the apparatus of the second category (recording apparatus) Since the device 900 and the playback device 110) do not need to read the first or second encrypted media key data for invalidating devices of different categories, the memory capacity provided in the device is small. And the processing time can be shortened.
- the encryption algorithm used to generate the first encrypted media key data can be different from the encryption algorithm used to generate the second encrypted media key data
- the first category: ⁇ The key length of the device key assigned to the first category device and the algorithm for generating the first encrypted media key data are changed even if the system for revoking the device in the third category is exposed.
- the first category uses the decryption algorithm and the key.
- the second category is robust, but it is difficult to update and add decryption algorithms and keys. When device and implemented in Dowea, is particularly effective.
- FIG. 16 shows specific examples of various data recorded on the recording medium 1320
- the content key is encrypted by using the first and second media keys, and the content key is encrypted by the first content key encryption unit and the second content key encryption unit, respectively. And record it on the recording medium 1320.
- the other points are the same as those of the recording apparatus 100 in FIG. 1, and the description thereof is omitted.
- the recording medium 1320 has a first encrypted media key data recording area 1 3 2 1 for recording the first encrypted media key data generated by the first media key encryption section 13 05.
- the second encrypted content key recording area 1 3 2 4 for recording the second encrypted content key generated by the 13 08, and the cipher for recording the encrypted content generated by the content encryption unit 13 09 Coded content recording area 1 3 2 5.
- E a (X, Y), E b (X, Y), E c (X, Y), E d (X, Y) and E e (X, Y) use data Y as key data X.
- the encryption algorithm used can be realized by a known technique. In the present embodiment, DES encryption having a key length of 56 bits is used.
- the playback devices of the first category except the playback device 2 can decrypt the correct first media key (MK 1).
- Device 2 can be eliminated from the system. -(Second encrypted media key data recording area 1 3 2 2)
- a content key (CK) encrypted with the first media key (M K 1) is recorded in the first encrypted content key recording area 1 3 2 3.
- a content key (CK) encrypted with the second media key (MK2) is recorded.
- FIG. 18 shows a specific example 2 of various data to be recorded on the newly created recording medium 1320 after it is determined that the invalidation of the playback device of the first category has stopped functioning.
- the difference from Fig. 16 is that the device key used to generate the first encrypted media key data has been changed from DKA1 to DKAm to DKA'1 to DKA'm, and that the first encrypted media key data has The encryption algorithm was changed from E a (X, Y) to E a '(X, Y), and the encryption algorithm of the first encrypted content key was changed from E c (X, Y) to E c' ( X, Y).
- each device key of the new device keys does not match any of the device keys (DKA 1 to DKA m) before the system update.
- a new device key is assigned to each of the playback devices 1400 in the first category that has not been revoked and stored in the device key storage section 1401.
- D a (X, Y) for decrypting the first encrypted media key of FIG.
- D a '(X, Y) for decrypting the first encrypted media key is incorporated.
- the content key decryption unit 1403 includes the first encryption context of FIG.
- a decryption algorithm D c ′ (X, ⁇ ) for decrypting the first encrypted content key in FIG. 18 is incorporated.
- the playback device m of the first category holds a newly assigned device key (DKA 'm), like the device key (DKA m) held previously.
- the playback device m uses the device key DKA m and the encryption algorithm when playing the recording medium in Fig. 16.
- MK1 media key
- MK1 acquired first media key
- the first encrypted media key data is decrypted using (X, Y) and the media is decrypted.
- the device keys of the new device keys do not match any of the device keys (DKA 1-DKA m) before the system update. Even if a device key exposed by unauthorized analysis before the system update exists in a device other than DKA 2, the first encryption read from the recording medium in Fig. 18 using that device key The media key data (MK 1) cannot be obtained by decrypting the media key data, and the content cannot be played.
- the encryption length can be increased by changing the key length and encryption algorithm of the device key, it is possible to make it difficult to analyze the system and obtain unauthorized device keys. .
- the device keys (DKB1 to DKBn) used for generating the second encrypted media key data, the encryption algorithm for the second encrypted media key data, and the second encryption key are used. Since the encryption algorithm for the encrypted content key data has not been changed, there is no need to make any changes to playback devices belonging to the second category.
- the first category reproducing apparatus 140 0 and the second category reproducing apparatus 1500 are respectively Since it is not necessary to read the first or second encrypted media key data for invalidating a playback device of a different category, the memory capacity provided in the device can be reduced, and the processing time can be shortened. Also, the encryption algorithm used to generate the first encrypted media key data and the first encrypted content key is used to generate the second encrypted media key data and the second encrypted content key, respectively. Since the encryption algorithm can be different from that of the first category, even if the invalidation system for the playback device of the first category is exposed, the playback device of the first category can be provided. By changing the key length of the device key to be changed and the algorithm for generating the first encrypted media key data, the revocation system can be changed without affecting the playback devices in the second category. Become.
- the first media key, the second media key, and the content key are configured to be input from the outside of the recording device 130, but the present invention is limited to the configuration I. Not something.
- the configuration may be such that the recording device 1300 has a storage unit for storing a first media key, a second media key, and a content key.
- the recording device 1300 may have a configuration including a generating unit that generates the first media T key, the second media key, and the content key each time.
- the content is encrypted with the content key
- the content key is encrypted with the first and second media keys.
- the present invention is not limited to this.
- a configuration may be adopted in which a key is added to further increase the number of encryption layers.
- a device key storage unit As a recording device, a device key storage unit, a media key encryption unit, a content key encryption unit, a content encryption unit, and a recording medium of each category are stored.
- the recording of each of the data has been integrated, the present invention is not limited to this.
- the device key storage unit, media key encryption unit, and content key encryption unit (parts enclosed by broken lines in Fig. 13) in each category require high confidentiality in management and operation. Operate key management for the entire system and issue keys to playback devices, etc.
- the data may be recorded in the content encryption unit or the recording medium by a device installed in a content production organization or a recording medium production organization.
- the position of the encrypted media key to be used by the playback device that has not been revoked is also updated, and new position information is added when a new device key is added, so that encryption is performed before and after the system update.
- a playback device that has not been invalidated can use appropriate data, and can obtain a correct media key.
- the amount of data to be stored in the first encrypted media key data recording area after the system update can be reduced.
- the maximum value of the capacity is limited, it is possible to newly increase the number of playback devices belonging to the first category.
- the method of invalidating the playback device using the encrypted media key data as shown in FIG. 16 has been described.
- the invalidation method may be any other method.
- an invalidation method using a tree structure disclosed in Patent Document 1 may be used.
- DES with a key length of 56 bits is used as the encryption algorithm
- 2-key triple DES with a key length of 112 bits is used as the encryption algorithm after the system is updated.
- the present invention is not limited to this, and other encryption algorithms, for example, AES with a key length of 128 bits, which is standard encryption of the next generation, may be used.
- AES with a key length of 128 bits which is standard encryption of the next generation, may be used.
- the present invention is applied to a system in which content is distributed using a read-only recording medium and the content is reproduced by a reproducing apparatus, but the present invention is not limited to this. Not something.
- the key generation device generates the encrypted media key data and the encrypted content key for each category and records them on the recording medium, and the recording device performs the encrypted media key data and the encryption.
- the content key is decrypted to encrypt the content, it can be applied to a system using a rewritable or write-once recording medium.
- FIG. 19 shows a recording apparatus 1900 and a recording medium 1900 which encrypt and record content
- FIG. 20 reads out and decrypts the encrypted content from the recording medium 1920.
- FIG. 21 shows a second reproducing apparatus 210 that reads out encrypted content from a recording medium 1920 and decodes it.
- FIG. 22 shows a specific example of various data recorded on the recording medium 1920.
- the recording medium 1920 has a first encrypted media key data recording area 1921 for recording the first encrypted media key data, and a second encryption medium for recording the second encrypted media key data.
- an encrypted content recording area 1925 for recording the encrypted content generated by the unit 1910.
- the first playback device 2000 such as a PC
- a reading device 20010 which is a drive device, for example
- a decoding device 202 which realizes content decryption by an application, for example. You.
- the fourth embodiment is characterized in that the encrypted content is also decrypted in the reading device 210 such as a drive device.
- the readout device 21010 decrypts the second encrypted media key data read from the recording medium 1920 using the device key storage unit 2101, which holds the device key secretly, and the device key.
- a second media key decryption unit 201 that obtains a media key by decrypting the second encrypted content key read from the recording medium using the obtained media key, and obtains a content key.
- 2 content key decryption unit 201 and a second content decryption unit 201 that performs a second content decryption process on the encrypted content read from the recording medium 192 using the acquired content key.
- the reading device 210 has the above-described components implemented in hardware and belongs to the second category.
- the decrypting device 200 decrypts the first encrypted media key data supplied from the reading device 210 using the device key storage unit 210 that keeps the device key secret and the device key.
- a first media key decryption unit 2202 that obtains a media key by decrypting the first encrypted content key supplied from the readout device 210 using the obtained media key.
- a first content key decryption unit that acquires the first content key, and a first content decryption unit that uses the acquired first content key to decrypt the simplified data supplied from the reading device.
- a first content decryption unit 204 that performs processing to obtain content.
- the decoding device 202 has the above-described components implemented in software I and belongs to the first category.
- the second playback device 2100 is a playback device of the second category, and includes a device key storage unit 2101 that keeps a device key secret, and a recording medium 1920 using the device key.
- a media key decryption unit 2102 that decrypts the second encrypted media key data read from the storage medium and obtains a media key, and a second encrypted content key read from the recording medium using the obtained media key.
- a second content decryption unit 2104 that performs content decryption processing and a recording medium using the obtained media key The first content key decryption unit 210 that decrypts the first encrypted content key data read from the first content key to obtain the first content key, and the output of the second content decryption unit 210 And a first content decryption unit 2106 that obtains content by performing a first content decryption process using the first content key.
- the second playback device 2100 has the above-described components implemented in hardware, and belongs to the second category.
- a decryption device implemented by software such as an application program on a personal computer
- a decryption device belonging to the first category and a general consumer player and an optical disk drive connected to or incorporated in a personal computer.
- Devices that are implemented in hardware as described above are devices that belong to the second category.
- Figure 22 shows that the m first decryption devices and the n second category V devices each have only one unique device key, and the first category decryption device 2 7 shows specific examples of various data recorded on the recording medium 1920 when the device 3 of the second category is invalidated.
- E a (X, Y), E b (X, ⁇ ), E c (X, ⁇ ), E d (X, ⁇ ), ⁇ e (X,) and ⁇ f (X, ⁇ ) Means a function to encrypt data ⁇ ⁇ ⁇ using key data X.
- the encryption algorithm used can be realized by a known technique. In the present embodiment, DES encryption with a key length of 56 bits is used.
- the data recorded in the first encrypted media key data recording area 1921 and the second encrypted media key data recording area 1922 are respectively the first encrypted data in the first embodiment.
- Encrypted media key data recording area 1 21 and the second encrypted media key data recording area 122 are the same as the data recorded in the storage area 122, and therefore the description thereof is omitted.
- the first encrypted content key (CK1) encrypted with the media T key (MK) is recorded.
- a second content key (CK2) encrypted with the media key (MK) is recorded.
- a large number of device keys assigned to the first category decryption device and an algorithm for decrypting the first encrypted media key data are transmitted on the Internet. If it is determined that the unauthorized disabling of the first category decryption device has been disabled, the first category decryption device disabling system will be updated.
- specific examples thereof will be described.
- FIG. 23 shows a specific example 1 of various data recorded on the newly created recording medium 1920 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from FIG. 22 is that the device keys used to generate the first encrypted media key have been changed from DKA1 to DKAm to DKA'1 to DKA'm. Since this is the same as the specific example 1 of the system update described in the first embodiment, the detailed description will be omitted.
- each of the new device keys (DKA '1 to DKA, m) Since the vice key does not match any of the device keys (DKA1 to DKAm) before the system update, there was a device key other than DKA2 that was not revealed due to unauthorized analysis before the system update.
- the device key cannot be used to decrypt the 1 encrypted media key data read from the recording medium in Fig. 23 to obtain the media key (MK), and the content cannot be played back.
- FIG. 24 shows specific examples 2 of various data to be recorded on the newly created recording medium 1920 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from Fig. 2 is that the device key used to generate the first encrypted media key data has been changed from DKA1 to DKAm to DKA '"! To DKA'm, and the encryption algorithm is Ea ( X, Y) to E a '(X, Y)
- Ea ( X, Y) E a '(X, Y)
- each device key of the new device keys does not match any of the device keys (DKA "!-DKA m) before the system update.
- the first encrypted media key data read from the recording medium in Fig. 24 using that device key It cannot decrypt the media key to obtain the media key (MK) and cannot play back the content.
- the encryption length can be increased by changing the key length and encryption algorithm of the device key, it is possible to make it difficult to analyze the system and obtain the device key illegally.
- the media key, the first content key, and the second content key are input from the outside of the recording device 190, but the present invention is limited to the configuration. Not something.
- the recording device 1900 may have a configuration including a storage unit that stores a media key, a first content key, and a second content key. Further, the recording device 1900 may have a generation unit that generates a media key, a first content key, and a second content key each time.
- the first encrypted media When generating key data, decryption that is invalidated at the time of system update, such as Ea (DKA '2, 0) in Fig. 23 or Ea' (DKA '2, 0) in Fig. 24
- the configuration is such that data is allocated to the device, it is also possible to adopt a configuration in which data is not allocated to a disabled decryption device.
- the position of the encrypted media key to be used by the decryption device that has not been revoked is also updated, and new location information is added when a new device key is added, so that the encrypted media can be updated before and after the system update.
- DES with a key length of 56 bits is used as the encryption algorithm
- 2-key triple DES with a key length of 112 bits is used as the encryption algorithm after system update.
- the present invention is not limited to this, and other encryption algorithms, for example, AES with a key length of 128 bits, which is standard encryption of the next generation, may be used.
- the entire content is encrypted with the first content key (CK 1) and then further encrypted with the second content key (CK 2).
- the present invention is not limited to this. Not something.
- the content block may be encrypted with the content key (CK1) and other blocks may be encrypted with the second content key (CK2).
- Embodiment 5 of the present invention is the system of Embodiment 4 in which media keys are individually provided for the first category and the second category, and the first A hierarchy of encrypted content keys is provided.
- FIG. 25 shows a recording device 2500 and a recording medium 2550 for encrypting and recording the content
- FIG. 26 shows an encrypted content read from the recording medium 250 and decrypted
- FIG. 27 shows a second reproducing apparatus 2700 that reads encrypted content from a recording medium 250 and decrypts it.
- FIG. 28 shows specific examples of various data recorded on the recording medium 250.
- the difference between the recording device 250 in FIG. 25 and the recording device 190 in FIG. 19 is that the first media key is used for the first category and the first media key is used for the second category.
- the decrypting device 260 decrypts the first encrypted content key (1) read from the recording medium 250 by the reading device 260, and Get the content key of Other points are the same as those of the first reproducing apparatus 2000 in the fourth embodiment described above, and thus description thereof will be omitted.
- a large number of device keys assigned to the first category of decryption device and an algorithm for decrypting the first encrypted media key are transmitted on the Internet. If it is determined that the unauthorized disabling of the first category of decryption devices has been disabled, the system for revoking the first category of decryption devices will be updated.
- specific examples thereof will be described.
- FIG. 30 shows a specific example 2 of various data recorded on the newly created recording medium 25020 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from Fig. 22 is that the device key used to generate the first encrypted media key data has been changed from DKA1 to DKAm to DKA'1 to DKA, m, and the encryption algorithm has been changed to Ea (X, Y) to Ea '(X, ⁇ ), and the encryption algorithm of the first encrypted content key (1) is changed from Ec (X, ⁇ ) to Ec' (X, ⁇ ). It has been changed. Since this is the same as the specific example 2 of the system update described in the third embodiment, the detailed description will be omitted.
- a robust copyright protection system can be constructed as in the fourth embodiment. Furthermore, in the present embodiment, a media key is separately provided for the first category and the second category, and a hierarchy of encrypted content keys using the respective media keys is provided. It is possible to increase. In other words, even if a device key is exposed from a device that belongs to the first category, the only media key that can be obtained using the device key is the first media key, and the second media key is exposed. Can be prevented.
- the first category is a decryption algorithm.
- the decryption device is implemented in software, in which updating and adding keys are easy but robust implementation is difficult. Categories are robust but decryption algorithms and key updates This is especially effective when the playback device or reading device is implemented with hardware that is difficult to add.
- the first media key, the second media key, the first content key, and the second content key are input from the outside of the recording device 250.
- the present invention is not limited to the configuration.
- the configuration may be such that the recording device 2500 has a storage unit for storing these keys.
- the recording device 2500 may have a configuration having a generation unit for generating these keys each time. .
- This is built into the equipment installed in the organization that operates the key management of the entire system and the issuance of keys to the playback device, etc., and the recording of each data on the content encryption unit and the recording medium is performed by the content manufacturing organization and the recording medium manufacturing organization. It may be a form executed by a device installed in the device.
- Ea (DKA '2, 0) in FIG. 29 and Ea' (DKA '2, 0) is invalidated at the time of system update
- the configuration is such that data is also allocated to a decoding device that has been disabled, it is also possible to use a configuration in which data is not allocated to a disabled decoding device.
- the position of the encrypted media key to be used by the decryption device that has not been revoked is also updated, and new location information is added when a new device key is added, so that the encrypted media before and after the system update
- a decryption device that has not been revoked even if the key position has changed can use appropriate data, and can obtain a correct media key.
- the amount of data to be stored in the first encrypted media key data recording area after the system update can be reduced.
- the maximum value of the capacity is limited, it is possible to newly increase the number of decoding devices belonging to the first category.
- the method of invalidating the decryption device using the encrypted media key data as shown in FIG. 28 has been described, but the invalidation method may use other methods.
- an invalidation method using a tree structure disclosed in Patent Document 1 may be used.
- DES with a key length of 56 bits is used as the encryption algorithm
- 2-key triple DES with a key length of 112 bits is used as the encryption algorithm after system update.
- the present invention is not limited to this, and other encryption algorithms, for example, AES with a key length of 128 bits, which is a next-generation standard encryption, may be used.
- the entire content is encrypted with the first content key (CK1) and then further encrypted with the second content key (CK2).
- the present invention is not limited to this. Not something.
- some of the content divided into multiple blocks may be encrypted with the first content key (CK1) and other blocks may be encrypted with the second content key (CK2). It may be.
- the present invention is applied to a system in which content is distributed using a read-only recording medium and the content is reproduced by a reproducing device, but the present invention is not limited to this. Absent.
- the key generation device generates the encrypted media key data and the encrypted content key for each category and records them on the recording medium, and the recording device records the encrypted media key data and the encrypted content.
- the present invention is applied to a system in which contents are distributed using a read-only recording medium and the contents are reproduced by a reproducing device.
- FIG. 31 shows a recording device 3100 and a recording medium 3120 that encrypt and record the content
- FIG. 32 reads and decrypts the encrypted content from the recording medium 3120.
- FIG. 33 shows a second reproducing apparatus 330 which reads out encrypted content from the recording medium 310 and decodes the same.
- FIG. 34 shows specific examples of various data recorded on the recording medium 3120.
- the difference between the recording device 310 of FIG. 31 and the recording device 100 of FIG. 1 is that the content key generation unit 3109 uses the first and second seeds input from the outside to use the content. A key is generated, and the first and second seeds are encrypted by the first seed encryption unit 3107 and the second seed encryption unit 310, respectively, using the media key, and recorded. That is, recording is performed on medium 3120.
- the other points are the same as those of the recording apparatus 100 in FIG. 1, and the description thereof is omitted.
- the recording medium 3 1 2 0 includes a first encrypted media key data recording area 3 1 2 1 for recording the first encrypted media key data, and a second encryption for recording the second encrypted media key data.
- the first playback device 3200 includes a reading device 3210 and a decoding device 3220.
- the readout device 3210 has a device key storage unit 3221 that holds the device key secretly, and decrypts the second encrypted media key data read from the recording medium 3120 using the device key.
- a second deer key decryption unit 3 2 1 2 that obtains a media key by using the obtained media key, and obtains a second seed by decrypting the second encrypted seed read from the recording medium using the obtained media key.
- the second seed decoding unit 3 2 1 3 and the acquired second seed are stored in a recording medium 3 2
- the first encrypted media key data, the first encrypted seed, and the encrypted content read from 20 are supplied to the decryption device 3220.
- the readout device 3210 has the above-described components implemented in hardware and belongs to the second category.
- the decryption device 3 22 0 is a device key storage unit that holds the device key secretly.
- the decoding device 3220 has the above-described components implemented in software:!:, And belongs to the first category. Note that the first seed and the second seed are each made up of 64 bits, and the upper 28 bits of each are bit-connected in the content key generation units 3109 and 3224 to form 5 bits. A method such as obtaining a 6-bit content key is conceivable.
- the second playback device 3300 is configured such that the above-described components are implemented by a header:!: Key and belong to the second category.
- a decryption device implemented by software such as an application program on a personal computer is a decryption device belonging to the first category, and an optical device connected to or incorporated in a general consumer player and a personal computer.
- Devices that are implemented in hardware, such as disk drives, are classified as devices belonging to the second category.
- FIG. 34 shows that m first category decryption devices and n second category devices each have only one unique device key, and that the first category decryption device is used. 9 shows specific examples of various data recorded on a recording medium 3120 when the device 2 and the device 3 of the second category are invalidated.
- DKA j DKA j.
- E a (X, Y), E b (X, Y), E c (X, ⁇ ), E d (X, ⁇ ), and E e (X, ⁇ ) represent data ⁇ ⁇ ⁇ as key data
- the encryption algorithm used can be realized by a known technique. In the present embodiment, a DS encryption with a key length of 56 bits is used.
- the data recorded in the first encrypted media key data recording area 3 1 2 1 and the second encrypted media key data recording area 3 1 2 2 respectively correspond to the first encrypted data in the first embodiment. Since this is the same as the data recorded in the encrypted media key data recording area 122 and the second encrypted media key data recording area 122, the description thereof is omitted.
- the first encrypted seed recording area 3 1 2 3 records the first seed (SD 1) encrypted with the media key ( ⁇ ⁇ ).
- the second seed (SD 2) encrypted with the media key ( ⁇ ⁇ ) is recorded in the second encryption seed recording area 3 1 2 4.
- the encrypted content recording area 3 1 2 5 is encrypted with a content key (C ⁇ ).
- the encrypted content is recorded.
- a large number of device keys assigned to the first category of decryption devices and an algorithm for decrypting the first encrypted media key data are Internet. If it is determined that the invalidation of the decryption device of the first category has stopped functioning, the system for revoking the decryption device of the first category will be updated.
- specific examples thereof will be described.
- FIG. 35 shows a specific example 1 of various data recorded on the newly created recording medium 3120 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from FIG. 34 is that the device keys used to generate the first encrypted media key data have been changed from DKA1 to DKAm to DKA'1 to DKA'm. This is the same as the specific example 1 of the system update described in the first embodiment, and thus the detailed description is omitted.
- the device keys of the new device keys do not match any of the device keys (DKA1 to DKAm) before the system update. Even if there is a device key other than DKA 2 that was exposed by an unauthorized analysis before the system update, the first encrypted media key data read from the recording medium shown in Fig. 35 is decrypted using that device key. Media key (MK) cannot be obtained, and the content cannot be played.
- FIG. 36 shows a specific example 2 of various data recorded on the newly created recording medium 3120 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from Fig. 34 is that the device key used to generate the first encrypted media key data is changed from DKA1 to DKAm to DKA'1 to DKA'm, and the encryption algorithm is Ea (X ,. Y) to E a '(X, Y). Since this is the same as the specific example 2 of the system update described in the first embodiment, the detailed description is omitted.
- each device key of the new device keys (DKA '“! ⁇ DKA' m) does not match any of the device keys (DKA 1 to DKA m) before the system update. Therefore, even if there is a device key other than DKA 2 that was exposed by an illegal analysis before the system update, the first encryption read from the recording medium in Fig. 36 using the device key of The media key data (MK) cannot be obtained by decrypting the media key data, and the content cannot be played.
- the encryption length can be increased by changing the key length and encryption algorithm of the device key, it is possible to make it difficult to analyze the system and obtain the device key illegally.
- the device keys (DKB1 to DKBn) used to generate the second encrypted media key data and the encryption algorithm of the second encrypted media key data were not changed. Therefore, there is no need to make any changes to devices belonging to the second category.
- the first category device (the decoding device 3220) and the second category device (the reading device 3210 and the second device).
- the playback device 3300 has different categories Since it is not necessary to read the first or second encrypted media key data for invalidating the device of the device, the memory capacity provided in the device can be reduced, and the processing time can be shortened.
- the encryption algorithm used to generate the first encrypted media key data can be different from the encryption algorithm used to generate the second encrypted media key data. Even if the decryption device invalidation system is exposed, the key length of the device key assigned to the decryption device of the first category and the algorithm for generating the first encrypted media key data are changed.
- the first category decryption device 322 0 does not have an algorithm for decrypting the second encryption seed, it analyzes and holds any of the first category decryption devices. Even if the decryption algorithm is exposed, it is impossible to decrypt the second encryption seed that differs for each content, and it is possible to prevent fraudulent activities in the first category from affecting the entire system. And build a more robust copyright protection system.
- the first category is a decryption algorithm.
- the decryption apparatus is implemented with software that is easy to update and add keys, but that is difficult to implement robustly.
- the category is particularly effective when it is a playback device or a reading device that is implemented in a hard disk that is robust but has difficulty in updating or adding a decryption algorithm or key.
- the media key, the first seed, and the second seed are input from the outside of the recording device 310, but the present invention is limited to the configuration. Not something.
- the recording device 3100 may have a configuration including a storage unit that stores a media key, a first seed, and a second seed.
- the recording device 3100 has a media key, a first shade, and It may be configured to have a generation unit that generates the second seed each time.
- FIG. 31 shows a configuration in which a content key is generated from the first seed and the second seed, the content is encrypted with the content key, and the first and second seeds are encrypted with the media key.
- the present invention is not limited thereto.
- a configuration may be adopted in which a key is added to further increase the number of encryption layers.
- a device key storage unit, a media key encryption unit, a seed encryption unit, a content key generation unit, a content encryption unit, a recording device Although the recording of each data on the medium is an integrated configuration, the present invention is not limited to this, and the recording device may be configured separately.
- the device key storage unit, media key encryption unit, seed encryption unit, and content key generation unit (the part enclosed by the broken line in Fig. 31) of each ⁇ ) category are highly efficient in their management and operation. Since confidentiality is required, it is built into a device installed in an organization that operates the key management of the entire system and the issuance of keys to playback devices, etc.
- the embodiment may be executed by a device installed in a content manufacturing organization or a recording medium manufacturing organization.
- the position of the encrypted media key to be used by the decryption device that has not been revoked is also updated, and new location information is added when a new device key is added, so that the encrypted media can be updated before and after the system update. Decryption devices that have not been revoked even if the key position has changed should use appropriate data.
- the amount of data to be stored in the first encrypted media key data recording area after the system update can be reduced.
- the maximum value of the capacity is limited, the number of decoding devices belonging to the first category can be newly reduced.
- the method of invalidating the decryption device using the encrypted media key data as shown in FIG. 34 is used, but another method may be used for the invalidation method.
- another method may be used for the invalidation method.
- an invalidation method using a tree structure disclosed in Patent Document 1 may be used.
- DES with a key length of 56 bits is used as the encryption algorithm
- 2-bit triple DES with a key length of 112 bits is used as the encryption algorithm after system update.
- the invention is not limited to this, and other encryption algorithms, such as AES with a key length of 128 bits, which is the next-generation standard encryption, may be used.
- the present invention is applied to a system in which content is distributed using a read-only recording medium and the content is reproduced by a reproducing device, but the present invention is not limited to this. Absent.
- the key generation device generates the encrypted media key data and the encryption seed for each category and records them on the recording medium, and the recording device performs the encryption media key data and the encryption.
- the present invention can be applied to a system using a rewritable or write-once recording medium.
- the seventh embodiment of the present invention provides the system according to the sixth embodiment, in which a media key is individually provided for the first category and the second category, and a first encryption seed layer using each is provided. It is like that.
- Embodiment 7 of the present invention will be described with reference to the drawings.
- FIG. 37 shows a recording device 370 0 and a recording medium 372 0 for encrypting and recording the content
- FIG. 380 reads the encrypted content from the recording medium 370 and decrypts it.
- I 39 indicates a second playback device 3900 that reads out encrypted content from the recording medium 3720 and decodes it.
- FIG. 40 shows specific examples of various data recorded on the recording medium 3720.
- the difference between the recording device 3700 in FIG. 37 and the recording device 310 in FIG. 31 is that the first media key is used for the first category and the first media key is used for the second category. 2 media keys are separately provided, and the first and second media keys are respectively encrypted by the first media key encrypting section 3705 and the second media key encrypting section 3706. And the first seed is encrypted by the first seed encryption unit (1) 370 7 and the first seed encryption unit (2) 371 11 using the first and second media keys, respectively. And recorded on a recording medium 3720.
- the other points are the same as those of the recording apparatus 310 of the sixth embodiment, and the description is omitted.
- the recording medium 372 0 has a first encrypted media key data recording area 372 1 for recording the first encrypted media key data, and a second encryption medium for recording the second encrypted media key data.
- the second encrypted seed data is read from the first reproducing device 380 0 It is decrypted by the third media device and the second playback device using the second media key.
- the decryption device 380 0 decrypts the first encrypted shade (1) read from the recording medium 372 0 by the read device 380 10 Get a seed of 1.
- the other points are the same as those of the first reproducing apparatus 3200 in the sixth embodiment described above, and thus description thereof will be omitted.
- the second playback device 390 00 decodes the first emphasis seed (2) read from the recording medium 370 0 to obtain a first seed.
- Other points are the same as those of the second reproducing apparatus 330 in Embodiment 6 described above, and thus description thereof is omitted.
- FIG. 40 shows specific examples of various data recorded on the recording medium 3720.
- the first encrypted media key data recording area 372 1 contains a first media key (DKA "! ⁇ DKA m) encrypted by the first category decryption device.
- MK 1 is recorded in the second encrypted media key data recording area 372 2, which is encrypted with the device keys (DKB 1 to DKB m) held by the devices of the second category.
- the second media key (MK 2) is recorded, and the first encrypted side data (1) recording area 372 3 is encrypted with the first media key (MK 1).
- the first seed (SD 1) is recorded, and the first encrypted seed data (2) recording area 372 6 stores the second seed encrypted with the second media key (MK 2).
- the seed (SD 1) is recorded as 1.
- E 40 E f (X, Y) means a function of encrypting data Y using key data X.
- a DS encryption with a key length of 56 bits is used.
- the first Many of the device keys assigned to the decryption device of the category and the algorithm for decrypting the first encrypted media key data are illegally disclosed on the Internet, and the decryption device of the first category is invalidated. If it is determined that has stopped functioning, the invalidation system for the first category of decryption device will be updated.
- specific examples thereof will be described.
- FIG. 41 shows a specific example 1 of various demuters to be recorded on a newly created recording medium 3720 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from FIG. 40 is that the device keys used to generate the first encrypted media key data have been changed from DKA1 to DKAm to DKA'1 to DKA'm. This is the same as the specific example 1 of the system update described in the first embodiment, and the detailed description will be omitted.
- FIG. 42 shows a specific example 2 of various data to be recorded on the newly created recording medium 3720 after it is determined that the invalidation of the decoding device of the first category has stopped functioning.
- the difference from Fig. 40 is that the device key used to generate the first encrypted media key data has been changed from DKA1 to DKAm to DKA'1 to DKA'm, and the encryption algorithm is Ea (X, ⁇ ) to E a '(X, ⁇ ), and the encryption algorithm of the first encryption seed (1) from E c (X, ⁇ ) to E c' (X, ⁇ ) That is. Since this is the same as the specific example 2 of the system update described in the third embodiment, the detailed description will be omitted.
- a robust copyright protection system can be constructed as in the sixth embodiment.
- the first category and the second category are individually mediated.
- the independence between categories can be enhanced.
- the first category is a decryption device implemented by software that makes it easy to update and add keys, but that is difficult to implement robustly. Is particularly effective when used as a playback device or reading device that is implemented in hardware that is robust but difficult to update or add a decryption algorithm or key.
- the first media key, the second media key, the # 1 seed, and the second seed are input from the outside of the recording device 3700.
- the invention is not limited to the configuration.
- the configuration may be such that the recording device 3700 has a storage unit for storing them.
- the recording device 3700 may have a configuration that includes a generation unit that generates these each time.
- a content key is generated from the first seed and the second seed, the content is encrypted with the content key, and the first and second seeds are encrypted with the media key.
- the present invention is not limited to this.
- a configuration may be adopted in which a key is added to further increase the number of encryption layers.
- a device key storage unit As a recording device, as shown in FIG. 37, a device key storage unit, a media key encryption unit, a seed encryption unit, a content key generation unit, and a content encryption unit for each category are used.
- the recording unit and the recording of the data on the recording medium have been integrated, the present invention is not limited to this, and the recording device may be configured separately.
- the device key storage unit, media key encryption unit, seed encryption unit, and content key generation unit (parts enclosed by broken lines in Fig. 37) require high confidentiality in management and operation.
- the recording of each data on the content encryption unit and the recording medium is performed by the content manufacturing organization and the recording medium It may be executed by a device installed in an engine.
- the position of the encrypted media key to be used by the decryption device that has not been revoked is also updated, and new position information is added when a new device key is added, so that encryption is performed before and after the system update Even if the position of the media key changes, a decryption device that has not been revoked can use appropriate data and obtain a correct media key. In this case, it is possible to reduce the amount of data to be stored in the first encrypted media key data recording area after the system is updated. Alternatively, when the maximum value of the capacity is limited, it is possible to newly increase the number of decoding devices belonging to the first category.
- the method of invalidating the decryption device using the encrypted media key data as shown in FIG. 40 is used, but the invalidation method may be other methods.
- an invalidation method using a tree structure disclosed in Patent Document 1 may be used.
- DES with a key length of 56 bits is used as the encryption algorithm, or key length is used as the encryption algorithm after the system is updated.
- key length is used as the encryption algorithm after the system is updated.
- a 2-bit triple DES with bits is used, the present invention is not limited to this, and other encryption algorithms, for example, AES with a key length of 128 bits, which is a next-generation standard encryption, may be used. good.
- the present invention is applied to a system in which content is distributed using a read-only recording medium and the content is reproduced by a reproducing device, but the present invention is not limited to this. Not something.
- the key generation device generates the encrypted media key data and the encryption seed for each category and records them on the recording medium
- the recording device generates the encrypted media key data and the encrypted seed.
- the devices of the first category and the devices of the second category do not need to read the first or second B-coded media keys for invalidating the devices of different categories, respectively.
- the memory capacity provided in the device can be reduced, and the processing time can be shortened.
- the playback device of the first category Even if the revocation system is exposed, change the key length of the device key assigned to the playback device of the first category and the algorithm for generating the first encrypted media key. Thus, the invalidation system can be updated without affecting the playback devices of the second category.
- the copyright protection system can reduce the size of a memory provided in a device, and can analyze a device of a certain category illegally and Even if the rhythm or a large number of keys are exposed, encryption for devices in that category can be performed. ⁇ By changing the decryption algorithm and key length, the entire system can be changed without any changes to devices in other categories.
- a system that records or reproduces digitized content on a large-capacity recording medium such as an optical disk it is easy to update or add a decryption algorithm or key.
- recording or playback devices implemented with software that is hard to implement robustly, and recording or playback devices implemented with hardware that is robust but difficult to update or add a decoding algorithm or key. This is useful in such cases.
Landscapes
- Engineering & Computer Science (AREA)
- Signal Processing (AREA)
- Computer Security & Cryptography (AREA)
- Multimedia (AREA)
- Databases & Information Systems (AREA)
- Computer Networks & Wireless Communication (AREA)
- Theoretical Computer Science (AREA)
- Computer Graphics (AREA)
- Physics & Mathematics (AREA)
- Data Mining & Analysis (AREA)
- Software Systems (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Mathematical Physics (AREA)
- Storage Device Security (AREA)
- Signal Processing For Digital Recording And Reproducing (AREA)
Abstract
Description
Claims
Priority Applications (5)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2005512594A JP4615444B2 (ja) | 2003-08-05 | 2004-07-30 | 著作権保護システム |
EP04771306.0A EP1653653B1 (en) | 2003-08-05 | 2004-07-30 | Copyright protection system |
KR1020067000796A KR101148497B1 (ko) | 2003-08-05 | 2004-07-30 | 저작권 보호 시스템 |
CN2004800222389A CN1833400B (zh) | 2003-08-05 | 2004-07-30 | 著作权保护*** |
US10/563,797 US7620993B2 (en) | 2003-08-05 | 2004-07-30 | Copyright protection system, key generation apparatus, recording apparatus, reproduction apparatus, read-out apparatus, decryption apparatus, recording medium, recording method and program |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
JP2003286657 | 2003-08-05 | ||
JP2003-286657 | 2003-08-05 |
Publications (1)
Publication Number | Publication Date |
---|---|
WO2005013550A1 true WO2005013550A1 (ja) | 2005-02-10 |
Family
ID=34113965
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
PCT/JP2004/011303 WO2005013550A1 (ja) | 2003-08-05 | 2004-07-30 | 著作権保護システム |
Country Status (6)
Country | Link |
---|---|
US (1) | US7620993B2 (ja) |
EP (1) | EP1653653B1 (ja) |
JP (1) | JP4615444B2 (ja) |
KR (1) | KR101148497B1 (ja) |
CN (1) | CN1833400B (ja) |
WO (1) | WO2005013550A1 (ja) |
Cited By (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR100768290B1 (ko) | 2005-09-06 | 2007-10-18 | 후지쯔 가부시끼가이샤 | 무선 통신 네트워크의 보안 설정 방법, 보안 설정프로그램을 기록한 기록 매체, 무선 통신 네트워크 시스템및 클라이언트 장치 |
Families Citing this family (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP4469587B2 (ja) * | 2003-09-30 | 2010-05-26 | 株式会社東芝 | 情報記録装置及び情報記録方法、及びデジタル放送受信器 |
JP4893040B2 (ja) * | 2006-03-17 | 2012-03-07 | ソニー株式会社 | 暗号化データ記録装置 |
JP2008117459A (ja) * | 2006-11-02 | 2008-05-22 | Hitachi Ltd | 記録再生装置 |
US8826042B2 (en) * | 2009-04-14 | 2014-09-02 | Megachips Corporation | Memory controller, memory control apparatus, memory device, memory information protection system, control method for memory control apparatus, and control method for memory device |
JP5564194B2 (ja) * | 2009-04-14 | 2014-07-30 | 株式会社メガチップス | メモリコントローラ、メモリ制御装置およびメモリ装置 |
JPWO2011111370A1 (ja) * | 2010-03-11 | 2013-06-27 | パナソニック株式会社 | 記録システム、再生システム、鍵配信サーバ、記録装置、記録媒体装置、再生装置、記録方法、及び、再生方法 |
JP5644467B2 (ja) * | 2010-12-20 | 2014-12-24 | ソニー株式会社 | 情報処理装置、および情報処理方法、並びにプログラム |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH08181689A (ja) * | 1994-10-28 | 1996-07-12 | Sony Corp | デイジタル信号伝送方法、デイジタル信号受信装置及び記録媒体 |
JP2000023137A (ja) * | 1998-07-02 | 2000-01-21 | Matsushita Electric Ind Co Ltd | 放送システムと放送送受信装置 |
Family Cites Families (17)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JP3988172B2 (ja) * | 1997-04-23 | 2007-10-10 | ソニー株式会社 | 情報処理装置および方法、並びに記録媒体 |
US6118873A (en) * | 1998-04-24 | 2000-09-12 | International Business Machines Corporation | System for encrypting broadcast programs in the presence of compromised receiver devices |
JP2000341265A (ja) * | 1999-05-28 | 2000-12-08 | Matsushita Electric Ind Co Ltd | データ記録および読み出し方法および記録装置および読み取り装置および書き込み装置 |
JP4131067B2 (ja) * | 1999-10-18 | 2008-08-13 | ソニー株式会社 | 情報処理装置、情報処理方法、およびプログラム記録媒体 |
US6850914B1 (en) * | 1999-11-08 | 2005-02-01 | Matsushita Electric Industrial Co., Ltd. | Revocation information updating method, revocation informaton updating apparatus and storage medium |
US7225164B1 (en) * | 2000-02-15 | 2007-05-29 | Sony Corporation | Method and apparatus for implementing revocation in broadcast networks |
JP2001256113A (ja) * | 2000-03-13 | 2001-09-21 | Toshiba Corp | コンテンツ処理システムおよびコンテンツ保護方法 |
JP4674396B2 (ja) * | 2000-10-20 | 2011-04-20 | ソニー株式会社 | データ再生装置、データ記録装置、およびデータ再生方法、データ記録方法、並びにプログラム提供媒体 |
JP4622087B2 (ja) * | 2000-11-09 | 2011-02-02 | ソニー株式会社 | 情報処理装置、および情報処理方法、並びにプログラム記憶媒体 |
JP2002281013A (ja) | 2000-12-18 | 2002-09-27 | Matsushita Electric Ind Co Ltd | 著作権保護のための鍵管理装置、記録媒体、再生装置、記録装置、鍵管理方法、再生方法、鍵管理プログラム及び鍵管理プログラムを記録したコンピュータ読み取り可能な記録媒体 |
JP4710132B2 (ja) * | 2000-12-26 | 2011-06-29 | ソニー株式会社 | 情報処理システム、および情報処理方法、並びにプログラム記録媒体 |
US7010125B2 (en) * | 2001-01-26 | 2006-03-07 | Interntional Business Machines Corporation | Method for tracing traitor receivers in a broadcast encryption system |
US7039803B2 (en) * | 2001-01-26 | 2006-05-02 | International Business Machines Corporation | Method for broadcast encryption and key revocation of stateless receivers |
EP1507261B1 (en) * | 2001-08-08 | 2016-07-20 | Panasonic Intellectual Property Management Co., Ltd. | Copyright protection system, recording device, decryption device, and recording medium |
JP3873740B2 (ja) * | 2001-12-21 | 2007-01-24 | ソニー株式会社 | 記録媒体、記録方法および装置、ならびに、再生方法および装置 |
US7340603B2 (en) * | 2002-01-30 | 2008-03-04 | Sony Corporation | Efficient revocation of receivers |
JP4418624B2 (ja) * | 2002-12-17 | 2010-02-17 | パナソニック株式会社 | 暗号化装置および復号化装置 |
-
2004
- 2004-07-30 WO PCT/JP2004/011303 patent/WO2005013550A1/ja active Application Filing
- 2004-07-30 CN CN2004800222389A patent/CN1833400B/zh not_active Expired - Lifetime
- 2004-07-30 JP JP2005512594A patent/JP4615444B2/ja not_active Expired - Lifetime
- 2004-07-30 US US10/563,797 patent/US7620993B2/en active Active
- 2004-07-30 EP EP04771306.0A patent/EP1653653B1/en not_active Expired - Lifetime
- 2004-07-30 KR KR1020067000796A patent/KR101148497B1/ko active IP Right Grant
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
JPH08181689A (ja) * | 1994-10-28 | 1996-07-12 | Sony Corp | デイジタル信号伝送方法、デイジタル信号受信装置及び記録媒体 |
JP2000023137A (ja) * | 1998-07-02 | 2000-01-21 | Matsushita Electric Ind Co Ltd | 放送システムと放送送受信装置 |
Non-Patent Citations (2)
Title |
---|
See also references of EP1653653A4 * |
TATEBAYASHI M. ET AL.: "Kiroku Media no Contents Hogo System", 2000 NEN THE INSTITUTE OF ELECTRONICS, INFORMATION AND COMMUNICATION ENGINEERS KISO. KYOKAI SOCIETY TAIKAI KOEN RONBUNSHU, 7 September 2000 (2000-09-07), pages 367 - 368, XP001119437 * |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
KR100768290B1 (ko) | 2005-09-06 | 2007-10-18 | 후지쯔 가부시끼가이샤 | 무선 통신 네트워크의 보안 설정 방법, 보안 설정프로그램을 기록한 기록 매체, 무선 통신 네트워크 시스템및 클라이언트 장치 |
US8374339B2 (en) | 2005-09-06 | 2013-02-12 | Fujitsu Limited | Security setting method of wireless communication network, wireless communication network system, client device and recording medium |
Also Published As
Publication number | Publication date |
---|---|
KR101148497B1 (ko) | 2012-05-21 |
EP1653653B1 (en) | 2017-11-15 |
US7620993B2 (en) | 2009-11-17 |
JPWO2005013550A1 (ja) | 2006-09-28 |
KR20060061791A (ko) | 2006-06-08 |
CN1833400B (zh) | 2011-12-28 |
US20060282898A1 (en) | 2006-12-14 |
JP4615444B2 (ja) | 2011-01-19 |
EP1653653A1 (en) | 2006-05-03 |
EP1653653A4 (en) | 2011-03-09 |
CN1833400A (zh) | 2006-09-13 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
US7401231B2 (en) | Information recording/playback device and method | |
US7283633B2 (en) | Information recording and/or reproducing method and information recording and/or reproducing device | |
TW538360B (en) | Data processing system, data processing method, data processing apparatus, and program providing medium | |
JP3093678B2 (ja) | 暗号化方法、復号方法、記録再生装置、復号装置、復号化ユニット装置及び記録媒体の製造方法 | |
US7346170B2 (en) | Information processing system and method | |
TWI421861B (zh) | 資訊處理裝置及方法,資訊記錄媒體製造裝置及方法及資訊記錄媒體 | |
WO2001078298A1 (fr) | Systeme et procede de traitement d'informations | |
WO2001099333A1 (fr) | Dispositif de traitement d'informations et procede de traitement | |
JP2005039480A (ja) | コンテンツ記録方法、記録媒体、コンテンツ記録装置 | |
KR100994772B1 (ko) | 저장 매체의 데이터 복사 및 재생 방법 | |
WO2000079532A1 (fr) | Support d'enregistrement, procede d'initialisation de support d'enregistrement, procede de cryptage et dispositif pour support d'enregistrement, procede de decryptage et dispositif acoustique/video/donnees | |
KR20050034639A (ko) | 지역 한정 재생 시스템 | |
KR20020026285A (ko) | 정보 처리 시스템 및 방법 | |
JP2005512258A (ja) | システムデータの完全性の検証方法及び装置 | |
JP2006172147A (ja) | コンテンツ保護方法及びその方法を用いた情報記録再生装置 | |
WO2004046936A1 (ja) | 記録システムおよび方法、記録装置および方法、入力装置および方法、再生システムおよび方法、再生装置および方法、記録媒体、並びにプログラム | |
JP2005505853A (ja) | ユーザデータを読出し又は書込みするための装置及び方法 | |
WO2004086233A1 (ja) | 情報記録媒体、情報処理装置、情報記録媒体製造装置、および方法、並びにコンピュータ・プログラム | |
WO2005013550A1 (ja) | 著作権保護システム | |
KR20060133958A (ko) | 콘텐츠 보호 방법 및 시스템 | |
JP4592398B2 (ja) | 情報記録再生方法及び装置、情報記録媒体 | |
JP2002009754A (ja) | 情報記録装置、情報再生装置、暗号処理キー更新方法、並びにプログラム提供媒体 | |
JP4192499B2 (ja) | 情報処理装置、情報処理方法、およびコンテンツ入出力処理システム、コンテンツ入出力処理方法、並びにコンピュータ・プログラム | |
JP2001043138A (ja) | 暗号化方法、記録媒体の製造方法、コンテンツ・ディスク、コンテンツ・ディスクの製造方法、鍵管理方法及び情報再生装置 | |
JP2003204320A (ja) | 著作物保護システム、鍵管理装置及び利用者装置 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
WWE | Wipo information: entry into national phase |
Ref document number: 200480022238.9 Country of ref document: CN |
|
AK | Designated states |
Kind code of ref document: A1 Designated state(s): AE AG AL AM AT AU AZ BA BB BG BR BW BY BZ CA CH CN CO CR CU CZ DE DK DM DZ EC EE EG ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MA MD MG MK MN MW MX MZ NA NI NO NZ OM PG PH PL PT RO RU SC SD SE SG SK SL SY TJ TM TN TR TT TZ UA UG US UZ VC VN YU ZA ZM ZW |
|
AL | Designated countries for regional patents |
Kind code of ref document: A1 Designated state(s): BW GH GM KE LS MW MZ NA SD SL SZ TZ UG ZM ZW AM AZ BY KG KZ MD RU TJ TM AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LU MC NL PL PT RO SE SI SK TR BF BJ CF CG CI CM GA GN GQ GW ML MR NE SN TD TG |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2005512594 Country of ref document: JP |
|
121 | Ep: the epo has been informed by wipo that ep was designated in this application | ||
REEP | Request for entry into the european phase |
Ref document number: 2004771306 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2004771306 Country of ref document: EP |
|
WWE | Wipo information: entry into national phase |
Ref document number: 2006282898 Country of ref document: US Ref document number: 10563797 Country of ref document: US |
|
WWE | Wipo information: entry into national phase |
Ref document number: 1020067000796 Country of ref document: KR |
|
WWP | Wipo information: published in national office |
Ref document number: 2004771306 Country of ref document: EP |
|
WWP | Wipo information: published in national office |
Ref document number: 1020067000796 Country of ref document: KR |
|
WWP | Wipo information: published in national office |
Ref document number: 10563797 Country of ref document: US |