This application is based upon and claims the benefit of priority from Japanese Patent Application No. 2006-193157, filed Jul. 13, 2006, the entire contents of which are incorporated herein by reference.
1. Field
One embodiment of the present invention relates to information access management using an encryption key or the like, and more particularly to a method of holding information on a key used to protect highly confidential data.
2. Description of the Related Art
In recent years, various digital devices for accessing contents recorded on disc media or the like have been developed. The data recorded on a disc accessed by such a device has been encrypted to prevent unauthorized access or illegal copy. In the case of the encrypted data, an encryption scheme mainly complying with the CSS (Content Scramble System) scheme has been employed in the DVD (Digital Versatile Disc).
As a more advanced encryption scheme, an AACS (Advanced Access Content System) has been proposed (Jpn. Pat. Appln. KOKAI Publication No. 2005-39480). To employ the AACS scheme, for example, a set maker gets a specific key set from a key matrix a licensee has, encrypts a key with a different combination, and set the encrypted key in each device. Moreover, the following method has also been proposed which has a plurality of title key registers provided in an authentication and data decoding section, holds a plurality of title keys in the respective registers, and selects a title key register in decoding the data on the title to decode the data (Jpn. Pat. Appln. KOKAI Publication No. 11-39794).
In the AACS, each of a plurality of keys is encrypted using not only a device key given to each device which records and reproduces contents duly but also a random number randomly generated, and the encrypted key, together with the random number, is registered in a key file and then recorded onto a medium. When content is reproduced, the encrypted key registered in the key file is decrypted using the random number and the device key of the device to be reproduced. Then, the content is decrypted using the decrypted key, thereby reproducing the content.
For example, in the case of an HD_DVD, a maximum of 1998 encrypted title keys (Kte) is stored in a title key file (TKF). Each Kte has been encrypted using a protected area key (Kpa). To re-encrypt all the Ktes in the TKF, an old Kpa and a new Kpa have to be generated for each Kte, resulting in an increase in the amount of processing.
In contrast, when an old title key (Kt) is held, the process of generating an old Kpa and a new Kpa has to be carried out only once, but all Ktes (a maximum of 1998 Ktes) in the TKF have to be held in the state of Kt. Because of the AACS standard, Kt has to be protected firmly. In the case of processing by software, it is dangerous to hold the Kt in an unencrypted state. On the other hand, in the case of processing by hardware, a circuit for holding all Kts (128 bits×1998) is needed, resulting in an increase in the number of circuits (which leads to an increase in the cost of hardware).
One task according to an embodiment of the invention is to reduce the amount of processing or the number of circuits needed to re-encrypt title keys, while keeping a strong protection of the title keys.
A method according to an embodiment of the invention is used in generating a protected area key (Kpa) from a media key (Km) and random number data (binding nonce: BN) and further generating a title key (Kt) used to encrypt or decrypt contents from a title key file (TKF) including one or more encrypted title keys (Kte) (Kte#0 to Kte#n) and the protected area key (Kpa).
In the method, a first protected area key (Kpa0: old Kpa) generated before at least a part of the media key (Km) or a media key block (MKB) used in generating the media key and the random number data (BN) has changed (at least a part of Km, MKB, and BN is old) and a second protected area key (Kpa1: new Kpa) which is generated after at least a part of the media key (Km) or a media key block (MKB) used in generating the media key and the random number data (BN) has changed (at least a part of Km, MKB, and BN is new) and differs from the first protected area key (Kpa0) are held simultaneously (ST302, ST306 of
Using the old Kpa and new Kpa simultaneously held (or information used in generating old Kpa and new Kpa: old and new Km, MKB, BN, and others) enables a TKF re-encrypting process to be carried out more safely and efficiently.
Hereinafter, referring to the accompanying drawings, embodiments of the invention will be explained. When information is recorded onto an information recording medium, such as an optical disc, it is sometimes needed to encrypt information and record the encrypted one. In that case, for example, copyright-protected contents are encrypted using an encryption key, thereby obtaining the encrypted contents. To make a secret of the encryption key used in encryption, the encryption key is encrypted using another encryption key, thereby producing an encryption key. Then, the encrypted contents, together with the encryption key, are recorded onto a recording medium, thereby preventing illegal copy.
In the field of DVDs (Digital Versatile Discs) whose market is now expanding rapidly, the following measures have been taken for copyright protection: DVD video uses the CSS (Content Scramble System) method licensed by the DVD CCA (DVD Copy Control Association) and DVD audio uses the CPPM (Content Protection for Prerecorded Media) method. In the copyright protection method for contents recorded in recording media, the CPRM (Content Protection for Recordable Media) method has been used. The CPPM method and CPRM method have been licensed by specific associations (e.g., an association known as 4C Entity, LLC).
On the other hand, a high-capacity next-generation DVD or the like capable of recording and reproducing higher-resolution images and higher-quality multichannel audio signals has been under development. In a copyright protection method in recording high-quality work into such a next-generation recording medium, the introduction of a method whose security capability is made higher than before is needed. One concrete example of the method is the AACS (Advanced Access Content System) method. Hereinafter, a method of managing content keys in the AACS will be explained which is the content protection technique used in the HD_DVD-VR (High Density Digital Versatile Disc Video Recording) format.
In the conventional CPRM method, an encryption key is generated using a media key block (MKB) and a media ID which exist on the disc and contents are encrypted. In the AACS method, contents on the disc are encrypted using an encryption key for each of the contents, not using a common single encryption key.
The content protection technique used in the HD_DVD video recording format is the AACS. A method of managing content keys in the AACS will be explained using
Media ID
Lead-in MKB
Data which is used in an AACS process and exists as a file on the disc 100 includes:
Read Write MKB
Title Key File
Title Usage File
In a protect area at the begin address in the Title Key File, data based on a random number called Binding Nonce has been recorded.
In the AACS, the process of generating a “title key (Kt)” for encrypting contents is roughly carried out in the following sequence. First, using the one with a newer version of Lead-in MKB and Read Write MKB, an MKB process is carried out. The key generated in the process is called “media key (Km).” Using the media key Km and Binding Nonce (BN) as inputs, a protected area key process (Kpa process) is carried out, thereby generating a “protected area key (KPa).” Using the Kpa, the data in the title usage file, and the data in the title key file, a title key process (TK process) is carried out, which enables the encrypted title key recorded in the title key file to be converted into the original title key Kt.
In the above processes, old and new data, including Km, MKB, and BN, can be stored in a memory f. The old and new data (Kpa0, Kpa1) on the Kpa can be stored in a memory (key holding section) d. How the data stored in the memory d and memory f will be described later with reference to
The MKB is data called a media key block and is such that the media key Km is encrypted and recorded. Also in the MKB, information on unauthorized devices has been recorded. Unauthorized devices are prevented from taking out Km. Since information on unauthorized devices is updated, the latest version of the MKB has to be used. For this reason, in the HD_DVD AACS, there are three types of MKB: Lean-in MKB embedded in the Lead-in Area of the medium, Read Write MKB held as a file on the disc, and MKB (hereinafter, referred to as Device MKB) stored in an internal nonvolatile memory by the device itself. Of them, the latest MKB is supposed to be written over the Read Write MKB. Since updating the MKB to the new one involves the change of the value of Km, all of the key information including Km and subsequent ones (including Kpa and Kt) has to be created again.
In the information recording and reproducing apparatus 200 shown in
In a read-only lead-in area of the medium 100, a Lean-in MKB (Media Key Block) is stored. In a User Data area, a rewritable area, a Read Write MKB is stored. The MKB is a media key block obtained by encrypting a media key (Km), a base key for content encryption, on the basis of a set of device keys (Kd) provided as private keys in the information recording and reproducing apparatus 200 and organizing a mathematical system.
In S10 of
The MKB includes not only encrypted information for generating a protected area key (Kpa) but also revoke information. Specifically, when a certain device key set has a security hole in it and the licenser bans the use of the relevant device key Kd, revoke information on the relevant device key Kd is written. The revoke information prevents a device with the relevant device key Kd from decrypting the secret code (that is, the revoked information cannot be reproduced). Since information on unauthorized devices is updated progressively as time passes, a new MKB (the latest updated MKB) has to be used. For this reason, the latest version of the MKB is used as Media MKB.
By the MKB process, a media key (Km) is generated. In S12 of
In a protect area of the begin address of the title key file (TKF), “random-number-based data” coupled with a file called Binding Nonce has been recorded. The Binding Nonce cannot be copied using, for example, a Write instruction on the PC (personal computer). It can be copied using only an instruction defined in the AACS. Enabling a copy to be made only by the hardware given license for the AACS prevents information from leaking via the PC.
Next, in S13 of
Next, a title key process for generating a title key (TK) from Kpa will be explained. The process is shown in S14 of
Furthermore, in a read-only burst cutting area (BCA) provided medial to the lead-in area of the disc, Media ID has been recorded. Media ID is a unique ID assigned to each medium. In a user data area, a rewritable area, Media ID MAC, tamper-proof code MAC (Message Authentication Code) using Media ID, has been stored.
In a title key process shown in S14 of
In S23 of
In S25 of
As described above, the title key and the like play a significant role in encrypting and decrypting contents. However, since the title keys and the like have been recorded as a readable/writable file on the medium 100, if the surface of the medium is smeared with, for example, a fingerprint, the medium might easily go into a state where contents cannot be read. Thus, in the AACS, the title key file (TKF) which stores information on those title keys is backed up.
In the above processes, as in
In the title key files (TKF1 to TKF3), Binding Nonce 1 to Binding Nonce 3 (BN1 to BN3), Title Key File Generation 1 to Title Key File Generation 3 (TKFG1 to TKFG3), Title Key File Nonce 1 to Title Key File Nonce 3 (TKFN1 to TKFN3), and Encrypted Title Key 1 to Encrypted Title Key 3 (ETK1 to ETK3) have been registered, respectively. Here, Binding Nonce 1 to Binding Nonce 3 (BN1 to BN3) are random number data used in encrypting its own title key file as described above. Title Key File Generation 1 to Title Key File generation 3 (TKFG1 to TKFG3) represent the number of times each of the Title Key Files (TKF1 to TKF3) is updated. Title Key File Nonce 1 to Title Key File Nonce 3 (TKFN1 to TKFN3) are random numbers for generating Encrypted Title Keys (ETK1 to ETK3) excluding its own title key file or backup file.
Encrypted Title Key 1 to Encrypted Title Key 3 (ETK1, ETK2, ETK3) are expressed by the following equations (eq.1) to (eq.3):
ETK1=f(TK, BN1, TKFN3) (eq.1)
ETK2=f(TK, BN2, TKFN1) (eq.2)
ETK3=f(TK, BN3, TKFN2) (eq.3)
where TK is an unencrypted plain text title key and the encrypting function f means encrypting a first parameter (TK) using second parameters (BN1 to BN3) and third parameters (TKFN1 to TKFN3) as encryption keys. A known encryption algorithm, such as the AES (Advanced Encryption Standard), is used as the encrypting process f.
Specifically, TKF1 is related to TKF3. TKF1 is obtained by encrypting the title key (TK) using (BN1) and (TKFN3) of the related TKF3. TKF2 is related to TKF1. TKF2 is obtained by encrypting the title key (TK) using (BN2) and (TKFN1) of the related TKF1. TKF3 is related to TKF2. TKF3 is obtained by encrypting the title key (TK) using (BN3) and (TKFN2) of the related TKF2.
As described above, the title key file TKF1 and the backup files TKF2, TKF3 are related to one another. The encrypted title keys (E-TK1, E-TK2, E-TK3) are obtained by encrypting the title key (TK) using (BN1, BN2, BN2) registered in its own file and (TKFN1, TKFN2, TKFN3) registered in the related other file.
By storing three TKFs and storing TKFN in another file as described above, the damaged data can be restored to its original form from the data in the remaining two TKFs even if one TKF has been damaged because of data corruption.
Setting the aforementioned Binding Nonce as data that can be read and written only by a special drive command makes it possible to prevent an unauthorized copy. That is, even if the TKF has been copied, its accompanying Binding Nonce is not copied, which prevents a malicious third party from performing unauthorized encryption/decryption.
Relating the title key file to TKFN in another file of each backup file is not limited to the equations (eq.1) to (eq.3). Patters other than the equations (eq.1) to (eq.3) may be used to relate the title key file to TKFN in the backup files.
Data on the medium needed in an AACS recording and reproducing process will be explained in detail with reference to
In a user data area on the medium 100, management information, information on a Copy Protection Pointer for a video object (VOB) and/or a stream object (SOB), has been stored. In a user data area, Read Write MKB, encrypted title key (E-TK), Media ID MAC, Usage Rule, and their backup files have been stored. Moreover, the user data area is configured to be capable of storing a maximum of 1998 encrypted contents.
Each of the contents has been encrypted using one of the 1998 title keys. Encrypted Title Keys need not be recorded for all of the 1998 contents. In an unused content, a value obtained by encrypting the value 0 by a TK process is written. In the Title Key File Generation, the value incremented each time the file is updated is written. As described above, the title key file includes a total of three files as backups. If all of the values of the Title Key File Generation of the three files do not coincide with one another, this means that a failure has occurred in the middle of writing a file.
Next, a method of updating the title key file will be explained. The media to which the AACS has been applied include rewritable media and write-once media. In the rewritable media, for example, since a new title key is added each time a new content is additionally recorded, all the title keys in the title key file have to be encrypted again using a new Kpa. That is, the update of the title key file is needed.
In the protect area of the title key file, a value based on Binding Nonce, a random number, has been written. The Binding Nonce is used to prevent unauthorized decryption. Therefore, the Binding nonce is also updated each time the title key file is updated.
In the write-once media, each time the title key file is updated, the title key file is written in a new address. For this reason, the address in which the Binding Nonce is written also differs each time. However, in the AACS, Binding Nonce has to be written over in the same place. Thus, in the write-once media, the title key file has to be prevented from being updated. Accordingly, the rewritable media differs from the write-once media in the title key file update conditions.
In the Title Key File of
In a protect area at an address in which a Title Key File has been written on the medium 100, a value based on Binding Nonce, a random number, has been recorded. The protect area is an area where reading and writing can be done only by a special command dedicated to the AACS. Recording an element constituting Kpa makes it possible to prevent unauthorized decryption using a personal computer or the like.
The title key in the Title Key File is encrypted by combining the protected area key and Binding Nonce and carrying out the TK process. At this time, encryption is performed in such a manner that Binding Nonce in Title Key File#2 is used to encrypt Title Key File#1 and Binding Nonce in Title Key File#3 is used to encrypt Title Key File#2. By doing this, even if one of the three Title Key Files has been damaged, the damaged file can be restored to its original form by using the remaining two files. As described above, since Binding Nonce is used in encrypting title keys, it is updated each time the Title Key File is updated.
The Binding Nonce depends on an address in which a file is written. In the write-once media, such as HD_DVD-R, the Title Key File itself is stored in a new address each time, with the result that the Binding Nonce is also written in more than one place. However, since Binding Nonce is supposed to be written over in the same place in the AACS, the Title Key File is not updated in the write-once media.
In the Title Key File, 1998 encrypted title keys can be stored. The number coincides with the number of video objects (VOB) and stream objects (SOB). This is based on the assumption that the title key (Kt) is changed video object by video object. The reason is that, for example, when the contents are moved from the disc to another medium, a loophole that permits an unauthorized copy is left unless the title key in use has been eliminated. When the title key has been eliminated, the other objects with which the same title key is shared cannot be decrypted. Therefore, keys differing from one object to another have to be allocated as much as possible. For this reason, in the recording and reproducing apparatus, a new title key is generated each time a recording process is carried out. Using the title key, video objects and stream objects are encrypted.
Particularly when recording is done using stream objects (SOB), the stream objects have to be divided dynamically according to the contents of digital broadcasting to be recorded. Specifically, when the components of a stream object (SOB) have changed as the number of audio streams has changed at the boundary between programs, the SOB is divided automatically there. In this case, it is virtually impossible to change title keys there (an attempt to change title keys needs the time to generate a new key and therefore video recording at the beginning of the SOB lacks in starting the recording of the SOB after division). In such a case, encryption using the same title key is performed continuously.
If the disc belongs to the write-once media (or the medium which cannot be overwritten), the Title Key File cannot be updated. Thus, in the process of generating a key at the start of video recording, an already existing title key is used.
In a case where a rewritable medium (such as HD_DVD-RW/RAM or HDD) is used as the medium 100, the procedure for updating a title key file on a rewritable medium is, for example, as follows. Suppose a title key file has already been generated and written in the rewritable medium. The processing operation is realized by the control section 21 (or the firmware of the AACS processing section 210a of
For example, when the user turns on the power supply of the information recording and reproducing apparatus 200 and inserts a rewritable medium, an MKB process and a TKF read process are executed in a batch. In the MKB process, the signatures attached to Read Write MKB and Lead-in MKB are verified. If the result of the verification has authenticated the validity of them, the version of each MKB is acquired. The version of Read Write MKB has to be equal to or newer than the version of Lead-in MKB. If not, reproduction and recording are limited. In the TKF reading process, the title key file on the medium is developed on an SDRAM (such as 22 in
Then, according to the user's content recording operation, content editing operation, content deleting operation, media ejecting operation, or power OFF operation of the information recording and reproducing apparatus 200, it is determined whether or not the title key file is updated. Specifically, of the following three conditions, only when at least one of them is satisfied, the title key file is updated:
(1) When contents are recorded or deleted.
When contents are recorded or deleted, Encrypted Title Key in the title key file is newly added or deleted. Thus, the title key file is updated.
(2) When MKb is updated.
For example, when the version of Device MKB, MKB held in the information recording and reproducing apparatus 200, is newer than the version of Read Write MKB, the value of Device MKB is copied to Read Write MKB and the media key (Km) of Device MKB is updated. When Km is updated, Kpa is also updated. Therefore, the title key file is updated and the title key is encrypted again.
(3) When only one of the three Title Key File Generations is different.
As described above, this means that one of the three title key files has been damaged. For this reason, using the remaining two normal title key files, the damaged title key file is restored (updated) to its original form. That is, when at least one of the three conditions is fulfilled, the title key file is updated. None of the three conditions are fulfilled, the title key file is not updated and the process is terminated.
When a write-once medium (such as a single-sided single-layer HD_DVD-R or a single-sided double-layer HD_DVD-R:DL) is used, the procedure for writing a title key file in a write-once medium is as follows. The processing operation can be executed by the control section 210 (or the AACS processing section 210a of
For example, when the user turns on the power supply of the information recording and reproducing apparatus 200 and inserts a write-once medium, an MKB process and a TKF read process are executed in a batch. In the MKB process, the signatures attached to Read Write MKB and Lead-in MKB are verified. If the result of the verification has authenticated the validity of them, the version of each MKB is acquired. The version of Read Write MKB has to be equal to or newer than the version of Lead-in MKB. If not, reproduction and recording are limited. In the TKF reading process, the title key file on the medium is developed on an SDRAM (such as 22 in
Then, according to the user's content recording operation, content editing operation, content deleting operation, media ejecting operation, or power OFF operation of the information recording and reproducing apparatus 200, it is determined whether or not the title key file is written. Specifically, if the following two conditions are fulfilled, the title key file is written:
(1*) When contents are recorded.
(2*) When no title key file has been recorded on the disc.
Since Title Key File has to be written over in the same place in the AACS, only when condition (1*) and condition (2*) are satisfied at the same time, Title Key File is written in the write-once media. The reason for this will be described below.
If only condition (1*) is fulfilled, a write request is made each time contents are recorded. This becomes a problem in the case of write-once media incapable of writing over in the same place. If only condition (2*) is fulfilled, no valid content key has been generated in a state where no content has been recorded on the disc and therefore the Title Key File has only invalid Encrypted Title Keys, which is a problem. If both condition (1*) and condition (2*) have been satisfied, writing is done when recording has been done in a state where no Title Key File has been recorded on the disc. Accordingly, a Title Key File in which only one valid Encrypted Title Key has been generated is recorded.
If both of the two conditions are met, the title key file is written onto the disc. If none of the two conditions are met, the title key file is not written and the process is terminated.
With the embodiment, the condition for writing a title key file by media type is set. Only when the condition is satisfied, the title key file is written onto the disc. According to the condition, the Title Key File is not updated uselessly in the case of rewritable media, which enables the number of times Title Key File is written to be decreased. In the case of write-once media, the possibility of writing a problematic Title Key File can be eliminated.
A typical example of a recordable or rewritable information storage medium is a DVD disc (a single-recording-layer or multi-recording-layer EVD±R, DVD±RW, or DVD-RAM using red laser light with a wavelength of about 650 nm or violet-blue or blue laser light with a wavelength of 405 nm or less) 100. The disc 100 includes a volume/file structure information area in which a file system exists and a data area in which data files are actually recorded. The file system is composed of information indicating where which file has been recorded.
The data area includes an area in which a general computer records data and an area in which audio video data (AV data) is recorded. The AV data recording area is composed of an AV data management information area in which a video manager file (VMG or HDVR_MG) for managing AV data exists, a ROM_video object group recording area in which a file of object data complying with the DVD-Video (ROM Video) standard is recorded, a VR object group recording area in which a file (VRO file) of object data (ESOBS: Extended Video Object Set) complying with the video recording (VR) standard is recorded, and a recording area in which a stream object data (ESOBS: Extended Stream Object Set) file (SRO file) where objects compatible with digital broadcasting has been recorded is recorded. The recording standard for SRO files is referred to as the stream recording (SR) standard arbitrarily.
Although not shown, the directory (DVD_HDVR directory) of the video manager file is composed of an HD_DVD-VR-format management information file HR_MANAGER.IFO, an HDVR_VOB directory including a VRO file (an EVOB file allowed to have a rate of up to 30.24 Mbps) which is an analog video input object file, and an HDVR_SOB directory including a digital-broadcasting-compatible SRO file (ESOB file). The DVD_RTAV directory under the same root directory as that of the DVD_HDVR directory is composed of a DVD-VR-format management file VR_MANGER.IFO and a VRO file (a conventional DVD-VR VOB file whose maximum rate has been suppressed to 10.08 Mbps) which is an analog video input object file.
Specifically, in the file structure of the embodiment, the HDVR MPEG2-TS data file, HDVR MPEG2-PS data file, and VR MPEG2-PS data file are managed under the same root directory. For example, if the short cut files linked with HR_MOVIE.VRO are set as title thumbnails A, C, the short cut files linked with VR_MOVIE.VRO are set as title thumbnail B, and the short cut files linked with HR_STRnn.SRO are set as title thumbnail D, these thumbnails A to D can be displayed on the same menu screen (see an example of the monitor screen 52a of
Here, the case where the input stream is encoded into MPEG2-PS includes a case where the input stream is encoded into MPEG2-PS on the basis of the DVD-VR standard (the maximum rate is 10.08 Mbps; the maximum resolution is 720×480 or 720×576), a case where the input stream is encoded into MPEG2-PS at a high rate on the basis of the HD_DVD-VR standard (the maximum rate is 30.24 Mbps; the maximum resolution is 1920×1080), and a case where the input stream is encoded into MPEG2-PS at a low rate on the basis of the HD_DVD-VR standard (the maximum rate is 10.08 Mbps; the maximum resolution is 720×480 or 720×576).
The stream data encoded (or passed through) at the MPEG Encoder 20 is buffered temporarily in a high-speed memory, such as an SDRAM (Synchronous Dynamic Random Access Memory) 22. On the SDRAM 22, the following stream rewriting processes 1 to 3 are carried out suitably:
1. When Audio is Liner PCM, the value of sub_stream_id of Audio Pack is rewritten.
2. The contents of RD-PCK are rewritten.
3. Cipher in the CPRM is decoded once and then encrypted again in the AACS or vice versa.
The stream data buffered and processed at the SDRAM 22 is transferred to the HDD 104, HD_DVD Drive 26, or DVD Drive 28 according to the contents of the data. A high-capacity hard disc drive (e.g., 1 TB) is used as the HDD 104. A blue laser (e.g., wavelength λ=405 nm) is used for the HD_DVD Drive 26 and a red laser (e.g., wavelength λ=650 nm) is used for the DVD Drive 28.
The HD_DVD Drive 26 and DVD Drive 28 constitute a Drive Unit 24. The Drive Unit 24 includes two independent drives each of which includes a rotary drive system, an HD_DVD/DVD compatible drive (of the twin pickup type) which has a separate blue laser optical head and a separate red laser optical head both sharing a rotary drive system, or a two-wavelength optical system (of the single pickup type) which switches between a blue laser and a red laser both sharing a rotary drive system and an optical head mechanism.
In the embodiment of
The HD_DVD Drive 26 does recording and reproducing on the basis of the HD_DVD-VR standard and the DVD Drive 28 performs recording and reproducing on the basis of the DVD-VR standard. The DVD Drive 28 is further configured to be capable of recording and reproducing MPEG-PS data whose maximum rate and video attributes and the like fall in the range of the DVD-VR standard even if it is the data encoded on the basis of the HD_DVD-VR standard, at a constant speed or high speed by using a disc (such as a single-sided single layer DVD-R/RW/RAM, a single-sided double layer DVD-R, or a double-sided single layer DVD-RAM) 102 complying with the DVD-VR standard. (To give an actual example, NTSC video MPEG2-PS data recorded in the HDD 104 at a maximum rate of 10.08 Mbps is configured to be capable of being copied/dubbed into a disc 102 complying with the DVD-VR standard, even if it is the data encoded on the basis of the HD_DVD-VR standard. It goes without saying that the MPEG2-PS data encoded on the basis of the HD-DVD-VR standard can be copied/dubbed into the disc 100 complying with the HD_DVD-VR standard at high speed.)
The stream data reproduced at the HD_DVD Drive 26, DVD Drive 28, and/or HDD 104 is transferred via the SDRAM 22 to an MPEG Decoder 30. The MPEG Decoder 30 has the function of decoding MPEG2-TS, the function of decoding MPEG2-PS, the function of decoding MPEG4-AVC, and other decoding functions (e.g., the function of decoding VC-1 determined in the HD_DVD-VR standard). The video data (MPEG2-TS or MPEG2-PS) decoded at the MPEG decoder 30 is converted by a video DAC 32 into a standard picture quality or a high-definition picture quality analog video signal, which is output at a Video Out terminal 36. Moreover, the audio data decoded at the MPEG Decoder 30 is converted by an Audio DAC 34 into an analog audio signal, which is output at an Audio Out terminal 38. Furthermore, if the decoded data is MPEG2-TS, it is output suitably via an interface 37, such as IEEE1394 (or HDMI), at a Digital Out terminal to the outside. The AV signal (analog video signal and analog audio signal) decoded at the MPEG Decoder 30 and D/A converted at the DACs 32, 34 is input to an external monitor.
The operation of the recording and reproducing apparatus (HD_DVD recorder) of
In the embodiment of
In the embodiment, the VR titles include not only MPEG2-PS recording according to the existing DVD-VR standard but also MPEG2-PS recording with the maximum rate suppressed to 10.08 Mbps in the next-generation HD_DVD standard. Whether stream data on a certain VR title is MPEG2-PS complying with the DVD-VR standard or MPEG2-PS with the maximum rate suppressed to 10.08 Mbps in the HD-DVD standard can be determined at the object data level, depending on whether the contents of specific information (e.g., program maximum rate “program_mux_rate”) in the object data is 10.08 Mbps or 30.24 Mbps. Moreover, at the management information level, the same can be determined before the reproduction of the title is started, depending on whether specific information (e.g., video attribute “V-ATR”) in the management information includes an impossible resolution (e.g., 1280×1080) in the existing DVD-VR standard.
The aforementioned types of titles (TS title, HDVR title, and VR title) are file-managed in the same directory in the embodiment. For this reason, icons of the plurality of types of titles (TS title, HDVR title, and VR title) or thumbnails can be displayed on the same screen 52a. This enables the user to manipulate them in a similar manner even if each of the plurality of titles has been recorded according to any standard (such as HD_DVD-VR or DVD-VR) under any condition.
The system of
In the system processor (MPU) 40, control units 402 to 408 which control the system, a data processing unit (AACS processing unit) 210a which encrypts and decrypts a Title Key File (TKF) and data related to the TKF exist in the form of firmware.
When a one-round recording is started as described above, a key (title key Kt or Contents key) used for encryption in the AACS scheme is generated (ST100). The key generating process can be carried out in the same manner as the process explained with reference to
If the object is not divided in the middle of recording an object to be recorded (no at ST102), the object is encrypted using the key generated in ST100 (in the AACS scheme) (ST106) and the encrypted object is recorded onto a recording medium (a hard disc, an optical disc, or a semiconductor memory) (ST108). The processes in ST202 to ST110 are repeated until the one-round recording of the object to be recorded has been completed (no at ST110).
When the object is divided because of the change of, for example, a recording pause or a video attribute in the middle of recording an object to be recorded (e.g., SOB in program B) (ST102Y), if a subsequent recording process is counted as another recording process, the recording is not an apparent one-round recording process. However, in that case, it is regarded as an event in a one-round recording, the key (Kt) used for encryption of the object before division (e.g., SOB in the first half of program B) is applied to the object after division (e.g., SOB in the second half of program B) (ST104). By doing this, a new key generating process (the process as described with reference to
When a one-round recording of the object to be recorded has been finished as described above (ST110Y), various pieces of management information needed in reproducing the recorded object are recorded in an HR_MANGR.IFO file (not shown) (ST112), which completes the recording process of
The reproducing unit (corresponding to 200 in
In the content protection standard AACS used in the next-generation digital recording and reproducing system (HD_DVD, Blu-ray) or the like, a Title Key File (TKF) where a title key corresponding to each recording title has been encrypted is used. In the TKF, a plurality of Title Keys (Kte) encrypted using the Protected Area Key (Kpa) generated from the TKF unique Binding Nonce (BN) have been stored. The TKF has to be encrypted again using a newly generated Kpa at the time when the Media Key Block (MKB) in the medium is updated, or when the BN is updated as a result of the addition or deletion of a title. This will be explained hereinafter.
The Media MKB (old MKB) read from the medium 100 is stored in the memory f. The Media MKB (obtained by encrypting Km) is processed, thereby obtaining a media key (old Km). The media key and the Binding Nonce (old BN) read from the medium 100 are processed, thereby obtaining a protected area key (old Kpa). Both the old Km and the old BN can be stored in the memory f. The old Kpa is stored in the memory d (corresponding to the key holding section d in
For example, when the Media MKB read from the medium 100 differs from the Device MKB of the device, the new MKB is processed, thereby obtaining a media key (new Km). The media key and the Binding Nonce (new BN) read from the medium 100 are processed, thereby obtaining a protected area key (new Kpa). Both the new Km and the new BN can be stored in the memory f. The new Kpa is stored in the memory d (corresponding to the key holding section d in
Using the old and new Kpa stored in the memory d makes it possible to decrypt the old Kte (a maximum of 1998 Kte) in the TKF and encrypt the decrypted Kt again (or generate a new Kte) with a relatively small number of circuits (and a memory d with a relatively small capacity) and a relatively small amount of processing (which will be described concretely with reference to
In the AACS, each recording and reproducing device holds an MKB (Device MKB) in it and, when the version information on the MKB (media MKB) read from the medium 100 is older than that of the device MKB, has to update the device MKB as a media MKB. Moreover, when a title to be recorded onto the medium 100 is added or deleted (including moved), the TKF unique BN has to be updated. In both cases, a TKF re-encryption process takes place. A concrete example of the TKF re-encryption process will be described below.
Thereafter, if the process of re-encrypting all the Kte in the TKF has not been completed (No in ST308), the old Kte (old Kte#0 to old Kte#n) in the TKF shown in
<Summarization>
1. In the next-generation recording and reproducing apparatus complying with the AACS, two (or more if needed) Protected Area Keys (Kpa) are held simultaneously (memory d).
2. Two (or more if needed) keys and data in a Kpa generating process (Media Key or keys, data, and the like in a Media Key generating process) are held simultaneously (memory f).
3. Using Kpa or Kpa newly generated from the key and data in the Kpa generating process, the Title Key File (Kte in the TKF) is re-encrypted.
In the system using the AACS, the TKF data group (Kte#0 to Kte#n) has to be updated each time the TKF is updated. At that time, since the data in an inaccessible area also has to be updated in an ordinary Read/Write method, update information on the TKF data group is written onto the recording medium each time the data is updated, which takes time. However, as in the embodiments of the invention, holding the old Kpa and new Kpa in the memory d (or holding information usable for generating an old Kpa and a new Kpa in the memory f) enables the time to be reduced.
This invention is not limited to the above embodiments and, on the basis of available skills in the present or future implementation phase, may be practiced or embodied in still other ways without departing from the spirit or character thereof. For instance, the information storage medium used in the embodiments is not limited to an optical disc or a hard disc, and may be a high-capacity flash memory or the like. Moreover, the system to which the invention can be applied is not limited to an HD_DVD and may be the next-generation digital recording and reproducing system using a blue or a violet-blue laser or the like which complies with another standard.
The individual embodiments may be combined suitably if at all possible, which produces the effects of the combinations. The embodiments include inventions of different stages and therefore various inventions can be extracted by combining suitably a plurality of structural requirements disclosed in the embodiments. For example, even if some are removed from all of the structural requirements shown in the embodiments, the resulting configuration can be extracted as an invention.
Number | Date | Country | Kind |
---|---|---|---|
2006-193157 | Jul 2006 | JP | national |