1. Technical Field
The present invention relates to a security system using an optical information recording medium, and more particularly, to a security system using an optical information recording medium capable of concurrent ROM-RAM reproduction.
2. Prior Art
Today, research and development are being actively advanced in terms of high-density recording/reproducing and high-speed accessing for magneto-optical disk memory.
The optical depth (pit depth) of the phase pit providing this ROM information is set such that beam intensity modulation during reproduction is maximized. Generally, the depth is set such that the degree of modulation (i.e. the ratio of variation of the beam intensity at a phase pit potion to the beam intensity of a flat portion on which no groove, pit or projection is formed) is 70% or above.
Between the read-in 1 and the read-out 2, there is a user area 3 where a magneto-optical recording film is formed by a sputtering apparatus. A user can record freely information in the user area 3.
The user data portion 7 consists of the plane lands 5 and each sandwiched respectively by grooves 4, and records a magneto-optical signal. Recording of a magneto-optical signal is executed by supporting the magnetization inversion using heating by a laser beam on the magneto-optical recording film, inverting the direction of magnetization in response to signals.
When recorded information is read out, when a weak laser beam is radiated, the orientation of the polarization plane of the laser beam is varied in response to the direction of magnetization of the recording layer under polar Kerr effect, and whether data exist or not is determined from whether the polarized component of a reflected beam at this time is strong or weak. Thereby, reading out of RAM information is possible.
Research and development for utilizing such characteristics of the magneto-optical disk memory are advanced. For example, the Japanese Patent Application Laid-Open Publication No. 1994-202820 and a report in the Journal of the Television Society, vol. 46, No. 10, pp. 1319-1324 (1992) disclose a concurrent ROM (Read Only Memory) -RAM (Random Access Memory) optical disk capable of being reproduced concurrently (hereinafter, referred to as “optical information recording medium”).
Such an optical information recording ROM-RAM medium capable of being reproduced concurrently has a cross-sectional structure along the direction of the radius shown in
In the optical information recording medium having such a structure, as shown in
It is therefore an object of the present invention to provide a security system that, taking advantage of such features of the optical information recording medium, can ensure security during data transmission or output display.
Thus, a first aspect of the security system using an optical information recording medium to achieve the above object of the present invention is a security system capable of receiving data from the optical information recording medium having an identification symbol recording region recording an identification symbol identifying the medium, a ROM region recording plain text data, and a magneto-optical recording film formed in a region corresponding to the ROM region, the magneto-optical recording film recording encrypted data of the plain text data, the security system being configured such that the recording medium recording a decryption program for decrypting the encrypted data is usable, the security system comprising a reception unit for receiving the encrypted data in response to a data transmission request that conforms to the identification symbol identifying the optical information recording medium; a recording unit for recording in the recording medium the encrypted data received from the reception unit; and a decryption unit for decrypting with the decryption program the encrypted data recorded in the recording medium.
A second aspect of the security system using an optical information recording medium to achieve the above object of the present invention is the security system according to the first aspect wherein the encrypted data is decrypted using key data stored in the recording medium.
A third aspect of the security system using an optical information recording medium to achieve the above object of the present invention is the security system according to the first aspect wherein the security system is further configured to transmit data in the optical information recording medium using the optical information recording medium, wherein the security system further comprises an encryption unit for encrypting plain text data read out from the ROM region of the optical information recording medium, and a comparison unit for comparing encrypted data encrypted by the encryption unit with the encrypted data stored in the optical information recording medium, and wherein when the comparison unit detects a match, the encrypted data stored in the optical information recording medium is transmitted.
A fourth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is the security system according to the third aspect wherein match detection by the comparison unit between encrypted data and the encrypted data stored in the optical information recording medium is conducted on a frame-by-frame basis of the plain text data.
A fifth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is a security system using an optical information recording medium, capable of using the optical information recording medium having a substrate with a ROM region where phase pits serving as a ROM signal are formed and a magneto-optical recording film formed in a region corresponding to the ROM region of the substrate, the optical information recording medium retaining plain text data stably recorded in the ROM region and encrypted data corresponding to the plain text data recorded in the magneto-optical recording film, the security system further comprising an encryption processing verification module, which includes for verification of encryption processing of the plain text data, an encryption unit for encrypting plain text data read out from the ROM region, and a comparison unit for comparing encrypted data encrypted by the encryption unit with the encrypted data stored in the magneto-optical recording film.
A sixth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is a security system using an optical information recording medium having a substrate with a ROM region where phase pits serving as a ROM signal are formed and a magneto-optical recording film formed in a region corresponding to the ROM region of the substrate, the optical information recording medium retaining data stationary stored in the ROM region and checksums of the data recorded in the magneto-optical recording film, the security system further comprising a plain text tampering verification module, which includes for verification of tampering of the data, a checksum processing unit for reading out data from the ROM region and calculating checksums, and a comparison unit for comparing the checksums calculated by the checksum processing unit and the checksums stored in the magneto-optical recording film.
A seventh aspect of the security system using an optical information recording medium to achieve the above object of the present invention is a security system using an optical information recording medium having a substrate with a ROM region where phase pits serving as a ROM signal are formed and a magneto-optical recording film formed in a region corresponding to the ROM region of the substrate, the optical information recording medium retaining data stably recorded in the ROM region and passwords for the data recorded in the magneto-optical recording film, the security system further comprising a password verification module which includes at least a comparison unit for comparing the passwords stored in the magneto-optical recording film with a password entered by a user, wherein when a password match is detected by the comparison unit, data is sent out from the ROM region of the optical information recording medium.
An eighth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is the security system according to the seventh aspect wherein the passwords stored in the magneto-optical recording film of the optical information recording medium are watermarks of data bits of the data stored in the ROM region of the optical information recording medium, and wherein when a password match is detected by the comparison unit, the data and the watermarks are combined and sent out.
A ninth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is the security system according to the first aspect wherein the recording medium has a non-access area inaccessible by users, which stores at least one of the decryption program and key data.
A tenth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is a security system capable of using an optical information recording medium having a ROM region where phase pits serving as a ROM signal are formed and a magneto-optical recording film formed in a region corresponding to the ROM region, the optical information recording medium including an identification symbol recording region where an identification symbol identifying the medium is recorded, the optical information recording medium retaining plain text data stably recorded in the ROM region and encrypted data of the plain text data recorded in the magneto-optical recording film, the security system comprising a transmission unit for transmitting the encrypted data recorded in the magneto-optical recording film in response to a data transmission request that conform to the identification symbol identifying the optical information recording medium.
An eleventh aspect of the security system using an optical information recording medium to achieve the above object of the present invention is the security system according to the tenth aspect, wherein the optical information recording medium has a non-access area inaccessible by users, which stores at least one of encryption program, decryption program and key data.
A twelfth aspect of the security system using an optical information recording medium to achieve the above object of the present invention is a security system capable of using an optical information recording medium having a ROM region where phase pits serving as ROM signal are formed and a magneto-optical recording film formed in a region corresponding to the ROM region, the security system comprising an encryption processing unit for encrypting plain text data of ROM signal read out from the optical information recording medium; and a recording unit for recording the data encrypted by the encryption processing unit in the magneto-optical recording film of the optical information recording medium.
Features of the present invention will become more apparent from the following embodiments described with reference to the accompanying drawings.
A sending system is provided with an original optical information recording medium (
It is to be noted that the ROM region 102 and the magneto-optical recording film 103 are illustrated as if they are arranged concentrically at different regions in the drawing of the optical information recording medium capable of concurrent ROM-RAM reproduction. Indeed, the magneto-optical recording film is, however, formed on top of the ROM region 102, as a RAM region. This is true for the following embodiments.
As an embodiment, a medium identification symbol (ID) identifying the optical information recording medium itself and original text data are stationarily recorded in the ROM region 102 as is in the form of plain text data. Encrypted data of plain text data is recorded in the magneto-optical recording film 103 as RAM signal.
Further, an encryption program for the encryption, a decryption program corresponding to the encryption program and key data for invoking the decryption program are recorded in the non-access area 100.
Here, encrypted data can be generated in a variety of ways. For example, encrypted data can be generated by Triple Des and others.
The system operation will be described with reference to
The receiving side sends a medium ID to the sending side, requesting data transmission (processing step P2). Using the received medium ID, the sending side can identify the optical information recording medium matching the medium ID stored in the ROM region 102.
Therefore, the sending side reads out encrypted data stored in the RAM area—the magneto-optical recording film 103 of the identified optical information recording medium, delivering the data to the receiving side (processing step P3).
On the other hand, the receiving side records and stores the delivered encrypted data in the RAM area 104 of the duplicate or RAM storage medium for duplication (
This makes it possible to send encrypted data to genuine users only and provide the intended plain text data through decryption by the users. Such a security system using optical information recording medium allows for the sending side to integrally manage original text data and corresponding encrypted data using the identical recording medium. Further, the sending side can immediately deliver corresponding encrypted data upon request for transmission from the receiving side by sending a medium ID.
Here, it is important that encrypted data delivered from the sending side to the receiving side in the aforementioned embodiment is normally encrypted data in order to impart credibility to the receiving side, namely, the user.
Meanwhile, the encryption processing verification module 201, implementable in hardware or software form, reads out given frames of the plain text data D1 from the ROM region 102 for encryption using encryption means 212.
Next, a comparator 210 compares data C1′ encrypted by the encryption means 212 and encrypted data C1 of the corresponding frame, stored in the magneto-optical recording film 103 and read out simultaneously with plain text data.
When the comparator 210 detects a match, the encrypted data C1 stored in the magneto-optical recording film 103 is sent out, delivering the data to the receiving side that issued a request. On the other hand, if the comparator 210 does not detect a match, an alarm is output and displayed as a comparison result, with output of the encrypted data C1 blocked by a selector 211.
This makes it possible to verify plain text data and encrypted data while simultaneously reading out both pieces of data, thus allowing successively verifying before delivery to the receiving side, that encrypted data is properly encrypted in units of a frame correspondingly with plain text data. It is to be noted that the term “in units of a frame” includes in units of an image frame, in units of a music frame, and further in units of a block that can be processed by the host and others.
In the above embodiment, the sending side of the security system is provided with an optical information recording medium, with encrypted data delivered to the receiving side. However, application of the present invention is not limited thereto.
In the embodiment described below, a security system is taken for example in which an optical information recording medium itself is distributed to users.
In the optical information recording medium 200, plain text data (D1 to D4) is stationarily recorded in the ROM region 102 in units of a frame. Checksums (CS1 to CS4) of plain text data are recorded as RAM signal in the magneto-optical recording film 103 correspondingly with this plain text data.
The user's storage apparatus is provided with a plain text tampering verification module 201. Having means 212 for reading out plain text data and finding checksums, the plain text tampering verification module 201 finds a hash function as an embodiment.
Next, the comparator 210 compares checksums found by the checksum finding means 212 and frame-by-frame checksums (CS1 to CS4), stored in the magneto-optical recording film 103, that are read out simultaneously with and correspond to plain text data.
When the comparator 210 detects a match, the selector 211 is controlled so as to send out the plain text data (D1 to D4) stored in the ROM region 102. On the other hand, if the comparator 210 does not detect a match, an alarm is output and displayed as a comparison result, with output of the encrypted data C1 blocked by the selector 211.
Thus, plain text data and checksums can be verified while simultaneously reading out both.
The aforementioned system allows the user to successively verify the plain text data (D1 to D4) stored in the optical information recording medium during readout for use to determine whether any has been tampered, thus processing only genuine plain text data.
Further, passwords (PW1 to PW4) permitting access to the plain text data are recorded in the magneto-optical recording film 103 as RAM signal correspondingly with the plain text data.
The user's storage apparatus is provided with the password verification module 201. The password verification module 201 reads out the plain text data from the ROM region 102 and feeds it to a selector switch 213.
Further, the user's storage apparatus has the password comparator 210, reading out the passwords (PW1 to PW4) corresponding to the frame-by-frame plain text data (D1 to D4) stored in the magneto-optical recording film 103 together with the plain text data and compares the passwords with that entered by the user.
When the password comparator 210 detects a match, the selector switch 213 is controlled so as to send out the plain text data (D1 to D4) stored in the ROM region 102. The output of the selector switch is displayed on a display device not shown in the figures, thus allowing the genuine user to perform processing. Thus, plain text data and passwords can be verified while simultaneously reading out both.
Such a system allows genuine users to readily manage security of plain text data—private information—using a privately owned password.
Further, watermarks (WM1 to WM4) permitting access to the plain text data are recorded in the magneto-optical recording film 103 as RAM signal correspondingly with the plain text data. It is to be noted that, in the present embodiment, the region of the magneto-optical recording film 103 where the watermarks (WM1 to WM4) are recorded is inaccessible.
The user's storage apparatus is provided with the watermark verification module 201. The watermark verification module 201 reads out the plain text data from the ROM region 102 and feeds it to a ROM-RAM combiner 215.
Further, the user's storage apparatus has the password comparator 210, comparing a password (PW) entered by the administrator with a registered password PW stored in advance in a password registration memory 216 and, when a match is found, reading out the watermarks (WM1 to WM4), stored in the magneto-optical recording film 103, that correspond to the plain text data (D1 to D4) in units of a frame and feeding them to a gate 214.
The comparator 210 determines a match between the password (PW) entered by the administrator and a password stored in the non-access area 100 or the password PW registered in the password registration memory 216. When it is determined that there is a match, the gate 214 opens, feeding the read-out watermark to the ROM-RAM combiner 215.
The ROM-RAM combiner 215 combines the plain text data read out from the ROM region 102 and the watermark simultaneously read out from the RAM region and outputs and displays the data. Thus, plain text and watermark can be simultaneously combined.
In the embodiment shown in
The aforementioned verifications in a concurrent ROM-RAM provide greater efficiency in time, allowing quick output (transmission) processing. It is to be noted that P-ROM may be used as MO.
Here, a description will be made of a preferred configuration example of a storage apparatus provided on the sending side or the user on the receiving side to which the aforementioned embodiments are applicable, namely, a storage apparatus suited to concurrent readout of original data from the ROM region 102 of the optical information recording medium and encrypted data (
Here, the configuration is preferred for the following reasons. The optical information recording medium described earlier as the prior art having ROM and RAM information on the same recording surface faces a number of challenges in concurrently reproduction ROM information consisting of phase bits PP and RAM information consisting of the magneto-optical records OMM. First of all, to stably reproduce RAM information together with ROM information, it is necessary to reduce optical intensity modulation taking place during readout of ROM information.
In the prior art described in the Japanese Patent Application Laid-Open Publications and the document cited earlier, therefore, optical intensity modulated signal resulting from ROM information readout is reduced by negatively feeding back the signal to the readout drive laser (hereinafter referred to as “MPF (Modulated Power Feedback)”).
However, if the magnitude of optical intensity modulation of ROM information is large, the prior art alone is not enough. That is, in reducing optical intensity modulation caused by ROM information, excessive reduction will lead to a smaller reproduction margin for ROM information itself.
In
Next, the converted parallel luminous flux enters a polarizing beam splitter 11. Light reflected by the polarizing beam splitter 11 is made to enter a photodetector 13 for auto power control (APC) by a condensing lens 12. Detected electric signal that has undergone photo-electrical conversion by the photodetector 13 is guided into a main controller 15 via an amplifier 14 for use in APC control or ROM signal reproduction.
On the other hand, after passing through the polarizing beam splitter 11, the flux is reduced roughly to the diffraction limit by an objective lens 16 and irradiated to an optical information recording medium 17 according to the present invention. The optical information recording medium 17 is rotated by the motor 18. Further, the luminous flux reflected by the optical information recording medium 17 enters the polarizing beam splitter 11 again via the objective lens 16, where the flux is reflected and guided into a servo optical system and a recording information detection system.
That is, reflected light from the optical information recording medium 17 reflected by the polarizing beam splitter 11 enters a second polarizing beam splitter 19, and transmitted light therefrom enters the servo optical system, whereas light reflected by the second polarizing beam splitter 19 enters the recording information detection system.
Transmitted light from the second polarizing beam splitter 19 enters a 4-part photodetector 22 via a condensing lens 20 and a cylindrical lens 21 in the servo optical system, undergoing photo-electrical conversion in the 4-part photodetector 22.
Using the output of the 4-part photodetector 22 following photo-electrical conversion, focus error sensing (FES) is conducted by a generator circuit 23 through astigmatic focus error detection. At the same time, track error sensing (TES) is conducted by a generator circuit 24 through push-pull method.
Letting transmitted lights from the second polarizing beam splitter 19, split into four by the 4-part photodetector 22, be A, B, C and D, the generator circuit 23 based on astigmatic focus error detection for performing focus error sensing (FES) finds focus error (FES), a control error along the optical axis of the objective lens 16, from the following equation:
On the other hand, the generator circuit 24 based on push-pull method for performing track error sensing (TES) finds track error (TES), a control error in the direction perpendicular to the optical axis of the objective lens 16, from the following equation:
Focus error signal (FES) and track error signal (TES) found from these calculations are fed to the main controller 15.
In the recording information detection system, on the other hand, reflected laser light enters a 2-beam wollaston 26 in the recording information detection system, converting the polarization characteristic of reflected laser beam—a characteristic that changes according to the orientation of the magneto-optical records on the optical information recording medium 17—to optical intensity.
That is, reflected laser light is split into two beams, whose polarization directions are orthogonal to each other, by the 2-beam wollaston 26 due to polarization detection, causing the beams to enter the 2-part photodetector 28 via the condensing lens 27 for photo-electrical conversion of each.
Two electric signals resulting from photo-electrical conversion in the 2-part photodetector 28 are added together by a summing amplifier 29 to serve as a first ROM signal (ROM1), while at the same time they are subtracted from each other by a subtracting amplifier 30 to serve as the RAM readout signal (RAM), with both signals fed to the main controller 15.
The description has so far focused primarily on the flow of luminous flux during readout. Next, a description will be given of the flow of output signals from the photodetectors with reference to a detailed configuration example of the main controller 15 shown in
In
Further, as described earlier, the main controller 15 receives, as inputs, the first ROM signal (ROM1)—the output of the summing amplifier 29, a RAM signal (RAM)—the output of the differential amplifier 30, the focus error signal (FES) from the FES generator circuit 23 and the track error signal (TES) from the TES generator circuit 24.
Moreover, recording data and read-out data are exchanged with a data source 32 via an interface circuit 33.
The first ROM signal (ROM1), the second ROM signal (ROM2) and the RAM signal (RAM) input to the main controller 15 are detected for use in accordance with the modes, namely, concurrent ROM and RAM reproduction, ROM reproduction only and recording (WRITE).
The statuses of the ROM selector switches SW1 and SW2 shown in
An LD controller 150 in the main controller 15 generates a command signal for an LD driver 31 in response to outputs of an encrypter 151 and the ROM selector switch SW1.
In response to the command signal generated by the LD controller 150, the LD driver 31 performs, in the case of ROM and RAM reproduction, negative feedback control of emission power of the semiconductor laser diode LD in accordance with the first ROM signal (ROM1) and does so, in the case of ROM reproducing alone and recording, in accordance with the second ROM signal (ROM2).
A description will be given next of reproduction operation in such a configuration. It has already been discussed that optical intensity modulation caused by phase pit signal, namely, ROM information that is original data to be read out, turns into noise for RAM signal.
As with the method employed in the prior art shown earlier, therefore, it is possible to reduce and flatten the first ROM signal (ROM1) by negatively feeding back the first ROM signal (ROM1) from the summing amplifier 29 to the semiconductor laser diode LD via the LD driver 31 and by controlling emission.
Such an embodiment effectively suppresses crosstalk to the RAM signal to be read out. In the case of concurrent readout of ROM and RAM signals, however, the ROM1 signal becomes flat as a result of negative feedback control as described above, making it difficult to obtain the ROM signal.
Therefore, the ROM signal must be detected by an alternative method. In the embodiment of the present invention, injection current to the semiconductor laser diode LD is modulated through negative feedback by the first ROM signal (ROM1) during reproduction. That is, the current is optical intensity-modulated in the same pattern as with the ROM signal.
This optical intensity modulation can be detected by the APC photodetector 13. Turning off the APC loop during MPF loop operation allows the phase pit signal to be obtained as the second ROM signal (ROM2).
In the present invention, therefore, a clock is reproduced from this second ROM signal (ROM2) by a synchronous detection circuit 154 and demodulated by a demodulator 155 correspondingly with EFM magnetic field modulation in the main controller 15 shown in
During concurrent reproduction of ROM and RAM information, rotation of the motor 18 is controlled by the motor driver 36 as part of the seek motion via the motor controller 159 based on the clock reproduced from the second ROM signal (ROM2) obtained from the synchronous detection circuit 154.
The RAM signal can be detected interference-free with the ROM signal as the output of the differential amplifier 30 by ROM signal negative feedback means including the LD driver 31 to the semiconductor laser diode LD.
The output of the differential amplifier 30 is synchronously detected by a synchronous detection circuit 157, demodulated by a demodulator 158 correspondingly with NRZI modulation and decrypted by the decrypter 156 in the main controller 15, thus sending out the output as the RAM signal.
As set forth hereinabove, the present invention stationarily records, using an optical information recording medium capable of concurrent readout of ROM and RAM information, original data in the ROM region thereof, and simultaneously records data for ensuring security in the RAM region. This allows providing a system with security ensured in data delivery.
Number | Date | Country | Kind |
---|---|---|---|
PCT/JP02/00160 | Nov 2002 | WO | international |
Number | Date | Country | |
---|---|---|---|
Parent | PCT/JP03/00144 | Jan 2003 | US |
Child | 10886481 | Jul 2004 | US |