Copyright protection data processing system and reproduction device

(54) Title: SYSTEM OF PROCESSING OF (57) Summary:

COPYRIGHT PROTECTION DATA AND REPRODUCTION DEVICE (30) Unionist Priority: 23/02/2007 jp 2007-043411,

11/20/2007 JP 2007-300819, 11/20/2007 JP 2007-300819, 02/23/2007 JP 2007-043411 (73) Owner (s): Panasonic Corporation (72) Inventor (s): Kaoru Murase, Masaya Yamamoto, Sanzo Ugawa, Takahiro Yamaguchi, Toshihisa Nakano (74) Attorney (s): Dannemann .Siemsen, Bigler & Ipanema Moreira (86) International Application: pct JP2008000311 of 02/22/2008 (87) International Publication: wo 2oos / io2565de 08/28/2008

<img file="BRPI0807572A2_D0001.tif" />

Invention Patent Descriptive Report for COPYRIGHT PROTECTION DATA PROCESSING SYSTEM AND REPRODUCTION DEVICE.

TECHNICAL FIELD

The present invention relates to a technique for protecting copyrights of digital content, such as film and music.

BACKGROUND TECHNIQUE

Recently, with the increase in the storage capacities of recording media and the spread of broadband networks, a system has been very widespread in which digital content is distributed through recording on recording media or through a broadband network. . It is noted that digital content is generated by digitizing copyrighted works, such as film and music, and are referred to below simply as content. In such a system, the copyright of the content needs to be protected, and the reproduction and copying of the content needs to be limited in view of the agreement with the copyright owners of the content. As a conventional technique for protecting copyrighted works from unlawful acts, such as copying copyrighted works without the permission of the copyright owners, a method that uses an encryption technique is known. Also, a method of recording a program on a recording medium in addition to content is known, and of implementing a virtual machine that is an environment for executing the program on a playback device to reproduce the recorded content on the recording medium. This technique is described in Patent Document 1. When the recording medium is inserted into the playback device, the playback device will read the program from the inserted recording medium, and execute the program read in an execution environment (virtual machine) included in it. The content recorded on the recording medium is protected based on the program. When the program is executed, the protection of the content will be canceled, thus allowing the content to be reproduced.

However, in the process of manufacturing commercial recording media (hereinafter ROM media) featuring content recorded on them, it is important to check the quality of the content. It takes time to manufacture commercial ROM media. After frequent quality check, commercial ROM media are released on the market. Such commercial ROM media are generally manufactured by transferring recorded content to recordable recording media (hereinafter R media) to record data on which authorship is performed and to frequently perform content quality verification and content re-creation. Here, the playback devices can reproduce both the content recorded on the ROM media and the content recorded on the R media. Also, it is impossible to judge whether a recording medium is an R medium manufactured for testing (quality checking) in the ROM media manufacturing process or an R medium manufactured by copying a ROM medium in an unauthorized manner. Consequently, copyright to content could be infringed.

Patent Document 1: U.S. Patent No.

7.058.284

DESCRIPTION OF THE INVENTION

PROBLEMS TO BE SOLVED BY THE INVENTION

However, if playback devices are prohibited from playing content recorded on R media, a problem will arise, that is, the longer time to manufacture commercial ROM media. Conversely, if playback devices can play content recorded on R media, there will be a problem that copyright may be infringed.

In view of this, the present invention aims to provide a copyright protection data processing system and a reproduction device capable of solving the above problems.

MEANS TO SOLVE THE PROBLEMS

In order to solve the above problem, the present invention provides a content playback device for playing digital content, the content playback device comprising: an operable information acquisition unit to acquire a content reproduction program to be used to reproduce digital content on a recording medium in which digital content is recorded, the content reproduction program, and a digital signature linked to the content reproduction program; an operable media type judgment unit for judging whether a recording media type is a read-only type or a recordable type; an operable signature verification unit to perform digital signature verification using different signature verification methods between the read-only type and the writable type; and a reproduction permission determination unit operable to prohibit the execution of the reproduction of the digital content formed by the execution of the content reproduction program, if the verification is not successful.

Also, the content reproduction program may include a header part and an instruction code part, the signature verification unit may perform, according to the pre-processing of the digital signature verification, a hash operation on at least a portion the header part and all portions of the instruction code part, and perform the verification using a value obtained as a result of the hash operation, regardless of whether the type of medium judged is the type of reading only or the recordable type.

Also, the signature verification unit will be able to use all portions of the header part.

Also, the header portion may include an instruction code size field that defines an instruction code portion size, and the signature verification unit may overwrite the instruction code size field with a fixed value before perform the hash operation, if the media type judged is the writable type.

Also, the signature verification unit may perform the hash operation on at least a portion of the header part and on all portions of the instruction code part, perform the bit inversion in the value obtained as a result of the hash operation, and execute verification of the digital signature using a value obtained as a result of the inversion of bits, if the type of medium judged is the recordable type.

Also, the content playback device may additionally comprise an operable cryptographic judgment unit to judge whether digital content is encrypted, where the reproduction permission determination unit may additionally prohibit the execution of reproduction of digital content formed by the execution of the content playback program , if digital content is judged to be encrypted.

The present invention provides a content provider terminal device for recording digital content, the content provider terminal device comprising: an operable non-subscription program storage unit for storing a content playback program there. be used to reproduce digital content; an operable transmission unit for transmitting the content reproduction program and the subscription type information indicating whether a subscription type of a digital signature to be linked to the content reproduction program is a type of test resolution or a type of official resolution; a reception unit operable to receive the content reproduction program to which the digital signature is linked, presenting the type of signature indicated by the type of subscription information; and an operable recording unit for recording, on a recording medium, the content reproduction program to which the digital signature and digital content are linked.

The present invention provides a certification authority terminal device for linking a digital signature to a content playback program to be used to reproduce digital content, the certification authority terminal device comprising: a receiving unit operable to receive, from a content provider terminal device to provide digital content, the content playback program and subscription type information indicating whether a subscription type of a digital signature to be linked to the content playback program is a type of test resolution or an official resolution type; a operable signature generation linkage unit to generate a digital signature using a different signature generation method for each of the types of signatures, and link the generated digital signature to the content playback program; and a transmission unit operable to transmit, to the content provider terminal device, the content playback program to which the digital signature is linked.

Also, the content reproduction program may include a header part and an instruction code part, if the subscription type information indicates the type of official resolution, the signature generation link unit may perform the hash operation in at least a portion of the header part and all portions of the instruction code part, and generate the digital signature using a value obtained as a result of the hash operation, and, if the subscription type information indicates the type of test resolution, the subscription-generating link unit can perform the hash operation on at least a portion of the header portion and on all portions of the instruction code portion, execute the inversion of bits in a value obtained as a result of the hash operation, and generate the digital signature using a value obtained as a result of the inversion of bits.

Also, the signature generation link unit may use all portions of the header part.

Also, the header portion may include a size field that defines a size of the instruction code portion, and the signature generation link unit may overwrite the size field with a fixed value before performing the hash operation, if the subscription type information indicates the type of test resolution.

The present invention provides a recording medium for recording digital content on it and a content playback program which is a program for performing digital content playback processing, in which, if the content playback program has a type of official resolution, a digital signature showing the type of official resolution will be linked to the content reproduction program, and if the content playback program has a test resolution type, a digital signature showing the test resolution type will be linked to the content playback program.

The present invention provides a content reproduction method of reproducing digital content, the content reproduction method comprising: an information acquisition step of acquiring a content reproduction program to be used to reproduce digital content on a media. recording on which digital content, the content playback program, and a digital signature linked to the content playback program are recorded; a media type judgment step to judge whether a recording medium type is a read-only type or a recordable type; a verification step of performing the digital signature verification using different signature verification methods between the read-only type and the writable type; and a reproduction permission determination step to prohibit the reproduction of the digital content formed by the execution of the content reproduction program, if the verification is not successful.

The present invention provides a content supply method of recording digital content, the content supply method comprising: a non-subscription program storage step of storing a content playback program to be used to reproduce digital content; a transmission step of transmitting the content playback program and the subscription type information indicating whether a subscription type of a digital signature to be linked to the content playback program is a test resolution type or a resolution type official; a step of receiving the content reproduction program to which the digital signature is linked, presenting the type of signature indicated by the type of subscription information; and a recording step of recording, on a recording medium, the content reproduction program to which the digital signature and digital content are linked.

The present invention provides a program certification method for linking a digital signature to a program, the program certification method comprising: a receiving step of receiving, from a content provider terminal device to provide digital content, the content playback program and subscription type information indicating whether a subscription type of a digital signature to be linked to the program content playback is a type of test resolution or an official resolution type; a signature generation linking step of generating a digital signature using a different signature generation method for each of the types of subscriptions, and of linking the generated digital signature to the content playback program; and a transmission step of transmitting, to the content provider terminal device, the content playback program to which the digital signature is linked.

The present invention provides a content reproduction control program which comprises: an information acquisition step of acquiring a content reproduction program to be used to reproduce digital content on a recording medium in which digital content is recorded, the content reproduction program, and a digital signature linked to the content reproduction program; a media type judgment step to judge whether a recording medium type is a read-only type or a recordable type; a signature verification step of performing digital signature verification using different signature verification methods between the read-only type and the writable type; and a reproduction permission determination step to prohibit the execution of the reproduction of digital content formed by the execution of the content reproduction program, if the verification is not successful.

The present invention provides an integrated circuit that refers to a content playback device for reproducing digital content, the integrated circuit comprising: an information acquisition unit operable to acquire a content playback program to be used to play digital content on a recording medium on which digital content is recorded, the content playback program, and a digital signature linked to the content reproduction program; a media type judgment unit for judging whether a media type of the recording medium is a read-only type or a recordable type; an operable signature verification unit to perform digital signature verification using different signature verification methods between the read-only type and the writable type; and a reproduction permission determination unit operable to prohibit the execution of the reproduction of the digital content formed by the execution of the content reproduction program, if the verification is not successful.

The present invention provides a copyright protection data processing system composed of a certification authority terminal device for linking a digital signature to a content playback program to be used to reproduce digital content, a terminal device. content provider to record digital content and the content playback program on a recording medium, and a content playback device for reproducing digital content, on which the end device of certification authority comprises: a first reception unit operable to receive the content playback program and the subscription type information from the content provider terminal device, the subscription type information indicating whether a type of digital signature subscription to be linked to the program content playback is a type of test resolution or an official resolution type; an operable subscription type recording unit for adding received subscription type information to the content playback program; an operable signature generation linkage unit to generate the digital signature using a different signature generation method for each of the subscription types, and to link the generated digital signature to the content playback program to generate a signature program featuring the digital signature linked to it; and a first operable transmission unit for transmitting the generated subscription program to the content provider terminal device, the content provider terminal device comprising: an operable non-subscription program storage unit for storing the content thereon. content reproduction program; a purchase unit operable to acquire subscription type information indicating the type of digital signature subscription to be linked to the content reproduction program; a second transmission unit for transmitting the content playback program and subscription type information to the certification authority terminal device; a second receiving unit operable to receive the signature program from the certification authority terminal device; and an operable recording unit for recording the subscription program and digital content on the recording medium, the content playback device comprising: an operable information acquisition unit for acquiring the subscription program on the recording medium; an operable media type judgment unit for judging whether a recording media type is a read-only type or a recordable type; an operable signature verification unit to perform digital signature verification using different signature verification methods between the read-only type and the writable type; and a reproducible permission determination unit operable to prohibit the execution of the reproduction of the digital content formed by the execution of the content reproduction program, if the verification is not successful.

EFFECT OF THE INVENTION

In the content market where playback device manufacturers develop playback devices and content providers develop content, the operation verification of developing content is performed using as many playback devices as possible to discover defects in advance. Playback device manufacturers and content providers correct playback device defects and content defects, respectively, in order to perform the compatibility check. Then, high quality content is released. This brings merits to content providers. For example, it is possible to reduce the risk of calling back recall due to the impossibility of reproduction caused by defects in the contents. It is also possible to create a highly attractive user interface by performing tuning according to the capacity of the playback devices, even if the capacity is low.

If cooperative playback device manufacturers provide content providers with special playback devices to normally run even a program to which no subscription is recorded that is recorded on an R medium, content providers may perform a compatibility check to perform the correction cycle of evaluating content and correcting defects of the content in a short period. However, it takes time to negotiate with many playback device manufacturers so that they can prepare such special playback devices. Also, if the software for commercially available playback devices needs to be updated due to some defects, it is highly possible that the software for special playback devices managed by content providers has the same defects as that for commercially available playback devices and needs to be updated. updated. In such a case, it takes time to return the defective special playback devices to the manufacturers of the special playback devices for the software to be updated. In addition, there could be a case where some of the manufacturers of playback devices could refuse to update the software or refuse to provide special playback devices from the beginning.

In view of this, with the definition of a common specification for R media such that the reproduction of a content is allowed in a case where a digital signature presenting a type of test resolution is linked to a program corresponding to the content, providers content causes a certification authority to issue a digital signature presenting the type of test resolution for the program. As a result, it is possible to perform the reproduction compatibility using the program to which the digital signature is linked showing the type of test resolution and an R medium in which the content is recorded. In this case, it is unnecessary to manufacture ROM media. This shortens a period to run a series of correction cycles including evaluation, correction, and reevaluation of content for the period needed to manufacture ROM media. It is true that it is time consuming and costly to issue a digital signature showing the type of test resolution. However, the digital signature showing the type of test resolution is issued without checking the digital signature data, unlike the issuance of a digital signature showing an official resolution type. Consequently, it is time-consuming and costly to issue a digital signature showing the type of test resolution than a digital signature showing the type of official resolution. On the other hand, it is unnecessary for all manufacturers of playback devices to prepare special playback devices. Content providers only have to purchase commercially available playback devices, and store a program to which a digital signature is attached showing the type of test resolution and content on an R medium in order to perform the compatibility check. This brings great merits to content providers.

However, on the other hand, it is assumed that if a specification is defined, in such a way as to allow the execution of a program to which a digital signature with the type of test resolution is linked, some manufacturers of reproduction devices could manufacture devices breeding grounds featuring poor implementations, and run a program to which a digital signature is attached showing the type of test resolution without judgment as to whether the digital signature has the type of test resolution or the type of official resolution. In such a case, there is a possibility that the reproduction devices manufactured by such manufacturers may run a program to which a digital signature is attached with the type of official resolution, as well as a program to which a digital signature is attached with the type of resolution of test. It is assumed that content prepared with the breaking of a code and a program to which a digital signature with the type of official resolution is linked is recorded from a ROM medium commercially available on an R medium, and a reproduction device presenting implementation poor reproduces the content. In such a case, the program is executed and, as a result, the content is normally played. If manufacturers of reproduction devices execute the implementation, in such a way that the execution of a program to which a digital signature is linked with the type of official resolution is sustained, it is possible not to erroneously execute a program to which a digital signature is linked with a kind of official resolution, making the playback devices have the structure in which the type of subscription is certainly judged and the poor implementation cannot be performed.

The present invention can reduce the poor implementation created by the manufacturers of playback devices to perform, with partial modification, a signature generation procedure and a signature verification procedure, depending on whether a signature has the type of test resolution or the type of official resolution.

In accordance with the present invention, with the above structures, it is possible to carry out both the efficient manufacture of commercial ROM media and the protection of copyright content.

BRIEF DESCRIPTION OF THE DRAWINGS

Figure 1 is a block diagram showing the structure of a copyright protection data processing system according to a first embodiment of the present invention;

figure 2 is a block diagram showing the structure of a signature generation device according to the first embodiment;

figure 3 is a block diagram showing the structure of a recording device according to the first embodiment;

figure 4 is a block diagram showing the structure of a reproduction device according to the first embodiment;

figure 5 shows an example of a subscription program according to the first embodiment;

figure 6 shows the operations of the signature generation device according to the first embodiment;

figure 7 shows the operations of the reproduction device according to the first embodiment;

figure 8 shows the operations of the reproduction device according to the first embodiment;

figure 9 shows the structure of an LSI that performs the functions of the reproduction device according to the first embodiment;

figure 10 is a block diagram showing the structure of a copyright protection data processing system according to a second embodiment;

figure 11 is a block diagram showing a certification terminal device according to the second embodiment;

figure 12 is a block diagram showing a content provider terminal device according to the second embodiment;

figure 13 is a block diagram showing a subscription program according to the second embodiment;

figure 14 shows the structure showing a reproduction device according to the second embodiment;

figure 15 shows the operations of the certification terminal device according to the second embodiment;

figure 16 shows the operations of the content provider terminal device according to the second embodiment;

figure 17 shows the operations of the reproduction device according to the second embodiment;

figure 18 shows the operations of the reproduction device according to the second embodiment; and figure 19 shows the structure of an LSI that performs the functions of the reproduction device according to the second embodiment. DESCRIPTION OF CHARACTERS

101: program generation organization

102; signature generation device

103; content provider terminal device

104: recording device

105: recording medium

106: playback device

1001: certification terminal device

1002: content provider terminal device

1003: recording medium

1004: reproduction device BEST MODE FOR CARRYING OUT THE INVENTION

In the following, an embodiment of the present invention is described with reference to the drawings:

(First Completion)

1.1 Copyright Protection Data Processing System Structure

A copyright protection data processing system includes, according to a first embodiment of the present invention, as shown in figure 1, a program generation organization 101, a subscription generation device 102, a payment terminal device content provider 103, a recording device 104, a recording medium 105, and a playback device 106.

Program generation organization 101 generates a program necessary to play content, transmits the generated program to the subscription generation device 102, and receives a subscription program showing a subscription linked to it from the subscription generation device 102.

The recording device 104 receives the subscription program from the program generation organization 101, and receives content protected by the subscription program from the content provider terminal device 103. In addition, the recording device 104! Ê, from the middle Recording 105, the media type information that shows a media type of recording medium 105, and determines whether recording of received content is allowed. If it is determined that recording of the content is permitted, the recording device 104 will record the received subscription program and the content on the recording medium 105.

The playback device 106 reads from the recording medium 105 the subscription program, the content, and the media type information that shows the media type of the recording medium 105. Then, the playback device 106 determines whether it is reproduction of received content is permitted. If it is determined that reproduction of the content is permitted, the playback device 106 will reproduce the protected content by running the subscription program.

At this point, the content recorded on the recording medium 105 is protected by the program recorded on the same recording medium 105. As a method of protecting a content, it is possible to employ the structure in which a program calculates the secret information at predetermined intervals, and encrypts the content using secret information like key data, for example. An encryption technique used here can be a known method, such as DES encryption and AES encryption. In addition, since an XOR operation based on secret information can be employed instead of the encryption technique, the description of the content protection method is omitted here.

1.2 Structure of the Signature Generation Device 102

The signature generation device 102 includes, as shown in figure 2, an I / O (Input / Output) unit 201, a subscription type recording unit 202, and a subscription generation link unit 203.

The signature generation device 102 is specifically composed of a microprocessor, a RAM, a ROM, a hard drive, and the like, although not shown in the figure. A computer program is stored in RAM, ROM, and the hard drive. The functions of the signature generating device 102 are obtained by the microprocessor that operates according to the computer program.

It is noted that each of the functional units of the subscription-generating device 102, such as the I / O unit 201, the subscription-type recording unit 202, and the subscription-generating link 203, is typically performed as a LSI which is an integrated circuit. These functional units can be separately integrated on a chip, or integrated on a chip including part or all of the functional units.

Here, LSI can be called IC, LSI system, super LSI, ultra LSI, depending on the degree of integration.

Also, a method of forming integrated circuits is not limited to LSIs, and can be accomplished using a dedicated circuit or a general purpose processor. In addition, it is possible to form integrated circuits with the use of a programmable FPGA (Field Programmable Gate Array) after the manufacture of LSIs or a reconfigurable processor in which the connection and adjustment of the circuit cell within an LSI can be done. reconfigured.

In addition, when new technology to form integrated circuits that replaces LSIs becomes available as a result of progress in semiconductor technology or semiconductor-derived technologies, functional units can be integrated using that technology. One possibility is in the adaptation of biotechnology.

Finally, functional units can be made with software, or with the combination of an LSI or software. Also, the software can be tamper-proof.

(1) I / O Unit 201

The I / O unit 201 receives, from the program generation organization 101, a program to which a signature is attached and a request for the type of signature of the signature to be linked to the program (type of test resolution or type of official resolution ).

Also, the I / O unit 201 receives, from the subscription generation link unit 203, a program in which a signature is recorded generated by the subscription generation link unit 203, and transmits the received program to the program.

(2) 202 Signature Type Recording Unit

The subscription type recording unit 202 records the subscription type requested by the I / O unit 201 in the program received by the I / O unit 201.

Figure 5 shows an example of a program's data structure. The program consists of a header portion 510, an instruction code portion 520, and a signature data portion 530. The subscription type recording unit 202 records the subscription type requested by the program generation organization 101 in a 511 subscription type storage region included in header portion 510. For example, if the test resolution type is requested, the subscription type recording unit 202 will record subscription type information 0x01 in the subscription type storage region 511. If the official resolution type is requested, the subscription type recording unit 202 will record subscription type information 0x10 in subscription type storage region 511. Also, instruction codes are stored in an instruction code storage region included in instruction code part 520. In addition, signatures generated by signature generation device 102 are stored in a signature data storage region included in the 530 subscription data portion.

(3) Signature Generation Linking Unit 203

The signature generation link unit 203 generates a signature for the program in which the signature type is recorded, and writes the signature generated in the signature data storage region included in the signature data portion 530 of the program. Then, the signature generation link unit 203 transmits the program in which the generated signature is recorded (hereinafter referred to as the signature program ”) to the I / O unit 201.

1.3 Structure of the Recording Device 104

The recording device 104 includes, as shown in figure 3, an I / O unit 301, a medium type judgment unit 302, a signature type judgment unit 303, and a recording permission determination unit 304 .

The recording device 104 is specifically composed of a microprocessor, a RAM, a ROM, a hard disk, and the like, although not shown in the figure. A computer program is stored in RAM, ROM, and the hard drive. The functions of the recording device 104 are obtained by the microprocessor which operates according to the computer program.

It is noted that each of the functional units of the recording device 104, such as the I / O unit 301, the media type judgment unit 302, the signature type judgment unit 303, and the permission permission determination unit recording 304, is typically performed as an LSI which is an integrated circuit. These functional units can be separately integrated on a chip, or integrated on a chip including part or all units of the functional units.

Here, LSI can be called IC, LSI system, super LSI, and ultra LSI, depending on the degree of integration.

Also, a method of forming integrated circuits is not limited to LSIs, and can be accomplished using a dedicated circuit or a general purpose processor. In addition, it is possible to form integrated circuits with the use of a programmable FPGA after manufacturing LSIs or a reconfigurable processor in which the connection and adjustment of the circuit cell within an LSI can be reconfigured.

In addition, when new technology to form integrated circuits that replaces LSIs becomes available as a result of progress in semiconductor technology or semiconductor-derived technologies, functional units can be integrated using that technology. One possibility is in adapting biotechnology.

Finally, the functional units can be realized with software, or with the combination of an LSI and software. Also, the software can be tamper-proof.

(1) I / O Unit 301

The I / O unit 301 receives a subscription program from the program generation organization 101, and receives content from the content provider terminal device 103, and additionally reads the media type information from the recording medium 105.

Also, if it is deemed to allow recording of the received content and the subscription program, the I / O unit 301 will record the content and the subscription program on the recording medium 105.

(2) Media Type Judging Unit 302

The media type judgment unit 302 specifies a media type based on the media type information read by the I / O unit 301, and transmits the specified media type to the write permission determination unit 303.

Here, the media type indicates a media type of the recording medium, such as a ROM (Read Only Memory), an R (Writable), and an RW (Rewritable). Since the type of medium can be identified using a known method, such as an identification method that uses an identifier (ID) recorded on a recording medium, its description is omitted here. In the following descriptions, identifiers 0x001, 0x010, and 0x100 are respectively recorded in ROM, R and RW, as an example.

(3) Signature Type Trial Unit 303

The subscription type judgment unit 304 reads the subscription type information stored in a subscription type storage region 511 included in a header portion 510 of the subscription program received by the I / O unit 301, and specifies a type subscription signature, and transmit the specified subscription type to the write permission determination unit 303.

(4) Write Permission Determination Unit 304

The recording permission determination unit 304 of 20 ends if recording and the subscription program is allowed to be recorded, based on both the media type specified by the media type judgment unit 302 and the subscription type specified by the media unit. subscription type judgment 303.

Specifically, if the media type and subscription type are respectively specified as R (0x010) and test resolution type (0x01), the write permission determination unit 304 will allow the content and subscription program to be written to the recording medium. If the media type and subscription type are respectively specified as R (0x010) and official resolution type (0x10), the recording permission determination unit 304 will prohibit the recording of the content and the subscription program on the recording medium .

1.4 Structure of the Playback Device 106

The playback device 106 includes, as shown in figure 4, an I / O unit 401, a signature verification unit 402, a subscription type judgment unit 403, a media type judgment unit 404, a unit reproduction permission determination 405, and a reproduction unit 406.

The reproduction device 106 is specifically composed of a microprocessor, a RAM, a ROM, a hard disk, and the like, although not shown in the figure. A computer program is stored in RAM, ROM, and the hard drive. Playback device functions 106 are obtained by the microprocessor that operates according to the computer program.

It is noted that each of the functional units of the playback device 106, such as the I / O unit 401, the signature verification unit 402, the subscription type judgment unit 403, the media type judgment unit 404, the reproduction permission determination unit 405, and the reproduction unit 406, are typically performed on an LSI which is an integrated circuit. These functional units can be separately integrated on a chip, or integrated on a chip including part or all of the functional units. Figure 9 shows an example of manufacturing the LSI system. In figure 9, the functional units surrounded by a dashed line are integrated into a chip as a^r LSI.

Here, LSI can be called IC, LSI system, super LSI, and ultra LSI, depending on the degree of integration.

Also, a method of forming integrated circuits is not limited to LSIs, and can be accomplished using a dedicated circuit or a general purpose processor. Additionally, it is possible to form integrated circuits with the use of a programmable FPGA after manufacturing LSIs or a reconfigurable processor in which the connection and adjustment of the circuit cell within an LSI can be reconfigured.

In addition, when new technology for forming integrated circuits that replaces LSIs becomes available as a result of progress in semiconductor technology or semiconductor-derived technologies, functional units can be integrated using that technology. One possibility is in adapting biotechnology.

Finally, the functional units can be realized with software, or with the combination of an LSI and software. Also, the software can be tamper-proof.

(1) 401 I / O Unit

The I / O unit 401 reads a signature program, content, and media type information from recording medium 105, and transmits the read signature program to the signature verification unit 402, and transmits the reading medium type for the 404 medium type judgment unit.

(2) 402 Signature Verification Unit

The signature verification unit 402 verifies a signature stored in a signature data portion 530 of a signature program read by the I / O unit 401, and judges whether the program is an authentic program. It is also possible to verify the completeness of the program by executing the signature verification. For example, it is possible to verify that the subscription type information stored in a subscription type storage region 511 included in a portion of the program header 510 is not tampered with. If it is judged that the program is not an authentic program as a result of signature verification, the playback device 106 will not perform subsequent playback processing, and will stop operations.

(3) Signature Type Judgment Unit 403

The subscription type judgment unit 403 reads the subscription type information stored in the subscription type storage region 511 included in the header portion 510 of the subscription program received by the I / O unit 401 to specify a subscription type, and transmits the specific subscription type to the reproduction permission determination unit 405.

(4) 404 Media Type Judging Unit

The media type judgment unit 404 specifies a media type based on the media type information read by the I / O unit 401, and transmits the specified media type to the reproduction permission determination unit 405.

Here, the media type indicates a media type of recording medium, such as a ROM (Read Only Memory), an R (Writable), and an RW (Rewritable). Since the type of medium can be identified using a known method, such as an identification method that uses an identifier (ID) recorded on a recording medium, its description is omitted here. In the following descriptions, the identifiers 0x001, 0x010 and 0x100 are respectively recorded in ROM, R, and RW, as an example.

(5) Reproduction Permission Determination Unit 405

The reproduction permission determination unit 405 determines whether reproduction of content using the subscription program is permitted, based on both the media type specified by the media type judgment unit 404 and the subscription type specified by the judgment unit of media type 403.

Specifically, if the media type and subscription type are respectively specified as R (0x010) and test resolution type (0x01), the reproduction permission determination unit 405 will allow the content to be reproduced. If the media type and subscription type are respectively specified as R (0x010) and official resolution type (0x10), the reproduction permission determination unit 405 will prohibit the reproduction of the content. This is due to the fact that the combination of R and type of test resolution indicates that the recording medium is an R medium manufactured for testing purposes in the process of manufacturing a ROM medium, and the combination of R and signature of official resolution indicate that the recording medium is an R medium manufactured with the copy of a ROM medium in an unauthorized manner.

(6) Reproduction Unit 406

If the reproduction permission determination unit 405 allows the content to be reproduced, the reproduction unit 406 will execute a signature program read from the recording medium 105, in an execution environment of the same. Then, the reproduction unit 406 untangles the content that has been scrambled (data that has been modified) based on the secret information calculated using the program, in order to reproduce the content.

1.5 Signature Generation Device Operations 102

The operations of the signature generating device 102 are described with reference to figure 6.

The I / O unit 201 included in the subscription generation device 102 receives, from the program generation organization 101, a program necessary to reproduce content and a request for the type of subscription of a subscription to be linked to the program (type of subscription). test resolution or official resolution type) (Step S601). Based on the requested subscription type received from the I / O unit 201, the subscription type recording unit 202 records the subscription type information in the subscription type storage region 511 included in the header portion 510 of the received program ( 0x01, in the case of a test resolution type, and 0x10, in the case of an official resolution signature) (Step S602).

The signature generation link unit 203 generates a signature for the program in which the signature type information is recorded by the signature type recording unit 202 in step S602, and writes the signature generated in the data storage region of signature included in the signature data part 530 of the program (Step S603). The I / O unit 201 transmits the subscription program to which the subscription is linked by the subscription generation link unit 203 to the program generation organization 101 (Step S604).

1.6 Recording Device Operations 104

The operations of the recording device 104 are described with reference to figure 7.

The I / O unit 301 included in the recording device 104 receives the subscription program necessary to reproduce the content of the program generation organization 101, receives the content from the content provider terminal device 103, and receives the type information from recording medium 105 (Step S701). The media type judgment unit 302 specifies a media type of the recording medium (for example, ROM, R, or RW) based on the media type information received from the I / O unit 301, and transmits the media type specified medium for write permission determination unit 304 (Step S702).

The subscription type judgment unit 303 reads the subscription type information stored in the subscription type storage region 511 included in the header portion 510 of the subscription program received from the I / O unit 301, and specifies a subscription type of the signature linked to the received program (type of test resolution or type of official resolution), and transmits the specified type of subscription to the write permission determination unit 304 (Step S703). Based on both the media type received from the media type judgment unit 302 and the subscription type received from the subscription type judgment unit 303, the recording permission determination unit 304 determines whether program playback is allowed signature received and the content on the recording medium 105 (Step S704).

If the write permission determination unit 304 determines that it allows recording of the content, the I / O unit 301 will record the subscription program and the corresponding content on recording medium 105 (Step S705).

1.7 Playback Device Operations 106

The operations of the playback device 106 are described with reference to figure 8.

The I / O unit 401 included in the playback device 106 reads the subscription program necessary to reproduce the content, the corresponding content, and the media type information of the recording medium 105 (Step S801). The signature verification unit 402 checks the signature stored in the signature data portion 530 of the signature program received from the I / O unit 401, to judge whether the signature program is an authentic program. If the program is judged to be not an authentic program, subsequent playback processing will not be performed (Step S802).

The subscription type judgment unit 403 reads the subscription type information stored in the subscription type storage region 511 included in the header portion 510 of the subscription program received from the I / O unit 401 to specify the subscription type of the subscription. subscription linked to the program received (type of test resolution or type of official resolution), and transmit the specified subscription type to the reproduction permission determination unit 405 (Step S803). The media type judgment unit 404 specifies a media type (ROM, R or RW, for example) based on the media type information received from the I / O unit 401, and transmits the specified media type to the unit reproduction permission determination 405 (Step S804).

The playback permission determination unit 405 determines whether reproduction of the received content is allowed, based on both the recording medium received from the media type judgment unit 404 and the subscription type received from the subscription type judgment unit 403 (Step S805). If the reproduction permission unit26 is determined 405 to allow playback of the content, the reproduction unit 406 will execute the signature program read from the recording medium 105 in an execution environment included in the reproduction unit 406, and the reproduction unit Playback 406 will unscramble the content that has been scrambled (data that has been modified) based on secret information calculated using the program in order to reproduce the content (Step S8060).

Modification Examples

While the present invention has been described on the basis of the above embodiment, the present invention is, of course, not limited to the above embodiment. The present invention also includes the following cases:

(1) In the above embodiment, the subscription-generating device receives a request for the subscription type, and writes the subscription type to a program that is received with the request. The present invention is not limited to this structure. Alternatively, the following structure can be used, for example: the signature generation device still stores a pair of public keys for signatures showing the type of test resolution as well as a pair of public keys for signatures showing the type of official resolution , and uses a different key to generate a subscription, depending on a subscription type requested instead of recording subscription type information. In addition, alternatively, the following structure can be employed: the signature generation device records the signature type information in a header part of a program, and additionally uses a different key to generate a signature, depending on a type of signature. subscription requested.

(2) In the above embodiment, both types of signature are used, that is, the type of test resolution and the type of official resolution. The present invention is not limited to this structure. Alternatively, it can employ two or more types, such as a type of test resolution for ROM media, a type of test resolution for R media, a type of official resolution for ROM media, and type of content downloaded, instead of the type of test resolution and the type of official resolution. Similarly, the media type is not limited to the three types, that is, ROM, R and RW. In addition, the present invention is not limited to the framework in which a judgment as to whether the type of test resolution or the type of official resolution is formed based on a subscription type of a subscription linked to a program. Alternatively, it may be possible to employ the structure, for example, in which a subscription is not linked to a program, but to content, and judgment is formed based on a subscription type linked to the content. In addition, alternatively, judgment can be made based on the information recorded on the recording medium regardless of content and program. In other words, as long as information is recorded that allows the appropriate judgment as to whether the type of test resolution or the type of official resolution in the recording medium, the information does not necessarily have to be in the form of a signature type.

(3) In the above embodiment, content recorded on a recording medium is protected by a program recorded on the same recording medium. The present invention is not limited to this structure. Alternatively, the following structure can be employed. For example, in addition to protecting the content of a program (for example, with the use of secret information calculated by the program's operations, the content is scrambled or data values ​​are partially modified), the content is additionally protected because it is encrypted. In addition, alternatively, content can be protected using two or more copyright protection techniques. In this case, the recording device's recording permission determination unit and the playback device's determination permission permission can respectively determine whether the recording and playback of the content are allowed, based on whether the content is encrypted. using a second copyright protection technique or if the content has a signature attached to it using the second copyright protection technique, in addition to the type of media and the type of subscription. Here, the second copyright protection technique is a protection technique different from the protection technique using the program described in the above embodiment. As the second protection technique, it may be possible to use a known protection technique, such as a protection technique using content encryption. Consequently, its description is omitted here. For example, if the media type and subscription type are respectively specified as R and official resolution and the content is encrypted using the second copyright protection technique or the content has a signature linked to it using the second protection technique copyright, the recording permission determination unit and the reproduction permission determination unit may respectively allow the recording and playback of the content. Also, if the media type and subscription type are respectively specified as R and official resolution, and the content is not encrypted using the second copyright protection technique, and the content does not have a signature linked to it using the second copyright protection technique, the recording permission determination unit and the reproduction permission determination unit may respectively prohibit the recording and reproduction of the content.

(4) In the above embodiment, the recording device determines whether recording of content is allowed based on both a media type and a subscription type. The present invention is not limited to this structure. Alternatively, whether recording is allowed can be determined based on either the type of medium or the type of subscription. In addition, alternatively, the following system can be employed. For example, the recording device records the content without forming a determination as to whether recording of the content is allowed, and then the playback device determines whether the playback of the content is permitted. In addition, alternatively, after verifying a signature linked to the program, the recording device can determine whether recording of the content is permitted by specifying a subscription type of the linked signature.

(5) In the above embodiment, after verifying a signature, the reproducing device specifies a signature type of the signature. The present invention is not limited to this structure. Alternatively, the following structure can be employed, for example: after specifying the type of signature, the reproducing device checks the signature. In addition, alternatively, in the structure in which the keys for generating signatures differ between types of signatures, the playback device may verify the signature using a key corresponding to the specified type of signature. The same also applies to the case of recording by the recording device.

(6) In the above embodiment, the reproduction device determines whether the reproduction of a content based on a type of medium and a type of subscription is allowed. The present invention is not limited to this structure. Alternatively, the following structure can be employed. For example, if the media type is judged to be a ROM, the playback device will verify a signature. If the program is judged to be an authentic program as a result of the verification, the playback device will allow the content to be reproduced, regardless of which type of signature has the signature. On the other hand, if the media type is judged to be a media other than a ROM, the reproduction device will determine whether the reproduction of the content with reference to the type of subscription is allowed. In this way, the reference step to the type of subscription can be skipped, depending on the type of medium judged. In addition, the reference step to the type of medium can be skipped, depending on the type of subscription specified, in reverse. In addition, if an encryption method or a subscription method, according to the second copyright protection technique, is used to protect content, the media type reference step or the subscription type reference step may be used. be skipped, depending on whether the content is protected using the second copyright protection technique. The same applies to the case of recording by the recording device.

(7) In the above embodiment, the recording medium records content and a program on a recording medium, and transmits the recorded content and the program to the playback device. The present invention is not limited to this structure. Alternatively, for example, only the content can be recorded on the recording medium, and the program can be transmitted to the playback device over a network. In addition, alternatively, only the program can be recorded on the recording medium, and the content can be transmitted to the playback device via a network, on the contrary. In addition, alternatively, both the content and the program can be transmitted to the playback device over a network without being recorded on the recording medium. In this case, the judgment of whether the content is allowed to be reproduced is based on the type of signature and whether the content is protected (the content is encrypted or has a signature attached to it) using the second copyright protection technique.

(8) The recording device according to the above embodiment can include an instruction receiving unit operable to receive an instruction to encrypt a content or an instruction to generate a signature for the content and link the generated signature to the content or receive a subscription to the content and link the received subscription to the content. The recording device can determine whether the recording of the content is allowed, based on the instruction received above in addition to the media type and subscription type.

(9) All or part of the functional units of each of the above devices can be made up of a removable IC card or a single module. The IC card or the single module is a computer system composed of a microprocessor, a ROM, a RAM, and the like. The IC card or module can include a super-multi-functional LSI. IC card or module functions are obtained with the microprocessor operating according to the computer program. The IC card or module can be tamper-proof.

(10) The present invention can be the methods above. Also, the present invention can be a computer program that performs the methods by a computer, or a digital signal composed of the computer program.

In addition, the present invention can be a computer-readable storage medium, such as a floppy disk, a hard disk, a CD-ROM, a MO, a DVD, a DVD-ROM, a DVD-RAM, a BD ( Blu-ray Disc) and a semiconductor memory, which stores the computer program or digital signal. In addition, the present invention can be the computer program or the digital signal stored in the recording medium.

In addition, the present invention can be the computer program or the digital signal transmitted over a communication network, a wireless or connected communication network, a network such as the Internet, a data broadcast, and the like.

In addition, the present invention can be a computer system that includes a microprocessor and a memory, and the microprocessor can operate according to the computer program, and the memory can store the computer program therein.

In addition, the program or digital signal can be executed by another independent computer system, with the transfer of the program or digital signal to the recording medium, or with the transfer of the program or digital signal over a network or similar .

The present invention also includes the following cases:

Second Achievement

2.1 Copyright Protection Data Processing System Structure

The copyright protection data processing system is, as shown in figure 10, composed of a certification authority terminal device 1001, a content provider terminal device 1002, a recording medium 1003, and a device of reproduction 1004.

The certification authority terminal device 1001 provides the reproduction device 1004 with a public key (certification authority public key) stored in the certification authority. In addition, the certification authority terminal device 1001 receives a program to which a digital signature is not bound (hereinafter non-signature program ”) from the content provider's terminal device, and provides the provider's terminal device. content 1002 with a program to which a digital signature is linked using a secret key stored in the certification authority (hereinafter the signature program).

Content provider terminal device 1002 generates a program needed to play content, and transmits the generated program to certification authority terminal device 1001. Also, content provider terminal device 1002 receives the program to which a digital signature is linked (hereinafter, signature program) from the certification authority terminal device 1001, and records the signature program received on the recording medium 1003. In addition, content provider terminal device 1002 records content that has been encrypted on the recording medium 1003. It is noted that it is unnecessary to encrypt the content. Here, the program recorded on the recording medium 1003 is a program to be used to play the content. For example, the program has a security function to detect a state in which the playback device 1004 is maliciously analyzed, the security problem, and an abnormal state in which the key data to be stored in the playback device 1004 is damaged , a navigation function to display and control a screen for user operation, and a menu function.

The playback device 1004 reads the subscription program and the content of the recording medium 1003, and additionally reads the media type information that shows a medium type of the recording medium, and determines whether reproduction of the read content is permitted. If it is judged to allow the content to be reproduced, the playback device 1004 will reproduce the protected content by running the subscription program.

At this point, the content recorded on recording medium 1003 is protected by the program recorded on the same recording medium 1003. As a method of protecting content, it is possible to employ the structure in which a program calculates secret information at predetermined intervals, and encrypts the content using secret information as key data, for example. An encryption technique used here can be a known method, such as DES encryption and AES encryption. In addition, since an XOR operation based on secret information can be employed instead of the encryption technique, the description of the content protection method is omitted here.

2.2 Certification Authority Terminal Device Structure 1001

The certification authority terminal device 1001 includes, as shown in figure 11, a receiving unit 1101, a transmitting unit 1102, a recording type recording unit 1103, a signature generating link 1104, a certification authority 1105 public key / secret key storage unit, and certification authority 1106 public key / secret key generation unit.

The certification authority terminal device 1101 is specifically composed of a microprocessor, a RAM, a ROM, a hard drive, and the like, although not shown in the figure. A computer program is stored in RAM, ROM, and the hard drive. Functions of the certification authority terminal device 1001 are obtained by the microprocessor that operates according to the computer program.

It is noted that each of the functional units of the certification authority terminal device 1001, such as the receiving unit 1101, the transmitting unit 1102, the signature-type recording unit 1103, the signature-generating link 1104 , the certification authority 1105 public key / secret key storage unit, and certification authority 1106 public key / secret key generation unit, it is typically performed as an LSI which is an integrated circuit. These functional units can be separately integrated on a chip, or integrated on a chip including part or all of the functional units.

Here, LSI can be called IC, LSI system, super LSI, and ultra LSI, depending on the degree of integration.

Also, a method of forming integrated circuits is not limited to LSIs, and can be accomplished using a dedicated circuit or a general purpose processor. In addition, it is possible to form integrated circuits with the use of a programmable FPGA (Field Programmable Gate Array) after the manufacture of LSIs or a reconfigurable processor in which the connection and adjustment of the circuit cell within an LSI can be done. reconfigured.

In addition, when new technology for forming integrated circuits that replaces LSIs becomes available as a result of progress in semiconductor technology or semiconductor-derived technologies, functional units can be integrated using that technology. One possibility is in the adaptation of biotechnology.

Finally, the functional units can be realized with software, or with the combination of an LSI and software. Also, the software can be tamper-proof.

(1) Reception Unit 1101

Receiving unit 1101 receives, from the content provider terminal device 1002, a non-subscription program and a request for the subscription type of a subscription to be linked to the non-subscription program (test resolution type or type of official resolution).

(2) Transmission unit 1102

Transmission unit 1102 transmits a subscription program received from subscription generation linking unit 1104 to content provider terminal device 1002.

In addition, transmission unit 1102 transmits a CA certificate public key by CA certification unit public key / secret key generation unit 1107 to playback device 1004.

(3) 1103 Signature Type Recording Unit

The subscription type recording unit records a subscription type received by the receiving unit 1101 in a program received by the receiving unit 1101.

Figure 13 shows an example of a program's data structure. The program consists of a header part 1310, a part of instruction code 1320, and a part of signature data 1330. Signature type recording unit 1103 records the type of signature requested by the program generation organization 101 in a 1311 subscription type storage region included in the 1310 header part. For example, if the test resolution type is requested, the subscription type recording unit 1103 will record the subscription type information 0x01 in the 1311 subscription type storage region. If the official resolution type is requested, the subscription type recording unit 1103 will record the subscription type information 0/10 in the subscription type storage region 1311. Also, instruction codes are stored in an instruction code storage region included in instruction code part 1320. In addition, the signatures generated by the signature generation link 1104 are stored in a data storage region signature included in the 1330 subscription data portion.

(4) 1104 Signature Generation Binding Unit

Signature generation binding unit 1104 generates a signature for a program in which a type of signature is recorded using a secret CA key stored in the CA public secret / CA key storage unit 1105. Then, the signature generation link 1104 records the signature generated in the signature data storage region included in the 1330 signature data portion of the program. The program in which the generated signature is recorded (hereinafter the signature program) is transmitted to the content provider terminal device 1002 through the transmission unit 1102.

(5) Certification Authority Public Key / Secret Key 1105 Storage Unit

The certification authority public key / secret key storage unit 1105 stores a certification authority public key and certification authority secret key generated there by the certification authority public key / secret key generation unit. 1106. The certification authority public key is transmitted to the playback device 1004 through the transmission unit 1102. The secret certification authority key is used by the signature generation binding unit 1104 to generate a signature on the certification authority terminal device 1001.

(6) Public Key / Security Authority Key Generation Unit

Certification 1106

The public key / secret key generation unit 1106 generates a certification authority public key pair to be transmitted to the playback device 1004 and a secret key corresponding to the certification authority public key.

2.3 Content Provider Terminal Device Structure 1002

The content provider terminal device 1002 includes, as shown in Figure 12, a receiving unit 1201, a transmission unit 1202, a subscription program storage unit 1203, a non-subscription program generating unit 1204, a non-signature program storage unit 1205, a content protection type entry unit 1206, a content storage unit 1207, an encryption key storage unit 1208, an encryption unit 1209, and a recording unit 1210.

The content provider terminal device 1002 is specifically composed of a microprocessor, a RAM, a ROM, a hard drive, and the like, although not shown in the figure. A computer program is stored in RAM, ROM, and the hard drive. Functions of the content provider terminal device 1002 are obtained by the microprocessor that operates according to the computer program.

It is noted that each of the functional units of the content provider terminal device 1002, such as the receiving unit 1201, the transmitting unit 1202, the subscription program storage unit 1203, the non-subscription program generating unit 1204 , the non-subscription program storage unit 1205, the content protection type entry unit 1206, the content storage unit 1207, the encryption key storage unit 1208, the encryption unit 1209, and the recording unit 1210, are typically performed as an LSI which is an integrated circuit. These functional units can be separately integrated on a chip, or integrated on a chip including part or all of the functional units.

Here, LSI can be called IC, LSI system, super LSI, and ultra LSI, depending on the degree of integration.

Also, a method of forming integrated circuits is not limited to LSIs, and can be accomplished using a dedicated circuit or a general purpose processor. In addition, it is possible to form integrated circuits using a programmable FPGA (Field Programmable Gate Array) after manufacturing LSIs or a reconfigurable processor in which the connection and adjustment of the circuit cell within an LSI can be reconfigured .

In addition, when new technology for forming integrated circuits that replaces LSIs becomes available as a result of progress in semiconductor technology or semiconductor-derived technologies, functional units can be integrated using that technology. One possibility is in the adaptation of biotechnology.

Finally, the functional units can be realized with software, or with the combination of an LSI and software. Also, the software can be tamper-proof.

(1) Reception Unit 1201

The receiving unit 1201 receives a subscription program from the certification authority terminal device 1001.

(2) 1202 Transmission Unit

Transmission unit 1202 transmits a non-signature program stored in the non-signature program storage unit 1205 to the certification authority terminal device 1001.

(3) 1203 Subscription Program Storage Unit

The signature program storage unit 1203 receives, through the receiving unit 1201, a signature program to which a signature has been linked by the certification authority terminal device 1001, and stores the received signature program therein.

(4) Non-Subscription Program Generation Unit 1204

The non-subscription program generation unit 1204 generates a non-subscription program, and stores the generated non-subscription program in the non-subscription program storage unit 1205.

(5) 1205 Non-Subscription Program Storage Unit

The non-signature program storage unit 1205 still stores a non-signature program generated by the non-signature program generation unit 1204. The stored non-signature program is transmitted to the certification authority terminal device 1001 through the transmission unit 1202.

(6) 1206 Content Protection Type Input Unit

The content protection type entry unit 1206 introduces a content protection type of content through an operator. It is noted that the content provider terminal device 1002 can acquire a media type of recording medium 1003 to judge the type of content protection, rather than input through the operator.

(7) 1207 Content Storage Unit

Content storage unit 1207 still stores content to be recorded on recording medium 1003.

(8) Encryption Key Storage Unit 1208

The encryption key storage unit 1208 still stores an encryption key to encrypt content to be recorded on recording medium 1003.

(9) Encryption Unit 1209

The encryption unit 1209 encrypts content stored on the content storage unit 1207 using an encryption key stored on the encryption key storage unit 1208. However, the structure of the encryption unit 1209 is not limited to this. Alternatively, encryption unit 1209 may or may not encrypt content, based on a content protection type introduced by content protection type input unit 1206 to identify a content's encryption state, such as a state in the which content is encrypted or not. Specifically, if a content protection type of encryption protection is introduced, the 1209 encryption unit will encrypt the content. If a type of anti-tampering content protection is introduced, the 1209 encryption unit will generate data to detect tampering with the content. If a non-protected content protection type is introduced, the 1209 encryption unit will not encrypt the content and will not generate data to detect tampering with the content.

(10) 1210 Recording Unit

Recording unit 1210 records, on recording medium 1003, a signature program stored in signature program storage unit 1203 and content in which processing is performed by encryption unit 1209 based on the type of content protection.

Figure 13 shows an example of recording medium 1003 in which the above data is recorded by recording unit 1210. The subscription program is recorded in the subscription program storage region 1301, and the content is recorded in the storage region of 1302 content.

2.4 Playback Device Structure 1004

The reproduction device 1004 includes, as shown in figure 14, a reading unit 1401, a signature type judgment unit 1402, a certification authority public key storage unit 1403, a signature verification unit 1404, a media type judgment unit 1405, a content protection type judgment unit 1406, a reproduction permission determination unit 1407, and a reproduction unit 1408.

The reproduction device 1004 is specifically composed of a microprocessor, a RAM, a ROM, a hard drive, and the like, although not shown in the figure. A computer program is stored in RAM, ROM, and the hard drive. The functions of the reproduction device 1004 are obtained by the microprocessor that operates according to the computer program.

It is noted that each of the functional units of the playback device 1004, such as the reading unit 1401, the signature type judgment unit 1402, the CA public key storage unit 1403, the signature verification unit 1404, the media type judgment unit 1405, the content protection type judgment unit 1406, the reproduction permission determination unit 1407, and the reproduction unit 1408, it is typically performed as an LSI which is an integrated circuit. These functional units can be separately integrated on a chip, or integrated on a chip including part or all of the functional units. Figure 19 shows an example of manufacturing the LSI system. In figure 19, the functional units surrounded by a dashed line are integrated on a chip with the LSI.

Here, LSI can be called IC, LSI system, super LSI and ultra LSI, depending on the degree of integration.

Also, a method of forming integrated circuits is not limited to LSIs, and can be accomplished using a dedicated circuit or a general purpose processor. In addition, it is possible to form integrated circuits using a programmable FPGA (Field Programmable Port Array) after manufacturing LSIs or a reconfigurable processor in which the connection and adjustment of the circuit cell within an LSI can be reconfigured .

In addition, when new technology to form integrated circuits that replaces LSIs becomes available as a result of progress in semiconductor technology or semiconductor-derived technologies, functional units can be integrated using that technology. One possibility is in the adaptation of biotechnology.

Finally, the functional units can be realized with software, or with the combination of an LSI and software. Also, the software can be tamper-proof.

(1) Reading Unit 1401

Reading unit 1401 reads a signature program, content, and media type information from recording medium 1003, and transmits the reading signature program to signature type judgment unit 1402, and transmits the information media type read for media type judgment unit 1405.

(2) Signature Type Judgment Unit 1402

The subscription type judgment unit 1402 reads the subscription type information stored in the subscription type storage region 1311 of the header portion 1310 of the subscription program received by the reading unit 1401, and specifies a subscription type. Then, the signature type judgment unit 1402 transmits a result of the specification to the signature verification unit 1404 and the reproduction permission determination unit 1407.

Here, the type of subscription indicates a type of subscription, such as the type of trial resolution and the type of official resolution. Regarding an identifier corresponding to a subscription type, the test resolution type corresponds to a T 0x01 identifier, and the official resolution type corresponds to a C 0x10 identifier.

(3) Certification Authority 1403 Public Key Storage Unit

Certification authority public key storage unit 1403 still stores a public key corresponding to a secret key stored on certification authority terminal device 1001. The certification authority public key is used to verify a linked signature by the device of certification authority terminal 1001.

(4) Signature Verification Unit 1404

The signature verification unit 1404 receives the signature type information judged by the signature type judgment unit 1402, and verifies a signature stored in the signature data portion 1330 of a signature program received by the reading unit 1401 based on on a subscription-specific subscription type. Signature verification unit 1404 judges whether the program is an authentic program based on a verification result. It is also possible to verify the completeness of the program by executing the signature check (for example, it is possible to check that the subscription type information stored in the 1311 subscription type storage region is not tampered with). The signature verification unit 1404 transmits the verification result information showing the result of the signature verification to the reproduction permission determination unit 1407.

(5) Media Type Judging Unit 1405

The media type judgment unit 1405 specifies a media type of a recording medium based on the media type information received by the reading unit 1401, and transmits the specified media type to the reproduction permission determination unit 1407.

Here, the media type indicates a media type of the recording medium, such as a ROM (Read Only Memory), an R (Writable), and an RW (Rewritable). Since the type of medium can be identified using a known method, such as an identification method that uses an identifier (ID) recorded on a recording medium, its description will be omitted here. In the following descriptions, the identifiers 0x001, 0x010, and 0x100 are respectively recorded in ROM, R and RW, as an example.

(6) Content Protection Type Judgment Unit 1406

The content protection type judgment unit 1406 analyzes the content read by the reading unit 1401, and specifies a content protection type of the content that identifies, for example, a state in which the content is or is not encrypted, and transmits the type of content protection specified for the 1407 playback permission determination unit.

Here, the type of content protection indicates a type of content state, such as a state in which content presents data to detect tampering, a state in which the content has been encrypted, and a state in which the content has not been encrypted. encrypted. Since the type of content protection can be identified using a known method, such as a method of verifying content data (specifically, analyzing values ​​of a CPI (COPY PERMISSION INDICATOR)) and a method of creating identification based on whether logical data is stored (specifically, checking whether a specific directory (example: AACS directory) is stored on a disk indicating that the content is protected by encryption). Consequently, its description is omitted here. As an example, in the case where content is protected by encryption, an E 0xq0 identifier is recorded. In the event that content is not protected, an F 0x01 identifier is recorded.

(7) Reproduction Permission Determination Unit 1407

Based on the verification result information showing a verification result performed by the signature verification unit 1404, a signature type specified by the subscription type judgment unit 1402, a type of medium specified by the signature type judgment unit medium 1405, and a content protection type specified by the content protection type judgment unit 1406, the reproduction permission determination unit 1407 determines whether reproduction of content is permitted using the subscription program.

It is noted that the reproduction permission determination unit 1407 can determine whether the reproduction of the content is allowed, based on a combination of the verification result information showing the result of the verification performed by the signature verification unit 1404, the type subscription type specified by the subscription type judgment unit 1402, the media type specified by the media type judgment unit 1405, and the type of content protection specified by the content protection type judgment unit 1406, or based on part of these pieces of information.

Specifically, if the signature check is unsuccessful, the playback permission determination unit 1407 will determine to stop playing the content, or will determine to play the content without running the subscription program. On the other hand, reproduction permission determination unit 1407 can determine whether content is allowed to be reproduced based on a combination of a subscription type specified by the subscription type judgment unit 1402, a media type specified by the unit media type judgment method 1405, and a content protection type specified by the content protection type judgment unit 1406, regardless of a signature verification result. Specifically, if the subscription type, media type, and content protection type are respectively specified as T (0x01), R (0x010), and F (0x001), the reproduction permission determination unit 1407 will allow playback of the content. If the subscription type, media type, and content protection type are respectively specified as C (0x10), R (0x010) and F (0x001), the reproduction permission determination unit 1407 will prohibit the reproduction of the content. This is because the combination of R and type of test resolution indicates that the recording medium is an R medium manufactured for testing purposes in the process of making a ROM medium, and the combination of R and type of official resolution indicate that the recording medium is an R medium manufactured by copying a ROM medium in an unauthorized manner.

(8) Reproduction Unit 1408

If the reproduction permission determination unit 1407 determines that it allows the reproduction of a content, the reproduction unit 1408 will execute a signature program read from the recording medium 1003, in an environment of execution of the same. Then, the reproduction unit 1408 unscrambles the content that has been scrambled (data that has been modified) based on the secret information calculated using the program, in order to reproduce the content. On the other hand, if the reproduction permission determination unit 1407 determines to prohibit the reproduction of the content, the reproduction unit 1408 cannot execute the subscription program read from the recording medium 1003 and cannot reproduce the content. Alternatively, the playback unit 1408 can play the content without executing the subscription program read from the recording medium 1003.

2.5 Certification Authority Terminal Device Operations

1001

The operations of the 1001 certification authority terminal device are described below.

The certification authority public key / secret key generation unit 1106 of the certification authority terminal device 1001 generates a certification authority public key and certification authority secret key pair, and stores the generated key pair. on the certification authority 1105 public key / secret key storage unit. For the convenience of the copyright protection data processing system, only a pair of certification authority public key and certification authority secret key is required. Consequently, once a key pair is generated, it is unnecessary to generate another key pair unless the CA's public key / secret key storage unit is damaged and cannot be restored, or the key is up. certification authority is lost.

The following describes a flow of linking a subscription to a program, with reference to figure 15.

The receiving unit 1101 of the certification authority terminal device 1001 receives, from the content provider terminal device 1002, a program required to play content, and a request for the subscription type of a subscription to be linked to the program (type of test resolution or type of official resolution) (Step S1501). Based on the request for the subscription type of subscription to be linked, which was received from the receiving unit 1101, the subscription type recording unit 1103 records the subscription type information in the included 1311 subscription type storage region. in header part 1310 of the program received (0x01, in the case of the type of test resolution, and 0x10, in the case of the type of official resolution) (Step S1502).

If the subscription type information indicates the type of official resolution (Step S1503: type of official resolution), the subscription generation link 1104 will generate a signature showing the type of official resolution (Step S1504). If the subscription type information indicates the test resolution type (Step S1503: test resolution type), the subscription generation link 1104 will generate a signature showing the test resolution type (Step S1505). For example, signature generation linker 1104 generates a signature showing the type of official resolution for a hash value of the entire header part 1310 and instruction code part 1320 of the signature program. On the other hand, signature generation linking unit 1104 calculates a hash value of the entire header part 1310 and instruction code part 1320 of the signature program, and generates a signature for the hash value at which the inversion is performed. of bits. In this example, since it is possible to generate a signature showing the type of official resolution and a signature showing the type of test resolution using the same value, no special data will be needed to generate signatures for each type of subscription. It is noted that a procedure for generating and linking a signature is not necessarily limited to the procedure described above. Alternatively, a procedure for generating and linking a signature and a target to which the signature should be linked may differ from those described above.

The signature generation link 1104 records the signature generated in the 1330 signature data storage region included in the 1330 signature data portion of the program. Transmission unit 1102 transmits, to the content provider terminal device 1002, a subscription program to which the subscription is linked by subscription generation linking unit 1104 (Step S1506).

2.6 Content Provider Terminal Device Operations 1002

The operations of the content provider terminal device 1002 are described below, with reference to figure 16.

The non-subscription program generating unit 1204 generates a non-subscription program, and storing the generated non-subscription program in the non-subscription program storage unit 1205. The generated non-subscription program is transmitted to the certification authority terminal device 1001 through the transmission unit 1202. The subscription program storage unit 1203 receives, via the receiving unit 1201, a subscription program to which a subscription has been linked. The content protection type input unit 1206 receives input from a content protection type (Step S1601). If the type of content protection received is encryption protection (Step S1602: encryption), encryption unit 1209 will encrypt content stored on the content storage unit 1207 using an encryption key stored on the key storage unit cryptography 1208 (Step S1603). If the type of content protection received is non-protection (Step S1602: non-encryption), the flow will proceed to step S1604. The encryption unit 1209 records the signature program, and encrypted content or unencrypted content on the recording medium 1003 (Step S1604).

2.7 Playback Device Operations 1004

The operations of the reproduction device 1004 are described below, with reference to figures 17 and 18.

The reading unit 1401 of the playback device 1004 reads a content, a subscription program required to play the content, and the media type information of the recording medium 1003. Also, the subscription type judgment unit 1402 reads the subscription type information (test resolution type or official resolution type) stored in the subscription type storage region 1311 included in the 1310 header part of the subscription program. received from reading unit 1401. Then, the subscription type judgment unit 1402 specifies a subscription type of a subscription linked to the received program (for example, T test resolution type (0x01) or official resolution type C (0x10)), and transmits the subscription type specified for signature verification unit 1404 and reproduction permission determination unit 1407 (Step S1701).

If the subscription type information indicates the type of official resolution (Step S1702: type of official resolution), signature verification unit 1404 will verify the signature using a signature verification procedure for the type of official resolution (Step S1703) . If the subscription type information indicates the type of test resolution (Step S1702: type of test resolution), the signature verification unit will verify the signature using a signature verification procedure for the type of test resolution (Step S1704). For example, according to the signature verification procedure for the official resolution type, the signature verification will be performed using a hash value for the entire 1310 header part and the 1320 instruction code part of the signature program and a value recorded in the signature data storage region of header part 1310 of the signature program. On the other hand, according to the signature verification procedure for the test resolution type, the signature verification will be performed using a hash value for the entire 1310 header part and 1320 instruction code part of the signature program, in which the bit inversion is performed, and a value written to the signature data storage region of header part 1310 of the signature program.

If the signature verification is not successful (Step S1705: NO), the entire signature verification unit 1404 will transmit a result of the signature verification to the reproduction unit 1408. Then, the reproduction unit 1408 will stop playing the content (S1706).

If the signature verification is successful (Step S1705: YES), the media type judgment unit 1405 will specify a media type (for example, ROM, R or RW) based on the media type information received from input unit 1401, and will transmit the specified media type to the playback permission determination unit 1407 (Step S1707).

The content protection type judgment unit 1406 specifies a type of content protection (for example, cripto encryption protection or non-protection F) based on the content received from input unit 1401, and will transmit the type of protection of content content specified for playback permission determination unit 1407 (Step S1708).

Based on the media type received from the media type trial unit 1405, the subscription type received from the subscription type trial unit 1402, and the type of content protection received from the content protection type trial unit 1406, the playback permission determination unit 1407 will determine whether playback of the received content is allowed (Step S1709). If the reproduction permission determination unit 1407 determines that it allows the content to be reproduced (Step 1710: YES), the reproduction unit 1408 will execute the signature program read from the recording medium 1003 in an environment of execution of the same, and will unscramble the content that has been scrambled (data that has been modified) based on the secret information calculated using the subscription program, in order to reproduce the content (Step S1711). Also, if it is determined to prohibit the reproduction of content (Step 1710: NO), the reproduction permission determination unit 1407 will transmit a reproduction permission determination result to the reproduction unit 1408, and the reproduction unit 1408 will prevent playback of the content (Step S1712).

Modification Examples

While the present invention has been described on the basis of the above embodiments, the present invention is, of course, not limited to the above embodiments. The present invention also includes the following cases.

(1) In the above embodiments, a signature showing an official resolution type is a signature generated for a hash value of the entire header part and instruction code part of a subscription program. Also, a signature showing the type of test resolution is a signature generated for a hash value of the entire header part and instruction code part of a signature program, in which the bit inversion is performed. However, the present invention is not limited to this structure. Alternatively, it is sufficient that a difference exists between the signature generation procedure for the type of official resolution and the signature generation procedure for the type of test resolution. The following describes a signature generation procedure for the type of official resolution and a signature generation procedure for the type of test resolution in the event that the signature generation procedure for the type of official resolution does not include the performance of inversion of bits in a hash value for a program to which a signature is linked.

(1-1) In the above embodiments, although the signature generation procedure for the type of test resolution includes the performance of bit inversion, it may be possible to modify a value in another invertible way. For example, in the case of a test resolution type, it may be possible to generate a signature for a result obtained by replacing a larger byte with a smaller byte, for a result obtained by executing an XOR operation using the hash value and a fixed value.

(1-2) It may be possible to properly switch between key pairs to generate a signature. For example, the signature generation device can store both a pair of public keys to generate a signature showing the type of test resolution and a pair of public keys to generate a signature showing the type of official resolution, and can suitably use a key to generate a signature based on a request for a subscription type, rather than writing the subscription type to a header part of a subscription program.

(1-3) It may be possible to store different information in a header part of a subscription program, depending on whether a subscription has the type of test resolution or the type of official resolution. For example, if the header portion of the subscription program includes a size field defining a size for an instruction code portion, it may be possible to modify a value in the size field. In this case, a signature showing the type of official resolution is a signature generated for a hash value of the entire header part and instruction code part of the signature program. A signature showing the type of test resolution is a signature generated for a value, which is obtained by calculating a hash value for all data and all instruction code part, and by executing the bit inversion in the value calculated hash. The data is the size field included in the header part of the subscription program that has been converted to a fixed value (for example, the data embedded with a value of 0).

(1-4) It may be possible to switch a program to which a subscription is linked, based on whether the subscription has the type of test resolution or the type of official resolution. For example, it may be possible to generate a signature showing the type of official resolution for a hash value of the entire header part and instruction code part of a subscription program. It may be possible to generate a signature displaying the type of test resolution for a hash value of the entire instruction code portion of a subscription program.

(1-5) A signature showing the type of official resolution can be generated for a hash value of the entire header part and instruction code part of a subscription program. A signature showing the type of test resolution can be generated for a hash value for the entire header part and instruction code part of a signature program to which a constant value is added (for example, a TEST character is inserted in the head). It is noted that a signature to be generated by adding the constant value and calculating a hash value cannot be a signature showing the type of test resolution, but a signature showing the type of official resolution. Alternatively, it may be possible to generate either a signature showing the type of test resolution or a signature showing the type of official resolution with the addition of a different constant value, and then with the calculation of a hash value. It is noted that the constant value can be inserted into a varied portion, such as the head of the header part, the end of the instruction code part, a portion between the header part and the instruction code part, and a portion within the instruction code part.

(1-6) It may be possible to perform bit inversion, and then calculate a hash value. For example, a signature showing the type of official resolution can be generated for a hash value of the entire header part and instruction code part of a subscription program. Also, a signature showing the type of test resolution can be generated for a data hash value that is obtained by performing bit inversion throughout the header part and instruction code part of a signature program. It is noted that a portion on which the bit inversion is performed is not limited to all portions of the header part and the instruction code part of the signature program. The bit inversion can be performed only on the header part or only the instruction code part of the signature program.

(1-7) It may be possible to calculate a signature and then perform the bit inversion. For example, a signature showing the type of official resolution can be generated for a hash value of the entire header part and instruction code part of a subscription program. Also, a signature showing the type of test resolution can be generated by calculating a hash value for the entire header part and instruction code part of a signature program and with the inversion of the signature bits.

(2) In the above embodiment, both types of signature are used, that is, the type of test resolution and the type of official resolution. The present invention is not limited to this structure. Alternatively, two or more types can be employed, such as a type of test resolution for ROM media, a type of test resolution for R media, a type of official resolution for ROM media, and type of content downloaded, in instead of the type of test resolution and the type of official resolution. Similarly, the media type is not limited to the three types, that is, ROM, R and RW. In addition, the present invention is not limited to the framework in which a judgment as to whether the type of test resolution or the type of official resolution is formed based on a subscription type of a subscription linked to a program. Alternatively, it may be possible to employ the structure, for example, in which a subscription is linked not to a program, but to content, and judgment is formed based on a subscription type of the subscription linked to the content. In addition, alternatively, the judgment can be formed based on the information recorded on the recording medium regardless of content and program. In other words, as long as the information that allows the appropriate judgment of whether the type of test resolution or the type of official resolution is recorded on the recording medium, the information does not necessarily have to be in the form of a signature type.

(3) In the above embodiment, content recorded on a recording medium is protected by a program recorded on the same recording medium. The present invention is not limited to this structure. Alternatively, the following structure can be employed. For example, in addition to the protection of content by a program (for example, with the use of secret information calculated by the operations of the program, the content is scrambled or data values ​​are partially modified), the content is additionally protected by being encrypted. In addition, alternatively, content can be protected using two or more copyright protection techniques. In this case, the recording permission determination unit of the recording device and the reproduction permission determination unit of the reproduction device can respectively determine whether the recording and playback of the content is permitted, based on whether the content is encrypted using a second copyright protection technique or if the content has a signature attached to it using the second copyright protection technique, in addition to the type of media and the type of subscription. For example, if the media type and subscription type are respectively specified as R and official resolution and the content is encrypted using the second copyright protection technique or the content has a subscription connected to it using the second copyright technique. copyright protection, the reproduction permission determination unit and the reproduction permission determination unit may respectively allow the recording and reproduction of the content. Also, if the media type and subscription type are respectively specified as R and official resolution and the content is not encrypted using the second copyright protection technique, and the content does not have a signature linked to it using the second technique copyright protection unit, the recording permission determination unit and the reproduction permission determination unit may respectively prohibit the recording and reproduction of the content.

(4) In the above embodiment, the recording device determines whether recording of content is allowed based on both a media type and a subscription type. The present invention is not limited to this structure. Alternatively, whether or not to allow recording can be determined based on the type of medium or the type of subscription. In addition, alternatively, the following system can be employed. For example, the recording device records the content without making a determination as to whether the recording of the content is allowed, and then the playback device determines whether the playback of the content is permitted. In addition, alternatively, after the verification of a subscription linked to the program, the recording device can determine whether the recording of the content with the specification of a subscription type of the linked subscription is allowed.

(5) In the above embodiment, after verifying a subscription, the playback device specifies a subscription type of the subscription. The present invention is not limited to this structure. Alternatively, the following structure can be employed, for example; after specifying the type of signature, the playback device verifies the signature. In addition, alternatively, in the framework in which the keys for generating signatures differ between types of signatures, the playback device may verify the signature using a key corresponding to the specified type of signature. The same also applies to the case of recording by the recording device.

(6) In the above embodiment, the reproduction device determines whether the reproduction of a content is allowed based on a type of medium and a type of subscription. The present invention is not limited to this structure. Alternatively, the following structure can be employed. For example, if the media type is judged to be a ROM, the playback device will verify a signature. If the program is judged to be an authentic program as a result of the verification, the playback device will allow the content to be reproduced, regardless of the type of signature that the signature presents. On the other hand, if the media type is judged to be a media other than a ROM, the reproduction device will determine whether the reproduction of the content with reference to the type of subscription is allowed. In this way, the step of referring to the type of subscription can be skipped, depending on the type of medium judged. In addition, the reference step to the type of medium can be skipped, depending on the type of subscription specified, in reverse. In addition, if an encryption method or signature method in accordance with the copyright protection technique is used to protect content, the reference step for the type of medium or the step for reference to the type of signature may be skipped , depending on whether the content is protected using the second copyright protection technique. The same also applies to the case of recording by the recording device.

(7) In the above embodiment, the recording device records content and a program on a recording medium, and transmits the recorded content and the program to the playback device. The present invention is not limited to this structure. Alternatively, for example, only the content can be recorded on the recording medium, and the program can be transmitted to the playback device over a network. In addition, alternatively, only the program can be recorded on the recording medium, and the content can be transmitted to the playback device via a network, on the contrary. In addition, alternatively, both the content and the program can be transmitted to the playback device over a network without being recorded on the recording medium. In this case, the judgment of whether the content is allowed to be reproduced is based on the type of signature and whether the content is protected (the content is encrypted or has a signature attached to it) using the second copyright protection technique.

(8) The recording device according to the above embodiment can include an instruction receiving unit operable to receive an instruction to encrypt a content or an instruction to generate a signature for the content and link the generated signature to the content or receive a subscription to the content and link the received subscription to the content. The recording device can determine whether recording of the content is permitted, based on the instruction received above in addition to the media type and subscription type.

(9) All or part of the functional units of each of the above devices may consist of a removable IC card or a single module. The IC card or the single module is a computer system composed of a microprocessor, a ROM, a RAM, and the like. The card

IC or the module can include a super multifunctional LSI. The functions of the IC card or module are obtained by the microprocessor that operates according to the computer program. The IC card or module can be tamper-proof.

(10) The present invention can be the methods above. Also, the present invention can be a computer program that performs the methods by a computer, or a digital signal composed of the computer program.

In addition, the present invention can be a computer-readable storage medium, such as a floppy disk, a hard disk, a CR-ROM, a MO, a DVD, a DVD-ROM, a DVD-RAM, a BD ( Blu-ray Disc), and a semiconductor memory, which stores the computer program or digital signal. In addition, the present invention can be the computer program or the digital signal stored in the storage medium.

In addition, the present invention can be the computer program or the digital signal transmitted over an electrical communication network, a wireless or connected communication network, a network such as the Internet, data broadcast, and the like.

Furthermore, the present invention can be a computer system that includes a microprocessor and a memory, the microprocessor being able to operate according to the computer program and the memory being able to store the computer program in it.

In addition, the program or digital signal can be executed by another independent computer system, with the transfer of the program or digital signal to the recording medium, or with the transfer of the program or digital signal over a network or similar .

(11) The present invention also includes the following cases.

The present invention provides a reproduction device for reproducing digital content, the reproduction device comprising: a readable unit operable to receive digital content, a program necessary to reproduce digital content, and a type of medium for a recording medium in which the digital content and the necessary program are recorded; a subscription type judgment unit operable to judge a subscription type from a subscription linked to the program; a media type judgment unit for judging the media type of the recording medium; and an operable reproduction permission determination unit to determine whether reproduction of the content is permitted, based on the results of judgments formed by the subscription type judgment unit and the media type judgment unit.

The present invention provides the reproduction device, which additionally comprises a signature verification unit operable to verify the signature linked to the program, in which if a result of the verification performed by the signature verification unit is not successful, the content will not be successful. will be played.

The present invention provides the reproduction device, in which the signature verification unit changes the verification contents, based on the type of signature judged by the signature type judgment unit.

The present invention provides the reproduction device, in which if the signature type judged by the signature type judgment unit is an official resolution type, the signature verification unit will perform a hash operation on all the header part and part program instruction code, and will verify the signature using a value obtained as a result of the hash operation and the signature data described in a program signature data portion, if the signature type judged by the signature type judgment unit is a test resolution type, the signature verification unit will hash the entire header and signature data portion of the program, and verify the signature using a correction value, which is obtained by performing the bit inversion in a value obtained as a result of the hash operation, and the signature data described in the signature data part of the program.

The present invention provides the reproduction device, in which if the signature type judged by the signature type judgment unit is the official resolution type, the verification unit will perform a hash operation on all the header part and code part instruction manual, and will verify the signature using a value obtained as a result of the hash operation and the signature data described in the signature data portion of the program, and if the signature type judged by the signature type judgment unit is the test resolution type, the signature verification unit will perform a hash operation on a combination of the data from part of the program and the data that is the field of instruction code size of the header portion of the program overwritten with a fixed value, and will perform signature verification at a value obtained as a result of the hash operation.

The present invention further provides the reproduction device comprising a cryptographic judgment unit operable to judge whether the content is encrypted, in which the reproduction permission determination unit determines whether the reproduction of the content is permitted, based on a judgment result made by the cryptography judgment unit and one of the judgment results made by the signature type judgment unit and the media type judgment unit.

The present invention provides the reproduction device, in which the reproduction permission determination unit determines whether the reproduction of the content is allowed, based on the results of the judgments made by the signature type judgment unit, by the type judgment unit medium, and by the cryptography trial unit.

The present invention provides a content provider terminal device for recording digital content, the content provider terminal device comprising: an operable non-subscription program generating unit for generating a program necessary to reproduce digital content; a non-subscription program storage unit operable to store the program generated by the non-subscription program generation unit therein; a transmission unit operable to transmit the program stored in the non-subscription program storage unit; a receiving unit operable to receive a subscription program which is the program transmitted by the transmission unit and to which a subscription is attached; a subscription program storage unit operable to store the subscription program received by the receiving unit therein; and an operable recording unit for recording the subscription program stored on the subscription program storage unit in a subscription program storage region of a recording medium.

The present invention provides the content provider terminal device, in which the transmission unit transmits a type of subscription signature together with the program to which no subscription is attached.

The present invention provides the content provider terminal device comprising: a content storage unit operable to store digital content therein to be recorded on the recording medium; an encryption key storage unit operable to store an encryption key therein to encrypt the digital content to be recorded on the recording medium; and an operable encryption unit for encrypting digital content stored on the content storage unit using the encryption key stored on the encryption key storage unit.

The present invention provides the content provider terminal device comprising a content protection type input unit operable to introduce a protection type indicating a content protection state, in which the encryption unit determines whether to encrypt the content with based on the type of protection introduced by the content protection type input unit.

The present invention provides the content provider terminal device, in which if the content protection type introduced by the content protection type input unit is the encryption type, the encryption unit will encrypt the content using the key. encryption type, and if the type of protection is the type of non-encryption, the encryption unit will not encrypt the content.

The present invention provides a certification authority terminal device for linking a subscription to a non-subscription program with no signature attached to it, the certification authority terminal device comprising: a operable certification authority public key / secret key generation unit for generating a certification authority public key and certification authority secret key to be used to generate a signature for the program and verify the signature; a operable certification authority public key / secret key storage unit to store the certification authority public key and certification authority secret key pair thereon; a receiving unit operable to receive the non-subscription program from the content provider terminal device; a operable signature generation linking unit to link a subscription to the non-subscription program received by the receiving unit; and a transmission unit operable to transmit the program to which the subscription has been linked by the subscription-generating link unit.

The present invention provides the certification authority terminal device, which further comprises an operable signature type recording unit for recording a signature type received by the receiving unit in a header portion of the received non-signature program. by the receiving unit.

The present invention provides the certification authority terminal device, in which the signature generation binding unit changes a signature generation method to generate a signature based on the type of signature received by the receiving unit.

The present invention provides the certification terminal device62, in which if the type of signature received by the receiving unit is the type of official resolution, the signature generation binding unit will perform the hash operation for all part of header and instruction code portion of the non-signature program, and will generate a signature for a value obtained as a result of the hash operation, and if the type of signature received by the receiving unit is the type of test resolution, the signature-generating linkage unit will hash the entire header and instruction code part of the non-signature program, will perform bit inversion on a value obtained as a result of the hash operation to obtain a correction value, and generate a signature for the obtained correction value.

The present invention provides the certification authority terminal device, in which if the signature type received by the receiving unit is the type of official resolution, the signature generation binding unit will perform the hash operation for the entire header part. and part of the instruction code of the non-subscription program, and will generate a subscription for a value obtained as the result of the hash operation, and if the subscription type is the test resolution type, the signature generation link unit will perform the hash operation for the data generated by a combination of data generated by overwriting the instruction code part size field of the non-signature program header part with a fixed value and the part of the instruction code of the non-signature program, and will generate a signature for a value obtained as a result of the hash operation.

The present invention provides a recording medium for recording digital content and a program to which a subscription is linked by a content provider terminal device, in which the program to which the subscription is linked includes a region to store in the signature type of signature.

The present invention provides a copyright protection data processing system composed of a certification authority terminal device to generate a signature for a program needed to reproduce digital content and link the generated signature to the program, a device content provider terminal to record digital content and the program on a recording medium, and a playback device to play digital content, where the certification authority terminal device comprises: a operable certification authority public key / secret key generation unit for generating a certification authority public key and certification authority secret key pair to be used to generate the signature for the program and verify the signature; a operable certification authority public key / secret key storage unit for storing the certification authority public key and certification authority secret key pair generated by the certification authority public key / secret key generation unit therein. certification; a receiving unit operable to receive a non-subscription program to which no subscription is bound from the content provider's terminal device; a operable signature generation linking unit to link a subscription to the non-subscription program received by the receiving unit; and an operable transmission unit for transmitting a subscription program to which the subscription is linked by the subscription generation link unit, and the content provider end device comprises: an operable non-subscription program generating unit for generate the program that is necessary to reproduce digital content and to which no subscription is linked; a non-subscription program storage unit operable to store the non-subscription program generated by the non-subscription program generation unit therein; a transmission unit operable to transmit the non-subscription program stored in the non-subscription program storage unit; a receiving unit operable to receive a subscription program which is the subscription program transmitted by the transmitting unit to which the subscription is linked; a subscription program storage unit operable to store the subscription program received by the receiving unit therein; and an operable recording unit for recording, in a signature program storage region of the recording medium, the signature program stored in the signature program storage unit, and the playback device comprises: an operable reading unit for receiving digital content, the program required to reproduce digital content, and a type of medium of the recording medium in which digital content and the program are recorded; and an operable subscription type judgment unit to judge a subscription type of the subscription bound to the program: an operable media type judgment unit to judge the recording media type; the signature type judgment unit; and an operable reproduction permission determination unit to determine whether to reproduce digital content, based on the results of judgments made by the subscription type judgment unit and the media type judgment unit.

The present invention provides the copyright protection data processing system, in which the playback device additionally comprises an operable signature verification unit to verify the signature linked to the program, and the certification authority terminal device additionally comprises a subscription type recording unit operable to record the type of signature received by the receiving unit in the header portion of the non-signature program received by the receiving unit, and if the signature is not authentic as a result of the verification performed by the signature verification unit, the playback device will not play digital content.

The present invention provides the copyright protection data processing system, in which the signature generation binding unit changes the signature generation based on the type of signature received by the receiving unit, and the signature verification unit changes the signature check based on the signature type judged by the signature type judgment unit.

The present invention provides the copyright protection data processing system, in which if the signature type judged by the signature type judgment unit is the official resolution type, the signature verification unit will perform the hash operation for all the header part and instruction code part of the program, verify the signature using a value obtained as a result of the hash operation and signature data described in the signature data portion of the program, and if the signature type judged by the signature type judgment unit is the test resolution type, the signature verification unit will perform the hash operation for all header and data portion of the program, will perform bit inversion on a value obtained as a result of the hash operation to obtain a correction value, verify the signature using the correction value and signature data described in the signature data part of the program, and if the signature type judged by the signature-type trial unit is the type of official resolution, the signature generation link unit will perform the hash operation for the entire header part and instruction code part of the non-signature program, and will generate a signature for a value obtained as a result of the hash operation.

The present invention provides a reproduction method of reproducing digital content, the reproduction method comprising: a reading step of receiving digital content, a program required to play digital content, and a type of recording medium on the which digital content and program are recorded; a subscription type judgment step of judging a subscription type from a subscription linked to the program; a media type judgment step to judge the recording media type; and a reproduction permission determination step to determine whether reproduction of digital content is allowed based on the results of the judgments made by the subscription type judgment stage and the media type judgment stage.

The present invention provides a method of providing content for recording digital content, the method of providing content comprising: a step of generating a non-subscription program of generating a non-subscription program that is necessary to reproduce the content digital and to which no signature is attached; a non-subscription program storage step of storing the non-subscription program generated in the non-subscription program generation step; a transmission step of transmitting the non-subscription program stored in the non-subscription program storage step; a receiving step of receiving a subscription program which is the non-subscription program transmitted in the transmission step to which a subscription is linked; a subscription program storage step of storing the subscription program received at the receiving step; and a recording step of recording, in a subscription program storage region of a recording medium, the subscription program stored in the subscription program storage step.

The present invention provides a certification method of linking a signature to a received non-signature program to which no signature is attached, the certification method comprising: a step of generating public key / secret key for generating authority a certification authority public key and certification authority secret key to be used to generate a signature for the non-signature program and verify the signature; a certification authority public key / secret key storage step of storing the certification authority public key and certification authority secret key pair generated in the certification authority public key / secret key generation step: a step of receipt of receiving the non-subscription program based on the content provision method; a subscription generation linking step of linking a subscription to the non-subscription program received at the receiving step; and a transmission step of transmitting the subscription program to which the subscription is linked in the subscription binding step.

The present invention provides a program for use on a reproduction device to reproduce digital content, in which the program comprises a reading step of receiving digital content, a program necessary to reproduce digital content, and a type of media. a recording medium on which the digital content and the program are recorded; a subscription type judgment step of judging a subscription type from a subscription linked to the program; a media type judgment step to judge the recording media type; and a reproduction permission determination step to determine whether reproduction of digital content is allowed based on the results of the judgments made by the subscription type judgment stage and the media type judgment stage.

The present invention provides the program that is recorded on a computer-readable program recording medium.

The present invention provides an integrated circuit that refers to a reproduction device for reproducing digital content, the integrated circuit comprising: a readable unit operable to receive digital content, a program necessary to reproduce digital content, and a type means of a recording medium in which the digital content and the program are recorded; a subscription type judgment unit operable to judge a subscription type from a subscription linked to the program; an operable media type judgment unit for judging the media type of the recording medium; and a reproduction permission determination unit to determine whether reproduction of digital content is permitted based on the results of judgments formed by the subscription type judgment unit and the media type judgment unit.

(12) The present invention can be any combination of the above embodiments and modifications.

INDUSTRIAL APPLICABILITY

The present invention can be administrative, continuously and repeatedly used in an industry that sells content and in an industry that manufactures and sells devices that use the content.