Information recording processing apparatus, information reproduction processing apparatus, information recording medium, information recording processing method, information reproduction processing method, and computer program

0001This invention relates to an information recording processing apparatus, an information reproduction processing apparatus, an information recording medium, an information recording processing method, an information reproduction processing method, and a computer program, and more particularly to an information recording processing apparatus, an information reproduction processing apparatus, an information recording medium, an information recording processing method, an information reproduction processing method, and a computer program by which a cryptographic key such as a copy protection key is recorded in a form in which it is difficult to analyze on an information recording medium on which contents such as, for example, image data and music data are recorded and can be reproduced efficiently from the information recording medium.

0002When data such as music data or image data is recorded as digital data on a recording medium, a recording process in accordance with a predetermined recording format is performed. For example, error detection/correction codes are added to original data of an object of recording and converted (encoded) into data of a format conforming to a particular data recording/reproduction process and then recorded.

0003As an information recording system which allows high density recording of information, for example, a DVD (Digital Versatile Disc) system or a Blu-Ray Disc system which uses a blue laser, whose development has been and is proceeding in recent years, to record or reproduce information is available.

0004Incidentally, contents to be recorded on such information recording media as mentioned above include, for example, cinema data and music data. With regard to most contents such as music data and image data, the distribution right or the like is owned usually by a preparing person or a selling person. Accordingly, upon distribution of such contents, it is usually the case to adopt some fixed utilization control, that is, a measure for permitting only a legal user to utilize the contents but inhibiting duplication or the like which is not permitted.

0005A large capacity recording medium such as a' recording medium to which a blue laser recording system which allows high capacity recording is applied allows recording of data, for example, for one or several cinemas. Contents can be recorded as digital information which does not suffer from degradation in copying and reproduction processes, and this gives rise to occurrence of many problems of a flood of illegal copies. Thus, the problem of an obstruction of benefit to the owner of the copyright or the right of distribution of contents is getting serious. From such an existing state of things as just described, it is a significant subject how to prevent illegal copying and assure protection of benefit of the owner of the copyright or the owner of the right of distribution.

0006In order to prevent such illegal utilization of contents, it has been proposed to record contents, which are to be recorded on an information recording medium, as encrypted contents and record additional information such as copy protection key information as cryptographic key information to be applied in utilization of such encrypted contents, information necessary for generation of a cryptographic key, or various kinds of control information such as information, for example, for reproduction control or copy control of the contents as secret information on the information recording medium. A reproduction processing program to be executed on a reproduction apparatus of a user causes the reproduction apparatus to read the secret information such as a key corresponding to contents of an object of reproduction, decode the contents in accordance with the thus read secret information and execute utilization of the contents in accordance with reproduction control information.

0007An apparatus for embedding particular information such as a cryptographic key is disclosed, for example, in <patcit id="pcit0001" dnum="JP2002093058A"><text>Japanese Patent Laid-Open No. 2002-93058</text></patcit> (hereinafter referred to as Patent Document 1). The Patent Document 1 discloses a configuration for placing secret information into scrambled data.

0008While various proposals have been made for a configuration for storing additional information such as cryptographic key information, also a technique for analyzing such additional information has been progressed. Thus, the present condition is such that information regarding at what place of an information recording medium and in what manner information is recorded is acquired by a user or an illegal contents user, by whom leakage or falsification of additional information' or illegal copying of contents is performed. As a result, the form of utilization of contents based on the legal right of utilization of contents is damaged, resulting in a problem that sufficient protection of the copyright or the right of utilization of contents is not achieved.

0009<patcit id="pcit0002" dnum="US20030185128A1"><text>US 2003/0185128 A1</text></patcit> describes an optical disk, and a method and apparatus for reproducing and/or recording data to the disk provided for preventing illegal copying of authorized disks recording copyrighted digital content. The optical disk has a control area for storing control data, a data area for storing main digital data (content), and an identification area for storing sub-digital data specific to the main digital data. The sub-digital data is recorded as a pit sequence at a locally phase modulated clock timing. When disk identification data is recorded as the sub-digital data, key information stored to the reproduction apparatus is compared with identification data (sub-digital data) detected from jitter fluctuations in the identification area when content is reproduced from the optical disk. If a specific correlation is thus confirmed, the disk is recognized as a legally copied disk and reproduction is enabled. Illegal copies can thus be prevented.

0010<patcit id="pcit0003" dnum="EP1353330A1"><text>EP 1 353 330 A1</text></patcit> describes an information recording medium for recording main information and auxiliary information. The auxiliary information is recorded on the information recording medium in a manner that edge positions of the pits or the recording marks indicating the main information are shifted either in a phase advancing direction or in a phase delaying direction along the track direction. A predetermined frequency is used to determine whether the edge position is shifted in the phase advancing direction or in the phase delaying direction in order to record the auxiliary information. The predetermined frequency is substantially consistently lower than 1/2 of a reference frequency of a recording clock for creating the pits or the recording marks and is higher than a response frequency of a PLL for generating a reproduction clock for reproducing the main information.

0011<patcit id="pcit0004" dnum="US20030070082A1"><text>US 2003/0070082 A1</text></patcit> describes a information recording method for recording content information in a recording medium having at least re-readable area, comprising converting, based on a first conversion rule Φ1, first information including a first component for obtaining content control information, converting, based on a second conversion rule Φ2 second information including a second component for obtaining the first information, and writing the converted first information and the converted second information into the re-recordable area of the recording medium.

0012It is an object of at least preferred embodiments of the present invention to provide an information recording processing apparatus, an information reproduction processing apparatus, an information recording medium, an information recording processing method, an information reproduction processing method, and a computer program by which various kinds of additional information to be recorded on a recording medium together with contents such as, for example, a cryptographic key, cryptographic key generation information, contents reproduction control information, contents copy control information or other contents attribute information or cryptographic key data corresponding to such recording data can be recorded in a mode wherein they cannot be read by an ordinary data reading process and efficient reproduction processing can be performed upon data reproduction.

0013In order to attain the object described above, according to an aspect of the present invention, there is provided an information recording processing apparatus which is defined by claim 1.

0014According to a further aspect of the present invention, there is provided an information reproduction processing apparatus as defined by claim 4.

0015According to a yet further aspect of the present invention, there is provided an information recording medium as defined by claim 7.

0016According to an additional aspect of the present invention, there is provided an information recording processing method as defined by claim 11.

0017According to a further additional aspect of the present invention, there is provided an information reproduction processing method as defined by claim 14.

0018According to a yet further additional aspect of the present invention, there is provided a computer program for executing a data recording process, as defined by claim 17.

0019According to a yet further additional aspect of the present invention, there is provided a computer program for executing a reproduction process as defined by claim 18.

0020It is to be noted that each of the computer programs according to the present invention can be provided through a computer-readable storage medium such as a recording medium such as, for example, a CD, an FD or an MO or through a communication medium such as a network, for example, to a computer system which can execute various program codes. By providing the program in a computer-readable fashion, a process based on the program is implemented on the computer system.

0021With the information recording processing apparatus, information reproduction processing apparatus, information recording media, information recording processing methods, information reproduction processing methods and computer programs, where additional information such as copy protection information to be recorded on an information recording medium is encrypted and recorded and also a cryptographic key for the encrypted additional information is recorded together, as data processing for the cryptographic key data to be recorded, a seed is generated based on an error correction code corresponding to the additional information. Then, a scrambling or bit position conversion process in which random numbers generated based on the seed are applied is executed for the cryptographic key data, and resulting cryptographic key data is recorded on the information recording medium. Consequently, the cryptographic key can be recorded with increased difficulty in analysis on the information recording medium.

0022The additional information may be recorded as a pit signal while the cryptographic key data is recorded as a physical recording signal different from the pit signal such as, for example, a wobble signal. In this instance, reading of the additional information and reading of the cryptographic key data can be executed parallelly, and consequently, the series of processes including acquisition of a seed necessary for generation of a cryptographic key based on read data, generation of a cryptographic key based on the acquired seed and decryption of the additional information based on the generated cryptographic key can be executed at a high speed. Consequently, efficient data reproduction can be anticipated.

0023Embodiments of the invention will now be described, by way of example only, with reference to the accompanying drawings in which: <ul id="ul0001" list-style="none" compact="compact"><li><figref idref="f0001">FIG. 1</figref> is a block diagram showing a configuration of an information recording processing apparatus to which an example embodiment of the present invention is applied;</li><li><figref idref="f0002">FIG. 2</figref> is a diagrammatic view illustrating a configuration of sector data as recording data used in the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0003">FIG. 3</figref> is a block diagram illustrating details of seed generation and a data process for a cryptographic key by the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0004">FIG. 4</figref> is a block diagram illustrating details of a scrambling process in which random numbers generated based on a seed are applied and which is executed as a data process for a cryptographic key by the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0005">FIG. 5</figref> is a block diagram illustrating details of a bit position conversion process in which random numbers generated based on a seed are applied and which is executed as a data process for a cryptographic key by the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0006">FIGS. 6A and 6B</figref> are diagrammatic views illustrating details of pit signal recording of main data and wobble signal recording of a cryptographic key by the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0007">FIG. 7</figref> is a schematic view illustrating details of recorded data of an information recording medium;</li><li><figref idref="f0008">FIGS. 8A and 8B</figref> are diagrammatic views illustrating details of pit signal recording of additional data and wobble signal recording of a cryptographic key of additional data by the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0009">FIG. 9</figref> is a flow chart illustrating a data processing sequence for a cryptographic key by the information recording processing apparatus of <figref idref="f0001">FIG. 1</figref>;</li><li><figref idref="f0010">FIG. 10</figref> is a block diagram showing a configuration of an information reproduction processing apparatus to which an example embodiment of the present invention is applied;</li><li><figref idref="f0011">FIG. 11</figref> is a flow chart illustrating a data processing sequence for a cryptographic key by the information reproduction processing apparatus of <figref idref="f0001">FIG. 1</figref>; and</li><li><figref idref="f0012">FIG. 12</figref> is a block diagram showing a configuration and a process of an information recording and reproduction processing apparatus to which an example embodiment of the present invention is applied.</li></ul>

0024Referring first to <figref idref="f0001">FIG. 1</figref>, there is shown a configuration of an information recording processing apparatus to which an example embodiment of the present invention is applied. It is to be noted that the information recording processing apparatus described here includes a mastering apparatus as an apparatus for producing a disk original called master disk and is an apparatus which can be applied as a recording and reproduction apparatus for an information recording medium such as a DVD or a Blu-Ray disk which can be utilized by general users or an apparatus including an information recording medium drive such as a personal computer (PC). In other words, the information recording processing apparatus includes an information processing apparatus which executes a data recording process not only on a master disk but also on various information recording media which are recordable or rewritable information recording media.

0025Referring to <figref idref="f0001">FIG. 1</figref>, the information recording processing apparatus shown is configured so as to record main data 101 including contents information and additional information including, for example, copy protection information (CP Data) and a cryptographic key (copy protection key (CP Key)) 102 as a cryptographic processing key for the main data 101 on a disk (information recording medium) 150.

0026The contents information and the additional information (copy protection information) included in the main data 101 are recorded as data encrypted with the cryptographic key (copy protection key (CP Key)) 102 or as data encrypted with a cryptographic key generated based on the cryptographic key (copy protection key (CP Key)) 102 and are stored as the encrypted data on the disk 150.

0027The additional information included in the main data 101 includes copy protection information such as key information to be applied in a cryptographic process of contents or reproduction control information and includes data including information whose leakage is to be prevented. For example, an EKB (Enabling Key Block) as a cryptographic key block in which key information necessary for reproduction of encrypted contents is placed in an encrypted form is recorded.

0028The EKB is a cryptographic key data block from which a cryptographic key necessary for decryption of the contents can be acquired only by a process based, for example, on a device key stored in an information processing apparatus of a user having a valid license. The EKB is set as a cryptographic key block which permits acquisition of a key only by a user device (information processing apparatus) which has a valid contents utilization license but can inhibit acquisition of the cryptographic key by an invalidated (revoked) user device in accordance with an information distribution system according to a hierarchical tree structure.

0029It is to be noted that the EKB is an example of data which forms additional information, and the additional information in the present invention is not limited to the EKB but may be any information which is recorded as secret information on a disk such as other cryptographic key information, cryptographic key generation information, contents reproduction control information or license information. There is no limitation to data which composes the additional data.

0030In <figref idref="f0001">FIG. 1</figref>, processing blocks 111 to 116 belong to a main data processing system for executing processing for main data while processing blocks 121 to 125 belong to a cryptographic key processing system for executing processing of a cryptographic key. First, processing of main data is described.

0031The main data 101, that is, contents information and additional information, are first encrypted with a cryptographic key (copy protection key) 102 by an encryption processing section 111. The encoded main data is divided into units (sectors) of approximately 2k bytes by an EDC encoding section 112. Further, an error detection code (EDC) for checking whether or not the information of approximately 2k bytes includes some error is added to each sector by the EDC encoding section 112.

0032<figref idref="f0002">FIG. 2</figref> illustrates a sector data configuration wherein an EDC is added. One sector includes a data part 161 of 2,048 bytes and an EDC (Error Detection Code) part 162 of 4 bytes.

0033The data with an EDC added by the EDC encoding section 112 shown in <figref idref="f0001">FIG. 1</figref> is subject to a scrambling process for randomizing the signal pattern after modulation executed by a scramble processing section 113. An ECC block production section 114 encodes error correction information (ECC) for the scrambled data and adds the encoded error correction information and address information to the scrambled data to produce an ECC block.

0034To the ECC block data having the error correction information and the address information added thereto, synchronism information is added by a main data modulation processing section 115, and a modulation process for producing a recording or reproduction band signal conforming to a recording or reproduction channel of a disk is performed for the ECC block data by the main data modulation processing section 115. Further, the output signal of the main data modulation processing section 115 is converted into an NRZI (Non Return to Zero Inverted) signal wherein the polarity of a pulse is inverted in accordance with the value of "0 or "1 of modulation data, and the NRZI signal is outputted as a recording signal to an LD (laser diode) driver 116.

0035The (LD laser diode) driver 116 modulates a laser diode (LD) 131 of an optical pickup (OP) 130 based on the NRZI signal. The modulated laser light is condensed on the disk 150 by an objective lens (obj lens) 133 to record the encrypted data of the main data 101 including the contents information and the additional information on the disk 150.

0036Now, a recording process of a cryptographic key (copy protection key) 102 applied to encrypt the main data 101 including contents information and additional information (copy protection information) is described.

0037An ECC block generation section (CP ECC) 121 encodes error correction information (ECC) for cryptographic key data of a cryptographic key (copy protection key) 102 to produce an ECC block wherein an ECC is set to the cryptographic key data. Then, a scramble processing section (CP Scramble) 122 executes a scrambling process.

0038In particular, the scramble processing section (CP scramble) 122 applies a seed inputted thereto from a seed generation section (seed generator) 117 to generate random numbers and applies the generated random numbers to execute a scrambling process for the cryptographic key data inputted thereto from the ECC block generation section 121.

0039The scrambled cryptographic key data are inputted to a bit position conversion section 123, which executes a bit position conversion process in which random numbers generated based on the seed inputted from the seed generation section 117 are applied.

0040Details of the processes by the seed generation section 117, scramble processing section 122 and bit position conversion section 123 are described with reference to <figref idref="f0003">FIG. 3</figref> and so forth.

0041<figref idref="f0003">FIG. 3</figref> shows the EDC encoding section 112 which belongs to the main data processing system shown in <figref idref="f0001">FIG. 1</figref> and the ECC block generation section 121, scramble processing section 122 and bit position conversion section 123 which belong to the processing system for the cryptographic key 102, and the seed generation section 117.

0042The seed generation section 117 receives EDC bit information set as an error detection code corresponding to main data by the EDC encoding section 112 which belongs to the processing system for main data. Then, the seed generation section 117 executes an arithmetic operation process based on the received EDC bit information to produce seed information to be outputted to the ECC block generation section 121 and scramble processing section 122 which belong to the processing system for the cryptographic key 102.

0043The EDC encoding section 112 which belongs to the processing system for main data produces, for each of the contents and additional information, sector data composed of a data part of 2,048 bytes and an EDC (Error Detection Code) part of 4 bytes as described hereinabove with reference to <figref idref="f0002">FIG. 2</figref>.

0044The seed generation section 117 receives the EDC as an error detection code set by the EDC encoding section 112 and executes an arithmetic operation process based on the composition bit information of the EDC to generate a seed.

0045As seen in <figref idref="f0003">FIG. 3</figref>, an arithmetic operation section 1171 provided in the seed generation section 117 executes an arithmetic operation process based on an input of the EDC and generates and outputs seed information of a predetermined bit number. As a function for use for execution of the arithmetic operation, for example, an arithmetic operation process on the extension field GF (28) or the like is applied.

0046For example, the arithmetic operation section 1171 of the seed generation section 117 executes an arithmetic operation process based on an input of the EDC as an error correction code to generate seed information of n+m bits and outputs part (n bits) of the seed information as a seed A to the scramble processing section 122 which belongs to the cryptographic key processing system. Further, the arithmetic operation section 1171 outputs the remaining m bits as a seed B to the bit position conversion section 123.

0047Now, a scrambling process in which seed information is applied and which is executed by the scramble processing section 122 which belongs to the processing system for the cryptographic key 102 is described with reference to <figref idref="f0004">FIG. 4</figref>.

0048The scramble processing section 122 receives cryptographic data set as an ECC block from the ECC block generation section 121 of the processing system for the cryptographic key 102 and receives seed information (a seed A) generated based on error detection information (EDC) of main data by the seed generation section 117 as described hereinabove with reference to <figref idref="f0003">FIG. 3</figref>.

0049As seen in <figref idref="f0004">FIG. 4</figref>, the scramble processing section 122 inputs the seed A to a random number generator (Random Generator) 171 provided in the scramble processing section 122 so that random numbers based on the seed A are generated by the random number generator 171. For example, the value of the seed A is set as an initial value to the random number generator 171, and a random number is generated for each system clock by the random number generator 171. The random number generator 171 may be of the type which is formed, for example, from a linear feedback shift register (LFSR) or from a pseudo-random number generator.

0050The random numbers generated based on the seed A by the random number generator 171 are used in an exclusive ORing arithmetic operation executed by an exclusive ORing section 172 with cryptographic key data (copy protection data) inputted from the ECC block generation section 121 to produce scramble data. The produced scramble data is inputted to the bit position conversion section 123 at the next processing stage in the cryptographic key processing system.

0051The bit position conversion section 123 executes a bit position conversion process in which seed information (a seed B) for the scramble data of the cryptographic key data inputted from the scramble processing section 122 is applied.

0052The bit position conversion process in which the seed information (seed B) is applied and which is executed by the bit position conversion section 123 is described with reference to <figref idref="f0005">FIG. 5</figref>.

0053The bit position conversion section 123 inputs the seed B to a random number generator 181 therein so that random numbers based on the seed B are generated by the random number generator 181. For example, the value of the seed B is set as an initial value to the random number generator 181, and a random number is generated for each system clock by the random number generator 181. Similarly to the scramble processing section 122, the random number generator 181 may be of the type which is formed, for example, from a linear feedback register (LFSR) or from a pseudo-random number generator.

0054On the other hand, component bits of the cryptographic key data (copy protection key data) inputted from the scramble processing section 122 are successively stored into a data storage region of a RAM 182. The random numbers generated based on the seed B by the random number generator 181 are inputted as a read address data for the RAM 182 to the RAM 182.

0055Component bits of the scrambled cryptographic key data (copy protection key data) stored in the RAM 182 are read out and outputted serially in accordance with the address generated based on the random numbers.

0056For example, where the scrambled data of the cryptographic key data (copy protection key data) inputted from the scramble processing section 122 is 128-bit data, the 128-bit scrambled data inputted from the scramble processing section 122 are successively stored into memory positions of the RAM 182 such that the first bit is stored into the memory position of the address "001 of the RAM 182, the second bit into the memory position of the address "002 , the third bit into the memory position of the address "003 , and so forth until the 128th bit is stored.

0057Meanwhile, the random number generator 181 outputs address data 1 to 128 at random to the RAM 182 based on the seed B generated based on the error detection information (EDC) for the main data. For example, the random number generator 181 outputs such addresses as [125], [003], [084], to the RAM 182.

0058The RAM 182 applies each address inputted from the random number generator 181 as a data readout address and first reads out bit information stored at the position of the memory position [125], and reads out bit information stored at the position of the memory position [003], and then reads out bit information stored at the position of the next memory position [084]. Through such processes, replacement of the positions of the component bits of the scrambled cryptographic key data stored in the RAM 182 is executed, and resulting bit position conversion data is outputted.

0059The bit position conversion data outputted from the bit position conversion section 123 is inputted to a CP modulation processing section 124 which is a next processing section which belongs to the cryptographic key processing system.

0060Description of the recording process of the cryptographic key 102 is described with reference back to <figref idref="f0001">FIG. 1</figref>. The CP modulation processing section 124 executes a modulation process for the cryptographic key data outputted from the bit position conversion section 123 and executes a modulation process of converting the cryptographic key data into a physical recording signal different from a pit signal, for example, into a recording and reproduction band signal conforming with, for example, a wobble recording or reproduction channel of the disk. The wobble signal is hereinafter described in detail.

0061The data modulated by the CP modulation processing section 124 is NRZI converted and then outputted to an EO (Electro-Optic: electro-optic element) driver 125. Thus, the laser light from the laser diode 131 is polarized by a modulation process of the electro-optic element 132 of the optical pickup 130 based on the NRZI data to record a physical recording signal different from a pit signal, for example, a wobble signal, based on the cryptographic key 102 data on the disk 150.

0062A recording process of the wobble signal is described with reference to <figref idref="f0006">FIGS. 6A and 6B</figref>. Main data composed of contents information and additional information including copy protection information is recorded as the lengths of a space and a mark depending upon a pit 201.

0063On the other hand, the cryptographic key 102 data of a copy protection key or the like is recorded by controlling the wobble recording, that is, the deflection of a bit stream on which main data is recorded.

0064In a wobble recording signal 221 illustrated in <figref idref="f0006">FIG. 6A</figref>, a pit train for recording of main data exhibits a deflection (H → L) at which it shifts from an upper stage to a lower stage shown in <figref idref="f0006">FIG. 6A</figref>. This wobble recording signal 221 corresponds to a recoding bit "1 of the cryptographic key data.

0065In a wobble recording signal 222 illustrated in <figref idref="f0006">FIG. 6B</figref>, a pit train for recording of main data exhibits a deflection (L → H) at which it shifts from a lower stage to an upper stage shown in <figref idref="f0006">FIG. 6B</figref>. This wobble recording signal 222 corresponds to a recoding bit "0 of the cryptographic key data.

0066It is to be noted that one bit in a wobble recording signal corresponds to a state of a deflection of recording pits within the length of 68 T (T is the one channel length of the pit signal) of main data recorded as the pit signal, and one component bit of the cryptographic key data is read for every 68 T of the main data recorded as pit information.

0067By recording main data, which includes contents information and additional information including copy protection information, as pit information and recording a cryptographic key as a wobble recording signal in this manner, the main data and the cryptographic key can be recorded in an overlapping relationship on the disk. Further, upon data reading, the plurality of different kinds of information (main data and cryptographic key) can be read in parallel.

0068It is to be noted that, while a mode wherein a cryptographic key is recorded as a wobble recording signal is described as an example, the cryptographic key need not be recorded as a wobble recording signal but can be recorded by various recording modes if it is recorded as a physical recording signal different from a pit signal. For example, a recording method which is based on the variation in pit width, in pit shape, in depth of the groove or the like which can be recorded only on a ROM disk may be applied.

0069A configuration of a disk produced by the recording process described above is described with reference to <figref idref="f0007">FIG. 7</figref>. It is to be noted that, as described hereinabove, the information recording processing apparatus shown in <figref idref="f0001">FIG. 1</figref> is an apparatus which can be applied as an apparatus which includes a mastering apparatus as a production apparatus for a disk original called master disk and further includes a recording and/or reproduction apparatus for an information recording medium such as a DVD or a Blu-Ray disk which can be utilized by general users or an information recording medium drive of a PC or the like. In other words, the information recording processing apparatus includes also an information processing apparatus which executes a data recording process not only for a master disk but also for various recordable or rewritable information recording media, and <figref idref="f0007">FIG. 7</figref> shows a master disk produced by a recording process of main data and cryptographic key data described above or an information recording medium such as a DVD or a Blu-Ray disk which is produced by a stamping process based on a master disk and can be utilized by general users.

0070The information recording medium 310 includes a data region 311 in which contents are stored, a lead-in region 312 in which additional information such as copy protection information or contents reproduction control information is recorded, and a lead-out region 313 set to an outer circumferential portion around the data region 311 of the disk.

0071The information in the lead-in region 312 cannot be read in an ordinary data reproduction process but can be read only at a specific processing step such as a contents cryptographic key acquisition step or a reproduction control information acquisition step executed during execution of a specific contents reproduction program.

0072The lead-in region 312 records additional information such as a contents key as a cryptographic key for contents or data necessary for generation of the contents key, copy protection information such as reproduction control information and so forth. The additional information is recorded as data encrypted with the cryptographic key 102 (refer to <figref idref="f0001">FIG. 1</figref>) described hereinabove. The recorded data is recorded as pit data while the cryptographic key is recorded as a wobble recoding signal set corresponding to the recoding pits of the additional data. In other words, the additional data and the cryptographic key for the additional data are recorded in an overlapping relationship on the disk.

0073<figref idref="f0008">FIGS. 8A and 8B</figref> illustrate an example of the recording signal in the lead-in region. In particular, <figref idref="f0008">FIG. 8A</figref> illustrates additional information recorded as pit information and including copy protection information such as reproduction control information and so forth. <figref idref="f0008">FIG. 8B</figref> illustrates cryptographic key information formed from a wobble recording signal recorded as deflections or shifts of the recording pits of <figref idref="f0008">FIG. 8A</figref>.

0074The additional information formed from pit information is data encrypted with the cryptographic key which can be acquired from the wobble recording signal.

0075An information reproduction processing apparatus can parallelly read the additional information formed from pit information and cryptographic key data formed from a physical recording signal different from the pit signal, for example, a wobble recording signal, both recorded in an overlapping relationship in the lead-in region. The information reproduction processing apparatus acquires the cryptographic key based on the read wobble recording signal and performs decryption of the encrypted additional data acquired by the reading of the pit information to acquire the additional data.

0076It is to be noted that, while additional data and cryptographic key data here are recorded in the lead-in region, they may otherwise be recorded in the data region.

0077Now, a data processing sequence of a cryptographic key based on a seed acquired applying an EDC of main data, which is executed by the information recording processing apparatus of the present invention is described with reference to <figref idref="f0009">FIG. 9</figref>.

0078At step S101, an error detection code (EDC) of main data is acquired. The main data is contents or additional data and is data recorded as pit information on the disk.

0079At step S102, seeds (seed A and seed B) are generated based on the acquired error detection code (EDC) of the main data. This process is executed by the seed generation section 117 executing arithmetic operation based on the EDC to generate the seeds as described hereinabove with reference to <figref idref="f0003">FIG. 3</figref>.

0080Then at step S103, a random numbers are generated based on the seed A, and scrambling of cryptographic key data is executed with the generated random numbers. This process is executed by the scramble processing section 122 as described hereinabove with reference to <figref idref="f0004">FIG. 4</figref>.

0081Then at step S104, random numbers are generated based on the seed B, and bit position conversion of the cryptographic key data is executed with the generated random numbers. This process is executed by the bit position conversion section 123 as described hereinabove with reference to <figref idref="f0005">FIG. 5</figref>.

0082Then at step S105, a modulation process is performed for the cryptographic key data for which the scrambling process and the bit position conversion process have been performed, and the modulated cryptographic key data is recorded as a wobble signal on the disk.

0083Now, a process and a configuration of an information reproduction processing apparatus which reproduces the information recording medium (refer to <figref idref="f0007">FIG. 7</figref>) on which the recording data described above is recorded are described with reference to <figref idref="f0010">FIG. 10</figref>.

0084The information reproduction processing apparatus shown in <figref idref="f0010">FIG. 10</figref> executes a process of reading contents from a disk 500 and reading additional information formed from copy protection information and so forth. Such contents and additional information are recorded in the form of a pit signal as main data 501 and recorded as encrypted data with a cryptographic key (copy protection key) 502. Accordingly, upon a reproduction process of the main data, a decryption process in which the cryptographic key (copy protection key) 502 is applied is required.

0085First, a reproduction sequence of the main data 501 formed from contents information and additional information formed from copy protection information and so forth recorded on the disk 500 is described.

0086The main data is recorded as a pit signal on the disk 500 and read from the disk 500 by an optical pickup 510. The read signal is subject to a decryption process executed by a demodulation section (modulation DEC) 511.

0087Then, an error correction processing section (ECC) 512 executes an error correction process based on an ECC and acquisition of address information. Then, a descrambling section (Descramble) 513 performs a process for canceling the scramble, that is, a descrambling process, for the information scrambled so as to make modulation signals appear at random upon data recording thereby to descramble the scrambled information.

0088Further, an error detection section (EDC) 514 verifies presence/absence of a data error using an error detection code (EDC) set in a unit of a sector of 2 kB of the descrambled information. Thereafter, a decryption processing section (Decryption) 515 performs a decryption process in which the cryptographic key (copy protection key) 502 generated based on the data (wobble signal) read from the disk 500 is used to produce main data 501, and the thus produced main data 501 is outputted.

0089Now, a process of reading a cryptographic key (copy protection key) 502 from the disk 500 and generating the cryptographic key (copy protection key) 502 is described. A cryptographic key (copy protection key) is read from the disk 500, on which it is recorded as a physical recording signal different from a pit signal such as, for example, a wobble signal, as a push-pull signal by the optical pickup 510.

0090The read wobble signal is subject to a demodulation process executed by a CP demodulation section (CP modulation DEC) 521. The demodulated signal is subject to a bit position conversion process executed by a bit position conversion section 522.

0091The bit position conversion section 522 receives a seed generated based on an error detection code (EDC) from a seed information generation section 517, generates random numbers based on the seed and executes bit position conversion based on the generated random numbers.

0092The seed information generation section 517 has a configuration similar to that of the seed generation section 117 in the information recording processing apparatus described hereinabove with reference to <figref idref="f0001">FIG. 1</figref>. The seed information generation section 517 receives an error detection code (EDC) for main data and executes an arithmetic operation process to generate a seed (seed B) to be outputted to the bit position conversion section 522 and another seed (seed A) to be outputted to a descrambling section 523.

0093The bit position conversion section 522 receives the seed B from the seed information generation section 517 and applies random numbers generated based on the seed B to execute an algorithm opposite to that of the bit position conversion process executed in the recording process described hereinabove with reference to <figref idref="f0005">FIG. 5</figref> to generate data having bit positions same as those prior to the bit position conversion process.

0094The data generated by the process of the bit position conversion section 522 and having the original bit positions is inputted to the descrambling section 523, by which a descrambling process is performed for the data.

0095The descrambling section 523 receives the seed A from the seed information generation section 517 and applies random numbers generated based on the seed A to execute an algorithm reverse to that of the scrambling process in the recording process described hereinabove with reference to <figref idref="f0004">FIG. 4</figref> to perform descrambling to generate data same as the data prior to the scrambling process.

0096The data descrambled by the descrambling section 523 is inputted to a CP error correction processing section (CP ECC) 524, by which an error correction process based on an ECC is performed to acquire a cryptographic key (copy protection key) 502.

0097The decryption processing section 515 applies the cryptographic key (copy protection key) 502 acquired by this process to execute a decryption process of the main data including additional data, and resulting main data 501 is outputted.

0098For example, a cryptographic key of additional data including copy protection information is recorded as a wobble signal corresponding to pits of the additional data including the copy protection information, and reading of the pit signal and reading of the wobble signal can be executed parallelly. Thus, the process for the main data executed at blocks 511 to 515 illustrated in <figref idref="f0010">FIG. 10</figref> and the process for the cryptographic key executed at blocks 521 to 524 can be executed parallelly, and consequently, efficient reading, decoding and reproduction of data can be achieved.

0099Now, a processing sequence of reading a cryptographic key from a disk and generating the cryptographic key is described with reference to <figref idref="f0011">FIG. 11</figref>. At step S201, a wobble signal is read from a disk and a demodulation process is executed for the wobble signal. At step S202, an error detection code (EDC) for main data is acquired, and seeds (seed A and seed B) are generated based on the acquired error detection code (EDC) for main data. This process is a process similar to that described hereinabove with reference to <figref idref="f0003">FIG. 3</figref> and is a process executed by the seed information generation section 517 executing arithmetic operation based on the EDC to generate seeds.

0100Then at step S203, random numbers are generated based on the seed B, and bit position conversion of the cryptographic key data is executed with the generated random numbers. This process is a process wherein an algorithm opposite to that of the bit position conversion process executed in the data recording process described hereinabove with reference to <figref idref="f0005">FIG. 5</figref> to generate data having bit positions same as those prior to the bit position conversion process.

0101Then at step S204, random numbers are generated based on the seed A, and descrambling of the cryptographic key data is performed with the generated random numbers. This process is a process wherein an algorithm opposite to that of the scrambling process executed in the data recording process described hereinabove with reference to <figref idref="f0004">FIG. 4</figref> to generate data same as those prior to the scrambling process.

0102Then at step S205, an error correction process is performed based on an ECC and a cryptographic key (copy protection key) is acquired. The cryptographic key (copy protection key) is used to execute a decryption process of the main data including additional data.

0103Now, a configuration of an information recording and reproduction processing apparatus including, for example, a DVD drive or a Blu-Ray drive as a reproduction processing device for an information recording medium is described with reference to <figref idref="f0012">FIG. 12</figref>.

0104A disk 600 is a DVD or a Blu-Ray disk on which encrypted main data is recorded as a pit signal and cryptographic data is recorded as a wobble signal as described hereinabove.

0105A recording/reproduction signal inputting/outputting section (OP) 611 includes an optical system including a laser diode, a reproduction amplifier, a two-axis actuator and so forth and executes reading of a signal on the disk 600. It is to be noted that the apparatus shown in <figref idref="f0012">FIG. 12</figref> has an apparatus configuration which can perform also a recording process.

0106A wobble (Wobble) signal processing circuit 612 acquires the wobble signal from the disk 600 and executes a demodulation process for a read signal.

0107A cryptographic key decoder (CP key DEC) 616 receives a timing signal from a recording/reproduction signal processing section (RW circuit) 615 and error detection code (EDC) data for main data inputted from a modulation/demodulation ECC processing circuit 617, and generates seeds (seed A and seed B) based on the error detection code (EDC) data. Then, the cryptographic key decoder 616 generates random numbers based on the thus generated seeds, executes bit position conversion and descrambling applying the generated random numbers, and executes error correction based on the ECC to generate a cryptographic key (copy protection key).

0108The recording/reproduction signal processing section 615 performs, upon recording of data on the disk 600, recoding compensation, but performs, upon reproduction of data from the disk 600, binary data reproduction by means of a PLL or the like. The modulation/demodulation ECC processing circuit 617 executes a modulation or demodulation process of recording or reproduction data, executes error correction encoding or decoding and error correction processes, and further executes reproduction of address information. It is to be noted that the modulation/demodulation ECC processing circuit 617 extracts an error detection code (EDC) set to each sector data of the main data and outputs the extracted error detection code to the cryptographic key decoder 616.

0109A decryption processing section 618 applies a cryptographic key (copy protection key) generated based on a wobble signal read from the disk 600 by the cryptographic key decoder 616 to execute a decryption process for encoded main data and encoded copy protection information, for example, as encoded additional data and a decoding process for encoded contents. Then, the decryption processing section 618 outputs a result of the decoding to an AV system 620 which executes a contents reproduction process.

0110A servo signal control circuit 613 performs servo control of the two-axis actuator and seek control of the optical pickup head. A spindle control circuit 614 performs control of a spindle motor which rotates the disk 600. A system control section (Syscon) 619 communicates with the AV system 620 and controls the processing blocks.

0111A process executed to acquire a cryptographic key (copy protection key) recorded as a wobble signal on the disk 600 and reproduce main data and, for example, copy protection information as additional information is described.

0112First, an additional information reproduction command is sent from the AV system 620 to the system control section 619. The system control section 619 acquires address information from the modulation/demodulation ECC processing circuit 617 and controls the servo signal control circuit 613 to perform a seeking operation of the pickup to move so that the optical pickup head can read data at a desired address position.

0113A read signal of the optical pickup head from the thus set position is outputted to the wobble signal processing circuit 612. The wobble signal processing circuit 612 demodulates the read wobble signal, and the demodulation signal is inputted to the cryptographic key decoder 616.

0114The cryptographic key decoder 616 receives a timing signal from the recording/reproduction signal processing section 615 and further receives an error detection code (EDC) set to the additional information recorded as a pit signal from the modulation/demodulation ECC processing circuit 617. Further, the cryptographic key decoder 616 performs bit information position re-arrangement with random numbers generated using a seed generated applying the EDC data, descrambling and error correction to obtain a cryptographic key (copy protection key).

0115On the other hand, the additional information such as copy protection information recorded in an overlapping relationship with the cryptographic key (copy protection key) data is reproduced simultaneously by a data process or the like to which a PLL circuit is applied in the recording/reproduction signal processing section 615. The reproduced data is demodulated by the modulation/demodulation ECC processing circuit 617, and a thus demodulated bit stream is error correction decoded based on the ECC.

0116Further, a decryption process of encrypted additional data to which the cryptographic key generated based on the wobble signal by the cryptographic key decoder 616 is applied is executed by the decryption processing section 618, and a result of the decryption is outputted to the AV system 620.

0117Since, at the pit signal positions (for example, the lead-in region) at which the additional information as the main data is recorded, cryptographic key data of the additional information is recorded as a wobble signal, reading of the encoded additional data and reading of the cryptographic key from the disk can be executed in parallel without accessing them separately. Since parallel processing is executed for such processes as demodulation of read data and error correction, the processing time up to the decryption process of encoded main data with a generated cryptographic key is reduced and efficient reading and reproduction of data can be anticipated.

0118Subsequently, a reproduction process of encoded contents recorded on the disk 600 is described.

0119First, a contents reproduction command is sent from the AV system 620 to the system control section 619. The system control section 619 acquires address information from the modulation/demodulation ECC processing circuit 617 and controls the servo signal control circuit 613 to execute a seeking operation in accordance with the acquired address information to move the optical pickup to the desired address position.

0120Then, a reproduction signal is acquired from the optical pickup, and the recording/reproduction signal processing section 615 uses a PLL or the like to obtain reproduction data. The reproduction data is subject to a demodulation process and an error correction process executed by the modulation/demodulation ECC processing circuit 617.

0121Then, the decryption processing section 618 executes a decryption process for the encoded contents read from the disk 600. The cryptographic key generated based on the wobble signal by the cryptographic key decoder 616 is applied to the decryption process.

0122Contents in the form of, for example, an image/sound reproduction bit stream obtained as a result of the decryption process by the decryption processing section 618 are outputted to the AV system 620.

0123It is to be noted that the additional information recorded on the information recording medium is data encoded with the cryptographic key recorded as a wobble signal, and also the contents are recorded as encrypted data. The contents are encrypted with a cryptographic key recorded as a wobble signal or a contents key generated based on the cryptographic key.

0124Accordingly, where the contents are encrypted with the contents key, a contents key generation process to which the cryptographic key recorded as the wobble signal is applied is executed, and the a decryption process for the encrypted contents is executed with the contents key.

0125The additional information sometimes includes information necessary for acquisition of a contents key described above such as, for example, an EKB described hereinabove. The additional information includes key data to be applied in a decryption process for encrypted contents, key generation information, contents reproduction control information, contents copy control information and attribute information of contents.

0126The additional information is recorded as encoded data and, for example, as a pit signal in the lead-in region of the disk as described hereinabove, and the cryptographic key data as a key applied in the encryption of the additional information is recorded as a wobble signal at a position corresponding to the pit information.

0127Accordingly, upon reproduction of the additional information, reading of the encoded additional information and reading of the cryptographic key applied in the encryption of the additional information can be executed in parallel. Consequently, such processes as demodulation of the read data and error correction can be executed in parallel, and generation of a cryptographic key, decryption of the additional information with the generated cryptographic key and reproduction can be performed efficiently.

0128It is to be noted that, while the series of processes described above can be executed by hardware, it may otherwise be executed by software or by a composite configuration of hardware and software. Where the series of processes is executed by software, a program which defines a processing sequence is installed into a memory in a computer incorporated in hardware for exclusive use or into a computer for universal use which can execute various functions by installing various programs.

0129For example, the program can be recorded in advance on a hard disk or a ROM (Read Only Memory) as a recording medium. Or, the program may be stored (recorded) temporarily or permanently on a removable recording medium such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto-Optical) disk, a DVD (Digital Versatile Disc), a magnetic disk or a semiconductor memory. Such a removable recording medium as just mentioned can be provided as package software.

0130It is to be noted that the program may not be installed from such a removable recording medium as described above into a computer but may otherwise be transferred from a download site to a computer by wireless communication or through a network such as a LAN (Local Area Network) or the Internet to a computer by wire communication. The computer may receive the program transferred in this manner and install the program into a built-in recording medium thereof such as a hard disk.

0131It is to be noted that the steps described in the present specification may be but need not necessarily be processed in a time series in the order as described or may be executed parallelly or individually based on the processing capacity of the apparatus which executes the processing or as occasion demands. Further, in the present specification, the term "system" is used to represent a logical collective configuration composed of a plurality of apparatus which may be or may not be included in the same housing.

0132While a preferred embodiment of the present invention has been described using specific terms, such description is for illustrative purpose only, and it is to be understood that changes and variations may be made without departing from the scope of the following claims.