JP4333131B2 - Data transfer method and data transfer system - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
  The present invention relates to a data transfer method and a data transfer system suitable for transferring / recording content data such as music.ToIt is related.
[0002]
[Prior art]
For example, an HDD (hard disk drive) of a personal computer is handled as a primary recording medium to store content data such as music, and the stored content data is transferred and recorded on another recording medium (secondary recording medium). There is a usage pattern in which music or the like is enjoyed on the next recording medium side. The content data refers to main data for the purpose of distribution / transfer / use of music data, video data, game data, computer software, and the like.
[0003]
In this case, the HDD stores content data such as music reproduced from package media such as CD-DA (Compact Disc Digital Audio) and DVD (Digital Versatile Disc), or a communication network to which a personal computer is connected. Content data downloaded from an external music server or the like is stored. Then, the user connects a recording / playback device for the secondary recording medium to the personal computer, and copies (duplicates) or moves (moves) the content data stored in the HDD to the secondary recording medium. Play content data such as music.
[0004]
As the secondary recording medium, for example, a memory card using a semiconductor memory such as a flash memory, a mini disk as a magneto-optical disk, a CD-R (CD Recordable), a CD-RW (CD Rewritable), a DVD-RAM, DVD-R, DVD-RW, etc. can be considered.
Recorders / players compatible with these media (recording media) are widely used as recording devices and playback devices compatible with secondary recording media, such as stationary recording / playback devices and portable type recording / playback devices. Each user records / reproduces content data in accordance with his / her preference and owned equipment.
[0005]
For example, when considering the use form of such content data, it is necessary to consider copyright protection for the content data. For example, if a user uses content data distribution services or purchases package media and accumulates content data in the HDD and then the content data can be copied to a secondary recording medium without restriction, the copyright A situation occurs in which the legitimate protection of the person is not taken. For this reason, various technologies and data processing arrangements have been proposed that allow copyright protection to be maintained in the handling of content as digital data, one of which is a standard called SDMI (SECURE DIGITAL MUSIC INITIATIVE). is there.
[0006]
Although a detailed description of the data path established by the SDMI is avoided, FIG. 14 shows a simplified conceptual diagram.
For example, as an SDMI data path, content stored in a personal computer equipped with an HDD as the primary recording medium 100 can be transferred / recorded to the secondary recording medium 102 for copyright protection and general user benefits (private reproduction). The right to be taken into account.
The secondary recording medium 102 here is a recording medium corresponding to the SDMI method using encrypted content.
[0007]
Encrypted recording and check-out / check-in management are performed for content stored in the primary recording medium 100 such as an HDD, for example, content ripped from a CD or the like, distributed content, and other content.
[0008]
Copy transfer from the primary recording medium 100 to the secondary recording medium 102 or the like is called “checkout”. The right to execute this checkout is set as a rule a predetermined number of times, for example, three times.
On the other hand, returning the content data from the check-out destination secondary recording medium 102 to the primary recording medium 100 is called “check-in”. This check-in has substantially the same result as the move, but the content data itself does not need to be transferred because the content data originally existed in the primary recording medium, and the content data is simply erased on the secondary recording medium 102 ( (Deletion) may be performed, and a process of restoring one checkout right is performed on the primary recording medium accordingly. In this sense, it is distinguished from a so-called move.
[0009]
Such management of check-out rights, for example, always allows content data to coexist on up to three secondary recording media, while limiting the diffusion of content data beyond that.
Note that content data is encrypted and recorded on these SDMI-compliant primary recording medium 100 and secondary recording medium 102.
[0010]
On the other hand, in recent years, there has been a problem that content data is copied infinitely by digital copy and distributed through a network such as the Internet or a recording medium. Recording devices made before this became a social problem as copyright infringement as of now, have not taken sufficient measures against it, and the content is stored in plaintext (non-encrypted data) on the recording medium. ) Is often recorded.
Recording encrypted content on such a recording medium according to the SDMI method has a great disadvantage for a legitimate user. For example, a widely used recording medium called a mini disk (MD) does not originally consider the recording / reproduction of encrypted data, and many MD recording / reproducing apparatuses that are widely used have encryption / decryption processing functions. There is no.
[0011]
For this reason, if the SDMI-compatible mini-disc recording / reproducing apparatus is used for encryption recording and check-out / check-in management, the mini-disc as the secondary recording medium can be reproduced only by the SDMI-compatible reproducing apparatus. In other words, it cannot be played back by many existing mini-disc playback devices, and the disadvantage of a legitimate user is great.
Therefore, in FIG. 14, it is permitted to transfer content data from the primary recording medium 100 such as an HDD to the secondary recording medium 101 such as a mini-disc and record it in plain text under a predetermined condition.
That is, as a condition for permitting SDMI content to be transferred to the secondary recording medium 101 side and copy-recorded in a decrypted state, for example, the number of checkout rights for the corresponding content remains. Based on the premise, (1) the recording / reproducing apparatus loaded with the secondary recording medium is authenticated as a valid device, and (2) the copyright holder recognizes copy recording of the content data to be transferred. (3) Check-in is prohibited.
[0012]
By satisfying the transfer conditions (1), (2), and (3), unlimited copy transfer is prevented and a copyright protection function is secured. Further, the copyright protection function can be provided even when the transmission path for transfer is in an encrypted state (decryption is performed by the recording / reproducing apparatus on the secondary recording medium side).
Further, as is well known, SCMS (Serial Copy Management System) functions as a copyright protection function in a mini-disc recording / reproducing apparatus. Simply put, it is a function that permits digital copy for only one generation. Copy diffusion is also limited by this SCMS function.
Then, by making it possible to copy (check out) plaintext content data to the secondary recording medium 101 such as a mini-disc, it is possible to prevent the above-described disadvantages of the user.
A technique for permitting plain text copy to the secondary recording medium 101 such as a mini disk under the above conditions is shown in the following document.
[0013]
[Patent Document 1]
JP 2002-175664 A
[0014]
[Problems to be solved by the invention]
  By the way, content data like the above mini-discPlaintextConsidering the secondary recording medium 101 on the premise of recording, the following problems remain.
[0015]
In general, a mini-disc can record music content and the like through various routes. For example, a mini-disc recording device has an analog input terminal (line input / microphone input) and a digital input terminal. Analog audio signals input from the analog input terminal and digital audio signals input from the digital input terminal can be received. It can be recorded on a mini-disc.
In recent years, there are also content sales terminals (kiosk terminals) that sell music by recording music on a mini-disc. Users can set their own mini-discs to content sales terminals to play music. Can be purchased.
In other words, content data can be recorded on the mini-disc by various routes other than the checkout. Of course, content data recorded through such a route may require copyright protection, but content that can be freely used by the user, such as music that is composed and played by the user, or audio recorded with a microphone. There are also contents that are permitted to be copied by the author.
[0016]
For example, a copy of content that can be freely used by the user or a copy within the allowable range of the SCMS employed in the minidisc system should be executable by the user.
In other words, the secondary recording medium 101 in FIG. 14 is required to be able to copy the above-mentioned valid range to the primary recording medium 100 on the contrary.
[0017]
However, as described above, the check-in is prohibited as a condition for permitting the check-out of the plaintext copy while conforming to the SDMI method. From this, the check-in direction, that is, the content from the secondary recording medium 101 to the primary recording medium 100 is prohibited. Transfer is not considered.
For this reason, even if the content is legitimately used, the content data recorded on the mini-disc is copied or moved to the primary recording medium 100, and the content is used by using a device (for example, a personal computer) on the primary recording medium side. It is assumed that data cannot be reproduced and viewed and content data cannot be managed.
As the user-side device environment, systematization of AV equipment such as a mini-disc recording / reproducing device and information processing device such as a personal computer has been facilitated, and the device is owned using a primary recording medium 100 such as an HDD. The ability to manage and use content data is very useful for users. However, the fact that the user cannot take such a usage pattern for content data recorded on a minidisc, for example, restricts the user's legitimate benefit.
[0018]
Of course, for example, an audio signal reproduced from a mini-disc is input to an apparatus on the primary recording medium side via an analog line connection, or a data path other than SDMI, that is, a primary audio recording medium side using a digital audio interface such as IEC 958 standard. Copying is possible by inputting to the device, but in that case, expansion / recompression of the compression method (ATRAC method) in the MD system, D / A, and A / D conversion are required, so that the sound quality Deterioration is inevitable. Also, music content data can be transferred only at the same speed, and requires the same time as music playback.
[0019]
For this reason, for example, plaintext content data (compressed music content data, etc.) recorded on the secondary recording medium 101 such as a mini-disc is fast and safe in consideration of copyright. There is a need for technology that enables transfer to the Internet.
[0020]
[Means for Solving the Problems]
  In accordance with such circumstances, the present invention makes it possible to realize copying or moving transfer of content data from the secondary recording medium to the primary recording medium in consideration of safety for copyright protection. Objective.
  To this end, the present invention provides a data transfer method and a data transfer system.Theprovide.
[0021]
  The data transfer method of the present invention includes:Recording / reproduction with respect to the first recording medium (primary recording medium) is enabled, and the content data recorded on the first recording medium is allowed to be copied to another recording medium in the encrypted state a predetermined number of times. Authentication between the host device that manages the copy management method and the terminal device that can reproduce data from the second recording medium (secondary recording medium) on which the content data is recorded in an unencrypted state A first confirmation step for confirming the management data of the content data recorded on the second recording medium on the terminal device side, and a copy of the content data as a confirmation result of the management data A transmission step for encrypting and transmitting the content data from the terminal device to the host device if the information indicating prohibition is not confirmed; and the host device In the second confirmation step of confirming the control information included in the content data transmitted from the terminal device, and in the control information included in the content data in the second confirmation step, the content data If no information indicating duplication prohibition is confirmed, the content data is recorded as content data to be managed by the duplication management method to complete effective recording on the first recording medium on the host device side. An activation step.
Further, when content data is moved from the second recording medium to the first recording medium, the content data recorded on the second recording medium can be further moved in the first confirmation step. If it is possible to move, the content data is encrypted and transmitted from the terminal device to the host device as the transmission step, and the content is included in the management data in the first confirmation step. When information indicating prohibition of data replication is confirmed, or when information indicating prohibition of replication of the content data is confirmed in the control information included in the content data in the second confirmation step, In the recording validation step, the content data is erased from the second recording medium on the terminal device side. For the content data, the unmanaged content data by the replication management method, to complete a valid record for the host device of the first recording medium.
[0022]
  The data transfer system of the present inventionCopy management that enables data recording / reproduction with respect to the first recording medium and allows the content data recorded on the first recording medium to be copied to another recording medium in an encrypted state a predetermined number of times. A data transfer system in which a host device that performs management by a system and a terminal device that can reproduce data from a second recording medium in which content data is recorded in an unencrypted state are connected so as to be capable of data communication It is. The terminal device includes a terminal-side communication unit that executes a content data transfer session with the host device based on authentication with the host device, and an encryption unit that encrypts the content data. The management data of the content data reproduced from the second recording medium is confirmed, and if the information indicating that the content data is prohibited to be copied is not confirmed as the confirmation result, the content data is Terminal-side control means for causing the terminal-side communication means to execute a transfer session that is encrypted and transmitted to the host device. The host device, based on authentication with the terminal device, a host-side communication means for executing a content data transfer session with the terminal device, and content reproduced from the second recording medium If the information indicating that the copy of the content data is prohibited is not confirmed in the control information included in the content data when the data is transferred, the content data to be managed by the copy management method is used. As data, host-side control means for completing effective recording on the first recording medium on the host device side is provided.
[0023]
Further, when the content data is moved from the second recording medium to the first recording medium, the terminal-side control means can further move the content data recorded on the second recording medium. If it is possible to move, the terminal side communication means performs encrypted transmission of the content data to the host device, and the host side control means performs the management data in the host side control means. If the information indicating the prohibition of copying of the content data is confirmed from the above, or if the information indicating the prohibition of copying of the content data is confirmed in the control information included in the transferred content data, the terminal After confirming erasure of the content data on the second recording medium on the device side, As unmanaged content data by copying management system, to complete the effective recording to the host device of the first recording medium.
[0024]
The terminal-side control means performs a process of encrypting and transmitting an erasure completion notification in response to erasing the content data from the second recording medium after the content data is transferred. The means performs processing for completing the effective recording of the content data on the first recording medium in response to confirming the encrypted deletion completion notification.
[0025]
MaIn the transfer session, the host-side control means instructs the terminal device side on the encryption block unit when transferring the content data, and the terminal-side control means is instructed by the encryption means. The content data is encrypted in units of encrypted blocks, and the process of causing the terminal side communication means to transmit the encrypted content data is performed.
[0027]
According to the present invention as described above, the transfer of content data from the secondary recording medium in the terminal device to the primary recording medium in the host device requires that the host device and the terminal device be authenticated first. Whether or not the data is appropriate is determined based on the management data of the data and the control information in the content data. The content data is encrypted and transferred.
The management data of the content data is, for example, SCMS information, and the control information in the content data is, for example, a watermark added by the author side. Thus, illegal copying can be prevented by copying or moving content data.
[0028]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described in the following order.
1. System configuration
2. Configuration of primary recording media equipment (PC)
3. Configuration of secondary recording medium side device (MD recording / reproducing device)
4). Functional configuration for upload
5). First upload method
6). Second upload method
7. Transfer session
8). Content transfer process
[0029]
1. System configuration
FIG. 1 shows the system configuration of the embodiment of the present invention.
The primary recording medium side device 1 corresponds to the host device in the present invention, and the secondary recording medium side device 20 corresponds to the terminal device of the present invention. Therefore, the configuration of the primary recording medium side device 1 and the secondary recording medium side device 20 in FIG. 1 corresponds to the data transfer system of the present invention.
[0030]
The primary recording medium side device 1 is formed by, for example, a personal computer. Hereinafter, for convenience of explanation, the primary recording medium side device 1 may be referred to as a personal computer 1. However, the primary recording medium side device 1 is not necessarily formed by a personal computer.
The primary recording medium side device 1 performs the above-described check-out / check-in operation using the SDMI method by software that executes, for example, storage / transfer of SDMI content data activated on a personal computer.
The HDD 5 built in (or externally attached to) the personal computer 1 is used as a primary recording medium. In the description of the embodiment, the HDD 5 is a primary recording medium. Of course, the recording medium corresponding to the primary recording medium is not limited to the HDD. For example, a medium such as an optical disk or a magneto-optical disk, a semiconductor memory built in a device, a portable type Various devices such as a semiconductor memory (memory card or the like) are conceivable.
[0031]
The personal computer 1 can download content data such as music from a distribution server or the like via a communication network (not shown). Some of the content data to be distributed include those in which the copyright owner embeds control information such as copy restrictions as watermarks in the data, while others do not have watermarks added. These distribution contents are stored in an encrypted state as SDMI-compliant contents in the HDD 5 in the personal computer 1.
[0032]
Further, the HDD 5 of the personal computer 1 can also store content data such as music reproduced from a package medium such as a CD or DVD by an internal or external disk drive device.
[0033]
The personal computer 1 is connected to a secondary recording medium side device 20 or the like, and content data stored in the HDD 5 can be transferred to the secondary recording medium side device 20 or the like. The secondary recording medium side device 20 or the like is a recording / reproducing device for the secondary recording medium. The content data transferred from the personal computer 1 can be copied and recorded on the secondary recording medium.
[0034]
Various specific examples of the secondary recording medium side device 20 and the like are conceivable, but the secondary recording medium side device 20 shown in FIG. 1 is an MD recording / reproducing apparatus corresponding to, for example, a mini-disc (hereinafter referred to as a “mini disk”). The secondary recording medium side device 20 is also referred to as “MD recording / reproducing apparatus 20”).
The secondary recording medium side device 20 records SDMI content requiring copyright protection on a secondary recording medium (for example, the mini disc 101) in a state where the encryption is broken.
[0035]
As described with reference to FIG. 14, the SDMI content is originally recorded in an encrypted state on the secondary recording medium side. For example, as a secondary recording medium compatible with SDMI, a memory card using a semiconductor memory such as a flash memory is assumed. In this case, the secondary recording medium side device is a recording / reproducing device for an SDMI compatible memory card. In this case, the SDMI content is recorded in an encrypted state on the secondary recording medium (secondary recording medium 102 in FIG. 14).
When such a secondary recording medium side device is connected, the personal computer 1 performs content data check-out / check-in operations in accordance with the SDMI method.
[0036]
However, as described above, content data is recorded in plain text on the secondary recording medium in the MD recording / reproducing apparatus 20 shown in FIG. In order to maintain copyright protection even in such a case, the personal computer 1 allows the content data for the MD recording / reproducing apparatus 20 to be transferred by encrypted transfer when the above-described predetermined condition such as authentication of the MD recording / reproducing apparatus 20 is satisfied. Is performed so that recording in the plain text state after the decryption on the mini disk 101 is permitted.
Check-in is not permitted for content data checked out by the personal computer 1 from the MD recording / reproducing apparatus 20. For this reason, conventionally, transfer from the MD recording / reproducing apparatus (secondary recording medium side device) 20 to the personal computer (primary recording medium side device) 1 cannot be performed. In other words, a processing system in the check-in direction in such a case is not prepared.
[0037]
However, there is a case where copyright infringement does not occur as copy or move transfer from the secondary recording medium side device 20 to the primary recording medium side device 1 in a form other than check-in. Therefore, in the case of the present embodiment, content data is transferred from the secondary recording medium side device 20 to the primary recording medium side device so that, for example, copying or moving from the mini disc 101 to the HDD 5 can be executed. Such transfer is referred to as upload for the sake of explanation.
[0038]
In addition to the checkout content, content such as music can be recorded on the mini-disc 101 as a secondary recording medium by analog input or digital input function in the MD recording / reproducing apparatus 20 (or other MD recording apparatus). In addition, a content such as music can be recorded by loading the mini disc 101 into the content sales terminal.
In this example, upload control is performed so that uploading of content data recorded on the mini-disc 101 through various routes can be appropriately performed, that is, without losing copyright protection.
The upload control is realized by the upload program in the personal computer 1 and the corresponding upload program on the MD recording / reproducing apparatus 20 side.
[0039]
In the description of the embodiment, the secondary recording medium side device 20 is an MD recording / reproducing device, and the secondary recording medium 101 is a mini disc. However, the secondary recording medium 101 to which upload control described later is applied is a mini disc. In addition to the disk, for example, a memory card using a semiconductor memory such as a flash memory, an optical disk such as a CD-R (CD Recordable), a CD-RW (CD Rewitable), a DVD-RAM, a DVD-R, and a DVD-RW. Conceivable. Basically, the upload control of this example may be applied to media that records content data in plain text. Therefore, the secondary recording medium side device 20 may be a recording / reproducing apparatus corresponding to these media.
[0040]
The personal computer 1 and the MD recording / reproducing apparatus 20 are connected based on a transmission standard such as USB (Universal Serial Bus) or IEEE1394. Of course, content data or the like may be transferred via a wired transmission line of another transmission standard or a wireless transmission line. In the description, it is assumed that the USB connection.
[0041]
The upload control in this example is roughly as follows.
First, target content data, that is, plaintext content data recorded on the mini-disc 101, has a control signal (watermark) added in advance by a copyright holder or the like. In addition, since the SCMS function works in the recording device for the mini disc 101, SCMS information is included as management data for content data.
Such upload control for content data includes the following operations (1) to (4).
[0042]
(1) Device validity authentication processing is performed between the personal computer 1 as a host device and the MD recording / reproducing device 20 as a terminal device.
(2) Content copyright handling authentication is performed by both SCMS check and watermark check.
(3) The MD recording / reproducing apparatus 20 encrypts the content data and the like and transfers them at high speed to the personal computer 1 over USB.
(4) Recording (recording as a valid content file) on the primary recording medium (HDD 5) in a state where copyright protection is ensured.
[0043]
Here, whether or not copying to the primary recording medium 100 or uploading as a move is appropriate from the viewpoint of copyright protection is performed by the SCMS check and watermark check of (2) above.
The watermark and SCMS information will be described.
[0044]
A watermark is a technique for incorporating hidden data into a signal, and is used to determine the presence or absence of copyright by referring to the hidden data.
An audio signal target is also defined by SDMI, and a watermark is added in advance to EMD (electronic music distribution) content, content by a content sales apparatus (kiosk terminal), and the like.
The contents of the watermark are set by the copyright owner based on their will. In short, depending on the watermark, the copyright owner can indicate whether or not to permit copying, or conditions for permitting copying.
[0045]
SCMS (Serial Copy Management System) is a copy management method adopted in mini-discs and the like. Basically, only one generation of digital copy is permitted.
The SCMS information on the mini-disc is recorded in the U-TOC sector 0 or the P-TOC sector 0, which is the mini-disc management information.
The configuration of these TOC sectors is already known and will not be described in detail. However, in the U-TOC sector 0 (P-TOC sector 0 in the case of a read-only disc), each recorded content (track: song) 1 byte (track mode byte) is prepared as attribute information together with a start address, an end address, and the like indicating a recording area on the disc.
[0046]
Information of each bit of the 1-byte track mode recorded corresponding to each content is assigned as follows.
bit7: Write Protected Bit
“0” = write protected (checked out content)
“1” = write permited
bit6: Copyright Protected
“0” = Copyright Protected
“1” = Not Protected
bit5: Generation
“0” = Original
“1” = 1st or higher
bit4: Audio Bit
“0” = audio
“1” = reserved
bit3 ~ 1: Codec Mode
“000” = ATRAC3 LP4
“001” = ATRAC3 LP2
“010” = ATRAC Mono
“011” = ATRAC Stereo
"Other" = reserved
bit0: Emphasis
“0” = OFF
“1” = ON
[0047]
In such a track mode, 2 bits of bit 6 and bit 5 are valid as SCMS information, and are interpreted as follows according to the values of bit 6 and bit 5.
“1x”: Copyright Not Protected ・ ・ ・ Unlimited copy OK
“00”: Copyright Protected-Original Generation: Only one generation can be copied
“01”: Copyright Protected-1st or Higher Generation
[0048]
The data path of the content recorded in plain text on the mini disc 101, the SCMS information, and the state of the watermark are organized as follows.
There are mainly the following five data paths for content until recording on the mini disc 101.
(1) Analog recording: Self-recording by content line input, microphone input, D / A converter input, etc. recorded by analog input to MD recording device
(2) Digital recording: Content digital interface input digitally recorded on the MD recording device, self-recording by A / D converter input, etc.
(3) Checkout (EMD): Content recorded on a primary recording medium by electronic music distribution and then checked out to the minidisc 101
(4) Checkout (non-EMD): Content recorded on the primary recording medium by ripping or the like and then checked out to the minidisc 101
(5) Kiosk recording: Content recorded by content sales terminals
[0049]
If you include a playback-only mini-disc, that is, a mini-disc pre-recorded with music content by embossed pits,
▲ 6 ▼ Pre-recorded
There is also a data path.
[0050]
The status of SCMS information and watermarks set according to the data paths (1) to (5) is as follows.
(1) Analog recording: 1st generation digital copy with SCMS “00” OK / No watermark
(2) Digital recording: Copy prohibited with SCMS “01” / No watermark
However, when the original is an analog signal and digitally input via an A / D converter, it is the same as in the case of analog recording. Also, depending on the source of the original digital signal, a watermark may be added.
(3) Checkout (EMD): SCMS “01” prohibits copying / with watermark
(4) Checkout (non-EMD): Copy prohibited with SCMS “01” / No watermark
▲ 5 ▼ Kiosk record: SCMS “01” prohibits copying / with watermark
[0051]
As described above, the upload control of this example performs the SCMS information and the watermark check for the content in which the SCMS information is managed and the watermark may be added. To be judged.
That is, in the case of self-recorded content as analog input (1) and digital input (2) above, basically no watermark is added, so that SCMS is “00” and upload as a copy. It becomes permission condition of. Of course, if a watermark exists, copying is not executed if the watermark is prohibited from copying.
On the other hand, in the cases of (3) checkout (EMD), (4) checkout (non-EMD), and (5) kiosk recording, the SCMS information is “01”, so copying cannot be executed. In the case of (3) checkout (EMD) and (5) kiosk recording, if the prohibition of copying is indicated by a watermark, it is determined that copying cannot be executed at that point.
[0052]
Even if it is determined that copying is not possible, if it is an upload as a move, it may be executed. This is because the content does not increase and is considered not to be a factor that hinders copyright protection, and it is possible to make it easier for general users to use the system by moving.
However, the content moved to the primary recording medium (HDD 5) by uploading as a move is basically not subjected to SDMI check-out / check-in management, and can only be played back from the HDD 5. Be treated. In other words, if content that is not allowed to be copied by SCMS information or watermark is moved out of HDD 5, if it can be checked out from HDD 5, copying that is prohibited by SCMS or watermark becomes possible. is there.
Therefore, even if the content checked out from the HDD 5 to the mini disc 101 is uploaded as a move, it is not treated as a check-in.
An exception is when content that is permitted to be copied by SCMS information and watermarks is moved.
[0053]
In the case of a move, not only confirmation of permission / prohibition of copying is made, but it is also determined whether the move is possible, that is, whether it can be erased (deleted) from the mini disk 101. If the content is not erasable or is not in an erasable state, the move is not executed.
[0054]
By the way, although the content as pre-recorded is also mentioned as the above (6), since the pre-recorded content cannot be erased, the move is not executed. However, if the copy permission is confirmed by both the SCMS information and the watermark, the copy is possible.
[0055]
2. Configuration of primary recording media equipment (PC)
FIG. 2 shows a configuration of the primary recording medium side device 1 which is a host device. The example described here is a case where the primary recording medium side device 1 is formed by a personal computer, but an AV device capable of transferring data, for example, by constructing a configuration having the same function with dedicated hardware. Etc. may be formed.
[0056]
In the case of this example, a software program that executes a function as a host device is installed in the personal computer 1, thereby realizing a primary recording medium side device that executes upload control described later. In this specification, “personal computer” or “computer” has a broad meaning as a so-called general-purpose computer.
The program can be recorded in advance in a hard disk (HDD) 5 or ROM 3 as a recording medium built in the computer.
Alternatively, the program is stored temporarily on a removable recording medium 90 such as a flexible disk, a CD-ROM (Compact Disc Read Only Memory), an MO (Magneto optical) disk, a DVD (Digital Versatile Disc), a magnetic disk, or a semiconductor memory. It can be stored permanently (recorded). Such a removable recording medium 90 can be provided as so-called package software.
[0057]
The program is installed in the computer from the removable recording medium 90 as described above, or transferred from the download site to the computer wirelessly via a digital satellite broadcasting artificial satellite, or a LAN (Local Area Network), The program can be transferred to a computer via a network such as the Internet, and the computer can receive the program transferred in this way by the communication unit 8 and install it in the built-in HDD 5.
[0058]
The computer 1 in FIG. 2 includes a CPU (Central Processing Unit) 2. An input / output interface 10 is connected to the CPU 2 via the bus 12. When a command is input by the user operating the input unit 7 including a keyboard, a mouse, a microphone, and the like via the input / output interface 10, the CPU 2 reads the ROM (Read Only Memory) accordingly. ) The program stored in 3 is executed. Alternatively, the CPU 2 is transferred from a program stored in the HDD 5, a program transferred from a satellite or a network, received by the communication unit 8 and installed in the HDD 5, or a removable recording medium 90 such as an optical disk attached to the drive 9. The program read and installed in the HDD 5 is loaded into a RAM (Random Access Memory) 4 and executed. As a result, the CPU 2 executes checkout / checkin management of SDMI content and processing as upload control described later.
Then, the CPU 2 outputs the processing result from the output unit 6 constituted by an LCD (Liquid Crystal Display), a speaker, or the like, or from the communication unit 8 via the input / output interface 10 as necessary, Is recorded in the HDD 5.
[0059]
In this example, the communication unit 8 can communicate with various servers via a network (not shown). That is, the computer 1 can download network content such as music content from an external content server. The downloaded network content is processed as, for example, SDMI-compatible content, and is stored in the HDD 5 as SDMI content, for example. The SDMI content stored in the HDD 5 is a content to be checked out to a secondary recording medium side device that supports SDMI or an authenticated secondary recording medium side device (such as the MD recording / playback apparatus shown in FIG. 3) 20. .
In some cases, content may be ripped from a removable recording medium 90 such as an optical disk loaded in the drive 9 and stored in the HDD 5. This is also the content that is the target of check-out / check-in management.
[0060]
The connection unit 11 is a part that is connected to the secondary recording medium side device 20 or the like so that data communication is possible. For example, examples such as a USB interface and an IEEE 1394 interface are conceivable. Of course, another standard wired interface or a wireless interface using infrared rays or radio waves may be used.
[0061]
3. Configuration of secondary recording medium side device (MD recording / reproducing device)
A configuration example of the secondary recording medium side device (MD recording / reproducing apparatus) 20 is shown in FIG.
Since this example is an MD recording / reproducing apparatus, the secondary recording medium 101 is an example of a mini disk (a magneto-optical disk).
FIG. 3 shows only a processing system for recording / reproducing data with respect to the mini-disc as the secondary recording medium 101 and a processing system for authentication processing and data transfer with the primary recording medium side device 1. Since the drive system, servo system, reproduction output system, etc. for 101 are the same as those of a normal mini-disc recording / reproduction apparatus, detailed illustration is omitted.
[0062]
The CPU 21 is a system controller that controls the entire MD recording / reproducing apparatus 20. Specifically, for recording / reproduction with respect to the mini-disc 101, control of rotation drive, spindle servo, focus servo, tracking servo, thread servo, control of laser light and magnetic field application operation of the optical head / magnetic head, recording / reproduction Controls encoding / decoding of data. In addition, communication for authentication with the personal computer 1 and instructions for data generation, exchange of various commands from the personal computer 1, processing for transferred content data, and processing for upload control described later are also performed. Do.
Although not shown, an operation unit and a display unit are provided as a user interface. However, a user operation is monitored from the operation unit, processing corresponding to the operation, display control of the display unit, and the like are performed.
[0063]
The recording / reproducing unit 25 includes an optical head, a magnetic head, a disk rotation drive system, a servo system, and the like, and is a part that actually records / reproduces data to / from the mini disk 101.
[0064]
The encoding / decoding unit 24 encodes the recording data for the mini disc 101 and decodes the reproduction data reproduced from the mini disc 101. As is well known, in the case of a mini-disc system, the recording data is subjected to an ACIRC error correction code encoding process and an EFM modulation process. The encoding / decoding unit 24 performs ACIRC encoding and EFM encoding on the recording data and supplies the recording data to the recording / reproducing unit 25.
Further, at the time of reproduction, decoding processing such as binarization processing, EFM demodulation, and ACIRC error correction processing is performed on the data (RF signal) read and supplied from the recording / reproducing unit 25.
[0065]
The codec 23 is a part that performs compression processing and decompression processing by compression encoding of the ATRAC / ATRAC3 system.
Data recorded on the mini-disc 101 is data that has been subjected to the above-described encoding process after being subjected to ATRAC or ATRAC3 compression encoding. Accordingly, when data that has not been compression-encoded, such as PCM audio data, is input to the MD recording / reproducing apparatus 20 as recording data, the codec 23 performs ATRAC / ATRAC3-compression compression encoding. Data is supplied to the encoding / decoding unit 24.
At the time of reproduction, the data read out by the recording / reproducing unit 25 and decoded by the encoding / decoding unit 24 is data in a compression encoded state of the ATRAC / ATRAC3 system. For this reason, the codec 23 performs a decompression process for the compression of the ATRAC or ATRAC3 system, thereby demodulating digital audio data of, for example, 44.1 KHz and 16-bit quantization. This digital audio data is subjected to, for example, D / A conversion, analog signal processing, amplification processing, and the like in an output system circuit (not shown) to obtain a speaker output signal, which is reproduced as music or the like.
Alternatively, the digital audio data can be output to another device.
[0066]
The above configuration is a component provided in a recording / reproducing apparatus of a normal mini-disc system, but in the MD recording / reproducing apparatus 20 of this example, as a part corresponding to the personal computer as the primary recording medium side device 1, An interface unit 26 and an encryption processing unit 29 are provided.
[0067]
The interface unit 26 is a part that is connected to the connection unit 11 of the personal computer 1 in FIG. 2 and performs data communication with the personal computer 1. For this reason, a buffer unit 27 that buffers transmission / reception data and a transmission / reception processing unit 28 that performs signal processing on the interface are provided. For example, signal processing corresponding to a communication method such as USB or IEEE1394 is performed.
Communication with the personal computer 1 via the interface unit 26 includes reception of various commands from the personal computer 1, transmission / reception of data for authentication processing, transmission / reception of content, and the like.
[0068]
The encryption processing unit 29 is a part that supports content encryption processing, and includes a key storage unit 30 and an encryption and decryption processing unit 31.
The key storage unit 30 stores key information for decrypting encrypted content data transferred or for encrypting content data to be transmitted.
For example, a leaf key described later in the description of the transfer session is stored as key information unique to the device. Information for obtaining a root key, a content key, a session key, etc. used in the transfer session is also stored.
Further, the key storage unit 30 may store a key for authentication processing.
[0069]
The encryption and decryption processing unit 31 uses the information stored in the key storage unit 30 to generate an encryption key, decrypt data, and encrypt data.
For example, the encryption and decryption processing unit 31 can decrypt the SDMI content transmitted (checked out) in a state encrypted with the content key Kc, and obtain data in, for example, an ATRAC3 compressed state. The ATRAC3 compressed data decoded in this way can be recorded on the mini-disc 101 by the recording / reproducing unit 25 through the encoding process in the encoding / decoding unit 24.
Note that the SDMI content stored in the primary recording medium (HDD 5) is not necessarily obtained by encrypting ATRAC3 compressed data. For example, linear PCM data encrypted with a content key Kc can be considered. In that case, naturally, linear PCM data is obtained by the decryption processing in the encryption and decryption processing unit. In this case, the PCM data can be recorded on the mini-disc 101 by the recording / reproducing unit 25 after the ATRAC3 compression processing is performed by the codec 23 and after the encoding processing by the encoding / decoding unit 24.
[0070]
When uploading, the data reproduced from the mini-disc 101 is encrypted.
For example, ATRAC3 compressed data is encrypted. Alternatively, it is encrypted after being decompressed to linear PCM data.
[0071]
4). Functional configuration for upload
In the personal computer 1 and the MD recording / reproducing apparatus 20 having the above-described configuration, a functional configuration regarding the case where content is uploaded from the mini disc 101 to the HDD 5 is shown in FIG.
[0072]
In the MD recording / reproducing apparatus 20, a reproduction function 51, a transmission function 52, an encryption function 54, and a reproduction / transmission control function 53 for the mini disc 101 are provided.
The personal computer 1 is provided with an upload control function 61 and a reception / watermark check function.
[0073]
The playback function 51 of the MD recording / playback apparatus 20 is a function of playing back plaintext content data from the mini-disc 101, and is realized by the recording / playback unit 25 and the encoding / decoding unit 24 of FIG.
The encryption function 54 is a function for encrypting the content data reproduced from the mini disc 101 in a plain text state for upload transfer, and is realized by the encryption processing unit 29 in FIG.
The transmission function is a function for executing transmission as upload transfer to the personal computer 1, and is realized by the interface unit 26 of FIG.
The reproduction / transmission control function 53 is a function for performing operation control on the MD recording / reproducing apparatus 20 side during upload transfer. It also checks the SCMS information about the content data to be transferred and checks whether it can be moved. This is realized as control by the CPU 21 of FIG.
[0074]
The reception / watermark check function 62 in the personal computer 1 receives content data and performs a watermark check during upload transfer.
The upload control function 61 is a function for controlling the upload transfer operation in cooperation with the reproduction / transmission control function 53 on the MD recording / reproducing apparatus 20 side at the time of uploading. The recording control to the HDD 5 according to the operation result by the reception / watermark check function 62 is also performed.
The reception / watermark check function 62 and the upload control function 61 in the personal computer 1 are realized by the operations of the CPU 2, ROM 3, RAM 4, HDD 5, input / output interface 10, and connection unit 11 in FIG.
[0075]
When performing upload transfer, the upload control function 61 and the playback / transmission control function 53 communicate with each other via the USB control pipe to perform a linkage operation.
The transferred content data is reproduced from the mini-disc 101 by the reproduction function 51 and is encrypted by the encryption function 54. Then, it is transferred by the USB bulk in pipe by the transmission function 52.
During the operation so far, the reproduction / transmission control function 53 checks the SCMS information, and in some cases, checks whether the move is possible.
[0076]
Content data that is bulk-transferred by USB is received by the reception / watermark check function 62, and a watermark check is performed. In accordance with the check result, storage as a content file in the HDD 5 is performed based on the control of the upload control function 61. At this time, as the right information for the content file, for example, it is content that is subject to check-out / check-in management, or content that cannot be checked out and can be played back using the personal computer 1. Information is set.
[0077]
5). First upload method
An upload method (upload execution control procedure) realized by the functional block will be described. Here, a first upload method and a second upload method are assumed as upload methods.
The first upload method is a method in which the personal computer 1 side (upload control function 61) instructs whether to copy or move when an upload request is made.
On the other hand, the second upload method is a method in which the personal computer 1 makes an upload request without designating copy / move, and upload as a copy or move is performed according to the content status.
In either case, the upload control function 61 and the playback / transmission control function 53 are linked.
[0078]
The procedure as the first upload method will be described with reference to FIGS.
FIG. 5 shows a case where the personal computer 1 side issues an upload request instructing that the copy is made.
In this case, as the procedure S1, first, the SCMS information is checked for the content CT recorded on the mini disc 101 as the upload target.
In step S2, the check result of the SCMS information is confirmed, and if the copy is impossible in the SCMS information, the upload is prohibited in step S6. That is, the upload operation is terminated without being executed.
If copying is permitted as a result of checking the SCMS information, a watermark check is performed as step S3.
In step S4, the watermark check result is confirmed, and if copying is not possible due to the watermark, uploading is prohibited in step S7. That is, uploading to the HDD 5 is terminated without being completed.
On the other hand, if the result of the watermark check is copy OK, the content CT is recorded on the HDD 5 as step S5 and validated as a content file. In this case, the right information is set for the content file as content to be checked out / check-in managed.
[0079]
Next, FIG. 6 shows a case where the personal computer 1 has instructed that it is a move and made an upload request.
In this case, in step S11, first, it is checked whether or not the content CT that is the upload target recorded on the mini disc 101 can be moved.
Whether or not the content can be moved means whether or not the content can be erased from the mini-disc 101.
For example, when the content CT is prerecorded content, if the mini-disc is in an erroneous erasure prevention state (write prevention state by a cartridge slide lever or the like), the write protection is set as the U-TOC track mode. In the case where the content is validated and the content is prohibited from being erased, the content CT cannot be erased. Therefore, these items are confirmed as a move availability check, and if any one of them is applicable, it is determined that the move is impossible.
[0080]
In step S12, the result of checking whether or not the move is possible is confirmed. If it is determined that the move is impossible, the process proceeds to step S20 and the upload is judged as NG. That is, the upload operation for the purpose of moving is terminated without being executed.
If it is determined that the move is possible, the SCMS information is checked in step S13.
In step S14, the SCMS information check result is confirmed. If copying is permitted as the SCMS information check result, a watermark check is performed in step S15.
In step S16, if the watermark check result is confirmed and the copy is OK, the content CT is recorded on the HDD 5 in step S18 and validated as a content file. In this case, the right information is set for the content file as content to be checked out / check-in managed.
Prior to the validation of the content file in the HDD 5 in step S18, the content CT is erased on the mini disc 101 side in step S19. As long as this deletion is not confirmed, the content file is not validated as step S18.
[0081]
If copy is not possible as the SCMS information check result in step S14, or if copy is not possible as the watermark check result in step S16, the content CT is recorded in the HDD 5 as step S17, and the content file Enabled as However, in this case, the content file is not subject to checkout / checkin management, and for example, is a content that can only be reproduced and output (reproduction from a speaker or the like as the output unit 6 of the personal computer 1). Information is set.
Also in this case, before the content file is validated in the HDD 5 in step S17, the content CT is erased on the mini disc 101 side in step S19. Unless this deletion is confirmed, the content file is not validated as step S17.
[0082]
Although the move recording to the HDD 5 is performed as the procedure S17, when the procedure reaches the step S17, it is possible to simply reproduce the uploaded and transferred content from the output unit 6 or the like without performing the recording to the HDD 5. In that case, the erasure process in step S19 is not necessary. Further, in such a case, since the operation is not substantially “move” but simply using the personal computer 1, the operation is performed even when the move is disabled in step S 12. Also good.
[0083]
6). Second upload method
Next, the procedure as the second upload method will be described with reference to FIG.
FIG. 7 shows a case where the personal computer 1 side makes an upload request without designating copy / move.
In this case, as step S31, first, the SCMS information is checked for the content CT recorded on the mini-disc 101 and targeted for upload.
In step S32, the check result of the SCMS information is confirmed, and if the SCMS information can be copied, a watermark check is performed in step S33.
In step S34, the watermark check result is confirmed, and if the check result is copy OK, the content CT is recorded on the HDD 5 in step S35 and validated as a content file. In this case, the right information is set for the content file as content to be checked out / check-in managed.
[0084]
On the other hand, if copying is impossible as the SCMS information check result in step S32, or copying is impossible as the watermark check result in step S33, it is checked in step S36 whether the move is possible. The contents of checking whether or not the move is possible are the same as those described in the first upload method.
In step S37, the result of checking whether or not the move is possible is confirmed. If it is determined that the move is impossible, the process proceeds to step S40 and the upload is judged as NG. That is, the upload operation is terminated without being completed.
If it is determined that the content can be moved, the content CT is recorded on the HDD 5 in step S38 and validated as a content file. However, in this case, the content file is not subject to checkout / checkin management, and for example, is a content that can only be reproduced and output (reproduction from a speaker or the like as the output unit 6 of the personal computer 1). Information is set.
In this case, before the content file is validated in the HDD 5 in step S38, the content CT is erased on the mini disc 101 side in step S39. As long as this deletion is not confirmed, the content file is not validated as step S38.
[0085]
7. Transfer session
As the upload between the personal computer 1 and the MD recording / reproducing apparatus 20, any of the first and second upload methods may be adopted.
Hereinafter, a transfer session for executing these upload methods will be described in detail.
8 to 11 show communication and control processing between the personal computer 1 (upload control function 61: CPU2) as a transfer session for upload execution and the MD recording / playback apparatus 20 (playback / transmission control function 53: CPU21). Is shown.
8 to 11, the control process executed by the CPU 2 of the personal computer 1 is shown as steps F101 to F121, and the control process of the CPU 21 of the MD recording / reproducing apparatus 20 is shown as steps F201 to F219.
In the following description, processing described as “personal computer 1 side” refers to processing by the CPU 2 (upload control function 61) of the personal computer 1, and processing described as “MD recording / reproducing apparatus 20 side” is MD recording / reproduction. The processing by the CPU 21 (reproduction / transmission control function 53) of the apparatus 20 is assumed.
[0086]
In the case of performing uploading by transferring certain content data recorded on the mini disc 101 to the HDD 5 and recording it, the CPU 2 (upload control function 61) of the personal computer 1 performs the process of step F101 in FIG. Declare the start of authentication.
On the other hand, the CPU 21 (reproduction / transmission control function 53) of the MD recording / reproducing apparatus 20 notifies the personal computer 1 of an authentication start response as step F201.
Then, the personal computer 1 side requests a leaf ID in step F102, and in response to this, the MD recording / reproducing apparatus 20 side transmits the stored leaf ID in step F202.
The leaf ID is an ID uniquely assigned to the terminal device, and it is a condition for device authentication to have a valid and currently valid leaf ID.
In step F103, the personal computer 1 checks whether or not the MD recording / reproducing apparatus 20 is a valid terminal apparatus based on the received leaf ID. If it is determined that the device is not a valid device, the authentication is not established and the process ends in an error.
[0087]
The personal computer 1 authenticates the connected MD recording / reproducing apparatus 20 by checking the leaf ID and confirming whether or not it is a device having a currently valid leaf ID. An authentication method using encryption (public key encryption) may be executed.
[0088]
When the device validity is confirmed by the authentication process, the personal computer 1 side transmits an EKB (enabling Key Block) at Step F104. The EKB is information for the MD recording / reproducing apparatus 20 side to calculate an encryption key as the root key Kroot.
On the MD recording / reproducing apparatus 20 side, as step F203, a root key Kroot is calculated using the transmitted EKB.
In step F204, the completion of calculation of the root key Kroot is notified to the personal computer 1 side.
[0089]
Next, the personal computer 1 transmits a session start request in step F105 of FIG. In this case, the random number N1 generated on the personal computer 1 side is transmitted together with the declaration of the start of the upload session.
When the MD recording / reproducing apparatus 20 receives a session start request, it first generates a random number N2 in step F205. In step F206, random numbers N1 and N2 and a root key Kroot are used to generate a session key Ks using a specific algorithm. For example,
Ks = CBC MAC (Kroot, N1 || N2)
A session key Ks is generated as follows.
[0090]
Next, the MD recording / reproducing apparatus 20 side returns a session start response to the personal computer 1 side as step F207. At this time, the random number N2 generated on the MD recording / reproducing apparatus 20 side is transmitted together with the upload session start declaration.
On the personal computer 1 side, in step F106, the random number N1, N2 and the root key Kroot are used, and the same specific algorithm as the MD recording / reproducing apparatus 20 side, for example, Ks = CBC MAC (Kroot, N1 || N2) Ks is generated.
Thus, the same session key Ks can be shared on the personal computer 1 side and the MD recording / reproducing apparatus 20 side.
[0091]
Subsequently, in step F107, the personal computer 1 transmits a content key Kc for the content data to be transferred. At this time, a unique ID (CID) for the content is also transferred as necessary.
Furthermore, in this case, in order to prevent tampering and outflow of the content key Kc in particular, the data to be transmitted is encrypted with the session key Ks as, for example, DES_CBC (Ks, padding_4bytes || CID || cc) and transferred onto the USB. To do.
In response to this, the MD recording / reproducing apparatus 20 decrypts the content key Kc encrypted and transmitted in step F208, that is, DES_CBC (Ks, padding_4bytes || CID || cc) using the session key Ks, and the content. Decrypt key Kc. In step F209, the personal computer 1 is notified of the completion of decryption of the content key Kc.
[0092]
The notification of completion of decryption of the content key Kc allows the personal computer 1 side to recognize that preparation for encryption of content data has been completed on the MD recording / reproducing apparatus 20 side.
Therefore, the processing on the personal computer 1 side proceeds to step F108 in FIG. 10 and performs upload object notification. This is information for designating content to be uploaded from the personal computer 1 side as a track number on the mini-disc 101 and notification for requesting content information.
When the above-described first upload method is performed, for example, at this time, the content number is also notified whether the upload is a copy or a move. On the other hand, when the second upload method is performed, the content number (track number) may be notified without specifying the copy / move.
[0093]
  On the MD recording / reproducing apparatus 20 side, it is possible to recognize which track (content) among the tracks recorded on the mini-disc 101 is the upload target by the upload object notification.
  Therefore, the MD recording / reproducing apparatus 20 side determines whether or not uploading is possible for the content to be uploaded in step F210. That is, in the case of the first upload method and a copy instruction,FIG.The SCMS information in steps S1 and S2 is checked.
  In the case of the first upload method and a move instruction,FIG.In steps S11 to S14, the move availability check and the SCMS information check are performed.
  In the case of the second upload method, the SCMS information in steps S31 and S32 in FIG. 7 is checked, and the move availability check in steps S36 and S37 is further performed.
[0094]
Then, the MD recording / reproducing apparatus 20 side transmits the upload object temporary response in step F211 based on the result of the upload permission / inhibition determination in step F210. In this case, the check result includes a notification indicating whether the transfer for uploading is OK or NG. In the case of upload transfer OK, a notification of whether the copy is OK or the move is OK is included. Furthermore, in the case of upload transfer OK, information requested by the personal computer 1 such as the track mode, content size, and data size related to bulk transfer is notified.
When the personal computer 1 receives the upload object temporary response, it determines from the contents whether or not the upload transfer is NG in step F109. That is, the result of checking the SCMS information on the MD recording / reproducing apparatus 20 (and checking whether or not to move) is confirmed. If the result is OK, the process proceeds to actual content data transfer for uploading.
The upload NG at this stage is a case corresponding to the procedure S6 in FIG. 5 or the procedure S20 in FIG. 6 or the procedure S40 in FIG. The case where it is determined as upload NG will be described later.
[0095]
The personal computer 1 side needs to know in advance what kind of content is received when the content designated as the upload target is received and recorded on the HDD 5, but the MD recording / reproducing device 20 side uploads the content. If the transfer is OK, information such as the data size is transmitted by the upload object primary response described above, so that necessary information can be obtained, thereby completing the preparation for transfer.
[0096]
When it is confirmed that the upload transfer is OK on the MD recording / reproducing apparatus 20 side, the content data is transferred as the process of step F110 on the personal computer 1 side and the process of step F212 on the MD recording / reproducing apparatus 20 side. Is done.
In this case, in the MD recording / reproducing apparatus 20, the content data reproduced by the reproduction function 51 is encrypted by the encryption function 54, and transmitted by the USB bulk-in transfer by the transmission function 52.
The content data encryption and data block to be transferred in this case will be described later with reference to FIGS.
[0097]
When the transfer of the content data is started from the MD recording / reproducing apparatus 20 and the reception by the personal computer 1 is started, the personal computer 1 performs reception processing and watermark check by the reception / watermark check function 62. The received content data is recorded on the HDD 5. However, at this time point, the content data is simply recorded on the HDD, and the content file is not valid as it is.
[0098]
When the transfer of the content data is completed, the MD recording / reproducing apparatus 20 side transmits a transfer completion notification in step F213.
Since the personal computer 1 is informed of the data size to be transferred in advance, it can check the validity of the current data transfer when receiving the transfer completion notification.
The personal computer 1 confirms the watermark check result in step F111. For the transferred content data, it is confirmed whether copying or moving can be permitted as a result of the watermark check. As described with reference to FIGS. 6 and 7, even if the watermark check result cannot be copied, it may be OK if it is a move.
The upload NG at this stage corresponds to the procedure S7 in FIG. 5 or the procedure S40 via the procedure S34 in FIG. The case where it is determined as upload NG will be described later.
Note that the processing in step F111 is performed after reception of the transfer completion notification for convenience of explanation, but may actually be performed during the reception processing in step F110.
[0099]
If the copy or move is OK in step F111, the processing on the personal computer 1 proceeds to step F113 in FIG. Here, in order to add the content data information to the file received on the personal computer 1 side and recorded on the HDD 5, the MD recording / reproducing apparatus 20 side is requested for fringe information (for example, a track title) on the content.
On the other hand, the MD recording / reproducing apparatus 20 side transmits fringe information as step F214. As a result, the personal computer 1 can acquire fringe information.
[0100]
Next, in step F114, the personal computer 1 determines whether or not the current transfer is a move and branches the process.
That is, in the case of the first upload method, the process branches depending on whether the personal computer 1 has instructed copy transfer or move transfer.
In the case of the second upload method, the SCMS information check result on the MD recording / reproducing apparatus 20 side obtained by the upload object temporary response in step F211 and the move availability result, and the watermark check result in step F111 Based on the above, it is determined whether the copy is made as the procedure S35 in FIG. 7 or the move is made as the procedure S38, and the processing is branched.
[0101]
If the current upload is a copy, the process proceeds to step F118, and the content data recorded in the HDD 5 is validated as a content file. That is, the content file is incorporated into a predetermined management system on the HDD 5 and registered as content that can be handled on the personal computer 1 side.
In this case, the content information is the content subject to check-out / check-in management as the rights information related to the content file.
[0102]
If the current upload is to be moved, the processing on the personal computer 1 proceeds from step F114 to F115, and a content erasure request is transmitted to the MD recording / reproducing apparatus 20 side.
In response to this, the MD recording / reproducing apparatus 20 side performs processing for deleting the content from the mini-disc 101 as step F215. Specifically, the playback / transmission control function 53 of the MD recording / playback apparatus 20 instructs the recording / playback unit 25 in FIG. 3 to update the U-TOC, which is management information of the mini-disc 101, to thereby execute the content. Erase.
[0103]
Next, the MD recording / reproducing apparatus 20 side generates reply encrypted data in step F216. This is information for notifying the personal computer 1 that the content has been erased on the mini disc 101.
For example, the encryption function 54 performs encryption as DES_CBC (Ks, 0) as a specific encryption algorithm using the session key Ks.
Then, this is transmitted as a content deletion response to the personal computer 1 side as step F217.
On the personal computer 1 side, in step F116, the transmitted encrypted reply data DES_CBC (Ks, 0) is checked. As a result, it can be confirmed whether the content erasure response is valid, that is, whether the content is surely erased from the mini disc 101.
[0104]
When the validity of the content erasure response is confirmed in step F117, the personal computer 1 proceeds to step F118 and validates the content data recorded in the HDD 5 as a content file. That is, the content file is incorporated into a required management system on the HDD 5 and registered as content that can be handled on the personal computer 1 side.
However, in this case, check-out / check-in is prohibited as the right information related to the content file, and the content information is simply managed as content that can be played back on the personal computer 1 side.
[0105]
Since the upload for one content data is completed by the above processing, the personal computer 1 transmits a session end declaration in step F119.
On the other hand, the MD recording / reproducing apparatus 20 side transmits a session end response in step F218, and one session is closed as described above.
[0106]
If the personal computer 1 continues to request uploading of another content, the process proceeds from step F120 to step F105 in FIG.
That is, with respect to another content, the transfer session by the process described above is started again. In this case, in response to the session start request, the processing on the MD recording / reproducing apparatus 20 side returns to Step F205 in FIG.
[0107]
When all the upload transfer sessions related to one or a plurality of content data are ended, the personal computer 1 side transmits an authentication end declaration as step F121 in FIG.
In response to this, the MD recording / reproducing apparatus 20 transmits an authentication end response in step F219. As described above, the authentication state between the personal computer 1 and the MD recording / reproducing apparatus 20 is released, and a series of processes is completed.
[0108]
By the way, when upload transfer is NG, it is as follows.
First, the MD recording / reproducing apparatus 20 determines whether or not uploading is possible in step F210 of FIG. The information of the determination result is notified to the personal computer 1 side by the upload object temporary response in step F211 and is confirmed in step F109.
As described above, the upload NG at this stage is a case corresponding to the step S6 in FIG. 5 or the step S20 in FIG. 6 or the step S40 through the steps S32 → S36 → S37 in FIG. .
In this case, the processing on the personal computer 1 side proceeds from step F109 to step F119 in FIG. 11, and a session end declaration is transmitted to the MD recording / reproducing apparatus 20 side. After transmitting the upload object temporary response in step F211 in FIG. 10, the MD recording / reproducing apparatus 20 proceeds to step F218 in FIG. 11 according to the session end declaration without transmitting to step F212, and transmits the session end response. To do.
That is, assuming that transfer as a copy or move is not permitted, the session is terminated before the transfer is executed.
[0109]
Even after the transfer of content data is once started, copying / moving may be disabled due to a watermark check result on the personal computer 1 side. That is, it is a case where upload NG is set as step S7 in FIG. 5 or step S40 through steps S34 → S36 → S37 in FIG.
In such a case, the processing on the personal computer 1 proceeds from step F111 to F112, and NG processing is performed on the content data that has been transferred or the content data that is being transferred. For example, the content data received and recorded in the HDD 5 is processed as invalid data. If the watermark check is performed during the transfer and it is determined that the upload is NG, a transfer interruption instruction or the like is given to the MD recording / reproducing apparatus 20 side.
The processing on the personal computer 1 side proceeds from step F112 to step F119 in FIG. 11, and transmits a session end declaration to the MD recording / reproducing apparatus 20 side. The MD recording / reproducing apparatus 20 side proceeds to step F218 in FIG. 11 in response to the session end declaration after step F213 in FIG. 10 or after interrupting the transfer in step F212, and transmits a session end response.
That is, assuming that transfer as a copy or move is not permitted, the session is terminated without completing the upload during or after the transfer.
[0110]
By performing the upload transfer process as described above, the following effects can be obtained.
[0111]
First, uploading is performed only when copying or moving is permitted based on the SCMS information and the watermark, and in the case of moving, whether or not moving is possible (whether or not erasing is possible on the mini disk 101). By checking, it becomes possible to upload while maintaining copyright protection. As a result, while satisfying the demand that general users want to handle self-recorded content and the like on the HDD 5 (primary recording medium), it is possible to meet the demand of the copyright owner, that is, the demand for strict handling of copyright-protected content. It will be a thing.
For example, for the user, since the personal computer 1 can handle content recorded on the mini-disc 101 as music composed by the user, live recording, meeting minutes, etc., the system utilization value for the user is increased. It also becomes.
[0112]
In addition, the determination of whether copying / moving is possible based on both the SCMS information and the watermark means that uploading is appropriately executed according to various recording paths of content data to the mini-disc 101, and further There is also an advantage that it is possible to determine whether or not uploading is possible, reflecting the intention of the right holder by the watermark.
[0113]
Further, when the move is executed with the copy disabled, it is possible to manage the content as a check-out prohibited content in the HDD 5 and to maintain the copyright while responding to the user's request.
In the case of a move, the content file is validated on the HDD since it has been confirmed that it has been erased from the mini-disc 101. Further, the confirmation is notified by the encrypted data for reply, so that a reliable move can be achieved. Can be executed. For example, by making a deletion notification to the personal computer 1 side without erasing with the mini disk 101 by some method, it becomes impossible to perform a malicious copy, which also increases the security of copyright protection.
[0114]
Further, the personal computer 1 side can effectively use information accompanying the content on the mini-disc 101 by acquiring fringe information about the uploaded content from the MD recording / reproducing apparatus 20 side.
[0115]
Also, by transferring the encrypted content data over USB, it is possible to transfer at high speed and safely in security.
In particular, USB bulk-in transfer can improve safety, high speed, and ease of reception processing, which will be described next.
[0116]
8). Content transfer process
The content data transfer process executed in steps F110 and F212 of FIG. 10 will be described with reference to FIGS.
In this transfer process, when content such as unencrypted music recorded on the mini-disc 101 is transferred to the personal computer 1 via the USB, content data to be transmitted is encrypted by the MD recording / reproducing apparatus 20. . Then, the encryption block, block key, and initial value at the time of the encryption are designated from the personal computer 1 side.
[0117]
For example, for plaintext data Data = {Data # 0, Data # 1,...}, From the encryption key K, the key type Seed for each block, and the initial value IV, the encrypted data Dout = {Dout0, Dout1,. } Is considered. Data # 0, Data # 1,... Are units of encrypted blocks on the encryption side.
At the time of encryption, the block key Kb is generated and encrypted in units of blocks.
[0118]
Then, for the first block data Data # 0, first, the block key Kb # 0 uses the encryption key K and the key type Seed # 0 of the block,
Kb # 0 = DES (K, Seed # 0)
The block data Data # 0 is encrypted using the block key Kb # 0 and the initial value IV # 0, that is,
Dout0 = DES_CBC (Kb # 0, IV # 0, Data # 0)
It becomes.
Similarly, for the next block data Data # 1,
Kb # 1 = DES (K, Seed # 1)
Dout1 = DES_CBC (Kb # 1, IV # 1, Data # 1)
It becomes.
[0119]
Here, when the encryption side determines the block unit (Dout0, Dout1 delimiter size) and the block key Kb and generates the encrypted data, the encrypted file is received in block units of the file format on the side that received the encrypted data. If the password is different or the block key Kb is generated in a different way, re-encryption (decryption and re-encryption) is required on the receiving side, and the data storage process takes time. End up.
[0120]
Therefore, in the case of this example, when the MD recording / reproducing apparatus 20 encrypts the content and transfers it to the personal computer 1 via the USB, the encrypted block, block key Kb, and initial value at the time of the encryption are transferred. The IV is designated from the personal computer 1 side.
[0121]
FIG. 12 shows in detail the content transfer process executed as steps F110 and F212.
As described with reference to FIG. 10, when the MD recording / reproducing apparatus 20 performs the transfer after performing the processes of steps F210 and F211, the reproduction and buffering from the mini-disc 101 are performed as step F212a of FIG. To start. Then, it waits for a bulk request from the personal computer 1 side.
[0122]
The personal computer 1 first transmits a bulk request # 0 for the first data block # 0 using the USB control pipe as step F # 0-11. At this time, the size (Size # 0) of the encrypted block for the first data block # 0, the key type of the block key (Seed # 0), and the initial value (IV # 0) for DES_CBC encryption are transmitted. To do.
[0123]
In the MD recording / reproducing apparatus 20, under the control of the reproduction / transmission control function 53, the encryption function 54 reads one block of data (Data # 0) from the data reproduced and buffered from the mini-disc 101, An encrypted data block # 0 is generated using Size # 0, Seed # 0, IV # 0 received from the personal computer 1 side.
The generated encrypted data block # 0 is shown in FIG.
As shown in the figure, the encrypted data block # 0 is prefixed with a key type Seed # 0 and an initial value IV # 0 for DES_CBC encryption. The content data DES_CBC (Kb # 0, IV # 0, Data # 0) encrypted using the block key Kb and the initial value IV # 0 at the size specified as the size Size # 0 is included. The block key Kb # 0 is Kb # 0 = DES (Kc, Seed # 0). Note that the content key Kc is acquired on the MD recording / reproducing apparatus 20 side in steps F107 and F208 in FIG. 9 as described above.
[0124]
When such an encrypted data block # 0 is generated, the MD recording / reproducing apparatus 20 side transmits a bulk request # 0 response to the personal computer 1 side at step F # 0-22, and at step F # 0-23, The encrypted data block # 0 is transferred as bulk-in transfer.
On the personal computer 1 side, after receiving the bulk request # 0 response, in step F # 0-12, the process of receiving the encrypted data block # 0 transferred, the recording process to the HDD 5, and the watermark check are executed. To do.
[0125]
On the MD recording / reproducing apparatus 20 side, when transmission of the encrypted data block # 0 of the specified size is completed, the next bulk request is waited.
Then, the same processing is repeated according to the bulk request.
For example, in Step F # N-11, the personal computer 1 side transmits a bulk request #N for the data block #N. At this time, the size (Size # N) of the encrypted block for the data block #N, the key type (Seed # N) of the block key, and the initial value (IV # N) for DES_CBC encryption are transmitted.
[0126]
On the MD recording / reproducing apparatus 20 side, the data (Data # N) as the data block #N at Step F # N-21 is shown in FIG. 13B using Size # N, Seed # N, and IV # N. An encrypted data block #N as shown is generated.
When the encrypted data block #N is generated, the MD recording / reproducing apparatus 20 side transmits a bulk request # 0 response to the personal computer 1 side in step F # N-22, and the encrypted data block #N is encrypted in step F # N-23. Transfer data block #N.
On the personal computer 1 side, after receiving the bulk request #N response, in step F # N-12, the received encrypted data block #N is received, recorded in the HDD 5, and watermark checked. To do.
[0127]
When the transfer of all the data blocks for the content data is completed, the MD recording / reproducing apparatus 20 proceeds to step F213 in FIG. 10 and notifies the transfer completion, and in response to this, the personal computer 1 side proceeds to step F111 in FIG. Will go on.
[0128]
According to such content transfer processing, the encryption block size, the initial value IV for each block, and the block key Kb for each block are designated on the personal computer 1 side. Therefore, the content data transfer can be executed with a block size convenient for the reception processing for the personal computer 1 side, and the processing becomes efficient. Specifically, re-encryption (decryption and re-encryption) is not required during the reception process, and the data storage process can be executed quickly.
[0129]
If the method of generating the block key Kb expected on the personal computer 1 side is different, the following is performed.
For example, when the block key Kb = content key Kc, the personal computer 1 notifies Kc ′ instead of Kc in advance when the content key Kc is notified.
And as a key seed for generating the block key Kb,
Seed = DES_DEC (Kc ′, Kc) is generated, and the above transfer method is applied.
The encrypted data that is transferred
Kb = DES (Kc ′, Seed) = DES (Kc ′, DES_DEC (Kc ′, Kc) = Kc
Dout = DES_CBC (Kb, Data) = DES_CBC (Kc, Data)
Therefore, only the conversion of the first Seed = DES_DEC (Kc ′, Kc) is necessary, and it is not necessary to change the content encryption.
[0130]
As described above, according to the content transfer processing of this example, the unit of the encrypted data block is determined on the personal computer 1 side, so the MD recording / reproducing apparatus 20 side has only one type of encryption sequence. Often, even if the personal computer 1 side has a plurality of encrypted block units or file formats with different generation methods of the block key Kb, the personal computer 1 side does not need to change the encryption of the transferred data. . As a result, the processing becomes efficient.
[0131]
The example as the embodiment has been described above, but the present invention is not limited to the above example.
Various primary recording media can be considered other than the HDD 5.
Of course, the secondary recording medium 101 and the secondary recording medium side device 20 are not limited to mini-discs and MD recording / reproducing apparatuses, and various examples are conceivable. For example, the secondary recording medium 101 may be a CD-R, CD-RW, DVD-RAM, DVD-R, DVD-RW, or various memory cards. Therefore, the secondary recording medium side device 20 may be a recording device corresponding to these media.
Accordingly, the configurations of the primary recording medium side device 1 and the secondary recording medium side device 20 are naturally different.
[0132]
【The invention's effect】
As can be seen from the above description, according to the present invention, the following effects can be obtained.
That is, in order to transfer the content data from the secondary recording medium in the terminal device to the primary recording medium in the host device, and perform duplication or movement, authentication establishment between the host device and the terminal device, content data management data (SCMS Information) and permission by the control information (watermark) in the content data is confirmed. The content data is encrypted and transferred.
As a result, the content data recorded on the secondary recording medium can be transferred and recorded on the primary recording medium in a copyright-protected state. For example, the user wants to handle the user's self-recorded content on the primary recording medium. In addition to satisfying the requirements, it can also clear the requirement that the copyright holders strictly handle the copyright-protected content.
In other words, for example, it is possible to transfer plaintext content data recorded on a secondary recording medium such as a mini-disc to the primary recording medium side at a high speed and in consideration of copyright. The benefits for both general users can be secured.
[0133]
Further, an optimum operation can be realized by appropriately responding to the confirmation result of the management data and control information depending on whether the purpose of the transfer is copying or moving. For example, if it is self-recorded content or content permitted to be copied by the copyright holder, there is no problem with execution of copying. On the other hand, even if the content is prohibited from being copied, there is no problem in execution because content diffusion that infringes the rights of the copyright holder does not occur in the form of move. And this makes it possible to appropriately maintain the profits of the general user's use of the system.
[0134]
In particular, in the case of a move, the content is validated on the primary recording medium after confirmation of content erasure on the secondary recording medium side, so that the move is surely executed instead of copying. In addition, since the notification of completion of erasure on the secondary recording medium is encrypted and transmitted to the host device, it can be correctly confirmed whether or not it has been erased. For example, it is possible to prevent malicious transfer such as creating a deletion completion notice by some method and sending it to the host device to execute a copy as if it were a move.
[0135]
Further, the host device side instructs the terminal device side on the encryption block unit when transferring the content data, and the terminal device side performs processing for executing the content data transfer in the specified encryption block unit. By doing so, data reception processing can be performed in units of data blocks convenient on the host device side, and processing efficiency can be improved.
[Brief description of the drawings]
FIG. 1 is an explanatory diagram of a system configuration according to an embodiment of this invention.
FIG. 2 is a block diagram of a primary recording medium side device of the embodiment.
FIG. 3 is a block diagram of a secondary recording medium side device according to the embodiment.
FIG. 4 is a block diagram of a functional configuration related to upload according to the embodiment;
FIG. 5 is an explanatory diagram of copying in the first upload method according to the embodiment.
FIG. 6 is an explanatory diagram for a first upload type move according to the embodiment;
FIG. 7 is an explanatory diagram of a second upload method according to the embodiment.
FIG. 8 is an explanatory diagram of a transfer session according to the embodiment.
FIG. 9 is an explanatory diagram of a transfer session according to the embodiment.
FIG. 10 is an explanatory diagram of a transfer session according to the embodiment.
FIG. 11 is an explanatory diagram of a transfer session according to the embodiment.
FIG. 12 is an explanatory diagram of content transfer processing in a transfer session according to the embodiment;
FIG. 13 is an explanatory diagram of a bulk data format when transferring content data according to the embodiment;
FIG. 14 is an explanatory diagram of the flow of conventional content data.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Primary recording medium side apparatus (personal computer), 2 CPU, 5 HDD (primary recording medium), 8 Communication part, 9 Disk drive, 11 Connection part, 20 Secondary recording medium side apparatus (MD recording / reproducing apparatus), 21 MD Control unit (CPU), 25 recording / reproducing unit, 26 interface unit, 29 encryption processing unit, 100 secondary recording medium (mini disc)

Claims (6)

A copy management system that enables recording / reproduction to / from the first recording medium and allows the content data recorded on the first recording medium to be copied to another recording medium in an encrypted state a predetermined number of times. An authentication step for establishing authentication between a host device that performs management and a terminal device that is capable of reproducing data from a second recording medium in which content data is recorded in an unencrypted state;
A first confirmation step of confirming management data of content data recorded on the second recording medium on the terminal device side;
A transmission step of encrypting and transmitting the content data from the terminal device to the host device if information indicating the prohibition of copying of the content data is not confirmed as a confirmation result of the management data;
A second confirmation step of confirming control information included in the content data transmitted from the terminal device in the host device;
If no information indicating that the content data is prohibited from being copied is not confirmed in the control information included in the content data in the second confirmation step, the content data is managed as content data to be managed by the replication management method. A recording validation step for completing valid recording on the first recording medium on the host device side;
A data transfer method comprising: When content data is moved from the second recording medium to the first recording medium,
In the first confirmation step, it is further confirmed whether or not the content data recorded on the second recording medium is movable,
If it is possible to move, as the transmission step, encrypted transmission of the content data from the terminal device to the host device,
In the first confirmation step, when information indicating that the content data is prohibited from being copied is confirmed in the management data, or in the control information included in the content data in the second confirmation step, the content data If the information indicating the prohibition of copying is confirmed, in the recording validation step, the content data is erased from the second recording medium on the terminal device side, and the content data is The data transfer method according to claim 1, wherein effective recording on the first recording medium on the host device side is completed as content data that is not managed by the replication management method. A copy management method that enables data recording / reproduction with respect to the first recording medium and allows the content data recorded on the first recording medium to be copied to another recording medium in an encrypted state a predetermined number of times. In a data transfer system in which a host device that manages data and a terminal device that is capable of reproducing data from a second recording medium in which content data is recorded in an unencrypted state are connected so as to be capable of data communication ,
The terminal device is
Terminal-side communication means for executing a content data transfer session with the host device based on authentication with the host device;
An encryption means for encrypting the content data;
The management data of the content data reproduced from the second recording medium is confirmed, and if the confirmation result indicates that the information indicating the prohibition of copying of the content data is not confirmed, the content data is encrypted by the encryption means Terminal side control means for causing the terminal side communication means to execute a transfer session to be transmitted to the host device.
With
The host device is
Host-side communication means for executing a content data transfer session with the terminal device based on authentication with the terminal device;
When the content data reproduced from the second recording medium is transferred, if the information indicating that the copy of the content data is prohibited is not confirmed in the control information included in the content data, the content data Host-side control means for completing effective recording on the first recording medium on the host device side as content data to be managed by the replication management method;
A data transfer system comprising: When content data is moved from the second recording medium to the first recording medium,
The terminal-side control means further checks whether or not the content data recorded on the second recording medium is movable. If the content data is movable, the terminal-side communication means sends the content data to the host device. Execute encrypted transmission of
The host-side control means, when the host-side control means confirms information indicating prohibition of copying of the content data from the management data, or in the control information included in the transferred content data, If the information indicating the prohibition of copying is confirmed, after confirming the erasure of the content data in the second recording medium on the terminal device side, the content data is managed by the replication management method. 4. The data transfer system according to claim 3, wherein effective recording to the first recording medium on the host device side is completed as external content data. The terminal-side control means performs a process of encrypting and transmitting an erasure completion notification in response to erasing the content data from the second recording medium after transferring the content data,
5. The host-side control unit according to claim 4, wherein the host-side control unit performs a process of completing effective recording of the content data on the first recording medium in response to confirming the encrypted deletion completion notification. Data transfer system. In the above transfer session,
The host-side control means instructs the terminal device side on the encryption block unit when transferring the content data,
The terminal-side control means causes the encryption means to execute encryption of content data in units of the specified encryption block, and causes the terminal-side communication means to execute transmission of encrypted content data. The described data transfer system.

Images