US 2007/0165440 A1 · System and device for managing control data

Abstract

In one embodiment, a content data management system that handles control information on management of content data decryption includes a first device (a recorder/player) for recording/reproducing the content data, a second device (a magnetic disk drive) for storing the content data, and a host processor for controlling data transfer between the first and second devices. The host processor exercises control for the system to inquire of both devices as to a transfer function for internal data of the devices, then depending on particular inquiry results, set up, prior to the data transfer between the two devices, either a first transfer mode for transferring the control information unidirectionally from the first device to the second device, or a second transfer mode for transferring the control information bidirectionally between both devices, authenticate mutual validity between the first and second devices, share key data (symmetric key data) between the first and second devices if authentication results indicate validity, encrypt the control information with the first or second device by using the key data, and transfer the control information that has been encrypted with either device to the other device in the first or second transfer mode that has been set up.

Claims27

Dependent claims

A content data management system which handles control information intended to manage decryption of content data, the system comprising:

a first device that encrypts the content data to store the content data in a second device and decrypts the content data stored in the second device to reproduce the content data;
and
a second device that stores the content data encrypted by the first device;
wherein:
the first device has a host processor that inquires the first and second devices as to data transfer functions included in the devices and sets either one of a first transfer mode or a second transfer mode based on the results of the inquiries, the first transfer mode being adapted to unidirectionally transfer the control information from either one of the first and second devices to the other device, the second transfer mode being adapted to bidirectionally transfer the control information between the first and second devices;
the validity of the first and second devices is mutually authenticated, and if authentication results indicate that the first and second devices are valid, key data (symmetric key data) is shared between the first and second devices;
the control information is subjected to encryption processing by the first or second device using the symmetric key data;
and
the control information that has been encrypted is transferred from either one of the first or second device to the other device in accordance with the first or second transfer mode that has been set
the first device, if it has received the control information, decrypts the control information by using the symmetric key data, and decrypts the content data by using the decrypted control information.

7 more elements

A content data management system which includes a first device and a second device and manages security of the content data handled by the first device and the second device, the first device being adapted to encrypt acquired content data to store the content data in the second device and decrypt the encrypted content data that has been transmitted from the second device to reproduce the decrypted content data, the second device being connected to the first device to store the content data that has been encrypted by the first device,

wherein:
the first device comprises:
an interface which connects with the second device;
a recording module which performs a process for recording the acquired content data;
a playback module which performs a process for reproducing the content data sent from outside or from the second device via the interface;
a first write-protected storage region which holds at least key data which is used to encrypt the content data;
a host security manager which generates, in addition to key data for decrypting the encrypted content data;
control information inclusive of conditions for decrypting the content data;
and
a host processor which controls data transfer to/from the second device;
and
the second device comprises:
a content storage section for storing at least the content data sent from the first device;
a second write-protected storage region which holds at least the control information;
and
a transfer module which performs transfer control of information that is exchanged with the first device via the interface;
and
wherein:
the host processor inquires of the recording module or the playback module and the second device as to a transfer function included in the device, and sets, depending on particular inquiry results, either one of a first transfer mode or a second transfer mode, the first transfer mode being adapted to unidirectionally transfer the control information from the first or second device to the other device, the second transfer mode under that bidirectionally transfer of the control information between the first and second devices is possible;
the host security manager authenticates validity of the second device by verifying information on characteristics of the second device, the transfer module of the second device authenticates validity of the recording module or playback module of the first device by verifying information on characteristics of the recording or playback module, and if the validity is confirmed as a result of the authentication, symmetric key data is shared between the first device and the second device;
if the first transfer mode is set, the host security manager encrypts the generated control information with the symmetric key data and transfers the encrypted control information to the second device via the interface, or the transfer module encrypts the control information stored in the second write-protected storage region using the symmetric key data and transfers the encrypted control information to the first device via the interface;
if the second transfer mode is set, the host security manager encrypts the generated control information with the symmetric key data and transfers the encrypted control information to the second device via the interface, or the transfer module encrypts the held control information within the second write-protected storage region by using the symmetric key data and transfers the encrypted control information to the first device via the interface;
and
the playback module of the first device decrypts the received control information by using the symmetric key data and decrypts the content data by using the decrypted control information.

21 more elements

A recorder/player that encrypts acquired content data to record the content data in a storage device, and decrypts the encrypted content data in the storage device to reproduce the decrypted content data, the recorder/player comprising:

a connecting section which connects with the storage device and is adapted to transfer information, inclusive of the content data, to and from the storage device;
a recording section which performs a process for recording the content data;
a playback section which performs a process for reproducing the content data sent from the storage device at least via the connecting section;
a first processing unit which sets either one of a first transfer mode or a second transfer mode, the first transfer mode being adapted to unidirectionally transfer the control information from either one of the recorder/player device or the storage device to the other device with respect to data transfer between either one of the recording section or the playback section of the recorder/player and the storage device, and the second transfer mode being adapted to bidirectionally transfer the control information between either one of the recording section or the playback section of the recorder/player and to the storage device;
and
second processing unit that includes:
means for creating key data used to decrypt the content data that has been encrypted and the control information inclusive of conditions for decrypting the content data;
and
means for verifying information on characteristics of the storage device, then authenticating the validity of the storage device, and if authentication results indicate that the storage device is valid, encrypting created control information with symmetric key data which is key data shared with the storage device;
wherein:
the encrypted control information is transferred to the storage device via the connecting section in accordance with the first or second transfer mode that has been set under control of the first processing unit
the control information that has been received from the storage device is decrypted by the second processing unit using the symmetric key data, and the decrypted control information is used to decrypt the content data and reproduce the content data in the playback section.

9 more elements

A recorder/player which encrypts acquired content data to record the content data in a storage device and decrypts the encrypted content data to reproduce the decrypted content data, the recorder/player comprising:

an interface which removably connects with the storage device to exchange various information, inclusive of the content data, with the storage device;
a recording module which performs a process for recording the content data;
a playback module which performs a process for reproducing the content data sent from the storage device via the interface;
a first protected storage region which at least holds key data used for encrypting the content data;
a host security manager that creates, in addition to key data used to decrypt encrypted content data, control information inclusive of conditions for decrypting the content data;
and
a host processor which controls data transfer with the storage device;
wherein:
the host processor inquires of the recording module or the playback module and the storage device as to data transfer functions included in the module and the device, and set either one of a first transfer mode or a second transfer mode based on the inquiry results the first transfer mode being adapted to unidirectionally transfer the control information from either one of the recorder/player or the storage device to the other device, and the second transfer mode being adapted to bidirectionally transfer the control information between the recorder/player and the storage device;
the host security manager verifies information on characteristics of the storage device, then authenticates validity of the second device, and if authentication results indicate that the storage device is valid, shares symmetric key data;
if the first transfer mode is set, the host security manager encrypts created control information using the symmetric key data and transfers the encrypted control information to the storage device via the interface, or receives the encrypted control information that has been transferred from the storage device with the symmetric key data;
if the second transfer mode is set, the host security manager encrypts created control information using the symmetric key data, transfers the encrypted control information to the storage device via the interface, or receives the control information that has been transferred from the storage device with the symmetric key data.

9 more elements

A magnetic disk drive connected to an external device which processes data, and adapted to have a capability to store the data, the magnetic disk drive comprising:

a connecting section that is removably connected to the external device, the connecting section being adapted to exchange information, inclusive of the data, with the external device;
a disk medium for storage of encrypted data sent from the external device via the connecting section;
a second write-protected storage region that holds key data used to encrypt at least the data and control information inclusive of conditions for decrypting the data;
and
control means which performs transfer control of the information exchanged with the external device via the connecting section;
wherein:
the control means authenticates validity of each of the magnetic disk drive itself and the external device, with respect to the other, then if the particular device is valid, shares required symmetric key data with the external device, and encrypts the control information of the second write-protected storage region with the symmetric key data;
and
the control means transfers encrypted control information to the external device via the connecting section, depending on whether a first transfer mode or a second transfer mode is set under an instruction obtained from the external device, the first transfer mode being adapted to unidirectionally transfer the control information from either one of the external device or the magnetic disk drive to the other device or drive, the second transfer mode being adapted to bidirectionally transfer the control information between the magnetic disk drive and the external device.

6 more elements

A magnetic disk drive connected to a recorder/player which records/reproduces data, and adapted to store the data, the magnetic disk drive comprising:

an interface which is removably connected to the recorder/player, the interface being adapted to exchange information, inclusive of the data, with the recorder/player;
a disk medium for storing the data acquired from the recorder/player via the interface;
a controller which controls data read/write operations with respect to the disk medium;
a second write-protected storage region for holding key data used to encrypt at least the data and control information inclusive of conditions for decrypting the data;
and
a transfer module connected to the interface, the module being adapted to conduct transfer control of the information exchanged with the recorder/player;
wherein:
the transfer module includes:
means which is adapted to answer whether a first transfer mode or a second transfer mode is capable of being used to transfer control information with the recorder/player, in accordance with a request from the recorder/player, the first transfer mode being adapted to unidirectionally transfer the control information from either one of the recorder/player or the magnetic disk drive to the other device, the second transfer mode being adapted to bidirectionally transfer the control information with the recorder/player;
and
means which transmits information on characteristics (i.e., characteristics information) of the magnetic disk drive to the recorder/player in accordance with a request from the recorder/player, verifies the characteristics information sent from the recorder/player, then authenticates validity of the magnetic disk drive, and if the magnetic disk drive is valid, shares required symmetric key data with the recorder/player;
and
if the first or second transfer mode is set under an instruction from the recorder/player, the transfer module receives the control information that has been encrypted with the symmetric key data and that has been transferred from the recorder/player via the interface, stores the control information into the second write-protected storage region, and/or encrypts the control information that is stored in the second write-protected storage region with the symmetric key data, and transfers the encrypted control information to the recorder/player via the interface.

10 more elements

Dependencies are inferred from the claim text.

System and device for managing control data

Life of this patent

System and device for managing control data

Life of this patent

Abstract

Claims27