Information processing device and information processing method

A data storage device comprising:

• receiving means for receiving encrypted management information from an external equipment, wherein a storage area is managed with management information in a layer structure and contains a key, said storage area divided into a plurality of system blocks and a plurality of user blocks;
• decrypting means for decrypting a lower layer of the encrypted management information by using said key, said key being contained in an upper layer of the management information;
• data storage means for storing data to supply predetermined services, wherein access to a storage area of said data storage means is provided by said key;
• and
• management information storage means for storing the management information;
• operation means for operating on a cheek code to check whether the management information has been tampered with by a non-authorized user,
• wherein said decrypting means decrypts the check code together with the management information;
• wherein said plurality of user blocks are allocated in an ascending order, said plurality of system blocks are allocated in a descending order, and a boundary between the plurality of user and system blocks is variable;
• and
• wherein said plurality of system blocks are classified into at least three areas, a system defining block area, a defining block area, and a service defining block area.

An information processing system comprising a data storage device and an information processing device, said information processing device comprising:

• forming means for forming management information that manages a storage area in the data storage device in a layered structure, said storage area divided into a plurality of system blocks and a plurality of user blocks;
• encrypting means for encrypting said management information, said encrypting means encrypting a lower layer of the management information by using a key contained in an upper layer of the management information;
• and
• communication means for communicating the encrypted management information to said data storage device,
• said data storage device comprising:
• receiving means for receiving encrypted management information from said information processing device;
• decrypting means for decrypting the lower layer of the encrypted management information by using the key contained in the upper layer of the management information;
• data storage means for storing data to supply a predetermined service, wherein access to a storage area of said data storage means is provided by said key;
• management information storage means for storing said management information;
• and
• code generating means for generating a check code to check whether the management information has been tampered with by a non-authorized user,
• wherein said encrypting means encrypts the check code together with the management information;
• wherein said plurality of user blocks are allocated in an ascending order, said plurality of system blocks are allocated in a descending order, and a boundary between the plurality of user and system blocks is variable;
• and
• wherein said plurality of system blocks are classified into at least three areas, a system defining block area, a defining block area, and a service defining block area.

An information processing method comprising the steps of:

• forming management information for managing a storage area in a layer structure, said storage area divided into a plurality of system blocks and a plurality of user blocks;
• encrypting the management information to provide encrypted management information, with a lower layer of said management information being encrypted by using a key contained in an upper layer of the management information;
• communicating said encrypted management information to a data storage device;
• decrypting the encrypted lower layer of the management information by using the key;
• storing data to supply predetermined services in a storage area of said data storage device, access to the storage area being provided by the key;
• storing management information in a management information storage means of said data storage device;
• and
• generating a check code to check whether the management information has been tampered with by a non-authorized user,
• wherein the check code is encrypted together with the management information;
• wherein said plurality of user blocks are allocated in an ascending order, said plurality of system blocks are allocated in a descending order, and a boundary between the plurality of user and system blocks is variable;
• and
• wherein said plurality of system blocks are classified into at least three areas, a system defining block area, a defining block area, and a service defining block area.

A data storage method for storing data to supply a predetermined service, said data storage method comprising the steps of:

• receiving encrypted management information from an external equipment, said management information being provided for managing a storage area in a layer structure and containing a key, said storage area divided into a plurality of system blocks and a plurality of user blocks;
• decrypting a lower layer of the encrypted management information by using the key contained in the upper layer of the management information;
• storing data to supply a predetermined service in a data storage means, with access to a storage area of said data storage means being provided by the key;
• storing management information in a management information storage means;
• forming the storage area of said data storage means in a layer structure on the basis of the management information;
• managing the storage area of said data storage means on the basis of the management information;
• and
• operating on a check code to check whether the management information has been tampered with by a non-authorized user,
• wherein the check code is encrypted together with the management information;
• wherein said plurality of user blocks are allocated in an ascending order, said plurality of system blocks are allocated in a descending order, and a boundary between the plurality of user and system blocks is variable;
• and
• wherein said plurality of system blocks are classified into at least three areas, a system defining block area, a defining block area, and a service defining block area.