Recording medium apparatus and control method for authenticating a device based on a revocation list

A system comprising:

• a recording medium device;
• and
• an apparatus into which the recording medium device is loaded,
• the recording medium device including a storage unit and a tamper-resistant controller,
• the storage unit storing one or more contents and one or more individual revocation lists, each individual revocation list being associated with a content among the one or more contents, a plurality of apparatuses being related to use of the content, and when one or more apparatuses among the plurality of apparatuses is revoked, each individual revocation list includes one or more revocation identifiers, each revocation identifier identifying a revoked apparatus, and
• the controller including:
• an acquisition unit configured to acquire an acquisition request related to the content from an apparatus into which the recording medium device is loaded and to acquire an apparatus identifier identifying the apparatus;
• a judgment unit configured to read an individual revocation list associated with the content to which the acquisition request is related, and judge whether the acquired apparatus identifier is present in the individual revocation list;
• and
• a control unit configured to control to output of the content to the apparatus when the judgment unit judges that the apparatus identifier is present, wherein
• the storage unit further stores, in association with the content, usage condition information indicating a condition for use of the content by a user and including entry information indicating storage positions of the revocation identifiers included in the individual revocation lists, and
• the judgment unit reads the revocation identifier included in the individual revocation list associated with the content to which the acquisition request is related from the storage position indicated by the entry information included in the usage condition information stored by the storage unit and performs the judgment using the read revocation identifier.

A non-transitory computer-readable recording medium having recorded thereon a computer program for control used in a tamper-resistant controller, the controller and a storage unit being included in a recording medium device,

• the storage unit storing one or more contents and one or more individual revocation lists, each individual revocation list being associated with a content among the one or more contents, a plurality of apparatuses being related to use of the content, and when one or more apparatuses among the plurality of apparatuses is revoked, each individual revocation list includes one or more revocation identifiers, each revocation identifier identifying a revoked apparatus,
• the controller being a computer, and
• the computer program causing the computer to perform the steps of:
• acquiring an acquisition request related to the content from an apparatus into which the recording medium device is loaded and acquiring an apparatus identifier identifying the apparatus;
• reading an individual revocation list associated with the content to which the acquisition request is related, and judging whether the acquired apparatus identifier is present in the individual revocation list;
• and
• controlling to prohibit output of the content to the apparatus when the judging step judges that the apparatus identifier is present, wherein
• the storage unit further stores, in association with the content, usage condition information indicating a condition for use of the content by a user and including entry information indicating storage positions of the revocation identifiers included in the individual revocation lists, and
• the judging step includes reading the revocation identifier included in the individual revocation list associated with the content to which the acquisition request is related from the storage position indicated by the entry information included in the usage condition information stored by the storage unit, and judging whether the acquired apparatus identifier is present in the individual revocation list using the read revocation identifier.

A non-transitory computer-readable recording medium device comprising:

• a storage unit;
• and
• a tamper-resistant controller,
• the storage unit storing one or more contents and one or more individual revocation lists, each individual revocation list being associated with a content among the one or more contents, a plurality of apparatuses being related to use of the content, and when one or more apparatuses among the plurality of apparatuses is revoked, each individual revocation list includes one or more revocation identifiers, each revocation identifier identifying a revoked apparatus, and
• the controller including:
• an acquisition unit configured to acquire an acquisition request related to the content from an apparatus into which the non-transitory computer-readable recording medium device is loaded and to acquire an apparatus identifier identifying the apparatus;
• a judgment unit configured to read an individual revocation list associated with the content to which the acquisition request is related, and judge whether the acquired apparatus identifier is present in the individual revocation list;
• and
• a control unit configured to control to prohibit output of the content to the apparatus when the judgment unit judges that the apparatus identifier is present, wherein
• each of the revocation identifiers identifies information that identifies a revoked public key certificate allocated to an apparatus related to use of the content associated with the individual revocation list to which the revocation identifier is included, and
• the acquisition unit acquires the apparatus identifier identifying a public key certificate allocated to the apparatus into which the non-transitory computer-readable recording medium device is loaded.

A control method used in a tamper-resistant controller, the controller and a storage unit being included in a recording medium device,

• the storage unit storing one or more contents and one or more individual revocation lists, each individual revocation list being associated with a content among the one or more contents, a plurality of apparatuses being related to use of the content, and when one or more apparatuses among the plurality of apparatuses is revoked, each individual revocation list includes one or more revocation identifiers, each revocation identifier identifying a revoked apparatus, and
• the control method comprising the steps of:
• acquiring an acquisition request related to the content from an apparatus into which the recording medium device is loaded and acquiring an apparatus identifier identifying the apparatus;
• reading an individual revocation list associated with the content to which the acquisition request is related, and judging whether the acquired apparatus identifier is present in the individual revocation list;
• and
• controlling to prohibit output of the content to the apparatus when the judging step judges that the apparatus identifier is present, wherein
• the storage unit further stores, in association with the content, usage condition information indicating a condition for use of the content by a user and including entry information indicating storage positions of the revocation identifiers included in the individual revocation lists, and
• the judging step includes reading the revocation identifier included in the individual revocation list associated with the content to which the acquisition request is related from the storage position indicated by the entry information included in the usage condition information stored by the storage unit, and judging whether the acquired apparatus identifier is present in the individual revocation list using the read revocation identifier.