Protection of content based on encryption

An information processing device, comprising:

• a data processing unit;
• and
• a storage unit, wherein the storage unit is divided into a plurality of protected areas in which an access to at least one protected area of the plurality of protected areas is permitted based on accessibility determination of a device that is configured to request the access to the at least one protected area of the plurality of protected areas, and a general purpose area in which the accessibility determination of the device that is configured to request the access is optional,
• wherein the storage unit is configured to:
• store, in the general purpose area, encrypted content, and a media ID verification value generated based on a media ID that is an identifier of the information processing device,
• store a server ID in a first certificate that is included in the encrypted content, wherein the first certificate is set by a management server, and
• store, in at least one protected area of the plurality of protected areas, an encryption key applied on the encrypted content in an encryption process,
• wherein the data processing unit, based on information stored in a second certificate of a reproduction device to use the encrypted content, is configured to:
• permit the encryption key to be read by the reproduction device based on confirmation of access right with respect to corresponding one of the plurality of protected areas, wherein the information stored in the second certificate indicates at least one access right specific to the at least one protected area of the plurality of protected areas, and
• output the media ID to the reproduction device, and enable determination of content reproduction availability based on a condition that a match between a calculated verification value based on the media ID in the reproduction device and the media ID verification value stored in the general purpose area is established,
• wherein the access to the at least one protected area of the plurality of protected areas is based on a cross-authentication between the first certificate of the management server and the second certificate of the reproduction device.

An information processing device, comprising:

• a data processing unit configured to read encrypted content and to execute an encryption process and a reproduction process;
• and
• a storage unit included in a medium,
• wherein the medium includes a plurality of protected areas, in which an access to at least one protected area of the plurality of protected areas is permitted based on information stored in a first certificate of a device that is configured to request the access, wherein the information stored in the first certificate indicates at least one access right specific to the at least one protected area of the plurality of protected areas, and a general purpose area,
• wherein the medium is configured to store a server ID in a second certificate that is included in the encrypted content, store the encrypted content and a media ID verification value that is a verification value based on a media ID that is an identifier of the medium in the general purpose area, and an encryption key to be applied on the encrypted content in the encryption process in the at least one protected area of the plurality of protected areas, wherein the second certificate is set by a management server and
• wherein the data processing unit is further configured to:
• calculate the verification value based on the media ID acquired from the medium, and
• reproduce the encrypted content stored in the medium by the encryption process in which the encryption key is applied based on condition that a match between the calculated verification value and the media ID verification value stored in the medium is established,
• wherein the access to the at least one protected area of the plurality of protected areas is further based on a cross-authentication between the first certificate of the device and the second certificate of the management server.

An information processing device, comprising:

• a storage unit configured to:
• store encrypted content and an encryption key to be applied on the encrypted content in an encryption process;
• and
• store a server ID in a first certificate that is included in the encrypted content,
• wherein the first certificate is set by a management server,;
• and
• a data processing unit,
• wherein the data processing unit is configured to output the encrypted content and the encryption key to a medium to which the encrypted content is output,
• wherein the medium includes the storage unit divided into a plurality of protected areas, in which an access to at least one protected area of the plurality of protected areas is permitted based on accessibility determination of a device that is configured to request the access to the at least one protected area of the plurality of protected areas, and a general purpose area in which the accessibility determination of the device that is configured to request the access is optional, and
• wherein the data processing unit is configured to present a second certificate of the information processing device to the medium, and write the encryption key in the at least one protected area of the plurality of protected areas in which the access is permitted based on information stored in the second certificate, the information stored in the second certificate indicates at least one access right specific to the at least one protected area of the plurality of protected areas, and
• wherein the access to the at least one protected area of the plurality of protected areas is based on a cross-authentication between the first certificate of the management server and the second certificate of the information processing device.

An information processing method, comprising:

• in an information processing device including a data processing unit and a storage unit, wherein the storage unit is divided into a plurality of protected areas, in which an access to at least one protected area of the plurality of protected areas is permitted based on accessibility determination of a device that is configured to request the access, and a general purpose area in which the accessibility determination of the device that is configured to request the access is optional:
• storing, by the storage unit, in the general purpose area, encrypted content, and a media ID verification value generated based on a media ID that is an identifier of the information processing device, and
• storing a server ID in a first certificate that is included in the encrypted content, wherein the first certificate is set by a management server,
• storing, by the storage unit, in the at least one protected area of the plurality of protected areas, an encryption key to be applied on the encrypted content in an encryption process,
• based on information stored in a second certificate of a reproduction device to use the encrypted content, permitting, by the data processing unit, reading of the encryption key by the reproduction device based on confirmation of access right with respect to the at least one protected area of the plurality of protected areas, wherein the information stored in the second certificate indicates at least one access right specific to the at least one protected area of the plurality of protected areas, and
• outputting, by the data processing unit, the media ID to the reproduction device, and enabling determination of content reproduction availability based on a condition that match between a calculated verification value based on the media ID in the reproduction device and the media ID verification value stored in the general purpose area is established,
• wherein the access to the at least one protected area of the plurality of protected areas is based on a cross-authentication between the first certificate of the management server and the second certificate of the reproduction device.

An information processing method, comprising:

• in an information processing device:
• executing, by a data processing unit of the information processing device, reading of encrypted content stored in a medium and executing an encryption process and a reproduction process,
• wherein the medium includes a plurality of protected areas, in which an access to at least one protected area of the plurality of protected areas is permitted based on information stored in a first certificate of a device that requests the access, and a general purpose area, wherein the information stored in the first certificate indicating at least one access right specific to the at least one protected area of the plurality of protected areas;
• storing a server ID in a second certificate that is included in the encrypted content, wherein the second certificate is set by a management server;
• storing the encrypted content and a media ID verification value that is a verification value based on a media ID that is an identifier of the medium in the general purpose area of the medium, and an encryption key to be applied on the encrypted content in the encryption process in the at least one protected area of the plurality of protected areas of the medium;
• and
• calculating, by the data processing unit, the verification value based on the media ID acquired from the medium, and reproducing the encrypted content stored in the medium by data processing to which the encryption key is applied based on condition that a match between the calculated verification value and the media ID verification value stored in the medium is established,
• wherein the access to the at least one protected area of the plurality of protected areas is based on a cross-authentication between the first certificate of the device and the second certificate of the management server.

A non-transitory computer readable medium having stored thereon, computer-executable instructions, which when executed by a processor, cause an information processing device to execute operations, the operations comprising:

• executing, by a data processing unit of the information processing device, reading of encrypted content stored in a medium and executing an encryption process and a reproduction process,
• wherein the medium includes a plurality of protected areas, in which an access to at least one protected area of the plurality of protected areas is permitted based on information stored in a first certificate of a device that is configured to request the access, the information stored in the first certificate indicating at least one access right specific to the at least one protected area of the plurality of protected areas, and a general purpose area;
• storing a server ID in a second certificate included in the encrypted content, wherein the second certificate is set by a management server;
• storing, the encrypted content and a media ID verification value that is a verification value based on a media ID that is an identifier of the medium in the general purpose area of the medium, and an encryption key to be applied on the encrypted content in the encryption process in the at least one protected area of the plurality of protected areas of the medium;
• and
• calculating, by the data processing unit, the verification value based on the media ID acquired from the medium, and reproducing the encrypted content stored in the medium by data processing to which the encryption key is applied on condition that a match between the calculated verification value and the media ID verification value stored in the medium is established,
• wherein the access to the at least one protected area of the plurality of protected areas is based on a cross-authentication between the first certificate of the device and the second certificate of the management server.