Information processing device, information processing method, and program

Patent metadata

Field	Value
Publication number	US-8938073-B2
Application number	US-201113207567-A
Country	US
Kind code	B2
Filing date	Aug 11, 2011
Priority date	Aug 23, 2010
Publication date	Jan 20, 2015
Grant date	Jan 20, 2015

Abstract

An information processing device including: a data processing unit that generates an encryption key of content; and a communication unit that transmits an encryption key generated by the data processing unit, wherein the data processing unit generates, as the encryption key, individual keys that are different for each new content recording processing on a recording medium in a content recording device, and transmits the individual keys through the communication unit.

First claim

What is claimed is:

1. An information processing device comprising:
a data processing unit that generates an encryption key of content;
a token unit that generates a token containing content management information;
a use control unit that generates use control information with a signature that corresponds to the content; and
a communication unit that transmits the encryption key generated by the data processing unit, the token generated by the token unit, and the signed use control information generated by the use control unit,
wherein the data processing unit generates, as the encryption key, individual content keys that are different for each new content recording processing on a recording medium in a content recording device, and transmits the individual content keys through the communication unit,
wherein the recording medium has a protected area with access restrictions,
wherein the data processing unit presents a device certificate that has access permission information recorded therein to the recording medium and, after verifying a certificate of the recording medium, indicates that the individual content keys are to be written to the protected area, and
wherein the data processing unit performs processing to store the individual content keys in a memory unit by generating management information that is made to correspond with the content recording device or the recording medium.

2. The information processing device according to claim 1 ,
wherein the data processing unit transmits content on which encryption processing is to be performed by the individual content keys to the content recording device.

3. The information processing device according to claim 1 ,
wherein the data processing unit transmits, when the content recording device executes processing to copy content from an information recording medium on which content is already recorded on the recording medium, the individual content keys as the keys for encryption processing content that is the target for copying.

4. The information processing device according to claim 1 ,
wherein the data processing unit generates the individual content keys by random number generation processing.

5. An information processing method that is executed on a server, comprising:
generating an encryption key of content by a data processing unit;
generating a token that contains content management information;
generating use control information with a signature that corresponds to the content; and
transmitting the encryption key generated by the data processing unit, the token, and the signed use control information, by a communication unit,
wherein the data processing unit generates, as the encryption key, individual content keys that are different for each new content recorded on a recording medium in a content recording device, and transmits the individual content keys through the communication unit,
wherein the recording medium has a protected area with access restrictions,
wherein the data processing unit presents a device certificate that has access permission information recorded therein to the recording medium and, after verifying a certificate of the recording medium, indicates that the individual content keys are to be written to the protected area, and
wherein the data processing unit performs processing to store the individual content keys in a memory unit by generating management information that is made to correspond with the content recording device or the recording medium.

6. A non-transitory computer-readable medium embodying a program that executes information processing on a server, comprising:
generating an encryption key of content,
generating a token that includes content management information;
generating use control information with a signature that corresponds to the content;
transmitting the encryption key generated by the data processing unit, the token, and the signed use control information, by a communication unit;
generating individual content keys that are different for each new content recorded on a recording medium in a content recording device, and transmitting the individual content keys through the communication unit, wherein the recording medium has a protected area with access restrictions;
presenting a device certificate that has access permission information recorded therein to the recording medium and, after verifying a certificate of the recording medium, indicating that the individual content keys are to be written to the protected area; and
storing the individual content keys in a memory unit by generating management information that is made to correspond with the content recording device or the recording medium.

Assignees

• Kuno Hiroshi
• Ueda Kenjiro
• Ebihara Munetake
• Hayashi Takamichi
• Yoshimura Koji
• Sony Corp

Inventors

• Kuno Hiroshi
• Ueda Kenjiro
• Ebihara Munetake
• Hayashi Takamichi
• Yoshimura Koji

Classifications

• G11B20/0021 Primary

  involving encryption or decryption of contents recorded on or reproduced from a record carrier · CPC title

• H04L2209/60

  Digital content management, e.g. content distribution · CPC title

• H04L9/3263

  involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823) · CPC title

• G11B20/00224

  wherein the key is obtained from a remote server · CPC title

• H04L9/0822

  using key encryption key · CPC title