摘要:
An encryption apparatus 100a including: a CRL storage unit 111 storing a CRL; a device key ring storage unit 112 storing a device key KD_A specific to each copyright protection module 210a used by a decryption apparatus 200a; a content key storage unit 113 storing a content key Kc that is a secret key for encrypting a content; a hashing function processing unit 114 calculating a hash value of the CRL stored in the CRL storage unit 111 according to a hashing function; and an Ex-OR unit 115 obtaining an exclusive OR value between the hash value and the device key KD_A. The encryption apparatus also includes an Enc unit 116 encrypting the content key Kc using an output value from the Ex-OR unit, and storing the hash value, the encrypted content key and the encrypted content in a DVD2a.
摘要:
A data protection system is provided that reduces, to a degree, the amount of encrypted data that is distributed to a plurality of terminals. In the data protection system a terminal whose decryption keys are exposed by a dishonest party is made to be unable to decrypt the data correctly, while other terminals are able to decrypt the data correctly.The data protection system includes a plurality of terminals, and an encryption device that encrypts distribution data distributed to each terminal. Each terminal is corresponded with one node on a lowest level of a 4-ary tree structure or the like having a plurality of hierarchies. The data protection system, for each node in the tree structure, excluding those on the lowest level, determines a plurality of combination patterns that include combinations of two or more of all four nodes that are reached one level below the node, decides an individual decryption key for each determined combination pattern, and decides an individual decryption key for each node on the lowest level. Further, the data protection system has each terminal store all decryption keys decided for the nodes on the path from the node on the lowest level that corresponds to the terminal through to the node on the highest level. The data protection system prescribes nodes that are reached from the node on the lowest level that corresponds to the terminal through to the node on the highest level that correspond to a terminal that has been dishonestly analyzed as invalid nodes. For invalid nodes, other than invalid nodes on the lowest level, the data protection system designates an encryption key that corresponds to the decryption key decided in correspondence with the combination pattern that combines all nodes, excluding invalid nodes, of the four nodes that are reached one level below the node, and has the encryption device encrypt distribution data that uses each of the designated encryption keys.
摘要:
An authentication system is provided having a revocation list generation apparatus that constructs and stores a revocation list in a tree structure, the revocation list generation apparatus being used in combination with a revocation judgment apparatus. The authentication system improves upon conventional authentication systems because the memory capacity to store a Certificate Revocation List (CRL) in order to identify revoked certificates is reduced. The tree structure corresponds to public key certificate, which are identified by leaf identifies, and nodes from a leaf that corresponds to a revoked public key certificate.
摘要:
A recording/reproduction device 10 receives content broadcast from a content provision device 11. The recording/reproduction device 10 encrypts the received content using a device key, to generate first encrypted content. The recording/reproduction device 10 decrypts the first encrypted content to obtain the content, performs an image conversion on the obtained content to generate converted content, and encrypts the converted content using a medium key to generate second encrypted content. The recording/reproduction device 10 writes the second encrypted content, the medium key, and the device key to a portable medium 14. When the portable medium 14 is inserted in a mobile information terminal 15, the mobile information terminal 15 decrypts the second encrypted content using the medium key to obtain the converted content, and reproduces the converted content.
摘要:
A content distribution system for transferring contents between transmission device and reception device. The transmission device includes: key obtaining unit that obtains, from reception device, public keys and public key identifiers; watermark embedding unit that embeds a different public key identifier, as electronic watermark, into each of contents that are identical in substance; an encryption unit that encrypts contents using public keys to generate encrypted contents; and transmission unit that transmits encrypted contents to reception device. The reception device includes: key storage unit storing public keys, public key identifiers, and a private key that makes a pair with one of the public keys; key transmission unit that transmits public keys and public key identifiers to the transmission device; content receiving unit that receives encrypted contents from transmission device; and decryption unit that obtains a content from the received encrypted contents, using the private key.
摘要:
The present invention provides an information embedding apparatus that is capable of preventing playback stop of a content that has been shot without intention of misuse. The information embedding apparatus comprises: an acquisition unit operable to acquire the content that is played back along the playback time-line; a watermark generating unit operable to generate the watermarks such that values held by the watermarks vary according to a first rule, the first rule showing that the values should vary according to a sequential order on the playback time-line; and an embedding unit operable to embed two or more of the watermarks into the content while keeping the sequential order.
摘要:
If playback devices are prohibited from playing back contents recorded in R media, there occurs a problem that it takes more time to manufacture commercial ROM media. Conversely, if playback devices are permitted to play back contents recorded in R media, there occurs a problem that copyrights might be infringed. In view of these, the aim of the present invention is to provide a content protection data processing system and a playback device capable of determine whether to permit playback of a content recorded in a recording medium, based on a medium type of the recording medium and a signature type of a signature attached to a program. This enables both the protection of the copyright of the content and the efficient manufacturing of commercial ROM media.
摘要:
The object of the present invention is to provide a reproduction apparatus that is capable of preventing personal information of users from being transmitted to an external apparatus that is under management of a malicious person.The reproduction apparatus uses a revocation list and a valid-content list in combination in order to prevent transmission of personal information of users. It is possible to prevent transmission of personal information by revoking certificates to be revoked because of being exposed or hacked at a certain timing, by listing them in the revocation list. Meanwhile, it is possible to allow use of contents that have been manufactured before the exposure, by listing them in the valid-content list. Accordingly, it is possible to realize both the security and the user convenience at the same time.
摘要:
Provided is a new-type recordable DVD medium characterized in having medium characteristics not defined in the DVD-R standards and-having compatibility with the DVD-ROM standards. Since information on the new-type recordable DVD medium can be played back by an existing player, even when content data protected by CSS (Content Scrambling System) is recorded on the new-type recordable DVD medium, the recordable DVD medium can be used for content distribution service using a kiosk terminal.
摘要:
An encrypted content playback apparatus and a playback method suitable for content playback from a medium in which both content that is subject to conventional copy protection and content to which DRAM is applied exists, and a recording medium on which data used in the playback apparatus and the playback method is stored are disclosed. The medium stores information indicating, for each content, whether the content is content subject to conventional copy protection or content to which DRAM is applied. Based on this information, a playback apparatus determines the key to use to decrypt the content.