JP2002372976A - Data transfer system, data transfer device, data recorder and charge processing method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a data transfer system, a data transfer device, a data recorder and a charge processing method suitable for the charge processing accompanying the transfer/recording of contents data such as music. SOLUTION: The data transfer device is made a system capable of checking out the contents data to a secondary recording medium on the side of the data recorder, requests intrinsic information such as prepaid information stored in the secondary recording medium to the data recorder and receives it. Thus, the intrinsic information on the side of the secondary recording medium is managed on the side of the data transfer device and on the side of a server device to improve services and realize various ways of processing suitable for a user. In particular, the intrinsic information is made to be the prepaid information, and the data transfer device transmits the prepaid information recorded in the secondary recording medium to the server device of a content distribution origin to perform appropriate charging management.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data transfer system, a data transfer device, a data recording device, and a billing method suitable for a billing process accompanying transfer / recording of content data such as music.

[0002]

2. Description of the Related Art For example, an HDD of a personal computer
(Hard disk drive) is treated as a primary recording medium to store content data such as music, and the stored content data is transferred and recorded on another recording medium (secondary recording medium). There is a usage form of enjoying music and the like. The content data is, for example, music data, video data, game data,
It is the main data for distribution / transfer / use of computer software and the like.

In this case, the HDD contains a CD-DA (Comp
act Disc Digital Audio) and DVD (Digital Versatil)
Content data such as music reproduced from package media such as eDisc) is stored, or content data downloaded from an external music server or the like via a communication network to which a personal computer is connected is stored. Then, the user connects the recording device of the secondary recording medium to the personal computer, and
The content data stored in D is copied (copied) or moved (moved) to a secondary recording medium, and content data such as music is reproduced by a reproducing device corresponding to the secondary recording medium.

As a secondary recording medium, for example, a memory card using a semiconductor memory such as a flash memory, a mini disk as a magneto-optical disk, or a CD-R
(CD Recordable), CD-RW (CD Rewitable), DV
D-RAM, DVD-R, DVD-RW and the like are conceivable. Recorders / players corresponding to these media (recording media) are widely used as recording devices and reproducing devices corresponding to secondary recording media, such as stationary recording / reproducing devices and portable recording / reproducing devices. Each user performs recording / reproducing of content data in accordance with his / her own preference and owning equipment.

[0005] For example, when considering the usage of such content data, it is necessary to consider the copyright protection of the content data. For example, if a user uses a content data distribution service or purchases a package medium to accumulate content data in an HDD and then allows the content data to be copied to a secondary recording medium without limitation, copyright A situation occurs in which the legitimate protection of the person cannot be taken. For this reason, various techniques and data processing agreements have been proposed to maintain copyright protection in the handling of content data as digital data. One of them is SDMI (SE).
CURE DIGITAL MUSIC INITIATIVE).
The data path defined by the SDMI will be described later. For example, content stored in a personal computer having an HDD as a primary recording medium, for example, content data distributed from an external server via a network (hereinafter, network content) ) Or a CD-ROM mounted on a personal computer, for example.
Content data (hereinafter, disc content) read from a package medium such as a CD-DA or DVD reproduced by a disc drive device such as a drive or a disc drive device connected to a personal computer is transferred to a secondary recording medium. The transfer / recording of the file is properly performed, taking into account copyright protection and the interests of the general user (right of private reproduction).

In the case where content data is transferred from a primary recording medium such as an HDD to a secondary recording medium such as a mini-disc or a memory card and copied, the copyright protection and private copy right are not protected as described above. The device is designed to satisfy both.

That is, the transfer to the SDMI-compatible secondary recording medium is as follows. The SDMI-compatible secondary recording medium is, for example, an SDMI-compatible memory card using a semiconductor memory such as a flash memory, and the like, and the content is recorded in the secondary recording medium in an encrypted state. For example, in the case of a primary recording medium such as an HDD, in the case of SDMI content, the content is encrypted and stored. Therefore, the content is copied to the secondary recording medium in its encrypted state. Of course, the playback device for the secondary recording medium is provided with a decryption function, so that the content data copied in an encrypted state can be played back.

In the secondary recording medium compatible with SDMI, a content ID serving as an identifier for each content data
Is recorded in the format. The content ID is generated for each content data stored in the primary recording medium (HDD) in the device on the primary recording medium side and stored together with the content data. The content data is copied to the secondary recording medium. In this case, the content ID of the content data is also recorded on the secondary recording medium.

[0009] The content ID is used for content right management on the primary recording medium side and the secondary recording medium side. The content right referred to here is a transfer right to the secondary recording medium (a right to copy to the secondary recording medium) on the primary recording medium side, and a reproduction of the copied content data for the secondary recording medium side. Right. Hereinafter, transfer of content data from the primary recording medium to the secondary recording medium (transfer of rights) is referred to as “checkout”, and return of content data from the secondary recording medium to the primary recording medium (actually, Is referred to as "check-in."

[0010] In the SDMI system, regarding a check-out and a check-in, a transfer handling rule (Usage R) is used.
ule) is determined. As an example, for one piece of content data, checkout from the primary recording medium to the secondary recording medium is permitted three times (the transfer right is “three times”). When the check-out is performed, the right is transferred to the secondary recording medium side, that is, the transfer right of the content data is left twice on the primary recording medium side. On the other hand, a reproduction right is obtained on the secondary recording medium side. In addition, when the user checks in the secondary recording medium to the primary recording medium, the right is returned. That is, the reproduction right is lost on the secondary recording medium side, and one transfer right is restored on the primary recording medium side.

[0011] Such management of check-out / check-in is performed using a content ID for each content data. Then, at the time of checkout, the content data and the content ID are recorded on the secondary recording medium, so that the content data can be reproduced on the secondary recording medium (a reproduction right is obtained). On the primary recording medium, it is assumed that one content ID has been transferred, and Usage
The transfer right by the Rule is reduced by one. Also, at the time of check-in, the content data is not actually returned and transferred, the content data is erased on the secondary recording medium, and the content ID is returned on the primary recording medium side.
Increase transfer right by Usage Rule by one. The reproduction right is lost on the secondary recording medium side.

As described above, with regard to the secondary recording medium compliant with the SDMI, the content data is copied and recorded in an encrypted state, and the right of the content is managed in accordance with check-out and check-in, so that there is no limit. It protects copyrights by preventing copying, while at the same time ensuring the user's private reproduction rights.

Note that, for example, content data downloaded from an external server to an HDD serving as a primary recording medium and stored is encrypted with a content key CK. For the purpose of the description in this specification, the HDD that is the primary recording medium stores content data “A3D” compressed by the ATRAC3 method (although other compression methods may be used).
Is encrypted with the content key CK and stored.

In this specification, a key is used for explanation.
Data y encrypted with x is represented as E (x, y). Also, regarding the encrypted data E (x, y),
The data decrypted by the key x is represented as D {x, E (x, y)}. Thus, for example, as described above,
Assuming that the compressed data of the AC3 system is “A3D”, the content data “A3D” encrypted with the content key CK.
“D” becomes E (CK, A3D). Data obtained by decrypting E (CK, A3D) with the key CK is expressed as D {CK, E (CK, A3D)}.

The HDD serving as the primary recording medium stores, in addition to the encrypted content data E (CK, A3D), the content key CK encrypted with the root key KR,
That is, E (KR, CK) is also stored. For example, the encrypted content data E (CK, A3D) and the encrypted content key E (KR, CK) are downloaded from an external server. In this case, the HDD as the primary recording medium
When transferring content data from to a secondary recording medium,
What is necessary is just to transmit the encrypted content data E (CK, A3D) and the encrypted content key E (KR, CK). Since the secondary recording medium side device holds the root key KR, it can decrypt the content key CK using the root key KR, and can further decrypt the encrypted content data using the decrypted content key CK. Become. However, the root key KR is changed according to the intention of the copyright holder or various circumstances, and a different root key KR can be set for each content data. Although a specific example will be described later, it has a function of limiting the content distribution destination by processing the root key KR. Therefore, E
In some cases, data called KB (Enabling Key Block: enabling key block) is distributed, and a legitimate terminal to which content data is transferred employs a method in which a root key can be confirmed by EKB. That is, the EKB is also distributed from the server together with the encrypted content data and the encrypted content key and stored in the HDD.

Next, consider the use of a minidisk (magneto-optical disk), which is currently widely used, as a secondary recording medium. For example, in the case of an SDMI-compatible mini-disc recording apparatus, the mini-disc recording apparatus records the checked-out content data on the mini-disc in the state of E (CK, A3D) as it is while being encrypted. You. At the time of playback, a mini-disc playback device compatible with SDMI is provided with D {CK, E (CK, A3D)}.
= ATRAC3 data decrypted as A3D (A
After obtaining 3D), a predetermined decoding process is performed to reproduce and output music and the like.

[0017] On the other hand, in a commonly used mini-disc system, encrypted data is not recorded on a mini-disc. As a matter of course, the mini disc reproducing apparatus does not have a decryption function. Therefore, even if content data is recorded on a mini-disc by a mini-disc recording device that supports SDMI, the content data recorded on the mini-disc cannot be reproduced by many mini-disc players that do not support SDMI. That is, reproduction compatibility cannot be obtained. This is the SDMI purchased by general users
This limits the proper use of the content, and may significantly reduce the value and satisfaction of the SDMI content providing service for general users.

Considering such points, when copying and recording the SDMI content on the secondary recording medium, it is transferred in an unencrypted state to, for example, a mini-disc recording device which does not support SDMI, and is directly encrypted. It is conceivable to be able to record on a secondary recording medium such as a mini-disc in an unconverted state. However, enabling such copying facilitates copying of content data. This leaves room for illegal copying, and the copyright protection, which is the original purpose of SDMI, may not be realized.

Therefore, as one method of transferring content data, the present applicant has previously proposed the following transfer method. That is, at the time of content data transfer, the data transfer device (primary recording medium-side device) authenticates the data recording device (secondary recording medium-side device) to be the transfer destination, and the authentication is OK. The transfer of the content data is permitted on condition that there is the permission of the party (copyright holder, etc.). Then, the content data is transferred on the transmission path in an encrypted state, but is recorded on the secondary recording medium after being decrypted. Also, rights management for check-out and check-in is performed. As a result, copy recording in an unencrypted state is permitted for user convenience, and the copyright protection function is not lost.

[0020]

[0007] By the way, from the viewpoint of a server which is a distribution source of content data, downloading of content data to a primary recording medium and check-out to a secondary recording medium in the above data transfer apparatus are not provided. A business form of requesting a price for content data to be established is established.

For example, taking distribution of music content as an example, a user connects to a paid music download site on the Internet by using a terminal device such as a personal computer owned by the user (that is, the above-described data transfer device). Then, the user selects a desired music content by looking at a distribution music purchase menu displayed on the site, and requests download. Thereby, the music content is downloaded to the primary recording medium (HDD) of the user terminal device, that is, the user can obtain the music data. Thereafter, the content data can be reproduced by copying the data to a mini disk or a memory card by the checkout.

In such a case, the payment is often made by inputting a credit card number, for example. However, payment using a method of inputting a credit card number is, of course, impossible for a user who does not own a credit card. This limits the users who can enjoy the content download service. Also, the security of credit card numbers does not mean that there is no user concern.

On the other hand, the applicant of the present invention has previously proposed a method in which prepaid information is stored in a recording medium such as a mini-disc and the server side manages the prepaid information for each recording medium to perform a billing process. Was. In addition, it is required that a charging process using prepaid information can be executed for a secondary recording medium in a system in which content data is checked out as described above. Furthermore, if the server side can grasp the usage status and the like on the user side (secondary recording medium side) as well as the billing process, it can be used for improving the service, etc. There is a need to be able to obtain unique information about

[0024]

According to the present invention, contents data is transferred between a primary recording medium and a secondary recording medium for recording contents data in an unencrypted state. It is an object of the present invention to enable a system to execute an appropriate accounting process for a price of a content providing server.

Therefore, in the present invention, a data transfer system including a server device, a data transfer device, and a data recording device is configured. In this case, the server device includes a content providing unit that provides content data to the data transfer device, and a charging unit that performs a charging process on the provided content data. The data transfer device includes a primary recording medium drive unit that records and reproduces data on a primary recording medium, and a storage control unit that stores content data provided from the server device in an encrypted state on the primary recording medium. Communication means for performing various data communications including transfer of content data with the data recording device; and a command for requesting the data recording device for prepaid information stored in a secondary recording medium. A command transmission control means for transmitting by the communication means; and a prepaid information processing means for performing a predetermined process on the prepaid information transmitted from the data recording device. The data recording device,
Communication means for performing various data communications including reception of content data with the data transfer device, secondary recording medium drive means for recording and reproducing data on and from a secondary recording medium, Decryption means for decrypting the transmitted encrypted content data into a non-encrypted state, and recording control for recording the content data decrypted by the decryption means on the secondary recording medium by the secondary recording medium drive means Means for reading the prepaid information recorded on the secondary recording medium by the secondary recording medium drive means in response to a command for requesting the prepaid information from the data transfer device, and A prepaid information transmission control means for transmitting the data to the data transfer device by a communication means.

Further, the prepaid information processing means performs a process of transmitting the prepaid information transmitted from the data recording device to the server device. The prepaid information is recorded in the secondary recording medium in a non-rewritable manner. The prepaid information includes prepaid amount information and ID information unique to the secondary recording medium. The billing processing means in the server device includes:
A database is provided in which charging information is registered corresponding to the prepaid information, and charging processing is performed by updating the charging information registered in the database in accordance with the prepaid information transmitted from the data transfer device. Execute. Further, the billing information includes at least the ID information and the prepaid amount information, and the billing processing means performs the billing process by updating the prepaid amount information in the billing information.

According to the present invention, a data transfer system including a data transfer device and a data recording device is configured. In this case, the data transfer device includes a primary recording medium drive unit that records and reproduces data on a primary recording medium, and stores content data provided from an external server device in an encrypted state in the primary recording medium. Storage control means for causing the data recording apparatus to perform various types of data communication including transfer of content data, and secondary data stored in a secondary recording medium for the data recording apparatus. Command communication control means for transmitting a command for requesting unique information unique to the medium by the communication means, and unique information processing means for performing a predetermined process on the unique information transmitted from the data recording device. The data recording device, between the data transfer device, a communication means for performing various data communication including reception of content data, a secondary recording medium drive means for recording and reproducing data on a secondary recording medium, Decoding means for decoding the encrypted content data transmitted from the data transfer device into an unencrypted state, and performing the secondary recording by the secondary recording medium drive means on the content data decrypted by the decoding means. Recording control means for recording on the medium, in response to a command requesting unique information from the data transfer device, read the unique information recorded on the secondary recording medium by the secondary recording medium drive means, Unique information transmission control means for causing the data transfer device to transmit the read unique information by the communication means.

In this configuration, it is assumed that the unique information is prepaid information. Further, the unique information processing means performs a process of transmitting unique information transmitted from the data recording device to the server device. The unique information is rewritably recorded on the secondary recording medium. The unique information includes prepaid amount information and ID information unique to the secondary recording medium.

The data transfer device of the present invention comprises a primary recording medium drive means for recording and reproducing data on and from a primary recording medium, and the primary recording medium in a state where content data provided from an external server device is encrypted. Storage control means for storing data in an external data recording device; communication means for performing various data communications including transfer of content data between the data recording device and the external data recording device; Command transmission control means for transmitting a command requesting unique information unique to the secondary recording medium by the communication means, and unique information processing means for performing a predetermined process on the unique information transmitted from the data recording device. Prepare. Here, it is assumed that the unique information is prepaid information. Further, the unique information processing means performs a process of transmitting unique information transmitted from the data recording device to the server device.

The data recording apparatus of the present invention includes a communication unit for performing various data communications including reception of content data with an external data transfer apparatus, and a data recording / reproducing apparatus for recording / reproducing data on / from a secondary recording medium. Next recording medium drive means, decryption means for decrypting the encrypted content data transmitted from the data transfer device into an unencrypted state, and content data decrypted by the decryption means in the secondary recording medium drive Recording control means for recording on the secondary recording medium by means, and a command from the data transfer device requesting unique information specific to the secondary recording medium stored in the secondary recording medium. The unique information recorded on the secondary recording medium is read by the next recording medium drive means, and the read unique information is read by the communication means to the data transfer. And a unique information transmission control means for transmitting device. Here, it is assumed that the unique information is prepaid information.

According to the accounting processing method of the present invention, the encrypted content data provided from the external server device and stored in the primary recording medium is transferred to the external data recording device, and is transferred to the secondary recording medium in an unencrypted state. Recording, transmitting a command for requesting the prepaid information stored in the secondary recording medium to the data recording device, and transmitting the prepaid information transmitted from the data recording device to the server device. By transmitting, the content data recorded on the secondary recording medium is charged as a price.

That is, in the present invention, unique information such as prepaid information is recorded on a secondary recording medium for recording distributed content. For the content data that has been checked out to the secondary recording medium, the server updates the billing information corresponding to the prepaid information recorded on the secondary recording medium so that the payment is made. Then, in order to enable such processing, the data transfer device can request the data recording device for the prepaid information recorded on the secondary recording medium. Alternatively, it is possible to request various kinds of unique information in addition to the prepaid information, thereby enabling various managements.

[0033]

Embodiments of the present invention will be described below in the following order. 1. 1. Tree structure of encryption key and EKB 2. System configuration 3. Data path of SDMI content Configuration example of data transfer device (primary recording medium side device / P
C) 5. 5. Configuration example of data recording device (secondary recording medium side device / recording / reproducing device) 6. Minidisk management method Authentication processing 8. 8. Content encryption method Various commands 10. Check out / check in content 11. Content ID generation and management method 12. Content ID generation processing at check-out and before check-in 13. Content write control flag Billing information processing

1. Tree Structure and EKB of Encryption Key Prior to a specific description of the transfer system according to the embodiment, the structure of an encryption key used for content distribution will be described. Therefore, with reference to FIG. 1, FIG. 2, and FIG. 3, a description will be given of a configuration of holding a cryptographic processing key (key) and a data distribution configuration in each device when distributing encrypted data from the content distribution side to each device on the content reception side. I will do it.

FIG. 1 shows a tree structure of an encryption key. Numbers DV0 to DV15 shown at the bottom of FIG. 1 are individual devices on the content receiving side. That is, each leaf (leaf) of the illustrated hierarchical tree structure corresponds to each device.

Each of the devices DV0 to DV15 has a key (node key) assigned to a node from its own leaf to the root in the hierarchical tree structure shown in FIG. The key set consisting of the leaf keys of is stored in the memory. This key set is DNK (Device Node Key)
The specific example will be described later. K0000 to K1111 at the bottom of FIG. 1 are leaf keys assigned to the devices DV0 to DV15, respectively, and are described in the second node (node) from the bottom following the KR (root key) at the top. Key: K0-K
111 is a node key. The word "root key"
May be included in the “node key”.

In the tree structure shown in FIG. 1, for example, the device DV0 is a leaf key K000 as the DNK.
0 and node keys: K000, K00, K0, and a root key KR. For example, a DNK owns node keys: K000, K00, K0, and a root key KR in a state encrypted by a leaf key K0000. Device DV5 operates in a similar manner with leaf key K0101,
Owns node keys K010, K01, K0 and root key KR. The device DV15 also has a leaf key K1111, node keys K111, K11, K1, and a root key KR in a similar manner. Although only 16 devices DV0 to DV15 are described in the tree of FIG. 1 and the tree structure is shown as a four-stage balanced and symmetrical configuration, more devices are configured in the tree. Also, each section of the tree can have a different number of stages configuration.

Each information processing device (device) included in the tree structure in FIG. 1 has various recording media, for example,
Various types of information processing devices that use DVDs, CDs, MDs, flash memories, and the like that are embedded in a device or detachable from a device are included. Further, various application services can coexist. On such a coexistence configuration of different devices and different applications, a hierarchical tree structure as a content or key distribution configuration shown in FIG. 1 is applied.

In a system where these various information processing devices (devices) and applications coexist,
For example, a portion surrounded by a dotted line in FIG.
0, DV1, DV2, DV3 are set as one group using the same recording medium. For example, for devices included in the group surrounded by the dotted line, common contents are collectively encrypted and sent from the provider, a content key used commonly for each device is sent, or each device is sent. , The contents fee payment data is also encrypted and output to a provider or a settlement institution. Institutions that transmit and receive data to and from each device, such as a content provider or a payment processing institution, are the portions enclosed by dotted lines in FIG.
Is executed as a group and data is sent collectively. A plurality of such groups exist in the tree of FIG. An organization that transmits and receives data to and from each device, such as a content provider or a payment processing organization, functions as message data distribution means.

It should be noted that the node key and the leaf key have a certain 1
May be managed by one key management center,
It is also possible to adopt a configuration in which each group is managed by message data distribution means such as a provider or a settlement institution that transmits and receives various data to and from each group. These node keys and leaf keys are updated in the event of, for example, leakage of keys, and this updating process is executed by a key management center, a provider, a payment institution, or the like.

In this tree structure, as is apparent from FIG. 1, three devices D included in one group
V0, DV1, DV2, and DV3 have common keys K00, K0, and KR as node keys / root keys. By using this node key sharing configuration, for example, a common content key can be assigned to devices DV0, DV1, and DV.
2, DV3 only. For example, if the commonly owned node key K00 itself is set as a content key, only the devices DV0, DV1, DV2, and DV3 can set a common content key without sending a new key. A value E obtained by encrypting the new content key CK with the node key K00
(K00, CK) is stored via a network or in a recording medium to store the devices DV0, DV1, DV2, D
If distributed to V3, devices DV0, DV1, DV2,
Only the DV3 can obtain the content key CK by decrypting the encryption E (K00, CK) using the shared node key K00 held in each device.

At a certain time t, the device DV
Keys K0011, K001, K00, K0, K owned by 3
If it is discovered that R has been analyzed and exposed by an attacker (hacker), then the system (device DV)
0, DV1, DV2, DV3), the device DV3 needs to be separated from the system in order to protect the data transmitted and received. To do so, the node key K00
1, K00, K0 and the root key KR are new keys K (t) 001, K (t) 00, K (t) 0, K (t), respectively.
R needs to be updated, and the update key needs to be transmitted to the devices DV0, DV1 and DV2. Where K (t) aaa
Indicates that this is an update key of the generation (t) of the key Kaaaa. Of course, at the time of content distribution, the node key or the root key K may be changed in accordance with other circumstances, for example, a request from the copyright holder or various circumstances such as convenience in system distribution.
R may be updated in some cases. For these reasons, it is necessary to notify the legitimate device of the key update.

The update key distribution process will be described. The key is updated, for example, by storing a table composed of block data called an enabling key block (EKB) shown in FIG. It is performed by: For example, when disconnecting the device DV3 as described above, the EKB is connected to the device DV0,
Supply to DV1 and DV2. Note that the activation key block (EKB) is composed of an encryption key for distributing a newly updated key to devices corresponding to each leaf configuring the tree structure as shown in FIG. The activation key block (EKB) is a key update block (KR)
B: Key Renewal Block).

The activation key block (E) shown in FIG.
KB) is configured as block data having a data configuration that can be updated only by a device that requires updating of the node key. The example of FIG. 2 is block data formed for the purpose of distributing an updated node key of generation t in devices DV0, DV1, and DV2 in the tree structure shown in FIG. For example, as described above, the keys K0011, K
Assuming that 001, K00, K0, and KR are illegally exposed, devices DV0 and DV1 need K (t) 00, K (t) 0, and K (t) R as update keys. DV2 uses K (t) as an update key.
001, K (t) 00, K (t) 0, and K (t) R are required.

As shown in the EKB of FIG. 2A, in this case, the EKB includes a plurality of encryption keys. The encryption key at the bottom is E (K0010, K (t) 001). This is the leaf key K001 of the device DV2.
0, the updated node key K (t) 001 encrypted with 0
The device DV2 can decrypt this encryption key with its own leaf key to obtain K (t) 001. Also, using the K (t) 001 obtained by decryption, the encryption key E (K
(T) 001, K (t) 00) can be decrypted, and an updated node key K (t) 00 can be obtained. Hereinafter, the encryption key E (K (t) 0 in the second stage from the top in FIG.
0, K (t) 0) and update node key K (t) 0
, And the first-stage encryption key E (K (t)
0, K (t) R) to obtain an updated root key K (t) R.

On the other hand, in the devices DV0 and DV1, the leaf keys K0000 and K0001 and the node key K000 are not included in the object to be updated, and K (t) 00, K (t) 0, K
(T) R. Therefore, in the devices DV0 and DV1, the encryption keys E in the third stage from the top in FIG.
(K000, K (t) 00) to obtain an updated node key K (t) 00, and an encryption key E (K (t) 0).
0, K (t) 0) and update node key K (t) 0
, And the encryption keys E (K (t) 0, K (t)
R) to obtain an updated root key K (t) R. Thus, the devices DV0, DV1 and DV2 can obtain the updated root key K (t) R. The index in FIG. 2A indicates an absolute address of a node key and a leaf key used as a decryption key.

Further, it is not necessary to update the node keys K (t) 0 and K (t) R in the upper stage of the tree structure shown in FIG.
When the update process of only the node key K00 is necessary, the update node key K (t) 00 is transmitted to the device DV by using the activation key block (EKB) shown in FIG.
0, DV1, DV2.

The EKB shown in FIG. 2B can be used, for example, when distributing a new content key shared by a specific group. As a specific example, devices DV0, DV1, DV2 and DV2 in a group indicated by a dotted line in FIG.
It is assumed that the DV3 uses a certain recording medium and a new common content key CK (t) is required. At this time,
Data E (K (t) 00, CK (CK ()) obtained by encrypting a new common updated content key CK (t) using K (t) 00 obtained by updating the common node key K00 of the devices DV0, DV1, DV2, DV3. t)) is the E shown in FIG.
Distribute with KB. By this distribution, device DV
4, it is possible to distribute as data that is not decrypted in devices of other groups. That is, the devices DV0, DV1 and DV2 have the K obtained by processing the EKB.
If the ciphertext is decrypted using (t) 00, the content key CK (t) at time t can be obtained.

As described above, the key structure is a tree structure, and each key can be arbitrarily updated by the EKB as in the above example. By using this key structure, it is also possible to easily update the root key KR and the node key according to various circumstances, and the content distribution in a normal state can be flexibly executed.

FIG. 3 shows a format example of the enabling key block (EKB). Four bytes indicate the number of node keys. Four bytes indicate the depth of the node key. This indicates the number of layers in the hierarchical tree for the device to which the activation key block (EKB) is distributed. The EKB version is indicated by 4 bytes. The version has the function of identifying the latest EKB and the function of indicating the correspondence between the content and the content. The reserve is a reserve area.

From the position of 16 bytes as the offset address, an encrypted node key (one or more) which is the actual content of the EKB is shown in a 16 × M byte area. That is, it is an encryption key as described with reference to FIGS. In addition, encrypted EKB versions and digital signatures (Si
gnature) is indicated. The electronic signature is an electronic signature executed by an EKB issuing authority that has issued an activation key block (EKB), for example, a key management center, a content provider, a payment institution, or the like. The device that has received the EKB verifies the signature by verifying that the device is an activation key block (EKB) issued by a valid activation key block (EKB) issuer.

2. System Configuration An embodiment of the present invention employing the above key structure will be described below. FIG. 4 shows a system configuration example.
The primary transfer medium side device 1 corresponds to the data transfer device of the present invention, and the secondary recording medium side device 20A corresponds to the data recording device of the present invention. Then, a data transfer system is constructed by the primary recording medium side device 1 and the secondary recording medium side device 20A.

The primary recording medium side device 1 is formed by, for example, a personal computer. Hereinafter, for convenience of explanation, the primary recording medium side device 1 is referred to as a personal computer 1.
It may be written as However, primary recording medium side device 1
Is not necessarily formed by a personal computer. The primary recording medium-side device 1 executes an operation as a data transfer device according to the present invention, for example, by software that executes storage / transfer of SDMI content data activated on a personal computer. Then, the HDD 5 built in (or externally attached to) the personal computer 1 is used as a primary recording medium (and a primary recording medium drive unit). In the description of the embodiment, HD
Although D5 is used as a primary recording medium, the recording medium corresponding to the primary recording medium is not limited to the HDD, but may be a medium such as an optical disk or a magneto-optical disk, a semiconductor memory built in a device, or a portable semiconductor memory (memory card or the like). Various things are conceivable.

The primary-recording-medium-side device 1 can communicate with the content server 91 via the communication network 110, and thereby can download content data such as music. Of course, there are a plurality of content servers 91, and users of the personal computer 1 can arbitrarily use various data download services. The content data downloaded from the content server 91 to the personal computer 1 includes SDMI-compliant content data,
Some content data does not conform to I.

The transmission lines forming the network 110 are as follows:
A wired or wireless public line network may be used, or a dedicated line for the personal computer 1 and the content server 91 may be used. Specifically, as the network 110,
For example, the Internet, satellite communication networks, optical fiber networks,
Other various communication lines can be applied.

The HDD of the personal computer 1
5, a package medium 90 such as a CD-DA or a DVD by an internal or external disk drive device.
Content data such as music played from a disc (hereinafter, also referred to as a disc 90) can be stored.

The personal computer 1 is connected to the secondary recording medium side device 20A or 20B, and the content data stored in the HDD 5 can be transferred to the secondary recording medium side device 20A or 20B. The secondary recording medium side device 20A or 20B is a recording device (recording / reproducing device) for the secondary recording medium. Then, the content data transferred from the personal computer 1 can be copied and recorded on the secondary recording medium.

Various examples of the secondary recording medium-side devices 20A and 20B are conceivable, but the secondary recording medium-side device 20B here is a recording device compatible with SDMI. In the SDMI-compatible recording / reproducing device 20B, an SDMI-compatible memory card using a semiconductor memory such as a flash memory is assumed as the secondary recording medium. Therefore, the secondary recording medium-side device 20B is, for example, a recording / reproducing device for an SDMI-compatible memory card. In this case, the SDMI content is recorded on the secondary recording medium in an encrypted state. A management information format for storing a content ID serving as an identifier of the SDMI content is formed on the secondary recording medium compatible with the SDMI. When the personal computer 1 stores content data in the HDD 5, a content ID is generated by the application and stored in the HDD 5 together with the content data. Checkout / checkin management is also performed using the content ID.
In a secondary recording medium that supports SDMI, when content data is recorded, the content ID can also be recorded.

On the other hand, the secondary recording medium side device 20A
It corresponds to a data recording device that does not support MI, and records SDMI content requiring copyright protection on a secondary recording medium in a decrypted state, as will be described in detail later. An example of the secondary recording medium here is a mini disk. Therefore, the secondary recording medium side device 20A is a mini disc recording / reproducing device. Hereinafter, the secondary recording medium-side device 20A may be referred to as a recording / reproducing device 20A. In this case, authentication or the like, which will be described later, is a condition for copying so that the copyright protection function is not impaired even when the SDMI content is recorded in an unencrypted state. In this case, a secondary recording medium such as a mini-disc (that is, a medium that has been widely used) does not have an area for storing a content ID. Therefore, as will be described later,
A special management method is adopted for the content ID.

The medium recorded and reproduced by the secondary recording medium side device 20A is not limited to a mini disk, but may be a memory card using a semiconductor memory such as a flash memory, a mini disk as a magneto-optical disk, or a CD.
-R (CD Recordable), CD-RW (CD Rewitable),
A DVD-RAM, a DVD-R, a DVD-RW, and the like can be considered. Therefore, as the secondary recording medium side device 20A,
What is necessary is just a recording device corresponding to these media.

The personal computer 1 and the secondary recording medium side device 20A or 20B are, for example, a USB (Universa
l Serial Bus), a connection based on a transmission standard such as IEEE1394 is performed. Of course, the content data and the like can be transferred by a wired transmission line of another transmission standard or a wireless transmission line.

3. Data path of SDMI content For example, assuming a system as shown in FIG.
FIG. 5 shows the data path formulated in I. This data path is used, for example, in the personal computer 1 provided with the HDD 5 as a primary recording medium, for storing music contents and for external devices (secondary recording medium side devices 20A,
0B) is a data path for the transfer process, and in other words, is realized by software for storing / transferring music content in the personal computer 1. The procedure / process on the data path in FIG.
Numerals 1 to DP9 are attached, and in the following description, corresponding parts are indicated by the numerals.

The content data (network content) distributed from the external server 91 via the network 110 shown in FIG. 4 is first checked whether or not it is copyright-protected content compliant with SDMI. (DP1). As network contents to be distributed, those transmitted by the server as SDMI-compliant contents (hereinafter, SDMI-compliant contents)
And content unrelated to SDMI (hereinafter referred to as non-SDM
I content).

In the case of SDMI-compliant content,
The data is encrypted with the content key CK, for example, by key encryption such as DES. Assuming that the content data itself is originally data (A3D) encoded by a compression method such as ATRAC3, SDMI-compliant content is distributed in a state of E (CK, A3D).

When the distributed network content is SD
If the content is MI compliant content, the content is stored as SDMI content in the HDD 5 as the primary recording medium (D
P1 → DP2). In this case, the content data is written to the HDD 5 in the state of the distributed E (CK, A3D). Alternatively, once the encryption has been decrypted, another key CK '
Is encrypted, that is, the key is changed, and E
The data may be written to the HDD 5 in the state of (CK ', A3D).

On the other hand, if the network content is non-SDM
If the content is I content, a watermark check, that is, a screening process using a digital watermark is performed (DP1 → DP3). Further, for example, a built-in drive such as a CD-ROM drive provided in the personal computer 1 or a CD-ROM reproduced in a disk drive connected to the personal computer 1
For content data (disc content) read from package media such as DA and DVD,
A watermark check is directly performed (DP3).
That is, a watermark check is performed on content data that is not compliant with SDMI.

If the watermark check does not pass, the content data is treated as uncopyable on the SDMI data path (DP3 → DP5). Specific treatment can be considered variously by software design,
For example, the data may be stored in the HDD 5 but may be treated as content data that cannot be transferred for copying / moving to another medium, or may not be stored in the HDD 5 in SDMI-compliant content processing. Conceivable.

When the watermark check is passed, that is, when the digital watermark exists and the copy permission is confirmed as the copy control bit, it is determined that the content data is legally copyable. It is confirmed whether or not to treat as SDMI (DP4). Such content data is stored in SDM
Whether or not to handle as compliant with I may be determined according to software design, user settings, and the like.

When not treating as SDMI, use non-SDMI
It is excluded from the content data path compliant with the SDMI as a treatment (DP6). For example, transfer to a recording device that does not support SDMI may be possible. on the other hand,
If the content is to be handled as SDMI, the content data is encrypted and stored in the HDD 5 as SDMI content (DP4 → DP2). For example, the data is stored in the HDD 5 in a state of E (CK, A3D) or in a state of E (CK ′, A3D).

With the above data path, the HDD 5 as the primary recording medium is taken out from the SDMI-treated content obtained through the network 110 (SDMI network content), a disc such as a CD-DA, or other media. Content treated as SDMI (S
DMI disc contents).
For SDMI content, a content ID that is unique data is generated for each content in order to manage a Usage Rule described below for each content, and the like.
It is stored in the HDD 5.

The SDMI content (SDMI network content or SDMI disc content) stored in the HDD 5 is transferred to an SDMI-compatible recording / reproducing device 20B under a predetermined rule, and is transferred to an SDMI-compatible secondary recording medium. It can be copied. In addition, in the case of this example, the data can be transferred to the recording / reproducing device 20A in addition to the SDMI-compatible recording / reproducing device 20A under predetermined conditions.

First, when an SDMI-compatible recording / reproducing apparatus 20 B is connected to the personal computer 1 having the HDD 5, the operation is as follows. In the case of SDMI disc content, a transfer handling rule (Usage Rule) corresponding to the SDMI disc content is determined, and based on the handling rule, an SDMI compatible recording / reproducing apparatus 20B is used for copying. Transfer is allowed (DP8). In this data path, the data is transferred from the primary recording medium (HDD 5) to the SDMI-compatible recording / reproducing device 20B.
Copy check for secondary recording medium (memory card etc.) recorded / reproduced by (or 20A) is "checkout"
Conversely, move transfer from the secondary recording medium to the primary recording medium is “check-in”. When moving from the secondary recording medium to the primary recording medium, the content data is erased on the secondary recording medium.

As a transfer handling rule corresponding to the SDMI disk content, a predetermined upper limit number of check-outs is set such that, for example, up to three check-outs are allowed for one piece of content data. Therefore, for example, copying (checkout) is permitted up to three SDMI-compatible secondary recording media. When check-in is performed, the number of check-outs for the content data is decremented. Therefore,
Even after copying to three SDMI-compatible secondary recording media, if the content is checked in from one of the secondary recording media, the content is further copied to the SDMI-compatible secondary recording media.
It can be copied to an MI-compatible secondary recording medium. That is,
It is always allowed that content data coexist on up to three SDMI-compatible secondary recording media.

In the case of SDMI network contents, a rule (Usage Rule) for handling the transfer corresponding to the SDMI network contents is determined, and the recording / reproducing apparatus 20B compatible with SDMI is determined based on the handling rules.
Is transferred for copying (DP7).
As the handling rule, the upper limit of the number of check-outs and the like are determined in the same manner as described above. For example, it is conceivable to set the checkout upper limit to once.
In this case, one content data can be copied only to another SDMI-compatible secondary recording medium. However, if the user checks in from the secondary recording medium, copy transfer can be performed again.

When SDMI content is transferred for copying to an SDMI-compatible secondary recording medium according to these handling rules, data transmission is performed in an encrypted state on the transmission line. That is, for example, the state of E (CK, A3D) or E (CK ′, A3D)
Is transferred in the state of. Further, the SDMI-compatible recording / reproducing device 20B that has received the encrypted and transmitted SDMI content copies and records the SDMI content on the secondary recording medium in an encrypted state.

When the SDMI-compatible recording / reproducing device 20B reproduces the SDMI content copied and recorded on the secondary recording medium, the content data read from the secondary recording medium is decrypted and reproduced. That is, E (CK, A
The content data recorded on the secondary recording medium in the state of 3D) or E (CK ′, A3D) is decrypted by the key CK or the key CK ′. That is, D ｛CK, E (C
K, A3D)｝ = A3D or D ｛CK ′, E (C
K ′, A3D)｝ = A3D, AT decrypted
The original content data is obtained as RAC3 data (A3D). For this content data, ATRAC3
By performing a decompression process or the like for compression, demodulation is performed as audio data, for example, and reproduction or output of music or the like is performed.

As described above, the SDMI-compliant content data is transmitted to the data path until it is checked out to the SDMI-compatible recording / reproducing apparatus 20B, and further, the encrypted data is transmitted to the secondary recording medium. And the copy management based on the transfer handling rule check described above enables appropriate copyright protection of the content data.

On the other hand, when the recording / reproducing apparatus 20A is connected to the personal computer 1, the following processing is performed. As described above, the recording / reproducing device 20A
Is different from the SDMI-compatible recording / reproducing device 20B.
It is recorded in a decrypted state on, for example, a mini disk as a secondary recording medium. By recording in an unencrypted state, the content data copied and recorded on the mini-disc can be reproduced by a general-purpose ordinary mini-disc reproducing apparatus,
As a result, user convenience can be improved. However, recording in an unencrypted state causes inconvenience in terms of copyright protection. Therefore, the recording / reproducing device 2
When transferring content data to 0A, it is necessary to satisfy a predetermined condition.

The conditions for permitting the SDMI network content to be transferred to the recording / reproducing apparatus 20A and copied and recorded on the secondary recording medium in a decrypted state include, for example, a condition that the recording / reproducing apparatus 20A has been authenticated. thing,
Check that the copyright holder has approved the copy record for the content data to be transferred,
Rules for handling transfer as check-in (Usage Rule)
Is satisfied. Since the transfer condition is satisfied, the SDMI-compatible recording / reproducing apparatus 20B
Unlimited copy transfer is not possible to other devices,
Copyright protection is also ensured. In addition, a copyright protection function can also be provided by being in an encrypted state on a transmission path for performing transfer (decryption is performed by the recording / reproducing apparatus 20A side).

When transferring the SDMI network contents to the recording / reproducing apparatus 20A, the above-mentioned transfer conditions are checked (DP9). That is, the recording / reproducing device 20
A predetermined authentication process is performed for A. In addition, the copyright owner's intention to permit copying is confirmed from flag information and the like included in the content data. Check-in /
Checkout handling rules are imposed.

When the SDMI network content is transferred to the recording / reproducing apparatus 20A according to these conditions, data transmission is performed on the transmission line in an encrypted state. That is, for example, the data is transferred in the state of E (CK, A3D) or E (CK ′, A3D). The encrypted SDMI network content is subjected to reception processing in a recording / reproducing device 20A having a configuration shown in FIG. Is done. Then, the decrypted content data is supplied to the recording / reproducing unit 25 through the encoding process by the encoding / decoding unit 24 in FIG. 7 and is copied and recorded on the mini disc 100.

Therefore, when the recording / reproducing apparatus 20A reproduces the SDMI contents copied and recorded on the mini-disc 100, the data read from the mini-disc 100 is decoded by a normal mini-disc system.
That is, EFM demodulation, ACIRC error correction, ATRAC
Decompression processing for the compression method may be performed. This means that the minidisk 100 on which the copy has been recorded can normally reproduce the content data even when the minidisk 100 is loaded into a normal minidisk reproducing apparatus.
That is, as described above, the user can
The SDMI network content copied and recorded at 0 can be played back on a normal mini-disc playback device that does not support SDMI to enjoy music and the like.

In the data path shown in FIG.
If the transfer is not permitted due to the handling rule check of 7, DP8, DP9, etc., the recording / reproducing apparatuses 20A, 20B
It is needless to say that the transfer is not performed for.

4. Configuration Example of Data Transfer Apparatus (Primary Recording Medium-Side Equipment / PC) FIG. 6 shows a configuration of a primary recording medium-side apparatus 1 serving as a data transfer apparatus. The example described here is a case where the primary recording medium side device 1 is formed by a personal computer. It may be formed.

In the case of this example, the personal computer 1
By installing a software program for executing a function as a data transfer device, a primary recording medium side device serving as a data transfer device is realized. In this specification, “personal computer” or “computer” has a broad meaning as a so-called general-purpose computer. The program can be recorded in advance on a hard disk (HDD) 5 or ROM 3 as a recording medium built in the computer. Alternatively, the program may be a floppy (registered trademark) disk, a CD-ROM (Compact Disc Read Only).
Memory), MO (Magneto optical) disk, DVD (Dig
It can be temporarily or permanently stored (recorded) in a removable recording medium 90 such as an ital Versatile Disc, a magnetic disk, or a semiconductor memory. Such a removable recording medium 90 can be provided as so-called package software.

The program may be installed in the computer from the above-described removable recording medium 90, may be wirelessly transferred from a download site to the computer via an artificial satellite for digital satellite broadcasting, or may be connected to a LAN (Local Area). Network) or the Internet, and the program can be transferred to the computer by wire. The computer can receive the transferred program by the communication unit 8 and install the program on the built-in HDD 5.

The computer 1 of FIG. 6 has a CPU (Central
Processing Unit 2 is built in. In CPU2,
The input / output interface 10 is connected via the bus 12. When a user inputs a command via the input / output interface 10 by operating the input unit 7 including a keyboard, a mouse, a microphone, and the like, the CPU 2 reads a ROM (Read Only Mem) according to the command.
ory) 3 executes the program stored therein. Alternatively, the CPU 2 may execute a program stored in the HDD 5, a program transferred from a satellite or a network, received by the communication unit 8 and installed in the HDD 5, or a removable recording medium 90 such as an optical disk mounted in the drive 9. The program read and installed in the HDD 5 is stored in a RAM (Random Access M
emory) 4 and execute. Thereby, the CPU 2
Executes a process as a data transfer device for SDMI content described later. Then, the CPU 2 outputs the processing result from the output unit 6 including a liquid crystal display (LCD) or a speaker, or transmits the processing result from the communication unit 8 via the input / output interface 10 as necessary, for example. Is recorded on the HDD 5.

In the case of the present example, the communication section 8 can communicate with various servers via the network 110 shown in FIG. That is, the computer 1 is connected to the external content server 9.
From 1, network content such as music content can be downloaded. The network content to be downloaded is S
Processing as DMI compatible content or SDM
Processing as content that does not support I is performed. For example, at least as processing that supports SDMI, the content is stored in the HDD 5 as SDMI content. The SDMI content stored in the HDD 5 is the content to be transferred to the SDMI-compatible secondary recording medium-side device 20B or the authenticated secondary recording medium-side device (recording / reproducing device) 20A.

The connection section 11 is connected to the secondary recording medium side device 20.
A and 20B are connected to enable data communication. For example, USB interface, IEEE139
Examples of four interfaces are possible. Of course, a wired interface of another standard or a wireless interface using infrared rays or radio waves may be used.

The various processes for realizing the data paths described with reference to FIG. 5 do not need to be processed in time series, but are performed in parallel or individually (for example,
Parallel processing or object processing). Further, the program may be processed by one computer, or may be processed in a distributed manner by a plurality of computers. Further, the program may be transferred to a remote computer and executed.

5. Configuration Example of Data Recording Device (Secondary Recording Medium Device / Recording / Reproducing Device) FIG. 7 shows a configuration example of the secondary recording medium device (recording / reproducing device) 20A. In this example, the recording / reproducing apparatus 20A is configured as, for example, a mini-disc recorder. Therefore, the secondary recording medium 100 is an example of a mini disk (magneto-optical disk). Hereinafter, it is also referred to as “mini-disc 100”. FIG. 7 shows only a processing system for recording / reproducing data on the mini-disc as the secondary recording medium 100 and a processing system for data transfer from the primary recording medium-side device 1, and includes a driving system for the mini-disc 100, The servo system, the reproduction output system, and the like are the same as those of a normal mini-disc recording / reproducing apparatus, so detailed illustration is omitted.

The MD control unit (CPU) 21 is a controller for controlling the recording / reproducing operation on the mini disc 100 in the recording / reproducing apparatus 20A. Specifically, for recording and reproduction on the mini-disc 100, control of rotation drive, spindle servo, focus servo, tracking servo, thread servo, etc., control of laser beam and magnetic field application operation of the optical head / magnetic head, recording and reproduction It controls data encoding / decoding processing.

The recording / reproducing unit 25 is provided with an optical head, a magnetic head, a disk rotation drive system, a servo system, and the like, and is a unit for actually recording / reproducing data on / from the mini disk 100.

The encoding / decoding unit 24 encodes data recorded on the mini disc 100 and decodes reproduced data reproduced from the mini disc 100. As is well known, in the case of a mini-disc system, the recording data is subjected to ACIRC error correction code encoding and EFM modulation. The encoding / decoding unit 24 performs ACIRC encoding and EFM encoding on the recording data and supplies the recording data to the recording / reproducing unit 25. At the time of reproduction, decoding processing such as binarization processing, EFM demodulation, and ACIRC type error correction processing is performed on the data (RF signal) read and supplied from the recording / reproducing unit 25.

The buffer memory 30 stores the mini disk 10
Buffering of recording data and reproduction data for 0 is performed. In particular, it also performs a buffering function known as a shock proof function. During data recording, ATRAC / ATRAC3 compression-coded recording data is temporarily stored in the buffer memory 30. Then, the data is read out intermittently for each predetermined data amount, supplied to the encoding / decoding unit 24, and used for recording processing. During data reproduction, data read from the mini disk 100 and decoded by the encoding / decoding unit 24 is temporarily stored. Then, the stored data is read continuously and subjected to a compression decoding process in the codec 23.

The codec 23 has ATRAC / ATRA
This is a part for performing compression processing and decompression processing by C3 compression encoding. Data recorded on the mini-disc 100 has been subjected to the ATRAC / ATRAC3 compression encoding and then the above-described encoding processing.
Therefore, when data that has not been compression-encoded, for example, PCM audio data or the like, is input to the recording / reproducing apparatus 20A as recording data, the codec 23 uses the AT.
RAC encoding or ATRAC3 encoding is performed, and the compressed data is supplied to the encoding / decoding unit 24. At the time of reproduction, the recording / reproducing unit 2
The data read in step 5 and decoded by the encoding / decoding unit 24 is data in a compression-encoded state of the ATRAC / ATRAC3 system. This data is supplied to the codec 23 via the buffer memory 30, and the codec 23 performs an expansion process for ATRAC / ATRAC3 compression to obtain, for example, 44.1 kHz, 14.1 kHz.
The 6-bit quantized digital audio data is demodulated. This digital audio data is subjected to, for example, D / A conversion, analog signal processing, amplification processing, and the like in an output system circuit (not shown) to produce a speaker output signal.
It is reproduced as music or the like. Alternatively, it may be possible to output digital audio data to another device.

The above configuration is a component provided also in the recording / reproducing device of a normal mini-disc system. Is further provided. That is, a communication unit 26, a DMA 27, a decoding processing unit 28, a cache memory 29, a flow control unit 31, and a system control unit 32 are provided as units for performing processing such as reception and decoding of transferred content data.

The system control unit 32 (CPU) is a part that controls the entire recording / reproducing apparatus 20A. For example, it controls communication for authentication and data generation with the personal computer 1, exchanges various commands from the personal computer 1, and controls processing of transferred content data. In accordance with these controls, it issues an instruction to the MD control unit 21 to control the recording / reproducing of content data with respect to the mini-disc 100 and the reading and updating of management information. Although not shown, an operation unit and a display unit are provided as a user interface. The operation unit also monitors a user operation from the operation unit, performs processing according to the operation, and controls display of the display unit.

The communication section 26 is connected to the connection section 11 of the personal computer 1 shown in FIG. For example, signal processing corresponding to a communication method such as USB or IEEE1394 is performed. Communication from the personal computer 1 received by the communication unit 26 includes various commands and SDMI contents.

The data as the SDMI content received by the communication unit 26 is a DMA (Direct Memory Access).
Under the control of 27, the data is stored in the cache memory 29. Of course, data transfer to the cache memory 29 may be performed by CPU control instead of the DMA 27.

The decryption processing section 28 is a part for coping with the encryption processing of SDMI contents. That is, decryption processing is performed on the content data stored in the cache memory 29. Then, the content data decrypted in the non-encrypted state is stored in another area of the cache memory 29.

The SDMI content is the content key CK
Alternatively, since the content key CK 'is encrypted, information that can at least recognize the content keys CK and CK' is stored.
Although described later in detail, the DN referred to in the description of FIG.
K (Device Node Key) is stored. The recording / reproducing apparatus 20B corresponds to one device (DVx) in FIG.
Stores a leaf key, a node key and a root key encrypted by the leaf key. Then, the content key CK can be recognized using such a DNK and possibly using the above-described EKB transmitted.

Since the DNK, which is information capable of recognizing the content key CK for the SDMI content, is stored, the decryption processing unit 28 transmits the SDMI content transmitted in a state encrypted with the content key CK.
That is, for example, the content in the state of E (CK, A3D) is
Can be decrypted. That is, D ｛CK, E (CK, A
3D) By setting｝ = A3D, decoded data in the ATRAC3 compressed state can be obtained. The ATRAC3 compressed data decoded in this manner is subjected to an encoding process in the encoding / decoding unit 24, and
Can be recorded on the mini disc 100.

Note that SDMI content is not always A
The TRAC3 compressed data is not encrypted. For example, linear PCM data encrypted with a key CK may be considered. That is, for example, the contents in the state of E (CK, PCM) may be transferred and input. In that case, of course, the decoding processing unit uses D @ CK, E (CK, PC
M) The decoded linear PCM data is obtained when｝ = PCM. In that case, the PCM data can be recorded on the mini-disc 100 by the recording / reproducing unit 25 after the ATRAC3 compression process is performed by the codec 23 and the encoding process by the encoding / decoding unit 24.

The decryption processing unit 28 may further store a key for an authentication process. In the authentication processing example described later, the public key P and the secret key S stored in the recording / reproducing device 20A are used. In that case, the public key P and the secret key S are also stored in the decryption processing unit 28. Further, an encryption process using the secret key S is also performed.

The decryption processing section 28 is also equipped with a hash engine, and performs a process of generating a content ID by a so-called hash (HASH) function operation. The generation of the content ID will be described later in detail.

The decrypted SDMI content data, for example, compressed data of ATRAC3 system, PCM
The content data in the data state is transferred from the cache memory 29 to the flow control unit 31. In order to record the decrypted SDMI content data on the mini-disc 100, the flow control unit 31 (MD control unit 21 side which is a recording processing system (codec 2)
3, encoding / decoding unit 24, recording / reproducing unit 25,
This is a part to be transferred to the buffer memory 30). Then, data is transferred in response to a request (XARQ) from the MD control unit 21. The flow control unit 31 adjusts the timing between the reception of the content data, the decryption processing, and the recording processing on the mini disc 100.

With the above configuration, the SDMI content data transmitted from the personal computer 1
(CK, A3D) state data or E (CK, PC
The data in the state of M) is in an unencrypted state, and ATRA
After being encoded in the encoding / decoding unit 24 in the state of the C3 compressed data, the data is recorded on the mini disc 100 by the recording / reproducing unit 25.

By the way, various commands are also transmitted from the personal computer 1 to the recording / reproducing apparatus 20A in the case of content data check-out / check-in and other communication sessions. When these commands are received by the receiver 26, the commands are transmitted to the system control unit 32. The system control unit 32 performs various processes according to these commands, and sends a response to the commands from the communication unit 26 to the personal computer 1. To send.

6. Here, the data and management information recorded on the mini-disc 100 will be described. In a digital recording / reproducing system such as a mini disc system, TOC (Table of Contents) is recorded on a recording medium as management information for controlling a data recording operation and a data reproducing operation. From this recording medium
The OC information is read out and stored in a memory, and at the time of a recording / reproducing operation, an access operation for recording / reproducing can be executed by grasping a recording position or a reading position with reference to the TOC information.

In the case of a mini-disc, P-recorded by pits as non-rewritable information is used as TOC information.
There is a TOC (pre-mastered TOC) and a U-TOC (user TOC) that is magneto-optically recorded so that it can be rewritten in accordance with recording or erasing of music or the like.
For C, data is first updated in the memory in accordance with recording / erasing, and the U-TOC area on the disk is rewritten with the updated data at a predetermined timing. In the U-TOC, content data such as audio data recorded on a disc is managed in units called tracks. That is, one track corresponds to, for example, one music piece.

First, a data unit called a cluster will be described as data recorded on the mini disc 100. In the mini-disc system, a data stream for each unit of one cluster is formed as recording data.
FIG. 8 shows a format of a cluster which is a unit of the recording operation. As shown in FIG. 8, clusters CL are continuously formed as recording tracks in the mini-disc system, and one cluster is the minimum unit for recording.

Then, one cluster CL includes the sector SCFC
To SCFE, a sub data sector of one sector indicated as sector SCFF, and a main sector of 32 sectors indicated as sectors SC00 to SC1F. That is, one cluster is composed of 36 sectors. One sector is 235
This is a data unit formed of 2 bytes.

The linking sectors SCFC to SCFE are used for a buffer area as a break of a recording operation, various operation adjustments, and the like, and the sub data sector SCFF can be used for recording information set as sub data. Recording of TOC data, audio data, and the like is performed in main sectors SC00 to SC1F of 32 sectors.

The sectors are further subdivided into units called sound groups, and two sectors are divided into 11 sound groups. That is, as shown in the figure, the sound groups SG00 to SG0A are included in two consecutive sectors of an even sector such as the sector SC00 and an odd sector such as the sector SC01.
One sound group is formed of 424 bytes, and has a sound data amount corresponding to a time of 11.61 msec.
In one sound group SG, data is recorded while being divided into an L channel and an R channel. For example, the sound group SG00 includes L channel data L0 and R channel data R0.
G01 is L channel data L1 and R channel data R
It is composed of 1. Note that the 212 bytes that are the data area of the L channel or the R channel are called a sound frame.

FIG. 9 shows the area structure of the mini disc 100. FIG. 9A shows an area from the innermost peripheral side to the outermost peripheral side of the disk. In the mini-disc 100 as a magneto-optical disk, the innermost peripheral side is formed with embossed pits where reproduction-only data is formed. This is an area where the P-TOC is recorded. The outer periphery of the pit area is a magneto-optical area, which is a recordable / reproducible area in which a groove is formed as a guide groove for a recording track. The section from cluster 0 to cluster 49 on the innermost side of the magneto-optical area is used as a management area, and actual music and the like are recorded as one track each with the program area from cluster 50 to cluster 2251. Become. The periphery of the program area is a lead-out area.

FIG. 9 shows the management area in detail.
(B). FIG. 9B shows sectors in the horizontal direction and clusters in the vertical direction. In the management area, clusters 0 and 1 are buffer areas with the pit area. The cluster 2 is a power calibration area PCA and is used for adjusting the output power of the laser beam. For clusters 3, 4, and 5, U-TOC is recorded. U
Although details of the contents of the TOC will be described later, each of the 32 main sectors (SC00 to SC1) in one cluster
In F), a data format is defined, and predetermined management information is recorded. That is, the address of each track recorded in the program area, the address of the free area, and the like are recorded.
-A TOC sector is defined. Such U-T
Clusters having sectors serving as OC data are repeatedly recorded three times in clusters 3, 4, and 5. Cluster 4
7, 48 and 49 are buffer areas with the program area. Note that the hatched portion PD can be set as a recording area for prepaid information described later.

In the program area after the cluster 50 (= 32h in hexadecimal notation), in each of the 32 main sectors (SC00 to SC1F) in one cluster, audio data such as music is compressed in a compression format called ATRAC. Be recorded. Each track (content data) to be recorded and a recordable area are managed by the U-TOC. In each cluster in the program area, the sector SCFF can be used for recording information as sub data as described above.

The U-TOC sector will be described with reference to FIG. The P-TOC is formed in the innermost pit area of the disk 90 as described with reference to FIG. 9, and is read-only information. The P-TOC manages the position of a recordable area (recordable user area) of the disc, a lead-out area, a U-TOC area, and the like. In a read-only optical disk in which all data is recorded in a pit form,
The P-TOC can also manage music recorded in the form of a ROM and the U-TOC is not formed. Detailed description of P-TOC is omitted.

FIG. 10 shows the format of U-TOC sector 0. Sectors 0 to 32 can be provided as U-TOC sectors. That is, the main sectors SC00 to SC1F in one cluster described above.
Is the sector recorded. Sector 1 and sector 4 are character information, and sector 2 is an area for recording the recording date and time. Descriptions of these sectors 1, 2, and 4 will be omitted.

The U-TOC sector 0 is a data area in which management information on content data (tracks) such as recorded music and a free area in which new content data can be recorded is recorded. For example, when recording a certain music on the mini disc 100, M
The D control unit 21 searches for a free area on the disk from the U-TOC sector 0, and records data there. Further, at the time of reproduction, the area in which the music to be reproduced is recorded is determined from U-TOC sector 0,
The reproduction operation is performed by accessing the area.

In the data area of U-TOC sector 0 in FIG. 10 (4 bytes × 588, 2352 bytes), a synchronization pattern in which 1-byte data of all 0 or all 1 is formed at the head position is recorded. Next, the cluster address (Cluster H) (Cluster L) and the sector address (Sec
The address which is tor) is recorded over 3 bytes, and 1 byte of mode information (MODE) is added. The 3-byte address here is the address of the sector itself. It should be noted that a header portion in which a synchronization pattern and an address are recorded is described in U-TO.
The same applies to not only the C sector 0 but also the P-TOC sector and the sector in the program area, and the address and synchronization pattern of the sector itself are recorded in sector units.

Subsequently, a maker code, a model code, and a track number (F
irst TNO), track number of last track (Last T
NO), data such as a sector usage status (Used sectors), a disk serial number, and a disk ID are recorded.

Further, various pointers (P-DFA) are used as pointers in order to identify the areas (free areas, etc.) of tracks (music and the like) recorded by the user by making them correspond to a table section described later. , P-EMPT
An area for recording Y, P-FRA, and P-TNO1 to P-TNO255) is prepared.

As a table unit to be associated with the pointers (P-DFA to P-TNO255), 255 parts tables from (01h) to (FFh) are provided. A start address as a starting point, an end address as an end, and mode information (track mode) of the part are recorded for the part. In addition, since the parts indicated in each part table may be successively connected to other parts, link information indicating the part table in which the start address and the end address of the connected parts are recorded can be recorded. Have been. Note that a part refers to a track portion in which temporally continuous data is physically continuously recorded in one track. And the start address,
The address indicated as the end address is an address indicating one or a plurality of parts constituting one music piece (track). These addresses are recorded in short form,
Specify clusters, sectors, and sound groups.

In this type of recording / reproducing apparatus, data of one music (track) is reproduced in a physically discontinuous manner. Since there is no hindrance to the operation, the music or the like recorded by the user may be recorded in a plurality of parts for the purpose of efficient use of the recordable area.

For this reason, link information is provided, and the part tables can be connected by designating the part tables to be connected by, for example, the numbers (01h) to (FFh) given to the respective part tables.
In other words, in the table section in the U-TOC sector 0, one part table represents one part. Manages the position of the part.
Note that the link information is actually U-
It is indicated by a numerical value which is a byte position in TOC sector 0. That is, the part table is designated as 304+ (link information) × 8 (byte).

Each part table from (01h) to (FFh) in the table section of the U-TOC sector 0 includes pointers (P-DFA, P-EMPTY, P-FRA, P-TNO1) in the pointer section.
~ P-TNO255) indicates the contents of the part as follows.

The pointer P-DFA indicates a defective area on the magneto-optical disk 90, and is a head in one or more parts tables showing a track portion (= part) which becomes a defective area due to a scratch or the like. Part table is specified. That is, when a defective part exists, any one of (01h) to (FFh) is recorded in the pointer P-DFA, and the corresponding part table indicates the defective part by the start and end addresses. If another defective part exists, another part table is designated as link information in the part table, and the defective part is also shown in the part table. If there is no other defective part, the link information is set to, for example, "00h".
After that, there is no link.

The pointer P-EMPTY is 1 in the table section.
Or, indicates the leading parts table of a plurality of unused parts tables, and if there is an unused parts table, (01h) to (FFh) as a pointer P-EMPTY.
Is recorded. When there are multiple unused part tables, the part tables are sequentially specified by the link information from the part table specified by the pointer P-EMPTY, and all the unused part tables are connected on the table part. .

The pointer P-FRA indicates a free area (including an erase area) where data can be written on the magneto-optical disk 90, and one or a plurality of track portions (= parts) indicating free areas are indicated. The first part table in the parts table is specified. In other words, if there is a free area, (01
h) to (FFh) are recorded, and in the parts table corresponding thereto, parts which are free areas are indicated by start and end addresses. In addition, when there are a plurality of such parts, that is, when there are a plurality of part tables, the link information sequentially designates the parts table whose link information is “00h”.

FIG. 11 schematically shows the management state of parts that are free areas by using a parts table. This is because when the parts (03h) (18h) (1Fh) (2Bh) (E3h) are set as free areas, this state follows the pointer P-FRA and the parts table (03h) (18h) (1Fh) (2Bh) The state represented by the link (E3h) is shown. It should be noted that the management form of the above-described defective area and the unused parts table is the same.

The pointers P-TNO1 to P-TNO255 are
0 indicates a track such as a song recorded by the user. For example, the pointer P-TNO1 indicates a temporally leading part of one or a plurality of parts on which data of the first track is recorded. Specified parts table. For example, if the track set as the first track is recorded on the disc without dividing the track, that is, recorded as one part, the recording area of the first track is the start area in the parts table indicated by the pointer P-TNO1. And the end address.

For example, when the music set as the second track is discretely recorded on a plurality of parts on the disc, each part is designated in time order to indicate the recording position of the second track. Is done. That is, the pointer
From the part table designated as P-TNO2, another part table is successively designated by the link information according to the time sequence, and linked to the part table having the link information of "00h" (see FIG. 11 and FIG. 11). Similar form). In this way, for example, since all the parts on which the data constituting the second music are recorded are sequentially designated and recorded, the data of the U-TOC sector 0
When playing back a song or performing overwrite recording on the area of the second song, the recording / playback head can be accessed to extract continuous music information from discrete parts and to record efficiently using the recording area. Become.

By the way, a 1-byte track mode is recorded in each parts table, and this is track attribute information. The eight bits that make up one byte are d1
Assuming that (MSB) to d8 (LSB), the track mode is defined as follows. d1 ... 0: write protected (overwrite erasure, editing prohibited) 1: write-permitted d2 ... 0: copyright, 1: no copyright d3 ... 0: original, 1: first generation or higher d4 ... 0: audio data, 1: undefined d5, d6 ... 01: normal audio, other: undefined d7 ... 0: monaural, 1: stereo d8 ... 0: emphasis off, 1: Emphasis on

As described above, for the rewritable magneto-optical disk 90, the area management on the disk is performed by the P-TOC.
Music and free areas recorded in the recordable user area are performed by U-TOC. Further, with such a U-TOC structure, for tracks recorded on the mini-disc 100, editing such as track division, connection of a plurality of tracks to one track, and erasure can be performed only by rewriting the U-TOC. It is understood that there is.

In the recording / reproducing apparatus 20A, the MD control unit 2
When the mini disc 100 is loaded in the recording / reproducing unit 25, the TOC information is read first, and the read U-TOC information is stored in a specific area of the buffer memory 30. Thereafter, it can be referred to at the time of recording / reproducing / editing operations on the mini disc 100. When recording of content data (track) or editing of a recorded track is performed, the U-TOC sector update process is performed on the U-TOC data once stored in the buffer memory 30. . Then, the TOC information stored (updated) in the buffer memory 30 at a predetermined time is written to the mini-disc 100, so that the U-TO on the disc is
C update is performed.

7. Authentication Processing As mentioned in the description of the SDMI data path, the recording / reproducing apparatus 20A that records content data in a state in which the mini disc 100 is decrypted is
As one of the conditions for the transfer / recording (checkout), the authentication from the personal computer 1 must be OK. The authentication is a process of confirming whether the recording operation of the content data in the non-encrypted state is an authorized device or not.

This authentication process is performed when a recording / reproducing device other than the SDMI-compatible recording / reproducing device 20B is connected to the connection section 11 of the personal computer 1. In addition,
When the SDMI-compatible recording / reproducing device 20B is connected,
The device is an SDMI-compatible recording / reproducing device 20 referred to in this example.
A process for confirming that B is performed. That is, when the connected device is not confirmed as the SDMI-compatible recording / reproducing device 20B, an authentication process described below is performed, and it is confirmed whether the device is the recording / reproducing device 20A.

The authentication process in this example is to execute an authentication method using asymmetric encryption (public key encryption). In asymmetric encryption, the key for encryption and the key for decryption are different. Now, the data before encryption is Db, the encryption key is Ke, and the decryption key is K.
d, the encrypted data C is C = E (Ke, Db)
And the data Db is decrypted when D (Kd, C) = Db. Here, the encryption key Ke and the decryption key Kd are called a key pair. One is disclosed as a public key, and the other is held in a predetermined part as a secret key. In the authentication process described below, the public key is represented by P and the secret key is represented by S in the key pair Ke and Kd. As described above, in this case, the recording / reproducing device 20A
(Or the system control unit 32) stores the encryption key Ke and the decryption key Kd
Thus, the public key P and the secret key S are stored.

In the authentication process, for example, the CPU 2 of the primary recording medium side device (personal computer) 1 transmits an authentication request command to the system control unit 32 of the secondary recording medium side device (recording / reproducing device) 20A. Later, C
The processing shown in FIG. 12 is performed between the PU 2 (primary recording medium side device (personal computer) 1) and the system control unit 32 (secondary recording medium side device (recording / reproducing apparatus) 20A).

When the authentication process is started, first, the system control unit 32 of the secondary recording medium side device 20A transmits the public key P stored in the decryption processing unit 28 from the interface unit 26 to the primary recording medium as processing S1. It is transmitted to the side device 1. The public key P is a key that the primary recording medium side device 1 also knows. Therefore, when the recognition that the public key P matches both can be obtained, the processing S1 does not necessarily have to be performed. CPU 2 of primary recording medium side device 1
Receives the public key P, and subsequently generates a random number r as processing S2. Then, as a process S3, a random number r is transmitted to the secondary recording medium side device 20A. Next, the system control unit 32 of the secondary recording medium side device 20A encrypts the random number r received as the process S4 using the secret key S stored in the decryption processing unit 28. Then, as processing S5, the encrypted data E (S, r) is transmitted to the primary recording medium side device 1.

Upon receiving the encrypted data E (S, r), the CPU 2 of the primary recording medium-side device 1 performs step S6 as follows.
The encrypted data E (S, r) is decrypted using the public key P. That is, the processing of D {P, E (S, r)} is performed. Then, as a process S7, the random number r generated in the above process S2
And the decryption result D {P, E (S, r)} in the above processing S6
Compare. Here, assuming that the public key P and the secret key S are a proper key pair, a result of r = D {P, E (S, r)} should be obtained. Therefore, if the comparison results match, it is confirmed that the secondary recording medium-side device 20A holds the secret key S for the public key P. Then, the secondary recording medium-side device 20A is authenticated as a valid connection partner. On the other hand, if the comparison results do not match, the process proceeds from step S8 to step S10, where the connected secondary recording medium-side device
It is determined that the connection is not a valid connection partner (that is, a device that can transfer the SDMI content), and the authentication is determined to be NG.

For example, when the connected device is authenticated as the appropriate secondary recording medium-side device 20A by the above-described authentication processing, the primary recording medium-side device 1 transmits an SDMI to the connected device. It is recognized that one of the conditions for permitting the transfer of the content is satisfied.

8. Content encryption method In the system of this example, the recording / reproducing apparatuses 20A and 20B correspond to the lowermost device of the structure shown in FIG. 1, but the encryption structure shown in FIG. An example of realization will be described.

First, FIG. 13 shows the flow of content data and keys. The external server 91 shown in FIG.
Is distributed, this one unit of content data CT
For 1, E (CK, A3D), E (KR, C
K) and EKB are transmitted and stored in the HDD 5. E (CK, A3D) is ATRAC3 compressed content data encrypted with the content key CK, that is, actual music and other information to be distributed. E (KR, CK) is information obtained by encrypting the content key CK for decrypting the content data with the root key KR described with reference to FIG. EKB is shown in Figs.
In the description of the present embodiment, it is assumed that the information is information for updating the root key KR.

According to the distribution of one content data,
These are distributed as a set, and as shown, the HDD 5 stores content data CT1,
.. Are stored.

When the personal computer 1 transfers content data to the recording / reproducing device 20A or 20B, E (CK, A3
D), E (KR, CK), and EKB are transmitted in a predetermined procedure. In the recording / reproducing apparatuses 20A and 20B corresponding to the devices (terminals) described in FIG. 1, unique leaf IDs are set, and DNKs (Device Node Kes) are set.
y) is memorized.

In response to the transmission of the set of content data from the personal computer 1, the content data is decrypted (or remains encrypted) and recorded on the secondary recording medium. In the case of the SDMI-compatible recording / reproducing device 20B, decryption is performed during reproduction. In the case of the recording / reproducing device 20A,
Performs decryption during recording.

As shown in the figure, the decryption process first includes the stored DNK and the transmitted EKB.
Is used to decrypt the root key KR. Subsequently, the content key CK is decrypted using the decrypted root key KR.
Then, by using the decrypted content key CK, the decrypted content data A3D can be obtained.

The DNK and the decryption procedure in the case of the recording / reproducing apparatus 20A will be specifically described with reference to FIGS. now,
Assuming a key tree structure as shown in FIG. 14A, for example, it is assumed that leaf ID = SET0 and leaf key = K000 are set in the recording / reproducing apparatus 20A. in this case,
The DNK stored in the recording / reproducing device 20A is shown in FIG.
It has information as shown in (b). First, “SET0” is stored as the leaf ID. In addition, "K
000 "is stored. And leaf key "K000"
14A to the root key KR in the structure of FIG. 14A. That is, the node key K
00, K0, and a root key KR are stored. However, the node keys K00 and K0 and the root key KR are stored in a state encrypted by the leaf key K000. That is, as shown, E (K000, K00), E (K000, K0), and E (K000, KR) are stored.

Since such a DNK is stored, the recording / reproducing apparatus 20A converts the transferred content data E (CK, A3D) into the transferred E data.
It can be decrypted using (KR, CK). That is, in this case, the recording / reproducing apparatus 20A can obtain the root key KR by decoding D {K000, E (K000, KR)} using the leaf key K000. Then, using the decrypted root key KR, D @ KR, E (KR, C
K) By decrypting｝, the content key CK can be obtained. Further, by decrypting D {CK, E (CK, A3D)} using the decrypted content key CK, decrypted content data A3D can be obtained.

However, as described above, the root key KR is always
The node key and the node key are not immutable and are changed according to various circumstances. In the case of a system in which the content key CK is encrypted with the root key KR and transferred as in this example, the root key KR may be changed for each content data. For example, some music distributors change the root key KR for each piece of content data, thereby enhancing copyright protection. For this purpose, the EKB is transmitted at the same time as described above, so that the root key KR changed for a legitimate device can be confirmed.

Now, as shown in FIG. 15, for a certain content data E (CK, A3D), the content key E (KR ', C3) encrypted with the changed root key KR' is obtained.
K) and EKB are transmitted. In this case E
It is assumed that the KB includes, for example, information of E (K0, KR ') as the updated root key KR' encrypted with the node key K0. Encrypting the updated root key KR 'with the node key K0 is performed, for example, by using the device (S
This is an example performed when a new root key KR 'is notified only to ET0) to (SET3). Of course, if only the devices (SET0) and (SET1) are to be notified, the updated root key KR 'is set to the node key K00.
EKB that contains the information of E (K00, KR ') encrypted by
Should be issued.

On the other hand, as described with reference to FIG. 14B, the DNK of the recording / reproducing device 20A has a leaf key K000,
E (K000, K00), E (K000, K0) as a node key and a root key encrypted with a leaf key,
E (K000, KR) is stored. In this state, the procedure up to decrypting the content data A3D is shown in FIG.

In response to the information of E (K0, KR ′) being sent as the EKB, first, K0 is obtained from DNK. That is, using the leaf key K000, D @ K000,
The node key K0 is obtained by decrypting E (K000, K0)}. Next, using the node key K0, E (K
0, KR '). That is, D ｛K0, E (K0, K
R ′)｝ is decrypted to obtain an updated root key KR ′. The transmitted content key E (KR ', CK) is decrypted using the decrypted updated root key KR'.
That is, the content key CK is obtained by decrypting D {KR ', E (KR, CK)}. Using the decrypted content key CK, D @ CK, E
(CK, A3D)} is decrypted to obtain decrypted content data A3D.

According to the above procedure, the recording / reproducing apparatus 20A can decrypt the transferred content data and record it on the mini disc 100. Further, in the case of the recording / reproducing apparatus 20B, when reproducing the content data recorded on the secondary recording medium in an encrypted state, the encryption can be canceled by the above-described procedure, and the music or the like can be reproduced.

9. Various commands Personal computer 1 as primary recording medium side device
And a recording / reproducing device 20A (2
0B), various control commands and response commands are exchanged in a communication session for check-out / check-in or other various operations. Here, of the various commands, only commands directly related to a characteristic operation of the present example described later will be described.

FIG. 16 shows the format of the checkout control command, and FIG. 17 shows the format of the checkout response command. The checkout control command is composed of 25 bytes, and the checkout response command is composed of 17 bytes. Then, the check-out control command instructs that the content data transferred to the secondary recording medium side by the communication session for check-out is actually set to a state in which the secondary recording medium side can reproduce (grant a reproduction right). Therefore, the personal computer 1 uses the recording / reproducing device 20A (20
B). On the other hand, the recording / reproducing device 20A (20B) performs a predetermined process in response thereto, and outputs a check-out response command as a response to the control command to the personal computer 1.
Send to

As shown in FIG. 16, in the check-out control command, “check-out” is indicated as an operation code, and a communication result (result), an identification code of a communication target device (List ID), and a secondary Each information bit is prepared as a track number (object position number) on the recording medium side and an encrypted session key (DES CBC (Ks, 0)). The checkout response command is shown in FIG.
As shown in the figure, "checkout" is indicated as the operation code, the communication result (result), the identification code (List ID) of the communication target device, and the track number (object) of the checkout content on the secondary recording medium side.
Each information bit is prepared as position number).

FIG. 18 shows the format of a 30-byte record object control command, and FIG. 19 shows the format of a 62-byte record object response command. The record object control command is issued from the personal computer 1 to the recording / reproducing device 20A (20B), for example, in a communication session for check-out, to notify information of the content data when transferring the actual content data. Command. On the other hand, the recording / reproducing device 20A
(20B) performs a process related to the information and the like notified in response thereto, and transmits a checkout response command to the personal computer 1 as a response to the control command. As will be described later, in the recording / reproducing apparatus 20A, a content ID is generated using a part of the transferred content data, and the generated content ID is notified to the personal computer 1 by a record object response command. Also do.

As shown in FIG. 18, in the record object control command, “record object” is indicated as the operation code, and the communication result (resu
lt), the identification code of the communication target device (Destination List I
D), track number (new object position numbe) on the secondary recording medium for the checkout content
r), content data type (content type), content data format (Downlo
Each information bit is prepared as an ad Format Track Attribute, a content attribute (Track Mode) in the secondary recording medium, a data length of the content data (ContentSize), and a bulk data length of the content data (Bulk Data Size). The content data format (Download Format Track Attribute) on the primary recording medium
5 is information on the compression method and bit rate of the content data to be transmitted, and information on the compression method and bit rate of the content data when transmitting the content data to the transmission path. The content attribute (Track Mode) on the secondary recording medium is
00 information for specifying the compression method when recording to
Monaural and other attribute information. As a compression method,
For example, ATRAC, 132 kbps of ATRAC3, A
One of 66 kbps of TRAC3 is specified.

Similarly, in the record object response command shown in FIG. 19, “record object” is indicated as the operation code, and the communication result (re
sult), the identification code of the communication target device (Destination List
ID), track number (new object position numb) on the secondary recording medium for the checkout content
er), the content data type (content type), the content data format (Downlo
Each information bit is prepared as an ad Format Track Attribute, a content attribute in the secondary recording medium (Track Mode), a data length of the content data (Content Size), and a bulk data length of the content data (Bulk Data Size). And in the case of a response command, 3
As the 2-byte session data, the recording / reproducing device 20
An area for notifying the personal computer 1 of the information of the content ID calculated in A is prepared. The content ID will be described later in detail.

FIG. 20 shows the format of the check-in control command, and FIG. 22 shows the format of the check-in response command. The check-in control command is composed of 17 bytes, and the check-in response command is composed of 25 bytes. The check-in control command causes the personal computer 1 to perform recording / reproduction in order to check in the content data on the secondary recording medium through the communication session, that is, to return the replay right on the secondary recording medium. Device 2
This is a command issued to 0A (20B). However, besides check-in, the personal computer 1 may issue a message to obtain unique information on the secondary recording medium side. On the other hand, the recording / reproducing device 20A (20B) performs predetermined processing in response to the check-in control command, and transmits a check-in response command to the personal computer 1 as a response to the control command.

As shown in FIG. 20, in the check-in control command, "check-in" is indicated as an operation code. Track number (object position numb) on the secondary recording medium for in-content
er) is prepared for each information bit.

Here, the sub-functions are defined as shown in FIG. 21, and the contents specified by the check-in command are specified thereby. If the value of the sub-function is "00h", the check-in control command requests a content ID. This is an instruction as actual check-in for returning the reproduction right of the secondary recording medium. Subfunction value "0
"1h" is reserved. However, it may be used as an instruction in the actual check-in process. If the value of the sub-function is other than these, the check-in control command requests the prepaid information. Although the prepaid information will be described later, this is one of the unique information recorded on the secondary recording medium. And
In this case, the check-in control command only instructs the reading of the prepaid information,
No check-in (return of reproduction rights) is performed. It should be noted that, in addition to the prepaid information, the value of the subfunction can be defined so that unique information on the secondary recording medium side, for example, information such as user information and usage status can be requested.

Also, the check-in response command is
As shown in FIG. 22, "check-in" is indicated as an operation code, and a secondary recording medium for a communication result (result), a subfunction (Subfunction), an identification code (List ID) of a communication target device, and check-in content is displayed. Track number on the side (object position nu
Each information bit is prepared. And further
8 bytes (Hash MA) for notifying the personal computer 1 of the content ID formed by the HASH function processing
C) is prepared. However, the communication is performed with the content ID incorporated in the last 8 bytes when the value of the subfunction is “00h” as the above-described check-in control command, that is, when the check-in is actually performed. .

When the prepaid information is requested by the value of the sub-function of the check-in control command, the prepaid information is incorporated in the last 8 bytes and transmitted to the personal computer 1 as shown in FIG. Become.

FIG. 24 shows an exclusive log-in control command, and FIG. 25 shows an exclusive log-out control command. This command
This is a command for the personal computer 1 to perform exclusive control on the recording / reproducing device 20A. In the exclusive login control command, the subunit type (subunit type) and subunit ID (subuni
t ID) indicates the device to be controlled. The control level is indicated by the value of the priority. The exclusive logout control command is a command for releasing exclusive control of the recording / reproducing device 20A. In this case, the value of the priority (priority) is set to “00h” and the control level is set to the free state. Is formed as a command for instructing.

With the exclusive login control command, the recording / reproducing apparatus 20A deletes content data from the secondary recording medium (mini disc 100),
Editing, disc ejection, power control, and the like are prohibited or restricted. That is, this command is a command for making a transition to a state in which these operation processes are instructed from the personal computer 1 only.

Depending on the value of the priority by the exclusive login control command, various states can be set as prohibition or restriction of the operation. For example, for the recording / reproducing apparatus 20A, control level 4: processing corresponding to any instruction other than the personal computer 1 is prohibited. Control level 3: Power control, ejection, track division, connection, and erasure by instructions other than the personal computer 1 are prohibited. Control level 2: Track division, linking, and erasure by instructions other than the personal computer 1 are prohibited. Control level 1: Editing and erasing of tracks that are not checkout contents are permitted. Various states such as control level 0: no limit can be set. Of course, such setting of the control level is an example, and the number of steps and the contents of the control level may be variously considered in practice.

10. Check-out / Check-in of Content Next, when the content data stored in the HDD 5 of the personal computer 1 is checked out by the recording / reproducing device 20A and when the checked-out content data is checked in,
Processing performed by the personal computer 1 and the recording / reproducing device 20A will be described. In practice, check-out / check-in of a plurality of content data is often performed in one communication session. However, for simplification of description, the flow of processing as check-out / check-in of one content data is described. Will be described.

FIGS. 26 and 27 show a process for checkout. 26 and 27, the control processing executed by the CPU 2 of the personal computer 1 is referred to as steps F101 to F111, and the recording / reproducing apparatus 20A
The control processing executed by the system control unit 32, the decoding processing unit 28, and the like is shown as steps F201 to F215. The communication session is performed by various control commands and corresponding response commands.

When transferring certain content data stored in the HDD 5, the CPU 2 requests the recording / reproducing apparatus 20A to start an authentication process in step F101 in FIG. That is, an authentication start control command is transmitted. On the other hand, the recording / reproducing device 20A notifies the personal computer 1 of the authentication start permission in step F201. That is, an authentication start response command is transmitted.

Then, the personal computer 1 requests the leaf ID in step F102, and in response, the recording / reproducing device 20A transmits the leaf ID stored in step F202. The personal computer 1
Confirms the leaf ID of the connected recording / reproducing apparatus 20A as described above, and confirms whether or not the apparatus is a device having a currently valid leaf ID.

Subsequently, in step F103, the personal computer 1 transmits an EKB for the content data to be transferred to the recording / reproducing apparatus 20A. When the EKB is transmitted, the recording / reproducing device 20A first stores the EKB version number in step F203 (see FIG. 3). Step F204
Then, using the received EKB and the stored DNK,
As in the procedure described with reference to FIG. 15, the root key KR of the content data relating to the current transfer is searched for, and the obtained root key KR is stored. And step F2
At 05, the personal computer 1 is notified that the search for the root key KR has been completed.

Since the confirmation of the root key KR is completed by the above processing, the personal computer 1 proceeds to step F
As 104, the start of the actual checkout session is requested. In response to this, the recording / reproducing device 20A notifies the start of the checkout session in step F206. In the case of the control command and the response command for starting the session, FIG.
The authentication process described in (1) is also performed. That is, S
Authentication is performed as to whether or not the recording / reproducing apparatus 20A that is not DMI-compliant and decrypts the encrypted content data on the secondary recording medium is legitimate. FIG.
, The checkout session is aborted if the authentication fails.

Next, in step F105, the personal computer 1 transmits the encrypted content key E (KR, CK) relating to the content data to be transferred this time. In response to this, the recording / reproducing apparatus 20A executes step F2.
At 07, the encrypted content key E (KR, C
K) and decrypt the content key CK. Then, in step F208, the personal computer 1 is notified that the decryption of the content key CK has been completed.

Subsequently, in step F106, the personal computer 1 transmits the record object control command described with reference to FIG.
A is provided with information on the content to be checked out. Although not shown, the recording / reproducing device 20A returns a response command.
(The response command in this case is not in the format of FIG. 19 but in the format of 25 bytes whose illustration and description are omitted.)

The personal computer 1 can recognize that the preparation for content data reception / decryption is completed on the recording / reproducing apparatus 20A side by the notification of the completion of decryption of the content key CK and the response to the record object control command. "P1"
Then, the process proceeds to step F107 in FIG. 27 to execute the transfer of the content data. That is, the content data E (CK, A3) encrypted with the content key CK
Send D). The recording / reproducing apparatus 20A proceeds to step F209 in FIG. 27 as indicated by “R1”, receives the transmitted content data E (CK, A3D), and uses the content key CK as in the procedure in FIG. A decryption process and a process of recording the decrypted content data A3D on the mini disc 100 are performed. Further, as will be described in detail later, a process of generating a content ID from content data received and decrypted in an unencrypted state is also performed.

When transfer of one piece of content data (for example, one piece of music) from the personal computer 1 and recording on the mini-disc 100 are completed, it is necessary to update the U-TOC on the mini-disc 100 at that time. In the mini-disc 100, as described above, for example, 1
The start address / end address of the track as a unit of music and other information are recorded on a U-T
This is because the address is managed in the OC, and the address on the disk is grasped from the U-TOC when the track is reproduced.

However, in this example, when the recording of one piece of content data on the mini disc 100 is completed, only the U-TOC is updated on the buffer memory 30 as shown in step F210, and the mini disc is updated. It does not update the U-TOC on 100. When the U-TOC update is completed on the buffer memory 30, the record object response command described with reference to FIG. 19 is transmitted to the personal computer 1 in step F211. As a result, the process for writing one piece of content data is completed, and the personal computer 1 is notified of the content ID generated in step F209 for the content data.

On the personal computer 1 side, the content ID table is processed in step F108 in response to the notification of the content ID. As will be described later, this is the content ID assigned on the personal computer 1 side corresponding to the content data stored in the HDD 5, and the content ID generated on the recording / reproducing apparatus 20A side in the processing in step F209 described above.
Is made to correspond.

Next, at step F109, the personal computer 1 transmits the checkout control command shown in FIG. In addition, the personal computer 1 updates the handling rule (Usage Rule) for the content data in step F110 in response to performing the checkout in this manner. That is, the content right as the number of times of transfer permission is decremented by one.

On the recording / reproducing apparatus 20A side, processing is performed assuming that check-out is actually instructed by the check-out control command. That is, step F212
Then, the U-TOC is updated on the mini disc 100, and the recorded content data is made reproducible. As a result, the right to reproduce the content data on the secondary recording medium has been granted. At this time, in the track mode of the U-TOC sector 0 corresponding to the content data, the above-mentioned bit d1 = 1, that is, the content data is in a write-protected state. Then, in response to ending the U-TOC update for the check-out, the recording / reproducing device 20A transmits a check-out response command in step F213 to notify the completion. The check-out, that is, the transfer of the content right is completed as described above.

In response to the completion of the check-out, the personal computer 1 transmits a control command of a session end request to the recording / reproducing device 20A in step F111. The recording and reproducing device 20A transmits a response command to acknowledge the session end to the personal computer 1 in step F214. In step F112, the personal computer 1 transmits a control command for terminating the authentication state, and in step F215, the recording / reproducing device 20A transmits a response command for approving the termination of the authentication state. Thus, a series of communication for checkout is completed.

When a plurality of pieces of content data are checked out by such communication, if the root key is common to each piece of content, step F105
The processing of F108 and F207 to F211 may be repeated. When content data having different EKB versions is continuously transferred, EKB transfer may be performed in accordance with the content.

Subsequently, the processing in the case of check-in is shown in FIG.
This will be explained. In FIG. 28, the control process executed by the CPU 2 of the personal computer 1 is described in steps F101 to F101.
F156, and the control processing executed by the system control unit 32, the decoding processing unit 28, and the like of the recording / reproducing device 20A are illustrated as steps F201 to F257. Also in this case, the communication session is performed by various control commands and corresponding response commands.

In the case of check-in, EK starts from the start of authentication.
Processes such as B transfer and root key search are performed in the same manner as in the above-described checkout. That is, steps F101 to F103 and F20 assigned the same step numbers as those in FIG.
In steps 1 to F205, the same processing as described above is performed, and redundant description will be avoided.

The personal computer 1 executes step F1.
At 50, a control command requesting the start of the check-in session is transmitted. In response, the recording and reproducing device 20A returns a response command in step F250. In this case, the authentication process described with reference to FIG. 12 is also performed.

When the check-in session is started and the recording / reproducing device 20A has been authenticated, the personal computer 1 requests a content ID of the content data to be checked-in in step F151. For example, a mini-disc 1 of content data to be checked into the recording / reproducing apparatus 20A
00 and specify the track number on the
Request D. The recording / reproducing device 20A responds
First, in step F251, it is determined whether or not the specified content data (track) is content data that can be checked in. This determination can be made by the state of the write control flag (d1 in the track mode) recorded in the U-TOC corresponding to the track. This will be described later. The content data that can be checked in here is content data that has been checked out and that has not been edited on the minidisk 100 side.

If the content data can be checked in, a content ID for the content data is prepared in step F252. In this case, the content ID is calculated at this point in time, or the process of reading the content ID already calculated and stored is performed.
This will also be described later. Then, in step F253,
The content ID is transmitted to the personal computer 1. If the content data is not check-inable, the fact is notified to the personal computer 1 and error processing is performed thereafter.

The personal computer 1 executes Step F1
As 52, the transmitted content ID is collated. In other words, the content ID generated and transmitted on the recording / reproducing apparatus 20A side and the content ID generated on the recording / reproducing apparatus 20A side at the time of checkout and stored as table data corresponding to the content ID generated on the personal computer 1 side And checks whether the content data to be checked in is correctly indicated. If the collation is OK, check-in is actually instructed in step F153. If the verification is NG, an error process is performed.

The check-in instruction in step F153 is
The check-in control command described with reference to FIG. 20 is transmitted. At this time, in the check-in control command, the value of the subfunction is “0”.
0h "(see FIG. 21), thereby clearly indicating that this is an actual check-in instruction. In addition, the value of the list ID is a value that specifies the recording / reproducing device 20A, and the value of the object position number specifies the track number on the mini disc 100 of the content data to be checked in. In addition, in step F154, the handling rule (Usage Rule) for the content data is updated in response to the check-in instruction. That is, one content right as the number of permitted transfers is restored.

The recording / reproducing apparatus 20A updates the U-TOC data in step F254 accordingly. That is, the contents of the U-TOC sector 0 are updated so that the checked-in track is erased from the mini disk 100. That is, the reproduction is disabled and the reproduction right is lost. Then, in a step F255, the check-in response command shown in FIG. 22 is transmitted. Thus, check-in, that is, return of the content right is completed.

In response to the completion of the check-in, the personal computer 1 transmits a control command of a session end request to the recording / reproducing device 20A in step F155. The recording / reproducing device 20A transmits a response command to acknowledge the session end to the personal computer 1 in step F256. In step F156, the personal computer 1 transmits a control command for terminating the authentication state. In step F257, the recording / reproducing device 20A transmits a response command for approving the end of the authentication state. Thus, a series of communication for check-in is completed.

When a plurality of pieces of content data are checked in by such communication, each content I
Confirmation of D and check-in instruction, that is, step F15
The processing of steps 1 to F154 and F251 to F255 may be repeated.

(11) Content ID generation and management method Usage Rule for check-out / check-in
Is managed using a content ID for each content. As described above, the SDMI-compatible secondary recording medium employs a recording format capable of storing a content ID. Therefore, when checking out / checking in,
The target content data can be specified between the personal computer 1 and the SDMI-compatible recording / reproducing device 20B based on the content ID originally generated on the personal computer 1 side.

However, the recording / reproducing apparatus 20A for a secondary recording medium such as the mini disk 100, which has been widely used, cannot do this. That is, there is no area on the minidisk 100 for storing the content ID of the content data recorded by checkout. Even if such an area is newly defined in the U-TOC or the like and the content ID is recorded, if the U-TOC is updated by the mini-disc recorder of the previous model, the content ID is updated.
Will be erased. Therefore, the content ID cannot be managed in the mini disc 100. If the content ID cannot be managed on the secondary recording medium side, check-out is possible but content data cannot be collated at the time of check-in, so that check-in becomes impossible.

[0200] Therefore, the recording / reproducing apparatus 20A has a function of generating a content ID from the content data itself. Then, on the personal computer 1 side, the first content ID generated on the personal computer 1 side and the second content ID generated on the recording / reproducing apparatus 20A side.
Table data is prepared so that the content IDs can be collated.

First, a method of generating a content ID by the recording / reproducing apparatus 20A will be described. In content ID generation, specific data in the content data stream is sampled in addition to the length (content size) and track information of the content data decrypted in an unencrypted state, and CBC_ID is sampled.
Means for performing a MAC operation may be mentioned.

FIG. 29 schematically shows the entire contents data of one music or the like. This content data is transmitted from, for example, the personal computer 1 for check-out, and the encrypted state is decrypted.
It is shown as a data stream in C or ATRAC3 compressed state. For this content data, for example, points P1 and P2 are set as sampling points, and data of a sound unit (hatched portion) is extracted.
One sound unit may be, for example, 424-byte data, that is, data corresponding to one sound group described with reference to FIG. However, it is not limited to it.

Then, the content ID is calculated using a part of the actual content data sampled in this way. Here, it is possible to increase the probability of unique data by providing two sampling points, such as P1 and P2, while avoiding the beginning or end of content that is expected to be silent data in many cases. . That is, it is possible to calculate a content ID that is different for each content data and has a sufficient function as an identifier. Of course, the number of sampling points may be three or more. Further, if the head or the end is avoided, even one location is not insufficient.

The sampling points P1, P
2 is not a completely random position but a position set according to the length (data size) of the content data, so that the same content ID can be obtained for specific content data no matter how many times it is calculated. In other words, if the content data itself is recorded without storing the content ID on the secondary recording medium, the same content ID can be calculated at different points in time by matching the sampling points. Is
This eliminates the need to record the content ID on the mini disc 100 as a secondary recording medium. Specifically, sampling points P1 and P2 are:
For example, from the size (length) of the content data,
The position may be set as the position 3 and the position 2/3. Of course, the position is not limited to the 1/3 position and the 2/3 position, but is 1/2 position, 1/4 position, 3/4 position, 1/5 position, 2/5 position with respect to the length. 3/5 position, 4
A certain point relative to the length, such as a / 5 position, a 1/6 position, a 5/6 position, etc., may be defined.

A method of obtaining a content ID from content data using a hash function is shown in the following equation (1). Content ID = CBC_MAC (Key hash, IV, Stream (P1) // Stream (P2)) (1) Here, “Key hash” is 8-byte unique key data.
Stream (P1) is data of one sound group at sampling point P1, and Stream (P2) is data of one sound group at sampling point P2. And /
/ Indicates concatenation, that is, "Stream (P1) // Stream (P
“2)” indicates (424 × 2) bytes of data connecting two sound units at the sampling points P1 and P2. “IV” is the initial value of the 8-byte CBC mode, and is given by the following equation (2) using a 4-byte content length length and 1-byte track information TrackModeByte. IV = {length // TrackModeByte // 32bits Padding with Zero} (2) In this case, the 4-byte content length length and the 1-byte track information TrackModeByte are notified by the record object control command shown in FIG. Content size of 4 bytes
And 1 byte of track mode information.

[0206] Such content ID generation is performed in the recording / reproducing apparatus 20A by, for example, a HASH engine mounted on the decryption processing unit 28.
As can be seen from (2), the recording / reproducing device 20A can calculate the value of “IV” by receiving a record object control command (step F106 in FIG. 26), for example, during a checkout session.
Before the content data is transferred by the content size in the record object control command, the length of the content data can be confirmed. P1 and P2 can also be confirmed. Therefore, the transfer of the content data is actually started, and the sampling points P1, P
After the time when the data of No. 2 is obtained, the content ID can be calculated by the calculation of the above equation (1).

As for the content data recorded on the mini-disc 100, the size of the content data can be naturally calculated from the data of the U-TOC sector 0, so that the positions of the sampling points P1 and P2 can be confirmed. In addition, the information of the track mode (Track Mode) notified by the record object control command at the time of checkout is recorded in the track mode in the U-TOC sector 0, so that the above equation (2) can be calculated from the U-TOC data. It becomes possible. Therefore, for the content data recorded on the mini-disc 100, the content ID can be calculated at any time.

For example, the recording / reproducing apparatus 20
The A side can independently generate a content ID for the checked out content data. However, if this is not associated with the content ID generated in the personal computer 1 and stored in the HDD 5, it cannot be used properly. HDD as described above
The content ID stored in 5 is generated for the content data by the application on the personal computer 1 side. The content ID previously obtained by this application is stored in the HDD 5
The information includes information unique to the device (personal computer 1) having the primary recording medium, such as a unique ID for each application installed in the device, time information stored in the HDD 5, a random number, and the like. The (first) content ID generated on the side of the personal computer 1 and the (second) content ID generated on the side of the recording / reproducing apparatus 20A are determined by the table data as shown in FIG. Correlated on one side. Therefore, the table data is stored in the HDD 5
Such a combination is unique for each device having a primary recording medium.

That is, during the checkout session,
The content ID generated on the recording / reproducing apparatus 20A side is notified to the personal computer 1 side by the record object response command as step F211 in FIG. Then, as step F108, the personal computer 1 performs processing of the table data.
This processing is performed so that the content ID to be transferred for checkout corresponds to the content ID of the personal computer 1 and the content ID generated for the content data by the recording / reproducing apparatus 20A. This is the process of generating data elements. FIG. 30 illustrates a state in which first and second content IDs are associated with each other for three pieces of content data.

By managing such table data on the personal computer 1 side (for example, being recorded / updated in the HDD 5), the content data checked out to the mini disk 100 is managed by the content ID. That is, management of check-out / check-in is enabled. As described above, the area for storing the content ID does not exist on the mini disc 100, but the recording / reproducing apparatus 20A can calculate the content ID for the content data recorded on the mini disc 100.

Therefore, when the personal computer 1 wants to check in certain content data, the personal computer 1 requests the (second) content ID of the target content data from the recording / reproducing apparatus 20A and transmits the (second) ID. 30 is stored in the table data shown in FIG.
By confirming the coincidence with the (second) content ID transmitted from the A side, the personal computer 1 can perform the check-in processing of the content data managed by the (first) content ID. . This corresponds to steps F151, F152, F252, F25 in FIG.
This is the meaning of the process 3.

According to such a content ID management method, a secondary recording medium (mini disc 10
0)), the present system can appropriately manage check-out / check-in, that is, manage content rights.

12. Generating Content ID at Checkout and Before Checkin By the way, the case where the content ID needs to be generated on the recording / reproducing apparatus 20A side usually means the case where the content ID is notified to the personal computer 1 upon checkout. This is a case where the personal computer 1 transmits a record object response command in order to manage the table data shown in FIG. 30.

As described above, a part of the content data extracted at the sampling points P1 and P2 is used as the content ID. Therefore, for example, at the time of check-out, after the content data transferred from the personal computer 1 is written to the mini-disc 100, the data at the sampling points P1 and P2 is read, and the content ID is calculated using the data. Is usually considered. Also, when a content ID is requested from the personal computer 1 for check-in, the procedure of reading the data of the sampling points P1 and P2 from the mini-disc 100 in response to the request and calculating the content ID using the data. Is usually considered.

However, in such a procedure, access / data reading to the mini-disc 100 is required during the checkout session, and it takes time to calculate the content ID. This lengthens the entire communication time for checkout. Also, when a content ID is requested for check-in, access / data reading to the mini-disc 100 is required, and it takes time to calculate the content ID. This also increases the communication time for check-in. Therefore, in this example, the content ID is calculated according to the following procedure to improve the processing efficiency and shorten the communication time.

FIG. 31 shows a process for generating a content ID (CID) in a checkout session. This is a process performed by the system control unit 32 and the decoding processing unit 28 in step F209 of FIG. As shown as step F106 in FIG. 26,
The record object control command is transmitted from the personal computer 1 immediately before the transfer of the content data. The content ID generation processing of FIG. 31 in step F209 of FIG. Then, the length (data size) of the content data to be transferred is confirmed. In step F302, points as sampling points P1 and P2 in the content data stream are calculated from the length of the content data.

[0217] Step F303 indicates the start of processing for receiving the actually transferred content data. That is, as described in the block diagram of FIG. 7, the content data is received, decrypted to an unencrypted state,
The process of storing the data in the ATRAC3 data state in the buffer memory 30, further modulating the data in the encoding / decoding unit 24, and recording the data on the mini disc 100 in the recording / reproducing unit 25 is started. In the process of receiving / decoding / buffering / encoding / recording such content data, as the process related to the content ID, the data at the sampling point P1 is monitored. Then, in step F304, when the data of the sound unit as the sampling point P1 is confirmed in, for example, the buffer memory 30, the data of the sound unit is stored in another area of the buffer memory 30 separately from the data stream buffering. deep. Continue monitoring in the same manner, and
When the data of the sound unit as the sampling point P2 is confirmed in, for example, the buffer memory 30 as 305, the data of the sound unit is stored in another area of the buffer memory 30 separately from the buffering of the data stream.

Step F306 indicates that the processing of receiving / decoding / buffering / encoding / recording the content data has been completed for one piece of content data. When the recording of the content data on the mini-disc 100 is completed, in step F307, the Hash engine in the decoding processing unit 28 reads the data of the sampling points P1 and P2 stored in the buffer memory 30 as described above, and Equation (1)
The content ID is generated by the calculation of (2). Then, in step F308, the content ID is set in the record object response command. This record object response command is transmitted to the personal computer 1 as step F211 in FIG.

In other words, in this processing example, since the data at the sampling points P1 and P2 are extracted and stored before being written to the mini-disc 100, the mini-disc 100 is set to the reproduction state when calculating the content ID, and There is no need to seek and read data. As a result, the content ID calculation process is made very efficient, and the checkout session time can be shortened.

Next, for check-in, the contents I
FIG. 32 shows a process for promptly transmitting a content ID when D is requested. Content I
D indicates that the content data itself is recorded,
It can be calculated if the length and track mode can be confirmed. In other words, for the content data recorded on the mini disc 100, if the content data and the information of the U-TOC sector 0 can be read, the data of the sampling points P1 and P2 can be extracted or the content ID can be calculated. It is.

Therefore, in the processing of FIG. 32A, when the mini disc 100 is loaded into the recording / reproducing apparatus 20A, or when the power is turned on while the mini disc 100 is loaded, for example, At the time of reading the TOC data, a process of extracting the data at the sampling points P1 and P2 is performed.

That is, after TOC reading is performed in step F401, the variable n is set to 1 in step F402, and the flow advances to step F403. First, with respect to track #n (#n is a track number, that is, first track 1), sampling points P1, Calculate P2. By reading the information of the U-TOC sector 0, it is possible to calculate the sampling points P1 and P2 for each track. In step F404, the data of the sampling points P1 and P2 for the track #n is actually read from the mini disc 100, and
Is stored in a specially prepared area.

In step F405, it is determined whether or not the variable n is the last track number. If not, the variable n is incremented in step F406, and the flow returns to step F403. And track #n
The sampling points P1 and P2 for the second track are calculated, and the data of the sampling points P1 and P2 are actually read and stored in the buffer memory 30.
Is stored. That is, step F403
The data of the sampling points P1 and P2 calculated from the lengths of all the tracks recorded on the mini disc 100 are read out and stored in the buffer memory 30 by the loop processing of F406. When the processing is completed for all tracks, step F40
It ends from 5.

On the other hand, as shown in step F151 of FIG. 28, the processing when the personal computer 1 requests the content ID, that is, step F252 of FIG.
Is as shown in FIG. 32 (b). That is, in step F451, the data of the sampling points P1 and P2 for the track having the requested track number is read from the buffer memory 30, and the content ID is calculated by the Hash engine of the decoding processing unit 28 in step F452. Note that the above formula (1) is used to calculate the content ID.
The track mode and length required in (2) are the U-TOC already stored in the buffer memory 30 at that time.
It can be determined from the data. Then, in step F453, the generated content ID is set in the response command. This response command corresponds to step F2 in FIG.
53 is transmitted to the personal computer 1.

With this processing, it is not necessary to read the data of the sampling points P1 and P2 from the mini disc 100 when the content ID is requested from the personal computer 1.
The processing corresponding to the content ID request can be speeded up. Overall, the communication time as a check-in session can be reduced.

Incidentally, the processing of FIG. 33 may be performed instead of FIG. Note that FIG.
The same processes as those in 2 are given the same step numbers, and their explanation is omitted. The processing in FIG. 33A includes step F403.
As sampling points P1 and P2 of track #n
Is calculated, the data at the sampling points P1 and P2 is read from the mini disc 100 in step F410. Then, the data is supplied to the Hash engine of the decryption processing unit 28, and the content ID is calculated as step F411. Then, the calculated content ID is stored in the buffer memory 30.

Such a process is performed on all tracks recorded on the mini disc 100. That is, the content ID is also generated in advance, and the buffer memory 30
Will be stored.

The processing when the personal computer 1 requests a content ID, that is, the processing of step F252 in FIG. 28 is as shown in FIG. 33 (b).
That is, in step F461, the content ID of the track having the requested track number is read from the buffer memory 30, and the read content ID is set in the response command in step F462. This response command is transmitted to the personal computer 1 as step F253 in FIG.

In the case of such processing, when the personal computer 1 requests the content ID, the sampling point P
Since there is no need to perform the process of reading the data of P1 and P2 and the process of calculating the content ID, it is possible to further speed up the process corresponding to the content ID request.

The processing shown in FIG. 32A or FIG. 33A is performed by the recording / reproducing apparatus 20A.
The processing may be performed when the TOC reading is performed from the time of, but the processing may be performed using the idle time, for example, during the reproduction operation or the operation stop. During playback operation,
In the mini-disk system, data reading from the disk is performed intermittently at a high rate. Therefore, the data at the sampling points P1 and P2 may be read during the intermittent reading interruption time. In any case, the efficiency of the check-in session can be realized by performing the processing of FIG. 32A or FIG. 33A prior to the content ID request from the personal computer 1.

13. Content Write Control Flag When the check-out shown in FIGS. 26 and 27 is performed, the d1 bit in the track mode of the U-TOC sector 0 is set to “1” for the check-out content on the mini disc 100 side. That was mentioned earlier.
The d1 bit functions as a write control flag for the check-out content recorded on the mini disc 100.

The d1 bit is a so-called write protect flag in the mini disc system. That is, d
Editing such as erasure, division, and concatenation of a track with one bit is prohibited. In other words, even if the conventional mini-disc recorder that is now widely used, the recording / reproducing device 20A
In the mini disc recorder as described above, editing such as erasure or division is not performed on the track on which the d1 bit is set. However, actually, in a mini-disc system, a track recorded on the mini-disc 100 is not automatically set with d1 bits. Therefore, the d1 bit is information that not only prohibits editing of the track, but also specifies that the track is content checked out from the personal computer 1.

In the system of this example, the d1 bit is used as a write control flag to prohibit the editing of the check-out content and determine whether the track has been checked out at the time of the check-in request. It is used for discrimination.

In order to check in the checked out content data, it is preferable in management that the contents of the content data match. Further, as described above, in the recording / reproducing apparatus 20A, the content ID is calculated using the data of the sampling points P1 and P2 based on the length of the content data. If the data length changes, the same content ID as at the time of checkout cannot be generated. In other words,
If the checkout content is edited, proper Usage Rule management cannot be performed due to the mismatch of the content ID, check-in is not permitted due to system processing, and check-in is permitted for content data whose content has changed due to editing. Is the Usage Rule
It is not appropriate in terms of management philosophy. For this reason, it is preferable that the check-out content cannot be edited on the mini disc 100.

FIG. 34 shows the processing of the recording / reproducing apparatus 20A regarding the write control flag. "WPF" in the figure
Is a write control flag, that is, the d1 bit in the track mode of the U-TOC sector 0. For the content that has been checked out and recorded on the mini-disc 100, the write control flag WPF is turned on in the U-TOC update process of step F212 in FIG. 27 (S
100). On the other hand, instead of checkout in the present system, for content data (hereinafter, self-recorded content) recorded on the mini disc 100 from another source by the recording / reproducing apparatus 20A or another mini disc recorder, the write control flag WPF is set to It remains off (S105).

Here, there can be considered a management method of prohibiting any editing of the content data (track) for which the write control flag WPF is on so as to enable later check-in. However, a management method is possible in which the user is warned that check-in cannot be performed and then permits editing.

First, when all editing of the checkout content is prohibited, even if there is an editing instruction for the content data by a user operation or the like, the system control unit 32 prohibits the editing and does not accept the editing instruction. Processing is performed (S101). Therefore, the check-out content cannot be edited at all, and the write control flag WPF is always on (S101 → S104).

On the other hand, the self-recorded content can be freely edited (S106). If there is an editing instruction by a user operation or the like, the system control unit 32 may instruct the MD control unit 21 to perform a U-TOC update process in response to the instruction and execute the editing. However, whether or not editing is performed, the writing control flag WPF is always off for self-recorded content (S105 → S
104 or S105 → S106 → S104).

In the case where the editing of the checked-out content is permitted after issuing a warning as described above, or when an editing instruction is given by a user operation or the like, the system control unit 32 first displays a display not shown in FIG. A message is output as a warning by the function (S102). In other words, it warns that editing will not allow check-in. In response to this, if the user cancels the editing instruction, the editing is not executed (S102 → S
104). On the other hand, if the user gives an editing instruction after the warning, the user is convinced that the check-in cannot be performed and the editing is permitted. That is, the system control unit 3
2 instructs the MD control unit 21 to perform U-TOC update processing in response to a user operation or other editing instruction, and causes the MD control unit 21 to execute editing. At this time, the write control flag WPF for the track to be edited, that is, the d1 bit of the track mode of the corresponding track of the U-TOC sector 0 is turned off (S103).

As a result of this processing, the write control flag WPF is turned on for the checked-out content unless the editing is performed. On the other hand, the write control flag WPF is turned off for the edited checkout content and for the self-recorded content regardless of the presence or absence of editing. Therefore, when the personal computer 1 requests the content ID to be checked in as Step F151 in the check-in session in FIG. 28, the recording / reproducing apparatus 20A performs Step F251.
The check-in availability check simply involves checking the write control flag WPF (d1 in the track mode of the U-TOC sector 0 with respect to the content data as the target.
Bit) is on.

If the write control flag WPF is off for the content data for which the content ID has been requested, the recording / reproducing apparatus 20A may notify the personal computer 1 of a check-in failure. In this case, the content ID is notified / collated by the processing in steps F253 and F152 in FIG. 28, and the useless processing that the check-in cannot be performed after all can be eliminated. That is, the processing of steps F253 and F152 in FIG. 28 is a processing of performing a content ID collation on a content that has been confirmed as a checkout content that has not been edited, and waste is eliminated. For this reason, the check-in communication session and the confirmation processing can be made more efficient.

Editing of self-recorded contents is basically free. However, when the check-out content and the self-recorded content are mixed on the mini disc 100, it may be desired to restrict free editing of the self-recorded content. For example, there is a case where content data on the mini disc 100 is to be managed by an application of the personal computer 1. Therefore, in this example, the exclusive login control command and the exclusive logout control command shown in FIGS. 24 and 25 are prepared, and the personal computer 1 can exclusively control the functions of the recording / reproducing device 20A. .

When the exclusive login control command shown in FIG. 24 is transmitted from the personal computer 1 to the recording / reproducing apparatus 20A, the system control unit 32
Depending on the value of the priority, the mode enters the edit prohibition / restriction mode. For example, as shown in FIG. 34, editing or other processing is prohibited or restricted for self-recorded content (S107), and an editing instruction by a user operation is not accepted. In addition, to what level user operations are not accepted, including operations such as power-on and disc eject, are set according to the above-mentioned control level based on the priority value in the exclusive login control command. .

When the exclusive logout control command is transmitted, the editing prohibition / restriction is released, and the self-recorded content can be edited (S107 → S106).

With such an exclusive login control command, the personal computer 1 can exclusively control the functions of the recording / reproducing apparatus 20A, so that editing and the like can be restricted according to the convenience of the system operation. It will be useful.

14. Billing Information Processing Next, billing information processing will be described. FIG. 36 shows a system configuration for charging processing for content data distribution. The system configuration is the same as that of FIG. 4, but shows the configuration of the content server 91 in detail.

As described above, the system according to the present embodiment can download music data or the like as content from the server 91 to the primary recording medium (HDD 5) and check it out to the secondary recording medium (mini disc 100). It is. Of course, the content server 91 may provide the content data for a fee.

In this case, the content server 91 is operated by an organization or an individual that provides a content providing service. It has a function of providing the content held by the user and a charging function of managing the charging of the user who receives the content.
Each of these functions may be managed entirely by one organization, company, etc.
It may be operated by an individual or the like and operated cooperatively. For example, each of the functions may be operated as a web site on the Internet, and linked operations may be performed by linking each other.

As a secondary recording medium on which content data is finally recorded on the user side, a mini disc 1
Although it has been described as a secondary storage medium or a memory card, prepaid information to be described later is rewritably recorded on the medium as the secondary recording medium. By receiving the prepaid information recorded on the secondary recording medium, the content server 91 performs a billing process for each user.

The content server 91 includes the network distribution device 130, the content database control device 14,
0, customer information device 150, content database 16
0, having a customer database 170. The network distribution device 130 is a part that implements a function of providing the held content to the personal computer 1 and the like via the network 110. The content database control device 140 and the content database 160 are parts that implement a content holding function of storing various contents. The customer information device 150 and the customer database 170 are parts that implement a billing function for performing billing management for the user who receives the content.

The content database 160 is formed of a recording medium such as a hard disk or an optical disk. In the content database 160, for example, a large number of music contents are stored in the form of a music library as contents for services provided to users. The content database control device 140 controls recording and reading of music content and the like with respect to the content database 160. For example, network distribution device 1
Content database 160 in response to a request from
The content is read from the server and provided to the network distribution device 130.

The customer database 170 is formed by a recording medium such as a hard disk and an optical disk.
In the customer database 170, billing information is registered corresponding to the prepaid information recorded on each secondary recording medium 100. The customer information device 150 controls registration and reading of billing information in the customer database 170. For example, in response to a request from the network distribution device 130, new billing information is stored in the customer database 170.
, Or read out specific billing information and provide it to the network distribution apparatus 130.

Each part as the content server 91 may be operated by one organization, company, individual, or the like as described above, or may be operated by different organizations. For example, the network distribution device 130 is operated by a distribution service company, and the content database control device 140 and the content database 16
0 is operated by a record company, a record label company, etc., and has a customer information device 150 and a customer database 17.
0 may be operated by a billing service company. Further, for example, there may be a form in which a plurality of content database control devices 140 and content databases 160 exist, and the network distribution device 130 can distribute the content stored in each content database 160.

In such a system of this example, the personal computer 1 makes a communication connection with the content server 91 and receives a list (menu) of contents that can be provided. The user performs an operation of selecting a desired content from the list. Then, the content server 9
The content is transmitted to the personal computer 1 from one side. On the user side, the content is checked out by the above-described secondary recording medium 100.
To record. As a result, the user can obtain desired music and the like. In this example, the prepaid information recorded on the secondary recording medium 100 is used for charging for the content. As will be described later, the secondary recording medium 100 includes, as prepaid information, a media ID and a prepaid amount that are different for each medium. The personal computer 1 is a recording / reproducing device 20A.
The prepaid information is received from (20B), and the prepaid information is transmitted to the content server 91 side. Network distribution apparatus 130 causes the customer database 170 to execute a billing process based on the prepaid information.
Broadly speaking, billing information is registered in the customer database 170 corresponding to the prepaid information of each secondary recording medium 100, and the price is subtracted from the prepaid amount in the billing information according to the content distribution. . That is, the billing is performed by updating the billing information on the customer database 170. The prepaid information recorded on the secondary recording medium 100 is not rewritten at all.

In the customer database 170, charging information as shown in FIG. 37 is registered. The billing information here is
A group of data registered corresponding to one piece of prepaid information (one piece of secondary recording medium 100).
One piece of billing information is composed of data such as D, remaining amount, and purchase history. FIG. 37 shows an ID as a media ID.
Billing information K1 corresponding to each of 1 to ID5.
K5... Are registered.

The media ID in the billing information is the media ID included in the prepaid information described later. The remaining amount is updated by subtracting the price from the prepaid principal every time the content is purchased.
This is information indicating the current prepaid balance. The purchase history is a history of the purchase date and time, the content name, the content amount, the terminal used, and the like, that is, information that records the situation for each content purchase. Various other information such as prepaid principal, media type, media seller, and copyright holder of the purchased content may be included in the billing information as information other than the above, and for example, the purchase history is not included. You may. Regarding the distribution operation of the present example, it is sufficient that at least information on the media ID and the remaining amount is included as billing information, and the other information may be set according to the operational convenience of the distribution system, the service content, and the like. .

The prepaid information is information that is rewritably recorded on the secondary recording medium 100, and basically includes a prepaid amount, a prepaid service ID, and a media ID as shown in FIG. As the prepaid amount, the amount paid by the user as advance payment is recorded. The secondary recording medium 100 is sold, for example, as an unused mini-disc or memory card in which nothing is recorded as content, and the selling price includes a prepaid amount. That is, assuming that the medium has a normal selling price of 500 yen when not used, the secondary recording medium 100 in which the prepaid amount is recorded as 5000 yen in the prepaid information is basically 5500 yen. Users will purchase in yen. Of course, the selling price is arbitrary, and the secondary recording medium 100 is 500
The user may purchase the secondary recording medium 100 in which the prepaid amount is recorded as 5,000 yen, although it may be sold at 0 yen or discounted at 4,800 yen. This means that 5000 yen was paid in advance for the service.

[0258] The prepaid service ID represents the address of the content server 91 that provides the content distribution service. For example, it is an address for communication connection with the network distribution device 130 in the network 110. It may be an IP address on the Internet. The personal computer 1 receives the prepaid information on the secondary recording medium 100 loaded in the recording / reproducing device 20A, and based on the prepaid service ID,
A communication access can be made to the content server 91 to request a connection. Depending on the configuration of the content server 91, the prepaid service ID may be, for example, the address of the content database control device 140 or the address of the customer information device 150 instead of the address of the network distribution device 130. For example, in a case where the network distribution device 130, the content database control device 140, and the customer information device 150 are each formed as Web pages on the Internet and are linked to each other, the personal computer 1 makes a communication access to the content database control device 140. At that time, the customer information device 150 is linked according to the progress of the distribution process, and these are linked to the network distribution device 130.
It is also conceivable that the information is comprehensively processed.
Conversely, using the prepaid service ID as the address of the customer information device 150, the personal computer 1 performs communication access to the customer information device 150. At this time, the content database control device 140 links the content database control device 140 in accordance with the progress of the distribution process. It is also conceivable that these are collectively processed by the network distribution device 130.

[0259] The media ID is the number of each secondary recording medium 10
0 is an identification number uniquely assigned to each.
For example, when the user purchases two secondary recording media 100 as prepaid media, different media IDs are recorded on the respective secondary recording media 100.

[0260] Such prepaid information includes, for example, 8 bits for the prepaid amount and 22 bits for the prepaid service ID.
It can be data using about 32 to 40 bits for the media ID and about 32 to 40 bits for the media ID. The number of bits may be determined depending on the design of the prepaid system. For the prepaid service ID, the number of bits necessary for the address of the server, etc., and for the media ID, a different ID number may be given in consideration of the total number of prepaid media to be sold or the total number in the future. It suffices that the number of bits be sufficient to be able to be used. At a minimum,
For example, 1 byte (8 bits) for the prepaid amount, 3 bytes or 4 bytes for the prepaid service ID, media I
D may be 3 bytes or 4 bytes, and the data may be about 8 bytes.

Here, the relationship between the prepaid information recorded on the secondary recording medium 100 and the billing information shown in FIG. 37 will be described. For example, it is assumed that the user uses the secondary recording medium 100 in which the media ID = ID1 and the prepaid amount = 5000 yen. On the content server 91 side, when the secondary recording medium 100 is used for the first time, the billing information K1 of FIG.
Register Initially, as for the media ID and the remaining amount in the charging information K1, the data on the prepaid information is registered as it is, that is, the media ID of the charging information K1 = ID1, and the remaining amount = 5000 yen. After that, when the content is downloaded (checked out to the secondary recording medium 100) using the secondary recording medium 100, the price of the content is reduced to the remaining amount of the billing information K1. Will be charged. In other words, every time the download / checkout is performed, the used secondary recording medium 1
From the media ID in the prepaid information of 00, the corresponding charging information is searched on the customer database 170,
The remaining amount is subtracted from the billing information. For example, in the billing information K1 in FIG. 37, the remaining amount is 3700 yen, which is the state after the user has purchased the content for 1300 yen using the secondary recording medium 100 with the media ID = ID1. It will be as shown.

As can be understood from such a billing processing method, the prepaid information is not updated at all in the secondary recording medium 100 owned by the user. In other words, the prepaid information is not rewritable in the secondary recording medium 100. It is only necessary to be recorded in In addition,
The prepaid information may be rewritable on the secondary recording medium 100, but it is appropriate to make the rewritable impossible because there is a risk of misuse of the prepaid amount or the media ID or malfunction of the service operation due to falsification of the prepaid service ID. It is.

In the case where a mini disk is used as the secondary recording medium 100 as described above, the following examples are conceivable as recording methods for recording 8-byte prepaid information in a non-rewritable manner. (1) Record the prepaid information in the P-TOC. (2) Record the prepaid information in the U-TOC by a method that makes it impossible to rewrite. (3) The prepaid information is recorded in the management area by a method that cannot be rewritten outside the U-TOC area.

When prepaid information is recorded in the P-TOC, for example, a specific 8-byte area in the P-TOC sector in the lead-in area of FIG.
It can be used for recording prepaid information.

In the case of recording in the U-TOC, for example, sectors 0, 1, 2, and
Although unused areas such as 3 and 4 may be used,
In order to appropriately exclude the possibility that the prepaid information is rewritten, it is conceivable to use a sector that has not yet been defined. For example, a predetermined 8 bytes in the U-TOC sector 5 are set as a recording area for prepaid information. And in this case, the above-mentioned U-T
In OC sector 0, the used sect
By setting the corresponding bit of sector 5 in ors) to be “0”, that is, represented as an unused sector, the prepaid information can be made unrewritable. That is, according to the general mini-disc recorder, the U-TOC
Since the sector 5 is recognized as an unused sector, no update processing or the like is performed on the U-TOC sector 5. That is, the prepaid information cannot be rewritten on the user side. In the recording / reproducing apparatus 20A of this example, the U-TOC sector 5 is read based on an application program for reading the prepaid information, so that the prepaid information can be read. Here, sector 5 is used, but of course sector 6 and sector 7
Other sectors may be used.

In the management area shown in FIG.
As a method of recording in an area other than the U-TOC, for example, as shown by a hatched portion PD, it is conceivable to record prepaid information using a sector in an unused cluster. A power calibration area PCA and a U-TOC area are formed in the management area, and their positions are indicated by the P-TOC as described above. By referring to the P-TOC, a normal mini-disc recorder can access the power calibration area PCA and the U-TOC area. However, the shaded portion PD whose position is not indicated by the P-TOC
Is an area that cannot be accessed by a normal mini-disc recorder (an area that is meaningless even if accessed). Therefore, the prepaid information recorded in the shaded portion PD cannot be rewritten on the user side. In the recording / reproducing apparatus 20A used in the distribution system of the present example, the reading of the prepaid information can be performed by reading the shaded portion PD based on the application program for reading the prepaid information. . For this purpose, for example, by defining the start position of the hatched portion PD as a position where a predetermined amount of offset is given to the U-TOC start address shown in the P-TOC, the recording device 10 reads the prepaid information. Becomes possible. For example, U-
Since TOC is recorded over three clusters, UT
The position of the OC start address USTA + 5 cluster may be defined as the start position of the prepaid information recording area.

For example, in the manner described above, a mini disk can be used as the prepaid medium 4. Also, the mini-disc has been described, but a memory card, a CD-R, a CD-R
When recording prepaid information having a data size of 8 bytes or more in the case of an optical disk such as a W or a DVD, the recording position may be set based on the management format of those media.

When constructing a distribution system using such prepaid information, the personal computer 1 can read the prepaid information on the secondary recording medium (mini disc 100) loaded in the recording / reproducing apparatus 20A. There is a need to. For this reason, as described in FIGS. 20 and 21, by specifying the prepaid information in the sub-function in the check-in control command, the prepaid information can be requested from the recording / reproducing apparatus 20A. The recording / reproducing device 20A is
The personal computer 1 can be notified of the prepaid information recorded on the mini-disc 100 by the check-in response command of FIG.

FIG. 35 shows a process for prepaid information processing. In FIG. 35, the control process executed by CPU 2 of personal computer 1 is changed to step F10.
1 to F173, and control processes executed by the system control unit 32, the MD control unit 21, and the like of the recording / reproducing apparatus 20A are shown as steps F201 to F274.
The communication session is performed by various control commands and corresponding response commands.

Also in this case, processes such as EKB transfer and root key search from the start of authentication are performed in the same manner as in the above-described check-out. That is, steps F101 to F103, F201 assigned the same step numbers as those in FIGS.
In steps F205 to F205, the same processing as described above is performed, and redundant description will be avoided.

The personal computer 1 executes Step F1
At 70, a control command requesting the start of a session is transmitted. In response, the recording / reproducing device 20A returns a response command in step F270. In addition,
Also in this case, the authentication processing described in FIG. 12 is performed.

When the session is started and the authentication of the recording / reproducing apparatus 20A is OK, the personal computer 1 requests prepaid information in step F171. That is, the check-in control command described with reference to FIG. 20 is transmitted. At this time, in the check-in control command, the value of the subfunction is not “00h” or “01h”, that is, it has a meaning of a prepaid information request (FIG. 21).
reference).

In response to this, the recording / reproducing apparatus 20A reproduces the prepaid information recorded in the specific area of the mini disc 100 as described above in step F271.
In step F272, the reproduced prepaid information of, for example, 8 bytes is set in the check-in response command as shown in FIG.
Send to

Upon receiving the prepaid information by the check-in response command, the personal computer 1 sends a control command of a session end request to the recording / reproducing device 20A in step F172. The recording / reproducing device 20A transmits a response command to acknowledge the session end to the personal computer 1 in step F273. In step F173, the personal computer 1 transmits a control command for terminating the authentication state.
In step 4, a response command for acknowledging the end of the authentication state is transmitted. Thus, the communication for transferring the prepaid information is completed.

[0275] Thereafter, as processing for the prepaid information, the personal computer 1 is communicatively connected to the content server 91 via the network 110 by the communication section 8 and transmits the received prepaid information to the content server 9.
1 is performed. That is, by transmitting the prepaid information together with the identification information of the content data checked out to the secondary recording medium 100, the content server 91 side performs a charging process for the user, ie, FIG.
The database update process is performed.

As described above, since the personal computer 1 can request the recording / reproducing apparatus 20A to transfer the prepaid information which is the unique information in the secondary recording medium 100, the prepaid billing process by the system can be performed.

Although the method in which the personal computer 1 acquires the prepaid information as the unique information of the secondary recording medium 100 has been described as the present example, various unique information can be acquired by setting the same control command and response command. Needless to say, For example, the usage status of the user recorded on the secondary recording medium 100,
When the personal computer 1 acquires other unique information such as a user ID, the personal computer 1 manages the secondary recording medium 100, or transmits the information to the content server 91, and the content server 91 It can be used for various services and management for users.

Although the embodiments have been described above, the present invention is not limited to the above embodiments. The encryption, data path, check-out / check-in method, authentication method, content ID generation method, content ID management method, actual examples of the write control flag, editing management, prepaid information, and the like as system operations are all described in the invention. Various modifications are possible within the scope of the gist.

In the present invention, for example, the data transfer process from the primary recording medium to the secondary recording medium described above is not limited to SDMI content, but can be widely applied to various types of content data. Also, the primary recording medium can be variously considered other than the HDD. Of course, the secondary recording medium, the secondary recording medium side device 20A also mini disk,
Not limited to the mini-disc recording device, various examples can be considered. As the secondary recording medium 100, CD-R, CD-R
W, DVD-RAM, DVD-R, DVD-RW, various memory cards, etc. Therefore, the secondary recording medium-side device 20A may be any recording device that supports these media. In addition, the recording / reproducing device 20 compatible with SDMI
Although reference has been made to B, the present invention can also be applied to the process of transferring content data to the recording / reproducing device 20B.

[0280]

As can be understood from the above description, according to the present invention, the data transfer device is a system capable of executing the check-out of the content data to the secondary recording medium on the data recording device side. The data recording device can request and receive unique information such as prepaid information stored in the secondary recording medium. As a result, the unique information on the secondary recording medium side can be obtained on the data transfer device side or the server device side, and the unique information can be managed, thereby improving the service and realizing various processes suitable for the user.

In particular, when the unique information is the prepaid information, the data transfer device can transmit the prepaid information recorded on the secondary recording medium to the server device of the content distribution source, so that appropriate accounting management can be performed. Also, since the payment based on the prepaid information is performed in the form of updating the billing information registered corresponding to the prepaid information on the server side, the prepaid information on the secondary recording medium does not need to be updated. There is no processing burden on the data recording device side and no operation burden on the user. Further, the fact that the prepaid information of the secondary recording medium is not updated has an effect of preventing the prepaid information from being altered and misused.
In this case, it is preferable that the prepaid information on the secondary recording medium is non-rewritable information.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram of a tree structure of an encryption method used in an embodiment of the present invention.

FIG. 2 is an explanatory diagram of an EKB of an encryption system used in the embodiment.

FIG. 3 is an explanatory diagram of a structure of an EKB of an encryption system used in the embodiment.

FIG. 4 is a block diagram of a system configuration according to the embodiment;

FIG. 5 is an explanatory diagram of an example of a data path of SDMI content according to the embodiment;

FIG. 6 is a block diagram of a device on a primary recording medium side according to the embodiment;

FIG. 7 is a block diagram of a secondary recording medium-side device according to the embodiment;

FIG. 8 is an explanatory diagram of a cluster format of the mini disk system.

FIG. 9 is an explanatory diagram of an area structure of a mini disc.

FIG. 10 is an explanatory diagram of U-TOC sector 0 of the mini disc system.

FIG. 11 is an explanatory diagram of a link form of U-TOC sector 0 of the mini disc system.

FIG. 12 is a flowchart of an authentication process according to the embodiment.

FIG. 13 is an explanatory diagram of content data to be distributed / transferred and an encryption state according to the embodiment;

FIG. 14 is a diagram illustrating an example of an encryption method and a DNK according to the embodiment;

FIG. 15 is an explanatory diagram of a content data decryption procedure according to the embodiment;

FIG. 16 is an explanatory diagram of a checkout control command according to the embodiment.

FIG. 17 is an explanatory diagram of a checkout response command according to the embodiment.

FIG. 18 is an explanatory diagram of a record object control command according to the embodiment.

FIG. 19 is an explanatory diagram of a record object response command according to the embodiment.

FIG. 20 is an explanatory diagram of a check-in control command according to the embodiment.

FIG. 21 is an explanatory diagram of a subfunction of a check-in control command according to the embodiment.

FIG. 22 is an explanatory diagram of a check-in response command according to the embodiment.

FIG. 23 is an explanatory diagram of a check-in response command according to the embodiment.

FIG. 24 is an explanatory diagram of an exclusive login control command of the embodiment.

FIG. 25 is an explanatory diagram of an exclusive logout control command according to the embodiment.

FIG. 26 is a flowchart of a checkout operation according to the embodiment.

FIG. 27 is a flowchart of a checkout operation according to the embodiment.

FIG. 28 is a flowchart of a check-in operation of the embodiment.

FIG. 29 is an explanatory diagram of content ID generation according to the embodiment;

FIG. 30 is an explanatory diagram of a content ID correspondence table according to the embodiment;

FIG. 31 is a flowchart of content ID generation processing at the time of checkout according to the embodiment.

FIG. 32 shows content I before check-in according to the embodiment.
It is a flowchart of D generation processing.

FIG. 33 shows contents I before check-in according to the embodiment.
It is a flowchart of D generation processing.

FIG. 34 is an explanatory diagram of an operation based on a write control flag according to the embodiment.

FIG. 35 is a flowchart of a billing information reading operation of the embodiment.

FIG. 36 is an explanatory diagram of a charging management system according to an embodiment.

FIG. 37 is an explanatory diagram of a customer database according to the embodiment.

FIG. 38 is an explanatory diagram of prepaid information according to the embodiment.

[Explanation of symbols]

1 Primary recording medium side device (personal computer),
2 CPU, 5 HDD (primary recording medium), 8 communication unit, 9 disk drive, 11 connection unit, 20A secondary recording medium side device (recording / reproducing device), 21 MD control unit (CPU), 25 recording / reproducing unit, 26 interface unit, 28 decoding unit, 30 buffer memory, 31 system control unit, 100 secondary recording medium (mini disk)

Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat II (reference) G09C 1/00 660 G09C 1/00 660B G11B 20/10 G11B 20/10 D 20/12 20/12 27/00 27 / 00 B (72) Inventor Tadao Yoshida 6-35, Kita-Shinagawa, Shinagawa-ku, Tokyo F-term in Sony Corporation (reference) 5D044 AB02 AB06 AB07 BC04 BC06 BC08 CC06 CC08 DE29 DE50 DE54 EF05 FG18 GK12 HL02 HL07 HL11 5D110 AA17 AA19 AA27 AA29 BB01 BB29 DA04 DA12 DB03 DC02 DC16 DE04 5J104 AA01 PA07 PA11

Claims (17)

[Claims] 1. A data transfer system comprising a server device, a data transfer device, and a data recording device, wherein the server device includes: a content providing unit that provides content data to the data transfer device; Charging means for performing charging processing for data, the data transfer device comprising: a primary recording medium drive means for recording and reproducing data on a primary recording medium; and a content data provided from the server device. Storage control means for storing the data in the primary recording medium in a multiplexed state; communication means for performing various data communications including transfer of content data between the data recording device; A command requesting the prepaid information stored in the recording medium is transmitted by the communication means. Command transmission control means, and prepaid information processing means for performing predetermined processing on the prepaid information transmitted from the data recording device, wherein the data recording device exchanges content data with the data transfer device. Communication means for performing various data communications including reception of data, secondary recording medium drive means for recording and reproducing data on and from a secondary recording medium, and non-encrypted content data transmitted from the data transfer device. Decryption means for decrypting to an encrypted state; recording control means for recording the content data decrypted by the decryption means on the secondary recording medium by the secondary recording medium drive means; and prepaid information from the data transfer device. In response to the requested command, the secondary recording medium is recorded on the secondary recording medium by the secondary recording medium drive unit. And a prepaid information transmission control means for causing the data transfer device to transmit the read prepaid information by the communication means. 2. The data transfer system according to claim 1, wherein the prepaid information processing means performs a process of transmitting the prepaid information transmitted from the data recording device to the server device. 3. The data transfer system according to claim 1, wherein said prepaid information is rewritably recorded on said secondary recording medium. 4. The data transfer system according to claim 1, wherein the prepaid information includes prepaid amount information and ID information unique to the secondary recording medium. 5. The billing processing means in the server device comprises a database in which billing information is registered in correspondence with the prepaid information, and is registered in the database in accordance with prepaid information transmitted from the data transfer device. 2. The data transfer system according to claim 1, wherein the charging process is performed by updating the charging information. 6. The charging information includes at least the I
The data according to claim 5, wherein the D information and the prepaid amount information are included, and the charging processing means performs the charging process by updating the prepaid amount information in the charging information. Transfer system. 7. A data transfer system comprising a data transfer device and a data recording device, the data transfer device comprising: a primary recording medium drive unit for recording and reproducing data on a primary recording medium; and an external server device. Storage control means for storing the content data provided from the storage device in an encrypted state on the primary recording medium; communication means for performing various data communication including transfer of content data between the data recording device; and Command transmission control means for causing the communication means to transmit a command for requesting the recording apparatus to request unique information stored in the secondary recording medium, the command being transmitted from the data recording apparatus; And a unique information processing means for performing a predetermined process on the unique information. Communication means for performing various data communications including reception of content data with the device, secondary recording medium drive means for recording and reproducing data on and from a secondary recording medium, and data transmitted from the data transfer device Decryption means for decrypting the encrypted content data to an unencrypted state; recording control means for recording the content data decrypted by the decryption means on the secondary recording medium by the secondary recording medium drive means; In response to a command requesting unique information from the data transfer device, the secondary recording medium drive means causes the unique information recorded on the secondary recording medium to be read, and the read unique information is read by the communication means. A data transfer system, comprising: unique information transmission control means for causing the data transfer device to transmit. 8. The data transfer system according to claim 7, wherein said unique information is prepaid information. 9. The data transfer system according to claim 7, wherein said unique information processing means performs a process of sending the unique information transmitted from said data recording device to said server device. 10. The data transfer system according to claim 7, wherein the unique information is rewritably recorded on the secondary recording medium. 11. The data transfer system according to claim 7, wherein the unique information includes prepaid amount information and ID information unique to the secondary recording medium. 12. A primary recording medium drive means for recording and reproducing data on and from a primary recording medium, and a storage control means for storing content data provided from an external server device in an encrypted state on the primary recording medium. Communication means for performing various types of data communication including transfer of content data with an external data recording device; and for the data recording device, a communication device unique to the secondary recording medium stored in the secondary recording medium. Command transmission control means for causing the communication means to transmit a command for requesting the unique information, and unique information processing means for performing a predetermined process on the unique information transmitted from the data recording device. Data transfer device. 13. The data transfer device according to claim 12, wherein the unique information is prepaid information. 14. The apparatus according to claim 1, wherein the unique information processing means performs a process of sending the unique information transmitted from the data recording device to the server device.
3. The data transfer device according to 2. 15. Communication means for performing various data communications including reception of content data with an external data transfer device, secondary recording medium drive means for recording and reproducing data on and from a secondary recording medium, and Decryption means for decrypting the encrypted content data transmitted from the data transfer device to an unencrypted state; and the secondary recording medium by means of the secondary recording medium drive means for decrypting the content data decrypted by the decryption means. Recording control means for recording on the secondary recording medium, in response to a command from the data transfer device requesting unique information specific to the secondary recording medium stored in the secondary recording medium, The unique information recorded on the secondary recording medium is read, and the read unique information is transmitted to the data transfer device by the communication means. Data recording apparatus characterized by comprising a transmission control unit. 16. The data recording apparatus according to claim 15, wherein said unique information is prepaid information. 17. An encrypted content data provided from an external server device and stored in a primary recording medium is transferred to an external data recording device and recorded in an unencrypted state on a secondary recording medium. By transmitting a command for requesting the prepaid information stored in the secondary recording medium to the device, and transmitting the prepaid information transmitted from the data recording device to the server device, A billing method, wherein a bill is charged for the content data recorded on the secondary recording medium.