JP5009832B2 - Content use management system, information processing apparatus, method, and program - Google Patents

Description

  The present invention relates to a content use management system, an information processing apparatus and method, and a program. More specifically, the present invention relates to a content usage management system, an information processing apparatus, a method, and a program for performing usage control of content recorded on an information recording medium, downloaded content, and the like.

  Discs such as DVD (Digital Versatile Disc) and Blu-ray Disc (registered trademark) are used as recording media for various contents such as movies and music. Furthermore, content use processing is also actively performed in which content is downloaded from a server via a network, stored in a storage unit such as a flash memory of a user device, and used. Content recorded on media such as DVDs or downloaded content is digital data, and many of them have copyrights, distribution rights, etc. owned by the creators or distributors of the contents. For example, unauthorized copying (duplication), etc. In general, usage control for prevention is performed.

  Copyright management of digital data is called DRM (Digital Rights Management) and uses, for example, control programs and systems for preventing unauthorized copying and limiting the number of copies. As a specific example, there is AACS (Advanced Access Content System) that defines copyright protection technology. According to the AACS rules, when using disc recording content, content information is controlled in units of discs by reading ID information such as a media ID from the disc and confirming the read ID or generating a key using the ID information. Is realized.

  In recent years, with the miniaturization of user portable devices and the increase in the capacity of flash memory, processing for storing media stored content such as DVDs and content downloaded from a server in the memory of the mobile device has been actively performed. .

For example, it is necessary to manage the use of a process in which the content recorded on the disc is output to an external device such as a portable device other than the disc playback apparatus, and the management configuration corresponding to such content use is, for example, as follows. There are various aspects.
(A) It is completely forbidden to output to equipment other than the playback device equipped with the disc.
(B) Processing that limits the number of outputs and allows a certain number of outputs;
(C) A process that limits the number of output devices and allows output up to a certain number of output devices,
There is such a processing mode. Further, for example, Patent Document 1 describes a configuration in which the content usage range is divided and managed by domain.

  In the conventional content management process, for example, a playback device with a disc mounted is set as a content output device, that is, a content copy source, and an external device such as a portable device is set as a copy destination for management. Even when the user uses multiple mobile devices, the content output for each mobile device can be managed on the disc-mounted playback device that can execute the content management program, so that the number of outputs and the number of output devices can be managed in the playback device. Thus, reliable use management of content is realized.

However, in the above management configuration, copy use processing between external devices, such as copying and using content output from a playback device with a disc attached to one portable player to another portable player, is not permitted. become.
Special table 2007-500893 gazette

  In recent years, various portable devices have been used, the data storage capacity of flash memory has increased, and content copying between portable devices can be performed relatively easily technically. However, when the content management process as described above is performed, content copying between portable devices is not allowed.

  The present invention has been made in view of, for example, the above-described problems. For example, a content usage management system, an information processing apparatus, and a method that permit content copying between mobile devices and also realize content usage management. It aims at providing a program.

The first aspect of the present invention is:
A playback device for acquiring identification information corresponding to the disc or the content stored on the disc from the disc and transmitting it to the authentication server;
An authentication server that provides the playback apparatus with domain usage permission information that is disk storage content usage permission information in a domain device belonging to a domain, on condition that the identification information of the identification information conforms to legitimate or prescribed conditions,
A management server that executes a domain device registration process and provides a license including a content key to be applied to decryption of the content stored in the disk to the domain device;
Having one or more domain devices that acquire a domain key from the management server by registration processing with the management server;
The authentication server registers a domain ID, which is identification information of a domain permitted to use the disc storage content in association with the identification information received from the playback device,
The content management system is characterized in that the management server is configured to perform the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server.

  Furthermore, in an embodiment of the content usage management system of the present invention, the management server provides a domain device with a license including an encrypted content key obtained by encrypting the content key with a domain key set corresponding to the domain. It is the structure.

  Furthermore, in an embodiment of the content use management system of the present invention, the playback device acquires, as the identification information, a media ID, which is disc-specific identification information, from the disc, and transmits the media ID to an authentication server. The configuration is such that domain use permission information for permitting the use of the content stored in the disc in the domain device belonging to the domain is provided to the playback device on condition that a media ID that conforms to a legitimate or prescribed condition among the media IDs is received. It is characterized by.

Furthermore, in one embodiment of the content use management system of the present invention, the playback device uses the identification information as:
(A) Volume ID set for each disc title;
(B) a content certificate ID as identification information of the content certificate set corresponding to the disc recording content;
The volume ID or content certificate ID is obtained from a disk and transmitted to an authentication server, and the authentication server selects a volume ID or content certificate ID that conforms to a legitimate or prescribed condition from the volume ID or content certificate ID. On the condition that it is received, the playback apparatus is provided with domain usage permission information that permits the use of the contents stored on the disk in the domain device belonging to the domain.

  Furthermore, in an embodiment of the content usage management system of the present invention, the playback device stores the disc storage content as content that allows copying between domain devices belonging to the same domain on condition that the domain usage permission information is retained. It is a configuration that allows copy output to other domain devices.

Furthermore, the second aspect of the present invention provides
A playback device for acquiring identification information corresponding to the disc or the content stored on the disc from the disc and transmitting it to the authentication server;
A content providing server for providing download content;
An authentication server that provides the playback device with domain usage permission information that permits the use of the download content in a domain device belonging to a domain, on condition that the identification information of the identification information conforms to a legitimate or prescribed condition,
A management server that executes domain device registration processing and provides a domain device with a license including a content key to be applied to decryption of the downloaded content;
Having one or more domain devices that acquire a domain key from the management server by registration processing with the management server;
The authentication server registers a domain ID that is identification information of a domain permitted to use the download content in association with the identification information received from the playback device,
The content management system is characterized in that the management server is configured to perform the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server.

  Furthermore, in an embodiment of the content usage management system of the present invention, the management server provides a domain device with a license including an encrypted content key obtained by encrypting the content key with a domain key set corresponding to the domain. It is the structure.

  Furthermore, in an embodiment of the content use management system of the present invention, the playback device acquires, as the identification information, a media ID, which is disc-specific identification information, from the disc, and transmits the media ID to an authentication server. The configuration is such that domain use permission information for permitting the use of the download content in a domain device belonging to a domain is provided to the playback device on condition that a media ID that conforms to legitimate or prescribed conditions is received among the media IDs. It is characterized by.

Furthermore, in one embodiment of the content use management system of the present invention, the playback device uses the identification information as:
(A) Volume ID set for each disc title;
(B) a content certificate ID as identification information of the content certificate set corresponding to the disc recording content;
The volume ID or content certificate ID is obtained from a disk and transmitted to an authentication server, and the authentication server selects a volume ID or content certificate ID that conforms to a legitimate or prescribed condition from the volume ID or content certificate ID. On the condition that the content is received, domain use permission information for permitting the use of the download content is provided to the playback device in the domain device belonging to the domain.

  Furthermore, in an embodiment of the content usage management system of the present invention, the playback device may store the download content as content that allows copying between domain devices belonging to the same domain on condition that the domain usage permission information is retained. The configuration is characterized in that download processing for a domain device is permitted.

Furthermore, the third aspect of the present invention provides
An information processing apparatus that executes a process of reading recorded information on a disc,
A data reading unit for reading identification information corresponding to the disc or the content stored on the disc from the disc;
A communication unit that transmits the identification information to an authentication server, and acquires domain use permission information that permits the use of disk storage content or download content in a domain device belonging to the domain from the authentication server;
A control unit that performs recording control on the domain device of the disk storage content or the download content as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained;
There is an information processing apparatus characterized by having.

Furthermore, in one embodiment of the information processing apparatus of the present invention, the information processing apparatus includes the identification information as:
(A) Media ID, which is disc-specific identification information,
(B) Volume ID set for each disc title;
(C) a content certificate ID as identification information of a content certificate set corresponding to the disc recording content;
The present invention is characterized in that at least one of the media ID, the volume ID, and the content certificate ID is acquired from a disk and transmitted to an authentication server.

Furthermore, the fourth aspect of the present invention provides
A disc playback device acquiring identification information corresponding to the disc or disc storage content from the disc and transmitting it to the authentication server;
An authentication server registers a domain ID, which is identification information of a domain permitted to use the content stored in the disc, in association with the identification information received from the playback device, and conforms to a legitimate or prescribed condition of the identification information Providing the playback device with domain usage permission information that permits the use of the content stored on the disc in the domain device belonging to the domain, on condition that the received identification information is received,
A management server performing a registration process as a domain device and providing a license including a content key to be applied to decryption of content stored in a disk to the domain device;
A domain device has a step of acquiring a domain key from the management server by a registration process to the management server;
In the content usage management method, the management server performs the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server.

  Furthermore, in an embodiment of the content usage management method of the present invention, the management server provides a domain device with a license including an encrypted content key obtained by encrypting the content key with a domain key set corresponding to the domain. It is characterized by that.

Furthermore, the fifth aspect of the present invention provides
Content usage management method,
A disc playback device acquiring identification information corresponding to the disc or disc storage content from the disc and transmitting it to the authentication server;
The authentication server registers a domain ID that is identification information of a domain that permits use of the download content provided by the content providing server in association with the identification information received from the playback device. Providing the playback apparatus with domain usage permission information that permits the use of the download content in a domain device belonging to a domain, on condition that the identification information conforming to the prescribed conditions is received;
A management server performing registration processing as a domain device and providing a license including a content key to be applied to decrypting the downloaded content to the domain device;
A domain device has a step of acquiring a domain key from the management server by a registration process to the management server;
In the content usage management method, the management server performs the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server.

  Furthermore, in an embodiment of the content usage management method of the present invention, the management server provides a domain device with a license including an encrypted content key obtained by encrypting the content key with a domain key set corresponding to the domain. It is characterized by that.

Furthermore, the sixth aspect of the present invention provides
An information processing method executed in an information processing apparatus,
A data reading step in which the data reading unit reads identification information corresponding to the disc or the content stored on the disc from the disc;
A communication unit that transmits the identification information to an authentication server, and obtains domain use permission information for permitting use of disk storage content or download content in a domain device belonging to the domain from the authentication server;
A control step for executing a control in which the control unit records the disc storage content or the download content in the domain device as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained; ,
There is an information processing method characterized by comprising:

Furthermore, the seventh aspect of the present invention provides
A program for executing information processing in an information processing apparatus;
A data reading step for causing the data reading unit to read identification information corresponding to the disc or the content stored on the disc from the disc;
A communication step of causing the communication unit to transmit the identification information to the authentication server, and to acquire domain use permission information for permitting the use of the disk storage content in the domain device belonging to the domain from the authentication server;
A control step for executing, in the control unit, control for recording the disc storage content or the download content in the domain device as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained; ,
There is a program characterized by having.

  The program of the present invention is, for example, a program that can be provided by a storage medium or a communication medium provided in a computer-readable format to a general-purpose system capable of executing various program codes. By providing such a program in a computer-readable format, processing corresponding to the program is realized on the computer system.

  Other objects, features, and advantages of the present invention will become apparent from a more detailed description based on embodiments of the present invention described later and the accompanying drawings. In this specification, the system is a logical set configuration of a plurality of devices, and is not limited to one in which the devices of each configuration are in the same casing.

  According to the configuration of one embodiment of the present invention, the playback device acquires the media ID as the disc identifier from the disc and transmits it to the authentication server, and the authentication server is the content usage permission information in the domain device belonging to the domain. The domain use permission information is provided to the playback device, and the domain device belonging to the domain is configured to receive a license including a domain key and a content key to be applied to decrypting content from the management server, and the authentication server receives from the playback device. A domain ID that is identification information of a domain that is permitted to use content is registered in association with the media ID, and the management server assigns a content key to a domain device that belongs to the domain corresponding to the domain ID registered in the authentication server. The license is included. With this configuration, it is possible to manage content used in a domain in association with a disc, such as a media ID.

  The content usage management system, information processing apparatus and method, and program according to the present invention will be described below in detail with reference to the drawings.

  In the present invention, content stored on a disc such as a DVD (Digital Versatile Disc) or Blu-ray Disc (registered trademark) or content downloaded from a server via a network is copied between user devices and used. The content usage management is also to be realized while allowing to do so. Specifically, the content usage management is, for example, a setting that does not allow unlimited content copying.

  First, an outline of the Marlin standard proposed as one of content usage management standards, that is, DRM (Digital Rights Management) standards, will be described with reference to FIG.

  The content use management standard [Marlin] allows the use of copy content between a plurality of user devices under certain restrictions. A group of user equipment permitted to copy content is called a domain [Domain].

  A specific example will be described with reference to FIG. For example, the domain A (Domain A) 110 includes a plurality of user devices 111 to 114 owned by the user A. It is allowed to freely copy contents between user devices belonging to one domain A.

  The domain B (Domain B) 120 includes a plurality of user devices 121 to 123 owned by the user B. It is allowed to freely copy contents between user devices belonging to one domain B. It is also possible to set so that one device belongs to a plurality of domains.

  In order to become a device included in one domain, that is, a domain device, it is necessary to perform a predetermined procedure with respect to a management server executing a management process corresponding to the content usage management standard [Marlin].

  Registration processing as a domain device will be described with reference to FIG. FIG. 2 shows a device 150 that newly registers as a domain device and a management server 170. The device 150 holds in advance a device key 151 corresponding to an identifier (ID) unique to the device.

  The device 150 transmits a device ID (a device key can be used) to the management server 170. The management server 170 holds management information for each domain, registers the ID of the device 150 as a device belonging to one domain, encrypts the domain key with the device key, and provides the device 150 with the encrypted domain key. The device 150 receives the encrypted domain key from the management server 170, decrypts it by applying the device key 151, acquires the domain key 152, and stores it in the memory. By this processing, a plurality of user devices belonging to a certain domain have one common domain key.

  Next, an example of content use processing in the domain device will be described with reference to FIG.

  First, the device 150 acquires a license indicating a content usage right corresponding to specific content. First, the device 150 transmits a domain ID (domain key) to the management server 170 and executes a license acquisition request corresponding to the content. Although not shown in the figure, the content ID is also transmitted during the transmission process.

  The management server 170 generates an encrypted content key obtained by encrypting a content key applicable to the decryption process for the encrypted content provided by the content providing server 190 with the domain key, and obtains a license 171 including the encrypted content key. Generate and send to device 150.

  The device 150 reads the encrypted content key from the license 171, performs decryption processing using the domain key 152, and acquires the content key 153.

  Next, the device 150 receives the encrypted content from the content providing server 190. This encrypted content is content encrypted with the content key 153. The device can execute the decryption process of the encrypted content 154 to which the content key 153 received from the management server 170 is applied, acquire the decrypted content, and reproduce and use the decrypted content.

  This content is allowed to be externally output only as encrypted content. The license 171 including the encrypted content key needs to be acquired from the management server 170 by each device. The license 171 includes a content key for decrypting the encrypted content. This content key is encrypted with the domain key, and the same domain key is applied only to domain devices having the same domain key. The content key can be acquired by the decryption process.

  Therefore, the devices that can use the encrypted content are limited to a group of devices belonging to one domain having the same domain key. In this content usage management configuration, by setting to prohibit external output of device keys and domain keys, content can be used only by domain devices belonging to one domain even if encrypted content is freely distributed A usage management configuration is realized.

  The content use management configuration of the present invention further develops [Marlin], which is the DRM standard, and records on one disc, for example, a disc such as a DVD (Digital Versatile Disc) or Blu-ray Disc (registered trademark). In this configuration, content usage management and domain setting management are performed using the identifier (ID).

An example of content usage management according to an embodiment of the present invention will be described with reference to FIGS.
FIG. 4 shows a configuration for managing the use of content stored on a disk in a domain device.
FIG. 6 shows a configuration for managing the use of content downloaded from a server in a domain device.
It is a figure explaining these process structures.

  First, with reference to FIG. 4, a configuration for managing the use of content stored on a disc in a domain device will be described.

  A disc 210 shown in FIG. 4 is a disc such as a DVD (Digital Versatile Disc) or Blu-ray Disc (registered trademark), and is a disc on which encrypted content 213 is recorded in advance. The encrypted content 213 is recorded as content encrypted with a content key.

  This encrypted content is copied to a device (domain device) belonging to a specific domain 250, and a plurality of domain devices 251 to 253 in the domain 250 are freely copied and allowed to use.

  First, the playback device (Player) 220 loaded with the disk 210 executes a procedure with the authentication server 230 to obtain domain use permission information 221 as content output (copy) permission information for the domain device. This domain use permission information 221 is information necessary when copying and storing the disk storage content, that is, the encrypted content 213 shown in the figure, to any of the domain devices 251 to 253 in the domain 250.

  First, the playback device 220 reads the content management processing driver 212 from the disc 210. The content management processing driver 212 includes a program for acquiring domain use permission information 221 that is content output (copy) permission information for a domain device from the authentication server 230, connection information of the authentication server 230, and the like.

  The playback device 220 reads and executes the content management processing driver 212. First, in step S11, the media ID recorded on the disc is read and transmitted to the authentication server 230.

  The media ID is identification information that is different for each disc. For example, the media ID is an ID recorded as data that has been difficult to be tampered or rewritten on a BCA (Burst Cutting Area) of the disc.

  Upon receiving the media ID, the authentication server 230 verifies whether or not the media ID is an ID set for a regular disk (step S21). That is, it is verified whether the media ID is valid or conforms to the specified conditions. The media ID includes information for confirming the disc manufacturer, stored content, and the like, and verifies whether or not the ID corresponds to the disc in which the regular content is stored by performing these confirmation processes. When it is confirmed that the media ID corresponds to the disc in which the regular content is stored, the playback device 220 executes a usage request in the content domain to the authentication server 230.

  With this domain usage request, it is possible to execute detailed settings such as the number of devices in one domain, the number of domains to be set, and the usage period. The user determines various domain setting modes and makes a domain use request to the authentication server 230.

  The authentication server 230 registers the number of domains to be set, the number of domain devices, the usage period, and the like in its own management database, creates usage permission information in which various domain usage modes are set, and provides the usage permission information to the playback device 220 (step S23). ) This is domain use permission information 221 stored in the playback device 220 shown in FIG. In the issuance processing of the domain usage permission information 221, the authentication server 230 requests the playback device 220 for a usage fee according to, for example, the number of devices in one domain, the number of domains to be set, the usage period, and the like. The payment process (step S22) may be performed.

  The authentication server 230 registers, as domain management data, the number of domains, the number of domain devices, the usage period, and the like for which usage is permitted in association with the media ID received from the playback device 220. For example, registration data as shown in FIG. 5 is held as management data. As shown in FIG. 5, the management information includes a media ID, the number of domains permitted to be set, a domain ID, a domain device ID, a usage period, and the like. The domain device ID is the device ID (device key can be used) of the device for which the domain registration process has been executed. Further, the domain ID needs to be shared information with the management server 240.

  The domain ID is issued by the authentication server 230 and notified to the management server 240, or is issued by the management server 240 and notified to the authentication server 230.

  As shown in FIG. 4, it is assumed that domain devices belonging to the domain 250 are domain devices A to C and 251 to 253. These domain devices A to C and 251 to 253 need to perform processing with the management server 240 to perform domain registration processing (step S31).

  The domain registration process can be executed by a process similar to the process according to [Marlin], which is the DRM standard described above with reference to FIG. That is, as described above with reference to FIG. 2, each of the domain devices A to C and 251 to 253 transmits a device ID (device key can be used) to the management server 240, and This is a process of receiving from the management server 240 an encrypted domain key obtained by encrypting a domain key by applying a device ID (a device key can be used) after confirming the device ID (a device key can be used). The domain key can be set to the same data as the domain ID or the configuration data thereof.

  After the device domain registration processing is executed, the encrypted content 213 stored in the disk 210 is copied to any one of the domain devices A to C and 251 to 253 (step S51). This copy process is executed under the management of the playback device 220, and is executed on the condition that, for example, confirmation that the valid domain usage permission information 221 has been acquired.

  Note that the disc storage content to be copied is encrypted content and cannot be used by a device that has not received a license. The authentication server 230 performs processing for registering a domain ID, which is identification information of a domain permitted to use the disc storage content, in association with the media ID received from the playback device 220, and stores the domain ID information in the management server 240. The domain ID is used as shared information between the authentication server 230 and the management server 240 by processing such as notification.

  The management server 240 performs license provision processing only for domain devices belonging to the domain corresponding to the domain ID registered in the authentication server 230. With this configuration, only devices belonging to a specific domain, that is, a domain set with a domain ID registered in the authentication server 230 in association with the media ID acquire a license from the management server 240 and acquire a content key included in the license. The content can be used by the used content decryption.

  Note that the playback device 220 may be configured to perform control for permitting or not permitting copy to a domain device on the condition that the valid domain use permission information 221 has been acquired. In this case, the processing executed by the playback device 220 is as follows. The data reading unit of the playback device 220 reads the identification information corresponding to the disc or the content stored on the disc from the disc, and the communication unit of the playback device 220 transmits the identification information to the authentication server 230 and the domain usage permission information 221 from the authentication server 230. To get. Next, on the condition that the domain use permission information 221 is retained, the copy control unit of the playback apparatus 220 executes copy output of the disk storage content to the domain device as content that is allowed to be copied between domain devices belonging to the same domain. If the domain use permission information 221 is not held, the copy control unit does not execute copying. It is good also as a structure which performs such control.

  For example, the encrypted content 213 stored in the disk 210 in step S 51 is copied to one domain device A 251 in the domain 250. However, this content is encrypted content and cannot be decrypted without the content key.

  Therefore, the domain device A 251 executes a license acquisition process from the management server 240. The license acquisition process can be executed by a process similar to the process according to [Marlin], which is the DRM standard described above with reference to FIG. That is, as described above with reference to FIG. 3, the device 251 transmits a domain ID (a domain key can be used) to the management server 240, and after the domain ID confirmation processing in the management server 240, the domain This is a process of receiving a license including an encrypted content key obtained by applying an ID and encrypting a content key from the management server 240.

  The domain device A 251 can decrypt the encrypted content key included in the license received from the management server 240 to obtain the content key. That is, the content key can be obtained by decrypting using the domain key received from the management server 240 during the domain registration process. Further, the encrypted content copied from the disk 210 can be decrypted using the content key to reproduce and use the content.

  It is allowed to freely copy the encrypted content between the domain devices A to C and 251 to 253 in the domain 250. However, in each of the domain devices A to C and 251 to 253, it is necessary to obtain a license including the encrypted content key from the management server 240.

  The license includes a content key for decrypting the encrypted content, but this content key is encrypted with the domain key, and decryption with the same domain key applied only to domain devices with the same domain key The content key can be acquired by the processing.

  With this configuration, copying and use of content is permitted only within the domain for which setting is permitted in the authentication server 230.

  As described above with reference to FIG. 5, the authentication server 230 performs domain management in association with the media ID corresponding to the disk 210. In other words, it manages the usage mode such as the number of domains that can use the content stored in one disk, the number of devices in the domain, the usage period, etc., and the domain in which the content stored in one disk is used Strict management can be performed, and the rigorous content usage management can be realized by eliminating the fear of unlimited expansion of devices and periods for using the content.

  The processing example shown in FIG. 4 shows a processing example in which one domain, that is, the domain 250 is set, but one content stored on one disk can be used by two or more domains. It is also possible to set as a simple domain. An entry (2) shown in FIG. 5 shows an example in which two domains are registered for one media ID, that is, one disc storage content. In this setting, one disc storage content can be used in two different domains. For example, if n domains are registered as usage domains, content stored in one disk can be used by domain devices in the n domains.

  For example, the authentication server 230 sets the number of domains that can be used in the domain usage permission information 221, and the playback device 220 copies and outputs the content stored in the disk 210 to devices in different domains according to the set number. It is acceptable. Note that the authentication server 230 can perform settlement by setting different usage fees according to the number of available domains, the number of domain devices, and the usage period.

In the above embodiment, the playback device 220 transmits a media ID, which is disc-specific identification information recorded on the disc 210, to the authentication server 230. The authentication server 230 manages the management data as shown in FIG. Although the management data in which the number of domains and the domain ID are associated with the ID is generated and the management of the domain and the use of the content are managed has been described, the disk 210 includes the media ID in addition to the media ID.
(A) Volume ID set for each disc title;
(B) a content certificate ID as identification information of the content certificate set corresponding to the disc recording content;
Such identification information (ID) is also recorded.

  The playback apparatus 220 transmits one of the above IDs instead of the media ID to the authentication server 230, and the authentication server 230 associates the volume ID or the content certificate ID with one of the above-described volume IDs and content certificate IDs. The management data described with reference may be generated to perform domain management and content usage management. The authentication server uses the domain storage that allows the use of the content stored in the disk in the domain device belonging to the domain on condition that the volume ID or the content certificate ID of the volume ID or the content certificate ID conforms to a legitimate or prescribed condition. Providing permission information to the playback device.

  The processing example described with reference to FIG. 4 is a processing example in which the content recorded on the disk 210 is copied to the domain device and used. For example, the content provided by the content providing server is stored and used in the domain device. It is also possible to perform processing. This processing example will be described with reference to FIG.

  6 is a configuration in which the content providing server 270 provides the encrypted content 271 to at least one of the domain devices 251 to 253, unlike the configuration of FIG. 4 described above. At least one of the domain devices 251 to 253 downloads the encrypted content 271 of the content providing server 270 (step S91) and stores the encrypted content in a storage unit such as its own flash memory.

  However, also in this configuration example, it is necessary for the playback device 220 to which the disc 210 is mounted to transmit the media ID 211 read from the disc 210 to the authentication server 230 and acquire the domain use permission information 221. It becomes. That is, as a premise that the domain devices 251 to 253 belonging to the domain 250 use the downloaded content, the playback device 220 needs to acquire the domain use permission information 221 from the authentication server 230.

  A sequence of the usage processing configuration in the domain device of the download content shown in FIG. 6 will be described. A disc 210 shown in FIG. 6 is a disc such as a DVD (Digital Versatile Disc) or Blu-ray Disc (registered trademark). In this example, the domain devices 251 to 253 are examples in which the encrypted content 271 of the content providing server 270 is downloaded and used, and the content may not be recorded on the disc 210.

  Note that the encrypted content 271 of the content providing server 270 is content encrypted with a content key. In this processing example, the encrypted content 271 of the content providing server 270 is downloaded by a device (domain device) belonging to a specific domain 250 and freely copied by a plurality of domain devices 251 to 253 in the domain 250. It is a configuration that allows use.

  In order for the domain devices 251 to 253 to use the downloaded content, it is necessary for the playback device 220 to acquire the domain usage permission information 221 from the authentication server 230. First, the playback apparatus (Player) 220 with the disc 210 attached executes the procedure with the authentication server 230 to obtain domain use permission information 221 as content download permission information in the domain device. This domain use permission information 221 is information required when any of the domain devices 251 to 253 in the domain 250 downloads the encrypted content 271 of the content providing server 270.

  First, the playback device 220 reads the content management processing driver 212 from the disc 210. The content management processing driver 212 stores a program to be applied for acquiring from the authentication server 230 domain usage permission information 221 that is permission information when executing content download processing in the domain device, connection information with the authentication server 230, and the like. Including.

  The playback device 220 reads and executes the content management processing driver 212. First, in step S61, the media ID recorded on the disc is read and transmitted to the authentication server 230. As described above, the media ID is identification information that is different for each disc. For example, the media ID is an ID that is recorded on a BCA (Burst Cutting Area) or the like of the disc as data that is difficult to falsify or rewrite.

  Upon receiving the media ID, the authentication server 230 verifies whether or not the media ID is an ID set on a regular disk (step S71). The media ID includes information for confirming the disc manufacturer, stored content, and the like, and verifies whether or not the ID corresponds to the disc in which the regular content is stored by performing these confirmation processes. When it is confirmed that the media ID corresponds to the disc in which the regular content is stored, the playback device 220 executes a usage request in the content domain to the authentication server 230.

  With this domain usage request, it is possible to execute detailed settings such as the number of devices in one domain, the number of domains to be set, and the usage period. The user determines various domain setting modes and makes a domain use request to the authentication server 230.

  The authentication server 230 registers the number of domains to be set, the number of domain devices, the usage period, and the like in its management database, creates usage permission information in which various domain usage modes are set, and provides the usage permission information to the playback device 220 (step S73). ) This is domain use permission information 221 stored in the playback device 220 shown in FIG. In the issuance processing of the domain usage permission information 221, the authentication server 230 requests the playback device 220 for a usage fee according to, for example, the number of devices in one domain, the number of domains to be set, the usage period, and the like. The settlement process (step S72) may be performed.

  The authentication server 230 registers, as domain management data, the number of domains, the number of domain devices, the usage period, and the like for which usage is permitted in association with the media ID received from the playback device 220. For example, registration data as shown in FIG. 5 is held as management data. As shown in FIG. 5, the management information includes a media ID, the number of domains permitted to be set, a domain ID, a domain device ID, a usage period, and the like. The domain device ID is the device ID (device key can be used) of the device for which the domain registration process has been executed. Further, the domain ID needs to be shared information with the management server 240.

  The domain ID is issued by the authentication server 230 and notified to the management server 240, or is issued by the management server 240 and notified to the authentication server 230.

  As shown in FIG. 6, it is assumed that domain devices belonging to the domain 250 are domain devices A to C and 251 to 253. These domain devices A to C and 251 to 253 need to perform processing with the management server 240 to perform domain registration processing (step S81).

  The domain registration process can be executed by a process similar to the process according to [Marlin], which is the DRM standard described above with reference to FIG. That is, as described above with reference to FIG. 2, each of the domain devices A to C and 251 to 253 transmits a device ID (device key can be used) to the management server 240, and This is a process of receiving from the management server 240 an encrypted domain key obtained by encrypting a domain key by applying a device ID (a device key can be used) after confirming the device ID (a device key can be used). The domain key can be set to the same data as the domain ID or the configuration data thereof.

  After the device domain registration processing is executed, one of the domain devices A to C and 251 to 253 executes the download processing (step S91) of the encrypted content 271 of the content providing server 270. This download process is executed under the control of the playback device 220, and is executed under the condition that, for example, the valid domain use permission information 221 has been acquired.

  The downloaded content from the content providing server 270 is encrypted content and cannot be used by a device that has not received a license. The authentication server 230 performs processing for registering a domain ID, which is identification information of a domain permitted to use the disc storage content, in association with the media ID received from the playback device 220, and stores the domain ID information in the management server 240. The domain ID is used as shared information between the authentication server 230 and the management server 240 by processing such as notification.

  The management server 240 performs license provision processing only for domain devices belonging to the domain corresponding to the domain ID registered in the authentication server 230. With this configuration, only devices belonging to a specific domain, that is, a domain set with a domain ID registered in the authentication server 230 in association with the media ID acquire a license from the management server 240 and acquire a content key included in the license. The content can be used by the used content decryption.

  Note that the playback device 220 may be configured to perform control to permit or disallow content download processing in the domain device on the condition that the valid domain usage permission information 221 has been acquired. In this case, the processing executed by the playback device 220 is as follows. The data reading unit of the playback device 220 reads the identification information corresponding to the disc or the content stored on the disc from the disc, and the communication unit of the playback device 220 transmits the identification information to the authentication server 230 and the domain usage permission information 221 from the authentication server 230. To get. Next, the download control unit of the playback device 220 downloads the encrypted content 271 from the content providing server 270 as content that is allowed to be copied between domain devices belonging to the same domain on the condition that the domain use permission information 221 is retained. Let If the domain use permission information 221 is not held, the download control unit does not execute the download. It is good also as a structure which performs such control.

  For example, in step S 91, the encrypted content 271 of the content providing server 270 is downloaded to one domain device A 251 in the domain 250. The domain device A 251 further executes a license acquisition process from the management server 240. The license acquisition process can be executed by a process similar to the process according to [Marlin], which is the DRM standard described above with reference to FIG. That is, as described above with reference to FIG. 3, the domain device A 251 transmits a domain ID (a domain key can be used) to the management server 240, and after the domain ID confirmation processing in the management server 240, This is a process of receiving a license including an encrypted content key obtained by applying a domain ID and encrypting a content key from the management server 240.

  The domain device A 251 can decrypt the encrypted content key included in the license received from the management server 240 to obtain the content key. That is, the content key can be obtained by decrypting using the domain key received from the management server 240 during the domain registration process. Further, the encrypted content 271 downloaded from the content providing server 270 can be decrypted by using the content key to reproduce and use the content.

  It is allowed to freely copy the encrypted content between the domain devices A to C and 251 to 253 in the domain 250. However, in each of the domain devices A to C and 251 to 253, it is necessary to obtain a license including the encrypted content key from the management server 240.

  The license includes a content key for decrypting the encrypted content, but this content key is encrypted with the domain key, and decryption with the same domain key applied only to domain devices with the same domain key The content key can be acquired by the processing. With this configuration, copying and use of content is permitted only within the domain for which setting is permitted in the authentication server 230.

  As described above with reference to FIG. 5, the authentication server 230 performs domain management in association with the media ID corresponding to the disk 210. In other words, it manages the usage mode such as the number of domains that can use the content stored in one disk, the number of devices in the domain, the usage period, etc., and the domain in which the content stored in one disk is used Strict management can be performed, and the rigorous content usage management can be realized by eliminating the fear of unlimited expansion of devices and periods for using the content.

  The processing example shown in FIG. 6 shows a processing example in which one domain, that is, the domain 250 is set, but the download content can be used in two or more domains corresponding to one media ID. It can also be set as a domain. For example, as described above, an example is shown in which two domains are registered for one media ID as in entry (2) shown in FIG. In this setting, the download content can be used in two different domains using the media ID of one disc. For example, if n domains are registered as usage domains, the content provided by the content providing server 270 can be used by domain devices in the n domains.

  For example, the authentication server 230 sets the number of domains that can be used in the domain usage permission information, and the playback device 220 is allowed to download the content of the content providing server 270 to devices in different domains according to the set number. Is done. Note that the authentication server 230 can perform settlement by setting different usage fees according to the number of available domains, the number of domain devices, and the usage period.

  The present invention has been described in detail above with reference to specific embodiments. However, it is obvious that those skilled in the art can make modifications and substitutions of the embodiments without departing from the gist of the present invention. In other words, the present invention has been disclosed in the form of exemplification, and should not be interpreted in a limited manner. In order to determine the gist of the present invention, the claims should be taken into consideration.

  The series of processing described in the specification can be executed by hardware, software, or a combined configuration of both. When executing processing by software, the program recording the processing sequence is installed in a memory in a computer incorporated in dedicated hardware and executed, or the program is executed on a general-purpose computer capable of executing various processing. It can be installed and run. For example, the program can be recorded in advance on a recording medium. In addition to being installed on a computer from a recording medium, the program can be received via a network such as a LAN (Local Area Network) or the Internet, and installed on a recording medium such as a built-in hard disk.

  Note that the various processes described in the specification are not only executed in time series according to the description, but may be executed in parallel or individually according to the processing capability of the apparatus that executes the processes or as necessary. Further, in this specification, the system is a logical set configuration of a plurality of devices, and the devices of each configuration are not limited to being in the same casing.

  As described above, according to the configuration of the embodiment of the present invention, the playback device acquires the media ID as the disc identifier from the disc and transmits it to the authentication server, and the authentication server is in the domain device belonging to the domain. An authentication server configured to provide domain use permission information, which is content use permission information, to a playback device, and a domain device belonging to the domain receives a license including a domain key and a content key applied to decrypting the content from the management server. Registers a domain ID that is identification information of a domain permitted to use content in association with a media ID received from the playback device, and the management server assigns a domain belonging to a domain corresponding to the domain ID registered in the authentication server License with content key for device It was configured to provide. With this configuration, it is possible to manage content used in a domain in association with a disc, such as a media ID.

It is a figure explaining the outline | summary of the Marlin standard proposed as one of the DRM (Digital Rights Management) standard which is a content use management standard. It is a figure explaining the registration process of the domain device in a Marlin standard. It is a figure explaining the example of content utilization processing in the domain device in a Marlin standard. It is a figure explaining the example of content use management according to one Example of this invention. It is a figure explaining the structural example of the management data of an authentication server. It is a figure explaining the example of content use management according to one Example of this invention.

Explanation of symbols

110 Domain 111-114 User Device 120 Domain 121-123 User Device 150 Device 151 Device Key 152 Domain Key 153 Content Key 154 Content 170 Management Server 171 License 190 Content Providing Server 210 Disk 211 Media ID
212 Content management processing driver 213 Encrypted content 220 Playback device 221 Domain use permission information 230 Authentication server 240 Management server 250 Domain 251 to 253 Domain device 270 Content providing server 271 Encrypted content

Claims (18)

A playback device for acquiring identification information corresponding to the disc or the content stored on the disc from the disc and transmitting it to the authentication server;
An authentication server that provides the playback apparatus with domain usage permission information that is disk storage content usage permission information in a domain device belonging to a domain, on condition that the identification information of the identification information conforms to legitimate or prescribed conditions,
A management server that executes a domain device registration process and provides a license including a content key to be applied to decryption of the content stored in the disk to the domain device;
Having one or more domain devices that acquire a domain key from the management server by registration processing with the management server;
The authentication server registers a domain ID, which is identification information of a domain permitted to use the disc storage content in association with the identification information received from the playback device,
The content usage management system, wherein the management server is configured to perform the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server. The management server
2. The content use management system according to claim 1, wherein the content use management system is configured to provide a domain device with a license including an encrypted content key obtained by encrypting a content key with a domain key set corresponding to a domain. The playback device
As the identification information, a media ID that is identification information unique to the disk is acquired from the disk and transmitted to the authentication server,
The authentication server provides the playback apparatus with domain usage permission information that permits the use of the content stored in the disk in a domain device belonging to a domain, on condition that a media ID that conforms to legitimate or prescribed conditions is received among the media IDs. The content use management system according to claim 1, wherein the content use management system is a configuration. The playback device
As the identification information,
(A) Volume ID set for each disc title;
(B) a content certificate ID as identification information of the content certificate set corresponding to the disc recording content;
Obtain the volume ID or content certificate ID from the disk and send it to the authentication server,
The authentication server permits the use of the contents stored in the disk in a domain device belonging to a domain on condition that a volume ID or content certificate ID conforming to a legitimate or specified condition is received from the volume ID or content certificate ID. 2. The content usage management system according to claim 1, wherein the content usage management system is configured to provide domain usage permission information to a playback device.   The playback apparatus is configured to permit copy output of the content stored in the disc to a domain device as content that allows copying between domain devices belonging to the same domain on condition that the domain use permission information is retained. The content use management system according to claim 1. A playback device for acquiring identification information corresponding to the disc or the content stored on the disc from the disc and transmitting it to the authentication server;
A content providing server for providing download content;
An authentication server that provides the playback device with domain usage permission information that permits the use of the download content in a domain device belonging to a domain, on condition that the identification information of the identification information conforms to a legitimate or prescribed condition,
A management server that executes domain device registration processing and provides a domain device with a license including a content key to be applied to decryption of the downloaded content;
Having one or more domain devices that acquire a domain key from the management server by registration processing with the management server;
The authentication server registers a domain ID that is identification information of a domain permitted to use the download content in association with the identification information received from the playback device,
The content usage management system, wherein the management server is configured to perform the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server. The management server
7. The content usage management system according to claim 6, wherein a license including an encrypted content key obtained by encrypting a content key with a domain key set corresponding to a domain is provided to a domain device. The playback device
As the identification information, a media ID that is identification information unique to the disk is acquired from the disk and transmitted to the authentication server,
The authentication server provides the playback apparatus with domain usage permission information that permits the use of the download content in a domain device belonging to a domain on condition that a media ID that conforms to legitimate or prescribed conditions is received among the media IDs. The content use management system according to claim 6, wherein the content use management system is configured. The playback device
As the identification information,
(A) Volume ID set for each disc title;
(B) a content certificate ID as identification information of the content certificate set corresponding to the disc recording content;
Obtain the volume ID or content certificate ID from the disk and send it to the authentication server,
The authentication server permits use of the download content in a domain device belonging to a domain on condition that a volume ID or content certificate ID that conforms to a legitimate or prescribed condition is received from the volume ID or content certificate ID. 7. The content usage management system according to claim 6, wherein the content usage management system is configured to provide domain usage permission information to a playback device.   The playback device is configured to permit download processing of the download content to a domain device as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained. The content use management system according to claim 6. An information processing apparatus that executes a process of reading recorded information on a disc,
A data reading unit for reading identification information corresponding to the disc or the content stored on the disc from the disc;
A communication unit that transmits the identification information to an authentication server, and acquires domain use permission information that permits the use of disk storage content or download content in a domain device belonging to the domain from the authentication server;
A control unit that performs recording control on the domain device of the disk storage content or the download content as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained;
An information processing apparatus comprising: The information processing apparatus includes:
As the identification information,
(A) Media ID, which is disc-specific identification information,
(B) Volume ID set for each disc title;
(C) a content certificate ID as identification information of a content certificate set corresponding to the disc recording content;
The information processing apparatus according to claim 11, wherein the information processing apparatus is configured to acquire at least one of the media ID, the volume ID, and the content certificate ID from a disk and transmit the acquired ID to the authentication server. Content usage management method,
A disc playback device acquiring identification information corresponding to the disc or disc storage content from the disc and transmitting it to the authentication server;
An authentication server registers a domain ID, which is identification information of a domain permitted to use the content stored in the disc, in association with the identification information received from the playback device, and conforms to a legitimate or prescribed condition of the identification information Providing the playback device with domain usage permission information that permits the use of the content stored on the disc in the domain device belonging to the domain, on condition that the received identification information is received,
A management server performing a registration process as a domain device and providing a license including a content key to be applied to decryption of content stored in a disk to the domain device;
A domain device has a step of acquiring a domain key from the management server by a registration process to the management server;
The content usage management method, wherein the management server performs the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server. The management server
14. The content usage management method according to claim 13, wherein a license including an encrypted content key obtained by encrypting a content key with a domain key set corresponding to a domain is provided to a domain device. Content usage management method,
A disc playback device acquiring identification information corresponding to the disc or disc storage content from the disc and transmitting it to the authentication server;
The authentication server registers a domain ID that is identification information of a domain that permits use of the download content provided by the content providing server in association with the identification information received from the playback device. Providing the playback apparatus with domain usage permission information that permits the use of the download content in a domain device belonging to a domain, on condition that the identification information conforming to the prescribed conditions is received;
A management server performing registration processing as a domain device and providing a license including a content key to be applied to decrypting the downloaded content to the domain device;
A domain device has a step of acquiring a domain key from the management server by a registration process to the management server;
The content usage management method, wherein the management server performs the license providing process for a domain device belonging to a domain corresponding to a domain ID registered in the authentication server. The management server
16. The content usage management method according to claim 15, wherein a license including an encrypted content key obtained by encrypting a content key with a domain key set corresponding to a domain is provided to a domain device. An information processing method executed in an information processing apparatus,
A data reading step in which the data reading unit reads identification information corresponding to the disc or the content stored on the disc from the disc;
A communication unit that transmits the identification information to an authentication server, and obtains domain use permission information for permitting use of disk storage content or download content in a domain device belonging to the domain from the authentication server;
A control step for executing a control in which the control unit records the disc storage content or the download content in the domain device as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained; ,
An information processing method characterized by comprising: A program for executing information processing in an information processing apparatus;
A data reading step for causing the data reading unit to read identification information corresponding to the disc or the content stored on the disc from the disc;
A communication step of causing the communication unit to transmit the identification information to the authentication server, and to acquire domain use permission information for permitting the use of the disk storage content in the domain device belonging to the domain from the authentication server;
A control step for executing, in the control unit, control for recording the disc storage content or the download content in the domain device as content that is allowed to be copied between domain devices belonging to the same domain on condition that the domain use permission information is retained; ,
The program characterized by having.