KR20090103081A - Recording medium, data recording/reproducing method, and data recording/reproducing apparatus - Google Patents

Abstract

The recording medium of the present invention includes a user data area for recording data and a lead-in area located on an inner circumferential side of the user data area and a lead-out area located on an outer circumferential side, wherein the user data area includes only an authenticated user. And a plurality of security areas for recording the security information for access.

Description

RECORDING MEDIUM, DATA RECORDING / REPRODUCING METHOD, AND DATA RECORDING / REPRODUCING APPARATUS}

The present invention relates to a recording medium, a recording / reproducing method, and a recording / reproducing apparatus for recording hardware related security information.

Conventionally, data is encrypted and transmitted for security. This is implemented as a program in the process of sending and receiving data between users so that only authorized users can access the data.

However, in the case of hardware, there is no such security restriction, and in the case of an optical disc, anyone can easily read and write it. Thus, there is a problem that the disc contents are changed by an unvalidated external user even though the disc owner does not want to.

Accordingly, an object of the present invention is to solve the conventional problems as described above, and to allow only an authorized user to access an optical disc.

A recording medium according to the present invention for achieving the above object includes a user data area for recording data, a lead-in area located on the inner circumferential side of the user data area and a lead-out area located on the outer circumferential side; The user data area includes a plurality of security areas for recording security information that only authorized users have access to.

The recording medium may include a plurality of recording layers.

The recording medium may include indication information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas.

The recording medium has a logical block address of '0' at the beginning of the user data area excluding the security area.

The recording medium may be set so that security information cannot be changed.

The security information may be recorded in a table form in the security area.

The security information may include information about a start point, an identifier, and a location of the table.

The table may include information on a security method of the entire recording medium.

The security information may record the allowed users in the form of each row in the table.

A data recording method according to the present invention for achieving the above object comprises the steps of generating security information such that only an authenticated user has access to a user data area of a recording medium; And recording.

The data reproducing method according to the present invention for achieving the above object comprises the steps of decrypting the security information such that only the authorized user has access to a plurality of security areas of the user data area and only the authenticated user by decrypting the security information. Reading data in the user data area.

A data recording apparatus according to the present invention for achieving the above object is to generate security information that allows only authorized users to access the user data area of the recording medium to record the security information in a plurality of security areas of the user data area. A control unit for controlling and an optical pickup for recording data on the surface of the recording medium under the control of the control unit.

A data reproducing apparatus according to the present invention for achieving the above object is an optical pickup for reading a signal reflected from the user data area of the recording medium and a plurality of security areas of the user data area by using the signal read out from the optical pickup. The control unit may include a control unit configured to decrypt security information for accessing only the authenticated user to read only the authenticated user to read data in the user data area.

According to the recording medium, the recording / reproducing method and the apparatus according to the present invention, only an authenticated user can access the optical disk to reduce the damage caused by data loss.

1 shows a recording medium including a security area 131 according to a first embodiment of the present invention.

2 illustrates a table stored in the security area 131.

3 shows a first embodiment of an anchor table in security zone 131;

4 shows an example of data included in the anchor table in the secure area 131. FIG.

FIG. 5 illustrates another embodiment of data included in the anchor table in security area 131. FIG.

6 shows a user authentication type and C_User table 131a in security zone 131. FIG.

7 is a diagram showing a plurality of security areas included in a recording medium which is a dual layer according to the second embodiment of the present invention.

8 is a block diagram showing a block configuration of a recording / reproducing apparatus according to an embodiment of the present invention.

9 is an operation flowchart for a data recording method according to an embodiment of the present invention.

10 is a flowchart illustrating an operation of a data reproducing method according to an embodiment of the present invention.

Hereinafter, an embodiment of a recording medium, a recording / reproducing method, and an apparatus constituting the present invention will be described in detail. In adding reference numerals to the components of the following drawings, the same components are used the same reference numerals as much as possible even if they are displayed on different drawings.

The terminology used in the present invention was selected as a general term that is widely used at present, but in some cases, the term is arbitrarily selected by the applicant, and in this case, the meaning of the term is described in detail in the description of the present invention. The present invention should be understood as meanings other than terms.

The recording / reproducing apparatus of the present invention can be applied to storage media such as compact discs (CDs), digital versatile discs (DVDs), blu-ray discs (BDs), and high definition DVDs (HD-DVDs).

1 is a diagram showing a recording medium including a security area 131 according to the first embodiment of the present invention.

Referring to FIG. 1, the recording medium may include a lead-in area 110, a lead-out area 120, and a user data area 130.

The lead-in area 110 and the lead-out area 120 store various kinds of information for controlling the recording medium. The lead-in area 110 is located on the inner circumferential side of the recording medium, and the lead-out area 120 is located on the outer circumferential side of the recording medium.

The user data area 130 stores data that the user wants to record. The area surrounded by the lead-in area and lead-out area on the recording medium becomes an area in which data is actually recorded.

In an embodiment of the present invention, the user data area 130 may include a security area 131 and a user area 132.

The security area 131 is an area in which security information is recorded so that only an authenticated user has access to the user data area. The security information may be configured as a partial area of the user data area 130 except for the lead-in area 110 and the lead-out area 120. In addition, in particular, the recording medium of the present invention may include several security areas.

The user area 132 may be configured as a part of the user data area 130 except for the security area 131.

2 illustrates a table stored in the security area 131.

Referring to FIG. 2, the security area may include an anchor table, a DiscInfo table, and a C_User table. The anchor table is located at the very beginning of the first sector of the security zone, and records the position, size, and update information of each table stored in the security zone. Inside the anchor table, three rows representing each table are recorded. Next, the DiscInfo table and the C_User table are located in succession. The DiscInfo table records a disc key and parameters applied to the entire disc. The security area key and EAC are recorded in the C_User table.

FIG. 3 shows a first embodiment of an anchor table in security area 131.

According to FIG. 3, four bytes are allocated and recorded for the user ID (UID), and 16 bytes are allocated for the name. By allocating and recording 4 bytes in the secure region relative sector address, the relative sector address from the beginning of the secure region region is recorded. The offset indicates the offset from the start of the sector in question. Sequence number or segment number (SegOrSeq) indicates a sequence number if the table recorded in the security area is an anchor table or a discInfo table, and a segment number if the table is a C_User table. Size indicates the size of each table in bytes.

4 is a diagram illustrating an example of data included in the anchor table in the security area 131.

According to Fig. 4, the location of the secure area area is indicated by A in the secure area physical sector number, and the size is recorded in B in bytes. In addition, an indicator indicating whether the secure area is recorded repeatedly or continuously is recorded in C. The repetition of recording of the security zone area is to protect the security zone area containing the important information from data loss in particular. In detail, security information having the same content may be repeatedly recorded in a plurality of security areas, and in the case where the security information is a large amount, the security information may be continuously recorded in the plurality of security areas. For example, if the secure area is repeatedly recorded, it may be recorded as 00000000b and continuously recorded as 00000001b.

FIG. 5 is a diagram illustrating another embodiment of data included in the anchor table in the security area 131.

According to Fig. 5, secure area physical sector numbers are recorded in A, D, G, and J, and sizes are recorded in bytes in B, E, H, and K. One byte is allocated to C, F, I, and L, respectively, to record whether or not the security area is repeatedly recorded. FIG. 5 illustrates the location and size of a security area when there are a plurality of security areas, and each row of the table is not limited to FIG. 5.

6 is a diagram illustrating a user authentication form and a C_User table 131a in the security area 131.

The security area 131 is an area for storing security information so that only an authenticated user can access the information recorded on the recording medium. The security information stored in the security area may be set to be impossible to change. A user with special pass codes can access the security zone 131 using the DeriveKey () algorithm. In this case, since the security zone 131 exists, the portion except for the security zone 131 is set to have a logical block address (LBA) of zero. A user who is granted access to the user area 132 in the security area 131 may read and write data.

The security area 131 includes a C_User table 131a as an example of a table that stores information about a user record record. The C_User table (131a) allocates one row for each user so that the user id (uid), the user name (UserName), the security zone key used when reading another zone in the security zone, and the pass code entered by the user. Record the EAC (Entity Authentication Code) for verifying the pass code. CheckEAC () command validates the user's pass code, and if the user is verified, adds the user using the MakeEAC () command. Use the security zone key to read the Disc Key (or Full Disk Encryption Key) (FDEkey) recorded elsewhere in the security zone, and to read the user zone 132 with the Disc Key. do.

7 is a diagram illustrating a plurality of security areas included in a recording medium that is a dual layer according to the second embodiment of the present invention. In the drawing, the dual layer having two recording layers is taken as an example, but the present invention is not limited thereto.

As shown in FIG. 7, each of the recording layers may include a lead-in area 110, a lead-out area 120, a security area 131, and a user area 132, each of which is shown in FIG. 1. The corresponding component and its role are the same. The number and location of the security area 131 shown in FIG. 7 are for illustrating the present invention and can be changed as necessary.

8 is a block diagram showing a block configuration of a recording / reproducing apparatus according to an embodiment of the present invention.

According to FIG. 8, the recording / reproducing apparatus includes an optical pickup 80, a signal processing unit 81, a microcomputer 82, a servo 83, a memory 84, and a controller 85.

The optical pickup 80 includes a laser diode (LD) therein to record data on the surface of the recording medium or to read signals reflected from a plurality of security areas of the recording medium.

The signal processor 81 receives the signal read out from the optical pickup 80 to restore the desired signal value when the data is reproduced, and modulates the data to be recorded into a signal recorded on the recording medium when the data is recorded. To the optical pickup 80.

The microcomputer 82 generates a control signal for controlling tracking and focusing operations of the optical pickup 80 from the signal input through the signal processor 81.

The servo 83 controls tracking and focusing operations of the optical pickup 80 based on the control signal generated from the microcomputer 82.

The memory 84 temporarily stores management information and the like in the recording medium or performs a buffer function for temporarily storing data to be recorded and reproduced.

The controller 85 generates security information that allows only an authenticated user to access the user data area 130 of the recording medium, and controls the security information to be recorded in the plurality of security areas of the user data area 130. In addition, by using a signal read from the optical pickup 80, only the authenticated user decrypts the security information that allows only the authenticated user to access the plurality of security areas of the user data area 130. Control to read data.

The control unit 85 may control the security information to be recorded / reproduced in a plurality of security areas in a recording medium composed of a plurality of recording layers. Control information may be further recorded / reproduced indicating whether security information is recorded in the plurality of security area security area sheets or continuously.

The main control unit 90 transmits a recording / playback command to the control unit 85 of the recording / playback apparatus, and controls the entire system. The main controller 90 may be a main controller of a computer, a server, an audio device, or a video device. That is, the recording / playback apparatus may be an optical drive provided to a personal computer (PC) or the like, or may be a player recording layer (Player) not mounted on the personal computer or the like.

Therefore, the recording and reproducing apparatus according to the embodiment of the present invention can be applied to both an optical drive that is mounted and operated inside a PC or the like and a player that is used as a single product.

A data recording and reproducing method according to an embodiment of the present invention will be described with reference to FIGS. 9 and 10. However, embodiments of the present invention are not limited to FIGS. 9 and 10.

9 is a flowchart illustrating an operation of a data recording method according to an embodiment of the present invention.

According to FIG. 9, the control unit 85 controls to generate security information allowing only an authenticated user to access the user data area of the recording medium (S10). The generated security information is transmitted to the optical pickup 80 by the controller 85, and the optical pickup 80 records the security information in the plurality of security areas 131 of the user data area 130 (S20). Security information can be recorded in a plurality of security areas in a recording medium including a plurality of recording layers. In addition, indication information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas can be recorded.

10 is a flowchart illustrating an operation of a data reproducing method according to an embodiment of the present invention.

According to FIG. 10, when the signal reflected from the user data area of the recording medium is read using the optical pickup 80, security information for allowing only the authenticated user to access the plurality of security areas of the user data area by the control unit 85. To decode (S30). The security information in the plurality of security areas in the recording medium including the plurality of recording layers can be decrypted. The decrypted security information is controlled so that the authenticated user reads the data in the user area 132 (S40). Further, the indication information indicating whether the same security information is repeatedly recorded in the plurality of security areas or one piece of security information is divided and recorded in the plurality of security areas may be read.

Although the preferred embodiments of the present invention have been described above, the present invention is not limited thereto, and various modifications and changes can be made within the scope of the claims and the detailed description of the invention and the accompanying drawings, and the present invention is also provided. Naturally, it belongs to the range of.

Claims (28)

A user data area for recording data and a lead-in area located on an inner circumferential side of the user data area and a lead-out area located on an outer circumferential side; And the user data area includes a plurality of security areas for recording security information that only an authenticated user has access to. The method of claim 1, A recording medium comprising a plurality of recording layers. The method according to claim 1 or 2, And indication information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas. The method according to claim 1 or 2, And a logical block address of the beginning of the user data area excluding the security area is '0'. The method according to claim 1 or 2, And a recording medium for setting the security information to be impossible to change. The method according to claim 1 or 2, The security information, A recording medium recorded in a table form in the secure area. The method of claim 6, The security information, And a recording medium including information about a starting point, an identifier, and a position of the table. The method of claim 6, The table is, A recording medium containing information about a security method across the recording medium. The method of claim 6, A recording medium that records the allowed users in the form of each row in the table. Generating security information allowing only an authenticated user to access the user data area of the recording medium; And And recording the security information in a plurality of security areas of the user data area. The method of claim 10, A recording method for recording the security information into a plurality of security areas in a recording medium including a plurality of recording layers. The method according to claim 10 or 11, wherein And recording information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas. The method according to claim 10 or 11, wherein Recording and setting the security information to be impossible to change. The method according to claim 10 or 11, wherein And recording the security information in the form of a table in a security area. Decrypting security information such that only authorized users have access to the plurality of security areas of the user data area; And Decrypting the security information so that only authorized users read data in a user data area. The method of claim 15, A reproduction method for decrypting security information in a plurality of security areas in a recording medium including a plurality of recording layers. The method according to claim 15 or 16, And reproducing indication information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas. The method according to claim 15 or 16, And reproducing security information recorded in the form of a table in the security area. A control unit for generating security information allowing only an authenticated user to access the user data area of the recording medium and recording the security information in a plurality of security areas of the user data area; And And an optical pickup for recording data on the surface of the recording medium under the control of the controller. The method of claim 19, The control unit, And a recording device for controlling the security information to be recorded in a plurality of security areas in a recording medium including a plurality of recording layers. The method of claim 19 or 20, The control unit, And recording information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas. The method of claim 19 or 20, The control unit, And a recording device for controlling to record the security information set such that the change is impossible. The method of claim 19 or 20, The control unit, And a recording device for controlling the security information to be recorded in a table form within a security area. An optical pickup for reading out a signal reflected from the user data area of the recording medium; And a control unit for decoding only the authenticated user to access the plurality of security areas of the user data area by using the signal read out from the optical pickup, and controlling only the authenticated user to read the data in the user data area. Playing device. The method of claim 24, The control unit, And a reproduction apparatus for controlling the security information to be reproduced in a plurality of security areas in a recording medium including a plurality of recording layers. The method of claim 24 or 25, The control unit, And playback information indicating whether the same security information is repeatedly recorded in the plurality of security areas or whether one security information is divided and recorded in the plurality of security areas. The method of claim 24 or 25, The control unit, And reproducing security information set to be impossible to change. The method of claim 24 or 25, The control unit, And a reproduction apparatus for controlling the security information to be reproduced in the form of a table in the security area.