JPH07162410A - Digital information duplicator - Google Patents

Abstract

(57) [Summary] [Purpose] To provide a digital information copying apparatus which protects information against illegal acts such as illegal copying and falsification of digital information after reception. [Structure] Digital information encrypted with a common key is received via a communication control unit 2 and stored in an information storage unit 3.
The common key is stored in advance in the common key storage unit 41, and the authentication unit 43 verifies the tampering of the digital information input from the information storage unit 3 to the information protection unit 4. Based on this verification result, the decryption unit 44 causes the information protection unit 4
The digital information input to is decrypted using the common key. Further, the output information is recorded and managed by the usage status management unit 48, and when the normality of the usage status management unit 48 is determined by the control unit 49, the digital information decrypted by the copy output unit 47 is converted to the information. Duplicated output on the package media. [Effect] The rights and interests of the copyright holder and the information provider can be protected.

Description

Detailed Description of the Invention

[0001]

The present invention relates to an integrated digital communication network (ISDN) for information on copyrighted works such as music, images, paintings and books.
After receiving it as digital information through a communication line such as
The present invention relates to a digital information duplicating device that duplicates and sells a package.

[0002]

2. Description of the Related Art In recent years, digital information compression techniques for audio, moving images, still images, etc. (eg MPEG = Moving Picture I)
mage Coding Expert Group, JPEG = Joint Photogra
phic Expert Group, etc.) and the development of high-speed digital communication technology represented by ISDN, convert copyrighted works such as music, images, paintings, books, etc. into digital information, and compression-encode them for transmission using communication lines. It has become feasible.

By transmitting digital information using the above-mentioned ISDN communication line, the conventional distribution form is simplified, so that there is an advantage that various kinds of information can be economically and swiftly distributed nationwide.

Further, after receiving, the digital information is duplicated in the receiving device to be a packaged information recording medium (hereinafter referred to as a package medium) corresponding to various receiving information media such as CD-ROM, VTR, and printed matter. It is becoming possible to output and sell it by the progress of media technology and recording technology.

At this time, the information provider is notified of the number of copies, the type, etc., and a fee is paid as a consideration, thereby protecting the copyright holder and establishing a distribution / sales business through communication use of digital works. To do.

[0006]

However, as described above, when the pay work received by communication is copied and sold and the digital information sender pays a fee according to the number of copies and the type of information, Alter the information such as the copy number and type of the copyrighted work in the receiving device and notify the sender,
In addition, there is a possibility that unauthorized use or unauthorized copying will be performed by other devices than the receiving device, which may infringe the rights and profits of the copyright holder / information provider.

In view of the above problems, it is an object of the present invention to provide a digital information copying apparatus which protects information against illegal acts such as illegal copying and falsification of digital information after reception.

[0008]

In order to achieve the above object, the present invention provides a communication session key encrypted with a common key, and an information body encrypted with the communication session key.
Information storage means for storing digital information including an authenticator, common key storage means for storing the common key, and the communication session key from the digital information stored in the information storage means using the common key. Using the key decryption means for decryption, the authentication means for detecting alteration of the digital information using the common key, and the communication session key combined by the key combining means, the encrypted information body is stored. Decoding means for decoding, duplication output means for duplicating and outputting the composite information body to an information recording medium based on an output instruction, type of digital information body output by the duplication output means, number of outputs, authenticator, etc. A utilization status managing unit that records and manages output information, and a utilization status managing unit that communicates with the utilization status managing unit and records the output information when a normal response message is received. Along with the instruction, a control means for instructing the duplication output means to perform duplication output, an encryption means for enciphering the record management content of the utilization status management means, and receiving the digital information from the host device via a communication line. A digital information duplicating apparatus is proposed which comprises a communication control means for transmitting the encrypted record management content of the utilization status managing means to the host device while sending the information to the information storing means.

[0009]

According to the present invention, when the digital information with the authenticator received by the cryptographic communication in the common key cryptosystem is duplicated and output, only when the tampering of the digital information is verified by the authenticating means and it is suitable, After the decryption, the information is duplicated and output to the packaged information recording medium, the information such as the number of duplicates is encrypted, and the authenticator is added and recorded and managed by the usage status managing means. At this time, the control means determines whether or not the operating state of the utilization status management means is normal, and when the response from the utilization information management means to the control means is normal, the control means determines The usage status management means is instructed to record the output information, and the duplication output means is instructed to duplicate output. The duplication output means that has received the duplication output instruction,
The decrypted information body is copied and output to the information recording medium. This completes the duplication of the information body. Further, the recording management content of the utilization status management means is encrypted by the encryption means, and the encrypted recording management content is transmitted to the host device by the communication control means. Therefore, even if the received digital information is copied as it is and decrypted by another receiving device or the like, since the decryption key is different, the originally intended information is not restored, and an illegal copy can be prevented. Further, by recording the number of copies and the like, it becomes difficult to falsify the recorded information, and it is possible to prevent fraudulent acts at the time of package creation.

[0010]

DESCRIPTION OF THE PREFERRED EMBODIMENTS An embodiment of the present invention will be described below with reference to the drawings. FIG. 1 is a block diagram showing a digital information copying apparatus according to an embodiment of the present invention. In the figure, 1 is a digital information duplicating apparatus (hereinafter referred to as an information duplicating apparatus)
In the input interface unit 5 including a communication control unit 2 that transmits and receives digital information via a communication line, an information storage unit 3 that stores the digital information received by the communication control unit 2, an information protection unit 4, and a keyboard. Connected,
It is composed of a central control unit 6 that controls the operation of each unit.

The information protection unit 4 is hidden from an operator who operates the information duplication device 1, and a common key accumulation unit 41 for accumulating a common key unique to the information duplication device 1 and a key decryption unit for decrypting a session key. 42, an authentication unit 43 for verifying alteration of digital information, a decryption unit 44 for decrypting encrypted digital information, an expansion unit 45 for expanding the decrypted digital information by an expansion method corresponding to the compression encoding method, a trial Therefore, a trial output unit 46 for converting and outputting to analog information such as audio / video, a duplication output unit 47 for duplicating and outputting digital information on a package medium, a type and an output of the digital information output by the trial output unit 46 and the duplication output unit 47 -A usage status management unit 4 that records and manages the number of copies and authenticator information
8. A control unit 49 for instructing the usage status management unit 48 to write output information, and an encryption unit 50 for encrypting the contents of the usage status management unit 48 with an authenticator. Here, as the information storage unit 2, a general-purpose external storage device such as a magnetic disk or an optical disk is used.

Next, the operation of this embodiment will be described. The operation of receiving digital information by the information copying apparatus 1 and copying it to a package medium or outputting it for trial will be described with reference to FIGS. 2 to 4. The operator selects, via the input interface unit 5, digital information for which a copy or trial output request is desired (S1). As a result, the selected information is received from the information distribution center or the like via the communication control unit 2, the received digital information is temporarily stored in the information storage unit 3, and the information is transferred from the information storage unit 3. It is transferred to the protection unit 4 (S2).

FIG. 3 shows a form of digital information received via a communication line. In FIG. 3, Ka is a common key according to the common key cryptosystem, which is shared between the information distribution center and the common key storage unit 41 of the information copying apparatus 1. Also, Ks
Is a communication session key used when communicating each digital information and title information, and Na is an authenticator.

The digital information and the title information are encrypted with the communication session key Ks, the communication session key Ks is encrypted with the common key Ka (Ka (Ks)), and further converted into digital information and title information. On the other hand, the authenticator Na is added. The authenticator Na is, for example, MA
It is calculated and added at the information distribution center by using the common key Ka by a data tampering detection authenticator creating method such as C (see IS09977 for details). The information storage unit 3 can simultaneously store a plurality of digital information encrypted with different communication session keys Ks.

The digital information transferred to the information protection unit 4 has an authenticator created by the same procedure as that created by the authentication unit 43 at the information transfer center, and it is verified whether or not it matches the authenticator in the received information. (S3). If the two authenticators Na do not match, it is determined that the digital information has been tampered with, and the subsequent use is prohibited (S4). When the verification of the authenticator Na is passed, the key decryption unit 42 decrypts the session key Ks encrypted using the common key Ka extracted from the common key storage unit 41 (S5), and then the decryption unit 44. , Session key K
The digital information body and the title information are decoded using s (S6).

Next, the decompression unit 45 decompresses the information by a decompression method corresponding to the digital information compression method at the information delivery center (S7). The information compression / expansion referred to here is, for example, encoding (compression), decoding (expansion), etc. in the international standard accumulated moving image / audio accumulation encoding method MPEG.

Before the output of the expanded digital information is duplicated, the control unit 49 writes the output information in the utilization status management unit 48. At that time, a specific signal is transmitted from the control unit 49 to the usage status management unit 48, and the usage status management unit 4
The specific response from 8 is received (S8), and the normality of the utilization status management unit 48 is determined (S9).

The signal transmission / reception procedure between the control unit 49 and the utilization status management unit 48 may be appropriately defined in the apparatus. For example, a random number is transmitted from the control unit 49, the use state management unit 48 encrypts the random number with the common key Ka, and the control unit 49 responds. As a result, the control unit 49 compares the result of decoding the received data with the random number transmitted from the control unit 49 to the usage status management unit 48, and uses the usage status management unit 48.
The normality of can be determined.

As a result of this judgment, if the utilization status management unit 4
8 is abnormal, for example, when it is determined that the usage status management unit 48 is not operating normally due to no response, error in response information, etc., the control unit 49 uses the subsequent copy output and the like. Are prohibited (S10).

Further, the control unit 49 and the utilization status management unit 4
When the communication of 8 is normally completed, it is determined whether the input request is a duplicate output request (S11), and the subsequent processing is different depending on whether the request is a duplicate output or a trial output.
First, when a copy output request is made, the control unit 4
According to the instruction of 9, the copy output information encrypted by the encryption unit 50 is recorded in the usage status management unit 48 (S12). As shown in FIG. 4, the contents of the copy output information are the cumulative number of copies of each title of the information to be copied and output, the copy date and time, and the tampering prevention authenticator.

Then, the control section 49 instructs the copy output section 47 to output a copy, and the copy output section 47 creates and outputs a copy of the information on the package medium according to the information medium (S13). For example, in the case of music information, it is recorded on a CD-ROM, and in the case of image information, it is recorded on a video tape and output.

On the other hand, when the trial output request is made, the trial output information encrypted by the encryption unit 50 is recorded in the usage status management unit 48 according to the instruction of the control unit 49 (S14). . The contents of the trial output information at this time are the cumulative trial number for each title to be trial-outputted, the trial date and time, and the tampering prevention authenticator. The authenticator may be given separately for each of the duplicate output information and the trial output information,
Alternatively, it may be given to the result of combining both. In the example of FIG. 4, both are given collectively.

Thereafter, the control section 49 instructs the trial output section 46 to perform a trial output, and the trial output section 46 outputs a voice (music information etc.) and a display output (video, character information etc.) according to the information medium. Information is output in a transient information format other than the package medium output (S15).

After the information distribution center accesses the information duplication device 1 at regular intervals and uploads the contents of the usage status information such as the duplicate output information and the trial output information recorded in the above procedure to the usage status management unit 48. , The recorded contents of the utilization status management unit 48 are erased. The information distribution center decrypts the usage status information with the common key Ka and checks the authenticator. The check of the authenticator creates the authenticator by the same procedure as that created in the information copying apparatus 1, and verifies whether or not it matches the authenticator in the usage status information. As a result of this verification, if the two authenticators do not match, it is determined that the usage status information has been tampered with, and measures such as limiting the subsequent reception of information to the information duplication device 1 of the transmission source are taken. be able to.

In addition, the information delivery center collects an information fee according to the title type and the number of copies of the copyrighted work copied and output by each information copying apparatus 1. The trial output can be used as marketing research information, but it is up to the service provider to collect the trial price.

In the above-described embodiment, the information sent from the information delivery center to the information copying apparatus 1 is compressed, but the information is not limited to this and may be uncompressed information. However, it goes without saying that when transmitting uncompressed information, the communication time becomes long and the communication efficiency decreases.

[0027]

As described above, according to the present invention, when the digital information with the authenticator received by the encrypted communication using the common key cryptosystem is verified by the authenticator in the authenticating unit at the time of duplication output, Only the information is decrypted and then copied and output to the package medium. Furthermore, since the information such as the number of copies is encrypted and an authenticator is added for management, the received digital information can be copied as it is. Even if it is decrypted by the receiving device or the like, since the decryption key is different, the originally intended information is not restored, and an illegal copy can be prevented. Also,
When recording the number of copies, etc., since the information is encrypted and the authenticator is added, it is difficult to falsify the recorded information, and it is possible to prevent illegal acts at the time of package creation. Further, when the control means and the usage status management means communicate with each other at the time of duplication output and the usage status management means is not operating normally, subsequent duplication output and the like becomes impossible, and information to the usage status management means becomes unavailable. The record management of can be strengthened. As a result, when the paid work received by communication is copied and sold, and the number of copies and the charge according to the type of information are paid to the digital information sender, the number and type of copies of the work in the receiving device. Since it is possible to falsify the information in the above and notify the sender, or to prevent unauthorized use or unauthorized copying on other devices other than the receiving device, the rights and benefits of the copyright holder / information provider. Can be protected.

[Brief description of drawings]

FIG. 1 is a block diagram showing a digital information copying apparatus according to an embodiment of the present invention.

FIG. 2 is a flowchart illustrating an information duplication output operation procedure according to an embodiment.

FIG. 3 is a diagram showing a form at the time of receiving digital information in one embodiment.

FIG. 4 is a diagram showing a record management content of a usage management unit in one embodiment.

[Explanation of symbols]

1 ... Communication control unit, 2 ... Information storage unit, 4 ... Information protection unit, 4
1 ... Common key storage unit, 42 ... Key decryption unit, 43 ... Authentication unit, 4
4 ... Decoding unit, 45 ... Decompression unit, 46 ... Trial output unit, 47 ...
Copy output unit, 48 ... Utilization management unit, 49 ... Control unit, 4
0 ... Encryption unit, 5 ... Input interface unit, 6 ... Central control unit.

─────────────────────────────────────────────────── ─── Continuation of the front page (51) Int.Cl. ⁶ Identification code Internal reference number FI Technical indication location G09C 1/00 9364-5L H04N 5/76 E 7734-5C 5/91

Claims (1)

[Claims] 1. A communication session key encrypted with a common key, and an information body encrypted with a communication session key,
An information storage unit that stores digital information including an authenticator, a common key storage unit that stores the common key, and the communication session key from the digital information stored in the information storage unit using the common key. A key decryption unit for decryption, an authentication unit for detecting tampering of the digital information by using the common key, and a communication session key combined by the key combination unit, and the encrypted information main body. Decoding means for decoding, duplication output means for duplicating and outputting the composite information body to an information recording medium based on an output instruction, type of digital information body output by the duplication output means, number of outputs, authenticator, etc. A usage status management unit for recording and managing output information, and a usage status management unit for communicating the usage status management unit and recording the output information when a normal response message is received. Control means for instructing the copy output means to the copy output means, encryption means for encrypting the record management content of the usage status management means, and receiving the digital information from the host device via a communication line. And a communication control means for transmitting the encrypted record management content of the use status management means to the upper-level device while transmitting the information to the information storage means.