WO2000039800A1

WO2000039800A1 - Information processing device and method, and program storage medium

Info

Publication number: WO2000039800A1
Application number: PCT/JP1999/007302
Authority: WO
Inventors: Mitsuru Tanabe; Itaru Kawakami; Ryuji Ishiguro; Yuichi Ezura
Original assignee: Sony Corporation
Priority date: 1998-12-25
Filing date: 1999-12-24
Publication date: 2000-07-06
Also published as: JP4568933B2; CN1144212C; JP2000305854A; AU1801300A; CN1298537A

Abstract

A content database (114) contains identification information for identifying a content and time information on the time when the content is copied according to the identification information. An audio recording program (113) acquires the identification information on the content to be copied and copies the content according to the acquired identification information and time information stored in the content database (114). As a result, without greatly impairing the user's interests, a mass of copies are substantially inhibited.

Description

Description ^: Information processing apparatus and method, and program storage medium

TECHNICAL FIELD The present invention relates to an information processing apparatus and method, and a program storage medium, and more particularly to, for example, an information processing apparatus and method capable of appropriately restricting content duplication, and a program storage medium.

BACKGROUND ART As a method of restricting the copying of AV content (for example, music or images) for which copyright is set, SCS (Serial Copy Management System), CGS (Copy Generation Management System) and the like have been proposed.

In these systems, as shown in Fig. 1, it is possible to copy (copy) the copyrighted content A1 (first generation) and obtain content A2 (second generation). However, content A 2 (2nd generation) itself cannot be duplicated further to obtain content A 3 (3rd generation). DISCLOSURE OF THE INVENTION However, in this case, as shown in FIG. 1, by repeating the duplication of the content A1, a plurality of second-generation contents A2 can be obtained, and the copyright of the content A1 is sufficiently protected. There were issues that were not addressed.

Therefore, as a method that allows the content A1 to be copied only once, UCS (Uni Copy System) has been proposed, but in this case, the user is required to be able to copy the content A1 only once. However, there was a problem that it could only be duplicated, causing disadvantages to users. The present invention has been made in view of such a situation, and it is possible to substantially prohibit a large number of copies without significantly impairing the interests of a user.

According to the present invention, identification information for identifying content and time information when the content is copied are stored corresponding to the identification information, identification information of the content to be copied is acquired, and the acquired identification information is acquired. That is, the content is duplicated in accordance with the stored time information. That is, the information processing apparatus according to the present invention provides: A storage unit for storing the time information, an obtaining unit for obtaining the identification information of the content to be copied, the identification information obtained by the obtaining unit, and the time information stored in the storage unit. And copying means for copying the content. Also, the information processing method according to the present invention includes: a storage step of storing identification information for identifying the content, time information corresponding to the identification information when the content was copied, and identifying the content to be copied. It is characterized by including an acquisition step of acquiring information, a duplication step of duplicating content corresponding to the identification information acquired in the acquisition step, and the time information stored in the storage step.

Further, the program of the program storage medium according to the present invention comprises: identification information for identifying content; a storage step for storing time information when the content is duplicated, corresponding to the identification information; and a content to be duplicated. And a duplication step of duplicating the content corresponding to the identification information acquired in the acquisition step and the time information stored in the storage step. .

BRIEF DESCRIPTION OF THE DRAWINGS FIG. 1 is a diagram for explaining SCMs and CGMs. FIG. 2 is a diagram showing an embodiment of the voice data overnight management system according to the present invention.

FIG. 3 is a diagram for explaining the configuration of the personal convenience in the above-mentioned voice data management system.

FIG. 4 is a diagram for explaining the configuration of a portable device in the above-mentioned audio data management system.

FIG. 5 is a block diagram illustrating the functional configuration of the personal computer. It is a lock figure.

FIG. 6 is a diagram illustrating an example of a window displayed on a display by a recording program in the personal computer. FIG. 7 is a flowchart for explaining processing when copying from a compact disk to an HDD in the personal computer.

FIG. 8 is a flowchart for explaining the deadline database check processing in step S12 in the flowchart shown in FIG. FIG. 9 is a diagram illustrating an example of the term database.

FIG. 10 is a diagram illustrating a watermark.

FIG. 11 is a diagram showing an example of a music database.

FIGS. 12A, 12B and 12C are flowcharts illustrating the operation of moving data from the HDD to the portable device. FIG. 13 is a flowchart for explaining the check processing such as the reproduction condition of the selected music piece in step S55 in the flowchart shown in FIG. 12A.

FIG. 14 is a diagram for explaining playback conditions managed by the portable device 6.

FIG. 15 is a flowchart for explaining the details of the format conversion processing in step S58 in the flowchart shown in FIG. 12A.

FIG. 16A, FIG. 16B, and FIG. 16C are flowcharts illustrating the operation when data is copied from the HDD 21 to the portable device 6.

Figure 17 shows a case where data is transferred from a portable device to the HDD. 6 is a flowchart for explaining the operation in the case of FIG.

FIG. 18 is a flowchart for explaining the operation when data is copied from the portable device to the HDD.

FIG. 19 is a flowchart for explaining a process when data is copied from the EMD server to the HDD.

FIG. 20 is a flowchart illustrating details of the accounting-related processing in step S204 in the flowchart shown in FIG. FIG. 21 is a diagram for explaining a charging log.

FIG. 22A and FIG. 22B are flow charts for explaining processing when data is copied from the IEC 60958 terminal of the personal computer to the HDD.

FIGS. 23A and 23B are flow charts for explaining the operation when data is output from the HDD to the IEC 60958 terminal.

FIG. 24 is a flowchart for explaining a check process such as a reproduction condition in step S275 in the flowchart shown in FIG. 23A.

FIG. 25A and FIG. 25B are flowcharts for explaining the operation when data is output from the HDD via the portable device. FIG. 26 is a diagram for explaining the function of the nonvolatile memory provided in the adapter of the personal computer.

FIG. 27 is a flowchart illustrating the operation of the adapter. FIG. 28 is a diagram showing an internal configuration of the adapter.

FIG. 29A and FIG. 29B are diagrams showing an example of the internal configuration of the nonvolatile memory.

FIG. 30 is a diagram showing an example of the internal configuration of the nonvolatile memory. BEST MODE FOR CARRYING OUT THE INVENTION Hereinafter, the best mode for carrying out the present invention will be described in detail with reference to the drawings.

FIG. 2 is a diagram showing an embodiment of the audio data management system according to the present invention. The personal computer 1 is connected to a network 2 composed of a local area network or an internet. The personal computer 1 is an EMD (Elecrical

Music Distribution) The data (hereinafter, referred to as contents) of music received from the servers 4_1 to 4-3 or read from a CD (Compact Disc) described later is subjected to a predetermined compression method (for example, ATRAC 3 (Trademark)) and encrypted with an encryption method such as DES (Data Encryption Standard) and recorded.

The personal computer 1 records the usage conditions indicating the usage conditions of the content in correspondence with the content that has been encrypted and recorded. The usage condition data can be used, for example, in a content corresponding to the usage conditions in three portable devices (also called PDs) 6-1 to 6-3 simultaneously. , copy

(Even if the content is stored in the portable device 6-1 to 6-3, the content recorded in the personal computer 1 can be used. The content is stored in the portable device 6-1 to 6_3. The number of times you can do this may be limited, in which case the number will not increase. Move to the computer (the content recorded on the personal computer 1 becomes unavailable after storing the content on the portable devices 6-1 to 6-3). Details of the usage conditions will be described later.

The personal computer 1 connects the encrypted recorded content together with data related to the content (for example, a song title or playback conditions) via a USB (Universal Sirial Bus) cable 7-1. In addition to storing the contents in the stored portable device 6-1 and updating the contents of the usage conditions corresponding to the stored contents in response to storing the stored contents in the stored portable device 6-1 (hereinafter referred to as “ Below, referred to as checkout). More specifically, when the user checks out, the number of times that the personal computer 1 can check-out the data of the usage conditions corresponding to the content is reduced by one. If the number of checkouts is 0, the corresponding content cannot be checked out.

The personal computer 1 stores the encrypted and recorded content together with the data related to the content in the connected portable device 6-2 via the USB cable 7-2. The portable computer 6-2 updates the usage condition data corresponding to the stored content in accordance with the stored content. The personal computer 1 associates the encrypted and recorded content with the content. At the same time, the stored content is stored in the portable device 6-3 via the USB cable 7-3, and the stored content is stored in the portable device 6-3. Update the corresponding usage condition data. In addition, the personal computer 1 transmits the contents that the personal computer 1 has picked up to the connected portable device 6-1 via the USB cable 7-1, and the portable device 6- 1 (or make it unusable) and update the usage condition data corresponding to the deleted content (hereinafter referred to as check-in). More specifically, when check-in is performed, the number of times that the personal computer 1 can check data of the usage condition of the corresponding content, which is recorded, is increased by one.

The personal computer 1 causes the portable device 6-2 connected via the USB cable 7-2 to delete the content checked out by the personal computer 1 to the portable device 6-2 ( Otherwise, the data of the use condition corresponding to the deleted content is updated. The personal computer 1 causes the connected portable device 6-3 to delete the content checked out by the personal computer 1 via the USB cable 7-3 to the portable device 6-3 ( Or, the data of the use condition corresponding to the deleted content is updated.

The personal computer 1 cannot check in the content checked out by the other personal computer (not shown) to the device 6-1. The personal computer 1 cannot check in the content checked by another personal computer to the portable device 6-2. The personal computer 1 cannot check in the content checked out by another personal computer to the portable device 6_3. When the personal computer 1 starts to acquire contents from the EMD servers 411 to 4-3, the EMD registration server 3 responds to the request from the personal computer 1 via the network 2, A program for transmitting an authentication key required for mutual authentication between the personal computer 1 and the EMD servers 4-1 to 4-1-3 to the personal computer 1 and connecting to the EMD servers 4-1 to 4-2. To the personal computer 1.

The EMD server 4-1 responds to the request of the personal computer 1 and sends the content to the personal convenience server 1 via the network 2 together with the data relating to the content (for example, a song title or playback restriction). Supply. The EMD server 412 supplies the content to the personal computer 1 via the network 2 together with the data related to the content in response to the request from the personal computer 1. The EMD server 4-3 supplies the content to the personal computer 1 via the network 2 along with the data related to the content in response to the request of the personal computer 1.

The content supplied by each of the EMD servers 4-1 to 4-3 is compressed by the same or different compression method. The content supplied by each of the EMD servers 41 to 4-3 is encrypted by the same or different encryption method.

The WWW (World Wide Web) server 5-1 responds to the request of the personal computer 1 by using a CD that has read the content via the network 2 (for example, a CD album name or CD sales). (E.g. company), and data corresponding to content read from CDs (eg For example, the name of a song or the name of a composer) is supplied to the personal computer 1. In response to the request from the personal computer 1, the WWW server 5-2 supplies the personal computer 1 with the CD from which the content has been read and the data corresponding to the content read from the CD via the network 2.

The broadcast device 6-1 stores the content supplied from the personal computer 1 (ie, the checked-out content) together with the content-related data (for example, a song name or playback restriction). I do. The portable device 6-1 plays the stored content based on the data related to the content and outputs the content to a headphone (not shown).

For example, when an attempt is made to exceed the number of playbacks stored as playback restrictions stored as content-related playback, the portable device 6-1 stops playback of the corresponding content. When attempting to play back after the playback time limit as a playback limit stored as data related to the content, the portable device 6-1 stops playing the corresponding content.

The user removes the portable device 6-1 that stores the content from the personal computer 1, carries it around, plays back the stored content, and listens to music corresponding to the content on a headphone or the like. be able to.

The portable device 6-2 stores the contents supplied from the personal computer 1 together with the contents related to the contents. The portable device 6-2 reproduces the stored content based on the data related to the content, and a headphone (not shown). Output to ON etc. The user can remove the portable device 6-2 storing the content from the personal computer 1, carry it around, play back the stored content, and listen to music corresponding to the content on a headphone or the like. it can.

The portable device 6-3 stores the content supplied from the personal computer 1 together with the content related to the content. The portable device 6-3 reproduces the stored content based on the data related to the content and outputs the content to a headphone (not shown). The user removes the portable device 6-3 storing the content from the personal computer 1, carries it around, plays back the stored content, and plays music corresponding to the content using a headphone or the like. You can listen.

Hereinafter, when there is no need to individually distinguish the portable devices 6-1 to 6-3, they are simply referred to as portable devices 6.

FIG. 3 is a diagram illustrating the configuration of the personal computer 1. The CPU (Central Processing Unit) 11 actually executes various application programs (details will be described later) and OS (Operating System). A ROM (Read-only Memory) 12 generally stores a program used by the CPU 11 and a basically fixed data of calculation parameters. A RAM (Random-Access Memory) 13 stores programs used in the execution of the CPU 11 and parameters that change as appropriate in the execution. These are interconnected by a host bus 14 composed of a CPU bus and the like.

The host bus 14 is connected to a PCI (Peripheral Component Interconnect / Interface) Connected to an external bus 16 such as a bus.

The keyboard 18 is operated by the user when inputting various commands to the CPU 11. The mouse 19 is operated by the user when pointing or selecting a point on the screen of the display 20. The display 20 is composed of a liquid crystal display device or a CRT (Cathode Ray Tube), and displays various information in text or images. An HDD (Hard Disk Drive) 21 drives a hard disk and records or reproduces a program or information executed by the CPU 11 on the hard disk.

The drive 22 reads out data or programs recorded on the mounted magnetic disk 41, optical disk 42 (including CD), magneto-optical disk 43, or semiconductor memory 44, and reads the data or program. It supplies the RAM 13 connected via the interface 17, the external bus 16, the bridge 15, and the host bus 14.

The portable device 6-1 is connected to the USB port 23-1 via the USB cable 7-1. The USB port 23-1 is connected to the data supplied from the HDD 21, CPU 11, or RAM 13 via the interface 17, external bus 16, bridge 15, or host bus 14. Output the evening (including, for example, content or the command of the portable device 6-1) to the portable device 6-1.

A USB device 6-2 is connected to the USB port 23-2 via a USB cable 7-2. USB ports 23-2 are interface 17, external bus 16, bridge 15, or host Outputs data (including, for example, contents or commands of the portable device 612) supplied from the HDD 21, the CPU 11, or the RAM 13 to the portable device 6-2 via the bus 14. .

A USB device 6-3 is connected to the USB port 23-3 via a USB cable 7-3. USB port 23-3 is supplied from HDD 21, CPU 11 or RAM 13 via interface 17, external bus 16, bridge 15 or host bus 14. Output data (eg, including content or commands for portable device 6-3) to portable device 6-3.

The IC (International Electrotechnical Commission) 6 0 9 5 The audio input / output interface 24 with 8 terminals performs digital audio input / output or analog audio input / output interface processing. Based on the audio signal supplied from the input / output interface 24, a predetermined audio corresponding to the content is output.

The keyboard 18 to the voice input / output interface 24 are connected to the interface 17, and the interface 17 is connected to the external bus 16, the bridge 15, and the host bus 14. Connected to CPU11.

The communication unit 25 is connected to the network 2 and converts data (for example, a registration request or a content transmission request) supplied from the CPU 11 or the HDD 21 into a packet of a predetermined format. Stored and transmitted via the network 2 and stored in the packet received via the network 2 (for example, an authentication key or Content, etc.) to CPU 11, RAM 13 or HDD 21.

The CPU 32 of the adapter 26 integrally formed as a semiconductor IC and attached to the personal computer 1 is connected to the CPU 11 of the personal computer 1 via the external bus 16, the bridge 15, and the host bus 14. Cooperates with to execute various processes. The RAM 33 stores a data program necessary for the CPU 32 to execute various processes. The nonvolatile memory 34 stores data that needs to be retained even after the power of the personal computer 1 is turned off. The ROM 36 stores a program for decrypting an encrypted program when the program is transferred from the personal computer 1. The RTC (Real Time Clock) 35 performs a timekeeping operation and provides time information.

The communication unit 25 and the adapter 26 are connected to the CPU 11 via the external bus 16, the bridge 15, and the host bus 14.

Hereinafter, when it is not necessary to individually distinguish the USB ports 23-1 to 23-3, they are simply referred to as the USB ports 23. Hereinafter, the USB cable 7-1 to 7-3 will be simply referred to as the USB cable 7 when there is no need to individually distinguish them.

Next, the configuration of the portable device 6 will be described with reference to FIG. The power supply circuit 52 drives the entire portable device 6 by converting a power supply voltage supplied from the dry battery 51 into internal power of a predetermined voltage and supplying the internal power to the CPU 53 to the display unit 67.

When the USB controller 57 is connected to the personal computer 1 via the USB connector 56 and the USB cable 7, Transfers content transferred from personal computer 1 to internal bus

It is supplied to the CPU 53 via 58.

The content is composed of 64 bytes of data per packet and is transferred from the personal computer 1 at a transfer rate of 12 Mbit / sec.

The content transferred to the portable device 6 is composed of header and audio data (data corresponding to the audio signal, which is the substance of the content), and the header contains the file name, header size, and content. Key, file size, codec ID, file information, etc. are also stored, as well as playback restriction data necessary for playback restriction processing, start date and time, end date and time, number of times, and number of times of playback. The audio data is data corresponding to an audio signal of a predetermined music piece, which is encoded and encoded by an encoding method such as ATRAC3.

The header size indicates the length of the header data (for example, 33 bytes, etc.), and the file size indicates the length of the audio data (for example, 33, 636, 138 bytes, etc.).

The content key is a key for decrypting the encrypted audio data, and is encrypted based on a session key (temporary key) generated by the mutual authentication process between the personal computer 1 and the portable device 6. In this state, the data is transmitted from the personal computer 1 to the portable device 6.

When the portable device 6 is connected to the USB port 23 of the personal computer 1 via the USB cable 7, the portable device 6 and the personal computer 1 execute a mutual authentication process. I do. This mutual authentication process is, for example, a challenge-response authentication process. By the way, the DSP 59 of the portable device 6 executes a decryption (decryption) process when performing the challenge response type authentication process.

The challenge-response method is, for example, a value (challenge) generated by the personal device 1 using a secret key shared by the portable device 6 with the personal device 1. (Response). In the challenge-response mutual authentication process, the value generated by the personal computer 1 changes every time the authentication process is performed.For example, the value generated using the secret key output from the portable device 6 is used. Even if the value is read out and the system is subjected to a so-called spoofing attack, the personal computer 1 can detect the fraud in the following mutual authentication processing because the value used for the mutual authentication is different.

The codec ID is an ID corresponding to the audio decoding coding system. For example, the codec ID “1” corresponds to ATRAC3, and the codec ID “0” is MP3. (MPEG (Moving Picture Experts Group) Audio Layer-3).

The file name is a data file obtained by converting a content file (described later) recorded by the personal computer 1 corresponding to the content into an ASCII (Amencan National Standard Code for Information Interchange) code. This is data obtained by converting the song title, artist name, lyricist name, or composer name, etc., corresponding to the content into ASCII code.

The playback restriction data indicates the period during which the content can be played (ie, This is a short time that indicates whether the start date and time or the end date and time or the number of times limit (the limit of the number of times of reproduction) is set. During the playback limit, "1" is assigned when the number of times limit is set, and "2" is assigned when the period during which playback is possible is set. If no period is set (so-called purchase), "0" is assigned.

The start date and time and the end date and time are data indicating the range of the reproducible period when the reproduction restriction data is "2". For example, if the start date and time is "0 0040 F" and the end date and time is "000070 F", the corresponding content can be played from April 15, 2000 to July 15, 2000. It is.

Similarly, when the playback limit data is "1" or "2", the count limit is the preset number of reproducible times corresponding to the content. The count indicates the number of times the content has been played, which is updated by the CPU 53 when the process of playing the content is executed. For example, when the number of times limit is "02", the number of times that the content can be played is two, and when the number of plays count is "01", the number of times that the content is played is one. is there.

For example, if the playback restriction date is "2", the start date and time is "0004 OF", the end date and time is "000070F", and the reproduction restriction date is "2", Device 6 can play the corresponding content twice, one time, from April 15, 2000 to July 15, 2000.

For example, the playback restriction data is "1" and the start date and time is "0000". 00 ", the end date and time is" 000000 ", the playback limit is" 0a ", and the playback count is" h5 ", the corresponding content is in the playable period. There is no limit, and the number of reproducible times is 10 and the number of replays is 5.

When the portable device 6 receives a content write command together with the content from the personal computer 1, the CPU that executes the main program read from the ROM 55 to the RAM 54 is executed.

53 receives the write instruction, and the flash memory controller

60 is controlled so that the content received from the personal computer 1 is written to the flash memory 61.

The flash memory 61 has a storage capacity of about 64 MB yte and stores contents (audio data). The flash memory 61 stores in advance a reproduction code for expanding audio data compressed by a predetermined compression method.

The flash memory 61 can be detachably attached to the portable device 6.

When a playback command corresponding to a user's pressing operation of a play / stop button (not shown) is supplied to the CPU 53 via the operation key controller 62, the CPU 53 sends the flash memory controller 60 to the flash memory 61. Then, the playback code and the audio data are read out and transferred to the DSP 59.

The DSP 59 detects errors in the audio data based on the reproduction code transferred from the flash memory 61 using the CRC (Cyclic Redundancy Check) method, and then generates and reproduces the data (Figure 4). In the figure, D 1 is supplied to the digital / analog conversion circuit 63. The DSP 59 is integrally formed with a transmitting circuit (not shown) provided inside, and reproduces audio data based on a master clock MC LK from a transmitter 59 A made of an external crystal, From the master clock MCLK, the master clock MCLK, the bit clock BCLK of a predetermined frequency generated by the internal oscillation circuit based on the master clock MCLK, and the L-channel clock LCLK and R-channel clock RCLK in frame units Is supplied to the digital-to-analog conversion circuit 63.

The DSP 59 supplies the above operation clock to the digital-to-analog conversion circuit 63 according to the reproduction code when reproducing the audio data, and according to the reproduction code when not reproducing the audio data. The supply of the operation clock is stopped, and the digital-to-analog conversion circuit 63 is stopped to reduce the power consumption of the portable device 6 as a whole.

Similarly, the CPU 53 and the USB controller 57 are also provided with a crystal oscillator 53 A or 57 A externally, respectively, and based on the master clock MC LK supplied from the oscillator 53 A or 57 A, respectively. Execute the process.

With this configuration, the portable device 6 does not need a clock generation module for supplying a clock to each circuit block such as the CPU 53, the DSP 59, and the USB controller 57, and the circuit configuration is reduced. It can be simplified and downsized.

The digital-to-analog conversion circuit 63 converts the reproduced audio data into an analog audio signal and supplies the analog audio signal to the amplifier circuit 64. The amplification circuit 64 amplifies the audio signal and supplies the audio signal to a headphone (not shown) via the headphone jack 65. As described above, when the play / stop button (not shown) is pressed, the portable device 6 reproduces the audio data stored in the flash memory 61 based on the control of the CPU 53, Stops playing audio data when the play / stop button is pressed.

When the play / stop button is pressed again after the stop, the portable device 6 restarts the reproduction of the audio data from the stopped position based on the control of the CPU 53. When the play / stop button stops playback by a pressing operation and a few seconds elapse without any operation being applied, the portable device 6 automatically turns off the power and reduces power consumption. By the way, when the play / stop button is pressed after the power is turned off, the portable device 6 does not play the audio data from the position where the portable device was stopped, but plays the music from the first music.

Also, the CPU 53 of the portable device 6 controls the LCD controller 68 to display the playback mode state (for example, repeat playback, intro playback, etc.), equalizer adjustment (ie, sound) on the display 67. Information such as the adjustment of the gain corresponding to the signal frequency band), song number, playing time, playback, stop, fast forward, fast reverse, etc., volume and remaining battery 51 are displayed.

Further, the portable device 6 stores, in the EEPRQM 68, the number of contents written in the flash memory 80, the block position of the flash memory 61 in which each content is written, and various other so-called memory storage information. Stores FAT (File Alloca tion Table).

By the way, in the present embodiment, ίί 声音一夜 is 64KB yt e is treated as one block, and the block position corresponding to the content of one song is stored in the FAT.

When the FAT is stored in the flash memory 61, for example, when the content of the first song is written to the flash memory 61 under the control of the CPU 53, the block position corresponding to the content of the first song is set to FAT as the FAT. When the content of the second song is written to the flash memory 61, the block position corresponding to the content of the second song is written to the flash memory 61 (the same area as the first song) as a FAT. It is.

In this way, the FAT is rewritten each time content is written to the flash memory 61, and furthermore, the same data is double-written for reserve for data protection.

When the FAT is written to the flash memory 61, the same area of the flash memory 61 is rewritten twice in response to one content write, so that the flash memory 61 In this case, the number of rewrites specified in (1) has been reached, and the flash memory 61 cannot be rewritten. Therefore, the portable device 6 stores the FAT in the EEPROM 68 to reduce the frequency of rewriting the flash memory 61 corresponding to one content write.

By storing the FAT that is frequently rewritten in the EE PROM 68, the portable device 6 can increase the number of times that the content can be written by several tens of times, compared to storing the FAT in the flash memory 61. Can be increased. Further, since the CPU 53 causes the EPROM 68 to be written so as to add the FAT, the EEPR Reduce the frequency of rewriting the same area of the OM 68 to prevent the EEPR0M 68 from becoming unrewritable in a short period of time.

When the portable device 6 is connected to the personal computer 1 via the USB cable 7 (hereinafter, this is referred to as a USB connection), the portable device 6 receives the interrupt signal supplied from the USB controller 57 to the CPU 53 based on an interrupt signal. Recognizes that USB connection has been established.

When the portable device 6 recognizes that the USB connection has been made, the portable device 6 receives external power of a specified current value from the personal computer 1 via the USB cable 7 and controls the power supply circuit 52 so that the dry battery 51 To stop supplying power.

When the USB connection is established, the CPU 53 stops the playback processing of the audio data of the DSP 59. As a result, the CPU 53 prevents the external power supplied from the personal computer 1 from exceeding the specified current value, and performs control so that the external power having the specified current value can always be received.

As described above, when the CPU 53 is connected to the USB, the CPU 53 switches from the power supplied from the dry cell 51 to the power supplied from the personal computer 1, so that the external power from the personal computer 1 with a low unit price is used, The power consumption of the dry battery 51 having a high unit price is reduced, and thus the life of the dry battery 51 can be extended.

When external power is supplied from the personal computer 1 via the USB cable 7, the CPU 53 stops the reproduction process of the DSP 59, thereby reducing the radiation from the DSP 59, and as a result, As a result, the radiation of the entire system including the personal computer 1 is further reduced. FIG. 5 is a block diagram illustrating a configuration of functions of the personal computer 1, which is realized by executing a predetermined program of the CPU 11 or the like. The content management program 111 is an EMD selection program 131, a checkin / checkout management program 132, an encryption method conversion program 133, a compression method conversion program 134, an encryption program 135, and a usage condition conversion program 13 6. It consists of a number of programs, including a signature management program 137, an authentication program 138, a decryption program 139, a PD driver 140, a purchase driver 141, and a purchase driver 142.

The content management program 1 1 1 is described in, for example, shuffled instructions or encrypted instructions, concealing the processing contents from the outside, and making it difficult to read the processing contents (For example, even if the user directly reads the content management program 111, the user cannot identify the instruction.)

When the content management program 111 is installed in the personal computer 1, the EMD selection program 1311 is not included in the content management program 111, and is processed via the network 2 in the EMD registration process described later. Received from the EMD registration server 3. The EMD selection program 1 3 1 selects the connection with any of the EMD servers 4-1 to 4-3 and sends it to the purchase application 1 15 or the purchase driver 14 1 or 142. EMD server 411 Executes communication with any one of 1 to 4-3 (for example, downloading of content when purchasing content). Check-in / checkout management program 1 32 Quin or ticket settings, and content base 1

Based on the usage rule file 16 2—1 to 16 2 —N recorded in 14, the content stored in the content file 16 1—1 to 16 1—N can be copied to the device 6 — Check in one of 1 to 6-3 or check in the content stored in the portable device 6-1 to 6-3.

The check-in / check-out management program 13 2 uses the use condition files 16 2—1 to 16 2—N recorded in the content database 114 in response to check-in or check-out processing. Updates the usage conditions stored in.

The encryption method conversion program 1 3 3 uses the network 2 for the purchase application program 1 15 to encrypt the content received from the EMD server 4 1 1 from the EMD server 4 1 1 and the purchase driver 1 4 1 to the EMD server 4 — Content file in which the content database 1 14 records the method of encrypting the content received from 2 or the method of encrypting the content received from the EMD server 4 3 by the purchase driver 14 2 3 It is converted to the same encryption method as the content stored in 161-1-1 to 161-N.

In addition, the encryption method conversion program 13 3, when checking out the contents to the portable device 6 1-1 or 6-3, converts the content to be checked out into an encryption method that can be used by the portable device 6-1 or 6-3. Convert to

The compression method conversion program 13 4 is a method for compressing the content received from the EMD server 4-1 by the purchase application program 11 5 through the network 2, and the dryino 14 1 is a EMD for the purchase. The content compression system received from the server 4_2 or the purchase dryino, and the content compression system received from the EMD server 4-3 is recorded by the content server Content files 16 1-1 through 16 1 -N are converted to the same compression format as the content stored in them.

For example, the compression format conversion program 13 4 reads the content (uncompressed) read from the CD and supplied from the recording program 113 into the content file 1 Encode using the same encoding method as the content stored in 6 1 _ 1 to 16 1 -N.

In addition, when checking out the content to the portable device 6-1 or 6-3, the compression format conversion program 1334 converts the content to be checked out into a compression format that can be used by the portable device 6-1 or 6-3. Convert to method.

For example, the encryption program 135 reads the content (unencrypted) read from the CD and supplied from the recording program 113, for example, in a content file in which the content 114 records the content. 1 16 1-1 through 16 1-N Encrypt with the same encryption method as the content stored in N.

The usage condition conversion program 136 is used to convert the usage conditions of the content received by the purchase application program 115 from the EMD server 4-1 via the network 2 into data (a so-called Usage Rule). Data indicating the usage conditions of the content received by the purchasing driver 14 1 from the EMD server 4-1 or data indicating the usage conditions of the content received by the purchasing driver 14 2 from the EMD server 4-3. Is converted to the same format as the usage rule data stored in the usage rule files 162-1-1 through 162-N recorded in the content database 114.

Also, when checking out the content to the portable device 6-1 or 6-3, the usage condition conversion program 136 converts the usage condition data corresponding to the content to be checked out into the portable device 6-1 or 6-3. — 3 is converted into usable condition data.

Before executing the check-in or checkout process, the signature management program 13 7 uses the usage conditions stored in the usage conditions files 16 2—1 to 16 2—N recorded in the content database 114. Based on the signature (to be described later) included in the data, the falsification of the usage condition data is detected. The signature management program 1337 is stored in the use condition files 162-1-1 through 162-N recorded in the content database 114 along with the check-in or checkout processing. Update the signature included in the usage rule data in response to the update of the usage rule data.

The authentication program 13 8 handles the mutual authentication between the content management program 11 1 and the purchase application program 11 5 and the mutual authentication between the content management program 11 1 and the purchase driver 14 1. Execute. In addition, the authentication program 13 8 processes mutual authentication between the EMD server 4 11 and the purchase application program 11 5, and the mutual authentication between the EMD server 4 1 2 and the purchase driver 14 1. It stores the authentication key used in the authentication process and the cross-authentication process between the EMD server 413 and the purchase dryno ′ 142. The authentication key used by the authentication program 1338 in the mutual authentication process is not stored in the authentication program 1338 when the content management program 111 is installed on the personal computer 1 When the registration processing is normally executed by the display operation instruction program 112, it is supplied from the EMD registration server 3 and stored in the authentication program 138.

When the personal computer 1 reproduces the content stored in the content files 161-1-1 to 161-1N recorded on the content data base 114, the decryption program 1339 generates the content. Is decrypted.

The PD driver 140 is used to check out predetermined contents to the portable device 6-2, or to check in predetermined contents from the portable device 6-2, or to transfer contents to the portable device 6-2. Alternatively, a command to cause the portable device 6-2 to execute a predetermined process is supplied.

The PD driver 140 is used when checking out a predetermined content to the portable device 6-1 or checking in predetermined content from the portable device 6-1. To the content or command to cause the device driver 1 16-1 to execute the specified process.

When the PD driver 140 checks out a predetermined content to the portable device 6-3 or checks in predetermined content from the portable device 6-3, the device driver 1 16-2 stores the content in the device driver 116-2. Alternatively, supply a command to execute the specified processing to the device driver '1 16-2. The purchase driver 141 is a so-called plug-in program, which is installed together with the content management program 111, supplied from the EMD registration server 3 via the network 2, or recorded on a predetermined CD. Supplied. When the purchase driver 141 is installed in the personal computer 1, the purchase driver 141 transmits and receives data to and from the content management program 111 via an interface of a predetermined format of the content management program 111.

The purchase driver 141 requests the EMD server 4-2 to transmit predetermined content via the network 2, and receives the content from the EMD server 4-2. The purchase driver 141 executes a billing process when receiving the content from the EMD server 412.

The dryino 142 for purchase is a program that is installed together with the content management program 111, which requests transmission of predetermined content to the EMD server 4-3 via the network 2, and sends the EMD server Receive content from 4 _ 3. Further, the purchase driver 142 executes a billing process when receiving the content from the EMD server 413.

The display operation instruction program 111 is based on the display data file 181, display data file 182, image file 183 1 1 乃 183 K K, or history data 184 file based on the display. An image of a predetermined window is displayed on the screen 20, and based on an operation on the keyboard 18 or the mouse 19, the content management program 111 is instructed to execute a check-in or check-out process.

Filtering data file 18 1 The content files 16 1 -1 to 16 1 NN recorded in the HDD 114 store the data for weighting each of the contents stored in the HDD 114, and are stored in the HDD 21. I have.

The display data file 182 stores the data corresponding to the contents stored in the content files 1 6 1-1 to 16 1 -N recorded in the content database 1 14, and stores the data in the HDD. 2 Recorded in 1.

The image files 183-1 to 183-K correspond to the content files 161-1 to 161-1N recorded in the content database 114, or to the packages described later. The image to be recorded is stored in the HDD 21.

Hereinafter, when it is not necessary to individually distinguish the image files 183-1 to 183-K, they are simply referred to as image files 183.

The history data file 184 has been checked in the number of times the content stored in the content files 161-1 to 16-1N recorded on the content overnight base 114 has been checked out. The history data such as the number of times and the date is stored in HDD 21.

The display operation instruction program 111 transmits the ID of the content management program 111 stored in advance to the EMD registration server 3 via the network 2 during the registration process, It receives the authentication key and the EMD selection program 13 1 from the EMD registration server 3 and supplies the authentication key and the EMD selection program 13 1 to the content management program 1 11.

The recording program 1 1 3 displays the image of the predetermined window, Based on the operation of the keyboard 18 or the mouse 19, the data such as the recording time of the content is read from the optical disk 42 mounted on the drive 22 CD.

The recording program 113 sends the data corresponding to the CD (for example, album name) to the WWW server 5-1 or 5-2 via the network 2 based on the recording time of the content recorded on the CD. Or the name of the artist) or the transmission of data (for example, song titles) corresponding to the content recorded on the CD, and the CD from the WWW server 5-1 or 5-2. To receive data or data corresponding to the content recorded on the CD.

The recording program 113 supplies the data corresponding to the received CD or the data corresponding to the content recorded in the CD to the display operation instruction program 112.

When a recording instruction is input, the recording program 113 reads content from a CD, which is the optical disc 42 mounted on the drive 22, and outputs the content to the content management program 111. The content database 114 compresses the content compressed by a predetermined method supplied from the content management program 111 and encrypted by the predetermined method into content files 161-1-1 to 1611N. (Record on HDD 21) The content data base 1 1 4 is the content file 1 6 1-1 through 1 6 1-N of the usage conditions corresponding to the content stored in each of the content files. 6 1-1 to 16 1 -N are stored in any of the use condition files 16 2-1 to 16 2 -N corresponding to N (recorded on HDD 21). In the content database 1 14, the content file 16 1-1 to 16 1 -N or the use condition file 16 2-1 to 16 2 -N may be recorded as a record.

For example, the usage condition data corresponding to the content stored in the content file 161-1-1 is stored in the usage condition file 162-1-1. The usage rule data corresponding to the content stored in the content file 161-N is stored in the usage rule file 1621-N.

The data recorded in the use condition files 162-1-1 to 162-N correspond to the data recorded in the term database described later or the data recorded in the music database. That is, the content database 114 is configured to include a term database and a music database described later. Hereinafter, when it is not necessary to individually distinguish the content files 16 1—1 to 16 1—N, the content file is simply referred to as the content file 16 1 _c and the usage condition file 16 2—1 to 16 2 —When it is not necessary to distinguish N individually, it is simply referred to as a use condition file 16 2.

The purchase application program 115 is supplied from the EMD registration server 3 via the network 2 or recorded on a predetermined CD and supplied. The purchase application program 115 requests the EMD server 411 to transmit predetermined content via the network 2, receives the content from the EMD server 4-1, and executes the content management program 115. 1 supply to 1. Further, the purchase application program 115 executes a billing process when receiving the content from the EMD server 411. Next, the association between the data stored in the display data file 82 and the content files 161-1-1 to 161-N stored on the content server will be described.

The content stored in any one of the content files 161-1-1 to 161-1N belongs to a predetermined package. More specifically, the package is either an original package, a my select package, or a package.

The original package belongs to one or more contents, and corresponds to the classification of the contents in the EMD servers 411 to 4-3 (for example, corresponding to a so-called album) or one CD. Content belongs to one of the original packages and cannot belong to more than one original package. The original package to which the content belongs cannot be changed. The user can edit a part of the information corresponding to the original package (addition of information or change of added information).

The MySelect package contains one or more contents arbitrarily selected by the user. The user can arbitrarily edit which content belongs to the MySelect package. Content can belong to one or more MySelect packages at the same time. Content does not have to belong to any MySelect package.

The content file selected based on the content data stored in the content file 18 1 belongs to the content package. Filing data is sent from the EMD server 4-1 to 4-1-3 or from the WWW server 5-1 or 5-2. It is supplied via the work 2 or recorded on a predetermined CD. The user can edit the file stored in the file 181.

Filing data serves as a basis for selecting predetermined content or calculating a weight corresponding to content. For example, if you use Filing data corresponding to this week's J-POP (Japanese pop) best ten, personal computer 1 will be able to provide the contents of this week's Japanese pop 1st place or this week's Japanese pop 10 The content of the order can be specified.

For example, the content file is a file that has been checked out during the past month, and the content that has been checked out frequently in the past six months. To select content, or to select content that includes the word "love" in the song title.

As described above, the content of the content ring package is the content display data corresponding to the content 2 2 1 (including the content set by the user in the content display data 2 21) or the history. The selection is made in correspondence with the date of the evening, such as 1 84 and the day of the evening. FIG. 6 is a diagram for explaining a window that the recording program 113 displays on the display 20 when CD information is received from the WWW server 5_2. Based on the information on the CD received from the WWW server 5-2, the recording program 113 displays the title of the CD, for example, "asynchronized" in the field 201. Recording program 1 1 3 based on CD information received from WWW server 5 2 Displays the artist name in field 202, for example, "Quie".

Based on the information on the CD received from the WWW server 5-2, the recording program 113 displays the song title in the field 203, for example, "Heat", "Blannet", "Black", Displays the song name such as "Soul". Similarly, the recording program 113 displays the artist name, for example, "Kwai" in the field displaying the artist in the field 203.

After the recording program 113 receives the predetermined CD information, the recording program 113 stores the CD information in a predetermined directory of the HDD 21.

When a button 204 or the like is clicked to receive an instruction to acquire CD information, the recording program 113 first searches a predetermined directory of the HDD 21. When the CD information is stored in the directory, the recording program 113 displays a dialog box (not shown) to allow the user to use the CD information stored in the directory. Is selected.

When the button 2◦6 is clicked to start recording content placed in the window displayed by the recording program 1 13, the recording program 1 1 3 will start recording content from the CD stored in the drive 2 2. And supplies the content read from the CD to the content management program 111 along with the information of the CD. The compression method conversion program 13 4 of the content management program 11 1 compresses the content supplied from the recording program 11 3 by a predetermined compression method, and the encryption program 13 5 generates the compressed content. Encrypt the password. The use condition conversion program 1336 generates use condition data corresponding to the compressed and encrypted content.

The content management program 111 supplies the compressed and encrypted content together with the usage condition data to the content overnight base 114.

The content database 1 1 4 generates a content file 16 1 and a use condition file 16 2 corresponding to the content received from the content management program 1 1 1, and stores the content in the content file 16 1 At the same time, use condition data is stored in the use condition file 16 2.

When the content management program 111 stores the content and usage conditions corresponding to the content in the content overnight base 114, the CD management program 111 receives the information of the CD received from the recording program 113 and the usage conditions. The data is supplied to the display operation instruction program 1 1 2. The display operation instruction program 112 uses the data of the usage conditions and the CD information corresponding to the content stored in the content database 114 during the recording process, and displays the original package display data 201 and Generate display data for content 2 2 1

In the window displayed by the recording program 113, when the content read from the CD is recorded in the content database 114, the content read from the CD is automatically displayed on the portable device 6-1 to 6-3. Buttons 205 for setting whether or not to allow any one to check out are arranged.

For example, when button 205 is clicked, recording program 1 13 displays a pull-down menu showing a list of possible devices 6-1 through 6-3. When the user selects one of the portable devices 6-1 to 6_3 from the pull-down menu, the personal computer 1 causes the selected portable device 6-1 to 6-3 to be selected. Then automatically check out the recorded content from the CD. If the user selects "Don't check out" from the pull-down menu, Personal Consumer Night 1 will not check out when recording content from a CD.

Next, referring to the flowchart of FIG. 7, the CPU 11 executing the recording program 1 13 transfers the music data reproduced from the CD mounted on the drive 22 to the HDD 21 and copies the music data. The processing in the case of performing is described. The user operates the keyboard 18 or the mouse 19 to play music from a CD (not shown) mounted on the drive 22 to the CPU 11 via the interface 17. When a command to transfer and copy data to the HDD 21 is input, the CPU 11 proceeds to step S 11 to select a song to be copied to the display 20 via the interface 1. Display GU I (Graphical User Interface).

Specifically, for example, the CPU 11 reads the TOC (Table Of Contents) of the CD mounted on the drive 22, obtains information on the music included in the CD, and displays the information on the display 20. Alternatively, the CPU 11 reads an ISRC (International Standard Recording Code) for each music included in the CD, obtains information on the music, and displays the information on the display 20. Alternatively, the CPU 11 The user accesses the WWW server 5-1 or 5-2 via the network 2 to obtain information on the song on the CD using TOC, and displays the corresponding GUI on the display 20. The user operates the keyboard 18 or the mouse 19 using the GUI of the display 20 to select a song to be copied.

Next, in step S12, the CPU 11 transmits the term database stored in the HDD 21 (the use condition files 162-1 to 162- of the content database 114 shown in FIG. 5). Check (corresponding to N). Details of the deadline database check processing are shown in the flowchart of FIG.

In step S31, the CPU 11 cooperates with the CPU 32 of the adapter 26 to calculate the hash value of the entire expiration date base, and in step S32, calculates the calculated value and the previous value. Compare it with the saved hash.

When no data is recorded in the term database, the CPU 11 does not calculate the hash value.

That is, the HDD 21 has a time limit data base, and the music data (contents) recorded on the HDD 21 as shown in FIG. As the management information for managing the song, the ISRC of the song that has been recorded in the past and the copy date and time are stored in association with each other. In this example, the ISRC and the copy date and time of each of the three items, item 1 to item 3, are stored. As described later, the hash value of the entire expiration database based on the I SRC and the copy date and time of all the songs recorded on this expiration date base is described in step S38. It is calculated by PU32 and stored in the non-volatile memory 34. A hash value is a value obtained by applying a hash function to data. A hash function is a one-way function that generally maps variable-length long data to a fixed-length short value, and has a property that hash values do not easily collide with each other. Examples of hash functions include SHA (Secure Hash Algorithm) and MD (Message Digest) 5. In step S31, the CPU 11 calculates a hash value in the same manner as that executed by the CPU 32. Then, in step S32, the CPU 11 requests the CPU 32 to read the hash value stored in the non-volatile memory 34, and in step S31, Compare with the hash value calculated by yourself.

In step S33, the CPU 11 determines whether or not the hash value calculated in step S31 matches the previous expiration date-based hash value stored in the nonvolatile memory 34. If it is determined that they do not match, it is determined that the expiration date database has been falsified, and the CPU 11 determines in step S34, for example, that "copying cannot be performed because the expiration date database has been falsified." Is generated, output to the display 20 via the interface 17 and displayed, and thereafter, the processing is terminated. That is, in this case, the process of reproducing the music data recorded on the CD and copying it to the HDD 21 is prohibited.

If the hash value calculated in step S31 matches the previous hash value, the process proceeds to step S35, where CPU 11 is selected as the song to be copied specified in step S11. Song (selected song) Get ISRC from CD. If no IRC is recorded on the CD, the CPU 11 reads the data of the T0C of the CD and applies a hash function to the data, for example, to obtain a 58-bit data. ₍ Step S36, CPU 11 uses the I SRC (that is, the selected song) acquired in Step S35 as the deadline database (Fig. If the SRC is not registered on the expiration date base, it means that the song has not been recorded on the HDD 21 yet, so the step S 37 Then, the CPU 11 registers the ISRC of the song and the current date and time on an expiration date basis, and the CPU 11 receives the transfer from the CPU 32 as the current date and time, Use the value output by the RTC 35 of the adapter 26. Then, in step S38, the CPU 11 The data on the basis of the expiration date at that time is read and transferred to the CPU 32 of the adapter 26. The CPU 32 calculates the hash value of the transferred data and stores it in the nonvolatile memory 34. As described above, the hash value stored in this manner is used as the hash value stored previously in step S32.

Next, in step S39, the CPU 11 sets an unregistered flag indicating that the selected music is not registered on the expiration date base. This flag is used when determining whether or not the selected music piece is registered in the time limit database in step S13 of FIG. 7 described below.

If it is determined in step S36 that the ISRC of the selected song is registered in the time limit database, at least one This means that the song has been registered on the HDD 21 '. Therefore, in this case, the process proceeds to step S40, where the CPU 11 selects the selected song registered on the From the registration date and time, it is determined whether or not the current date and time (the current date and time output by the RTC 35 of the adapter 26) has passed 48 hours or more. If the current time is more than 48 hours after the registration date and time, it has been recorded at least once on the HDD 21, but since it has been more than 48 hours since then, However, even if the song is copied again, there is not much harm, and in this case, copying to the HDD 21 is permitted ₍ then, the process proceeds to step S41, where the CPU 11 The base date and time are changed from the past registration date and time to the current date and time (the date and time output by the RTC 35.) Then, the process returns to step S38, and the CPU 11 again returns to the hash value of the entire expiration date database. The CPU 32 causes the CPU 32 to calculate and store the data in the non-volatile memory 34. In step S39, an unregistered flag is set for the music.

On the other hand, in step S40, the current time is

If it is determined that the time has not passed for more than 48 hours, copying of the selected song to the HDD 21 is prohibited. So, in this case, the step

Proceeding to 542, the CPU 11 sets a registered flag corresponding to the selected song.

As described above, the flag indicating whether or not the selected music is registered in the HDD 21 is set by the deadline overnight processing.c Returning to FIG. 7, in step S13, the CPU 11 It is determined from the above-mentioned flag whether or not the selected music has been registered in the term database. If the selected song has been registered, go to step S14, The CPU 11 causes the display 20 to display a message such as, for example, “This song has not been copied since it has not been copied more than 48 hours after being copied once”. This allows the user to know why the song cannot be copied to the HDD 21.

If it is determined in step S13 that the selected song is not registered on the expiration date base, the process proceeds to step S15, in which the CPU 11 controls the drive 22 and sets the CD mounted therein. From the music. As shown in FIG. 10, a music mark code is inserted at a predetermined position in this music program. In step S16, the CPU 11 extracts the war mark code included in the music data and determines in step S17 whether the war mark code indicates that copying is prohibited. judge. If the warning mark code indicates that copying is prohibited, the process proceeds to step S 18, and the CPU 11 displays the copy on the display 20 via the interface 17, for example, “copying is prohibited”. Is displayed, and the copy process ends.

On the other hand, if it is determined in step S17 that the war mark does not indicate that copying is prohibited, the process proceeds to step S19, and the CPU 11 executes the music playback, for example, the ATR. The data is compressed by software processing using a method such as AC (Adaptive Transform Acoustic Coding) 3 (trademark). In step S20, the CPU 11 uses an encryption key that is set in advance and stored in the memory 13 to perform encryption using, for example, a DES (Data Encryption Standard) scheme or a FEAL (Fast Encryption Algorithm) scheme. The music data by the encryption method Become As the encryption key, for example, a random number generated by software, or a key generated based on a random number generated by the CPU 32 of the adapter 26 can be used. In this way, not only the personal computer 1 but also the CPU 32 of the adapter 26 attached as hardware attached to the personal computer 1 cooperate with the personal computer 1 to execute the encryption processing, so that the decryption can be performed. This makes it more difficult to perform encryption.

Next, in step S 21, the CPU 11 transfers the encrypted data to the HDD 21, and stores one file (content file).

1 6 1) Save as a file name. Alternatively, the position information of the file name (for example, the number of bytes from the beginning) may be given as a part of one file and saved. This storage processing and the above-described compression encoding processing and encryption processing may be performed separately, or may be performed simultaneously and in parallel.

Further, in step S22, the CPU 11 uses the storage key stored in the predetermined RAM 13 (which is stored so that it is difficult to read if it is read illegally). The encryption key that encrypted the music data was encrypted using the DES method, FEAL method, etc., and the data was stored on the HDD 21 based on the song data (based on the content file shown on Fig. 5). 1 62—1 to 16 2—N).

In step S23, the CPU 11 sets the information on the stored file, the encrypted encryption key, the information of the music, and the information of the music title input by the user through the GUI as a set to the HDD. 2 1 song de night Register to base. Then, in step S24, the CPU 11 causes the CPU 32 to calculate the hash value of the entire music database and store it in the nonvolatile memory 34.

In this way, for example, a song data base as shown in FIG. 11 is registered on the HDD 21. In this example, the file name of item 1 to item 3, the encrypted encryption key, song title, length, playback conditions (start date and time, end date and time, number of times limit), playback count, playback billing conditions , Copy conditions (number of times), copy number count, and copy conditions (S CMS) are recorded.

After a certain period of time, it can be copied again, so that it can be copied several times within the scope of the user's personal use. On the other hand, going beyond personal use, for example, trying to replicate in large quantities, requires enormous amounts of time, making it practically impossible. Also, for example, even if the personal computer 1 breaks down and the content recorded on the HDD 21 is deleted, after a certain period of time, the deleted content is copied again and recorded on the HDD 21 can do.

Further, for example, the contents of the time limit database recorded on the HDD 21 via the network 2 can be shared.

In the above description, the case where the date and time of copying corresponding to the ISR C is stored has been described as an example. However, if information for identifying a content or a CD is used, other information (eg, a song name, an album name) , Their combinations, etc.).

Next, referring to the flowcharts shown in FIGS. 12A, 12B, and 12C, the CPU 11 that executes the content management program 11 1 A process of moving music data from the HDD 21 to the flash memory 61 of the portable device 6 (for example, a memory stick) by the CPU 53 executing the main program will be described. In step S51, the CPU 11 calculates the hash value of the entire song data overnight, and in step S52, causes the CPU 32 to calculate the hash value the last time and stores the hash value in the nonvolatile memory 34. Compare. If the two do not match, the CPU 11 proceeds to step S53, for example, displays a message such as “the song database may have been falsified” on the display 20, and ends the process. The processing in this case is the same as the processing in steps S31 to S34 in FIG. In this case, the transfer of the music data from the HDD 21 to the portable device 6 is not executed.

Next, in step S54, the CPU 11 reads out the information of the songs registered therein from the song list formed on the HDD 21 and displays the information for the selection on the display 20. Display as GU I. The user selects a song to be moved from the HDD 21 to the portable device 6 by operating the keyboard 18 or the mouse 19 based on the GUI for this selection. Next, in step S55, the CPU 11 checks the reproduction condition, the copy condition, the reproduction charging condition, and the like of the selected music piece selected in step S54. Details of this processing will be described later with reference to the flowchart in FIG.

Next, in step S56, mutual authentication processing is performed between the CPU 11 of the personal computer 1 and the CPU 53 of the portable device 6, and a communication key is shared. For example, the flash memory 61 (or EE PROM 68) of the portable device 6 previously stores the mass key KM, and the RAM 13 of the personal computer 1 (or the predetermined memory of the HDD 21). File) pre-stores the individual key KP and ID. The CPU 53 receives the ID stored in the RAM 13 from the CPU 11 in advance, applies a hash function to the ID and the master key KM of the CPU 13 itself, and stores the ID in the RAM I 3 Generate the same key as the individual key of Personal Computer 1. In this way, a common individual key is shared by both the personal computer 1 and the portable device 6. Using this individual key, a temporary communication key can be further generated.

Alternatively, the ID and the master key KMP are stored in the RAM I 3 of the personal computer 1 in advance, and the ID of the portable device 6 and the memory key KMM are also stored in the flash memory 6 1 of the portable device 6. Is stored. Then, by transmitting each ID and the master key to each other, the other applies a hash function to the ID and the mass key transmitted from one to generate the other individual key. Then, a temporary communication key is generated from the individual key.

As an authentication method, for example, IOS (International Organization for Standardization) 9798-2 can be used.

When the mutual authentication is not correctly performed, the process is terminated. However, when the process is correctly performed, in step S57, the CPU 11 reads the file name of the selected music from the music data base, and That fa The music data of the file name (for example, encrypted in the process of step S20 in FIG. 7) is read from the HDD 21. In step S58, the CPU 11 compresses the digital music data read out in step S57 (the processing in step S19), the encryption method (the processing in step S20), the format, and the like. Of the portable device 6. Details of this conversion processing will be described later with reference to the flowchart of FIG.

In step S59, the CPU 11 encrypts the music data converted in step S58 with the communication key shared by the mutual authentication process in step S56, and connects the portable device 6 to the portable device 6 via the USB port 23. Transfer. In step S60, when receiving the transmitted music data via the USB connector 56, the CPU 53 of the portable device 6 stores the music data in the flash memory 61 as it is.

In step S61, the CPU 11 further manages the playback conditions (start date / time, end date / time, number-of-times limit, etc.) of the selected song registered in the song title by the portable device 6. Format. In step S62, the CPU 11 further converts the SCM S information in the copy condition registered in the song database of the selected song into a format managed by the portable device 6. Then, in step S63, the CPU 11 transfers the reproduction conditions converted in step S61 and the SCMS information converted in step S62 to the portable device 6. The CPU 53 of the portable device 6 stores the transferred reproduction conditions and the SCMS information in the flash memory 61. In step S64, the CPU 11 also sets the playback conditions, playback charging conditions, and copy conditions registered in the song database of the selected song in the format that the CPU 11 handles in the song database. Then, the data is transferred to the portable device 6 and stored in the flash memory 61.

In step S65, the CPU 11 reads the encrypted key of the selected song from the song database, and in step S66, stores the encrypted key in the storage device stored in the RAM I3. Decrypt with a key and encrypt with a communication key. Then, the CPU 11 transfers the encryption key encrypted with the communication key to the portable device 6.

In step S67, the CPU 53 of the portable device 6 decrypts the encryption key transferred from the personal computer 1 by using the communication key shared in the mutual authentication process, and uses its own storage key. Then, the data is encrypted and stored in the flash memory 61 in association with the stored data.

When the storage of the encryption key is completed, the CPU 53 notifies the personal computer 1 that the encryption key has been stored in step S68. Upon receiving the notification from the portable device 6, the CPU 11 of the personal computer 1 receives

Delete the music file from DD 21 and delete the element set of the song from the song database. In other words, this means that a move is performed instead of copying. Then, in step S70, the CPU 11 transfers the music data to the CPU 32 of the adapter 26, calculates the entire hash value, and stores it in the nonvolatile memory 34. Let it. This hash value is In step S52 described above, the hash value is used as the previously stored hash value.

Next, a description will be given of a process of checking the reproduction condition of the selected music piece in step S55 in FIG. 12A by the CPU 11 executing the content management program 111. In step S81, the CPU 11 reads various conditions from the music data base. In step S82, the CPU 11 determines whether the number of times of copying has exceeded the number of times of copying among the various conditions read in step S81. If the copy count has already exceeded the copy limit count, it is not possible to permit further copying, so the process proceeds to step S83, and the CPU 11 executes, for example, "The copy count has already been set to the copy limit. Message is displayed on the display 20 and the process is terminated. If it is determined in step S82 that the number of times of copying has not exceeded the number of times of copying, the process proceeds to step S84, and it is determined whether or not the current date and time is after the reproduction end date and time. As the current date and time, the one output from the RTC 35 of the adapter 26 is used. This prevents the user from intentionally correcting the current time of the personal convenience set 1 to a past value. The CPU 11 receives the current date and time from the CPU 32 and makes the determination in step S84 itself, or, in step S81, updates the reproduction condition read from the music data base. The CPU 32 is supplied to the CPU 32 at step 26 to cause the CPU 32 to execute the determination processing of step S84.

If the current date and time is past the playback end date and time, the process proceeds to step S85, and the CPU 11 deletes the selected song from the HDD 21 and sets Delete the information of the selected song from the database. In step S86, the CPU 11 causes the CPU 32 to calculate a hash value based on the song data and stores the calculated hash value in the nonvolatile memory 34. Thereafter, the process ends. Therefore, in this case, movement of music data is not performed.

If it is determined in step S84 that the current date and time does not exceed the playback end date and time, the process proceeds to step S87, and the CPU 11 sets the playback charging conditions (for example, It is determined whether or not the fee is registered during the song song. If the charging conditions for playback have been registered, the CPU 11 communicates with the portable device 6 in step S88, and determines whether the charging function exists in the portable device 6. Determine whether or not. If the portable device 6 does not have a billing function, the selected music cannot be transferred to the portable device 6, and therefore, in step S89, the CPU 11 executes, for example, “the transfer destination has a billing function. Message is displayed on the display 20, and the moving process for the music is completed.

If it is determined in step S87 that the playback charging condition is not registered, or if it is determined in step S88 that the portable device 6 has a charging function, the process proceeds to step S90. The CPU 11 determines whether or not other reproduction conditions such as the number of times of reproduction are registered for the selected music. If another playback condition has been registered, the process proceeds to step S91, and the CPU 11 determines whether or not the portable device 6 has a function to observe the playback condition. Portable device 6 observes the playback conditions If not, the CPU 11 proceeds to step S92, and the CPU 11 displays a message such as “The transfer destination device does not have a function to observe the playback condition”. 20 is displayed and the processing ends.

If it is determined in step S90 that the playback condition is not registered, or if it is determined in step S91 that the portable device 6 has a function to observe the playback condition, The check processing ends, and the process returns to step S56 in FIG. 12A.

FIG. 14 shows an example of playback conditions managed by the portable device 6 (which can be protected). In this example, the playback start date and time and the playback end date and time are registered for each song from Item 1 to Item 3, but the number of playbacks is registered only for Item 2 and for Item 1 and Item 3 not registered. Therefore, if the song of item 2 is selected, the playback condition of the number of plays can be maintained, but if the song of item 1 or item 3 is selected, the number of plays Condition cannot be observed.

Next, details of the format conversion processing in step S58 in FIG. 12A by the CPU 11 executing the content management program 11 will be described with reference to the flowchart in FIG. In step S101, the CPU 11 checks the format (reproduction conditions, use conditions, copy conditions, etc.) of the selected music piece recorded on the HDD 21. In step S102, the CPU 11 checks the conditions that can be set for the device of the other party (in this case, the portable device 6). In other words, CPU 11 is C in portable device 6. Queries the settable conditions to PU53 and obtains the answer. In step S103, the CPU 11 determines, among the format conditions registered during the song data base, the conditions that can be set for the destination device in step S102. Decide based on

In step S104, the CPU 11 determines whether there is a condition that can be set, and if there is no condition that can be set, the process proceeds to step S105, where the music data is read. Prohibit the process of moving to portable device 6. In other words, in this case, the portable device 6 cannot keep the conditions registered during the music display. Traveling in the evening is prohibited.

If it is determined in step S104 that a condition that can be set exists, the process proceeds to step S106, and the CPU 11 converts the condition into a condition of the other party's function format. Then, in step S107, the converted conditions are set in the partner device. As a result, the portable device 6 can play back the music data according to the set conditions (observing the conditions).

Next, referring to the flowcharts shown in FIGS. 16A, 16B and 16C, the CPU 11 executing the content management program 11 1 and the CPU 53 executing the main program, A process for copying music data from the HDD 21 to the portable device 6 will be described. The processing of steps S11 1 through S12 27 in Figs. 16A, 16B and 16C is performed from the HDD 21 in Figs. 12A, 12B and 12C. Steps for Moving Music Data to Portable Device 6 Steps S51 to S67 Reason. That is, also in this case, after the alteration of the song database is checked, the process of checking the reproduction condition of the selected song is performed. Furthermore, after the mutual authentication process between the portable device 6 and the personal computer 1, the music data is transferred from the HDD 21 of the personal computer 1 to the flash memory 61 of the portable device 6 and stored. Is done. Thereafter, in step S128, CPU 11 of personal computer 1 copies the song database.

—Increment the count by one. Then, in step S129, CPU 11 causes CPU 32 to calculate the hash value of the entire music database, and stores the value in nonvolatile memory 34.

Next, referring to the flowchart of FIG. 17, the music data is transferred from the portable device 6 to the HDD 21 by the CPU 11 executing the content management program 11 1 and the CPU 53 executing the main program. Will be described. In step S 161, the CPU 11 of the personal computer 1 requests the CPU 53 of the portable device 6 to read out the information of the music stored in the flash memory 61. In response to this request, the CPU 53 transmits the information of the music stored in the flash memory 61 to the personal computer 1. The CPU 11 of the personal computer 1 displays a GUI for selecting a song stored in the flash memory 61 on the display 20 based on this information. The user operates the keyboard 18 or the mouse 19 to specify a song to be moved from the portable device 6 to the HDD 21 based on the GUI. In step S 162, the CPU 11 performs a mutual authentication process with the CPU 53 and shares a communication key. This processing is similar to the processing in step S56 in FIG. 12A.

Next, in step S163, the CPU 53 reads out the encrypted music data of the selected music tune stored in the flash memory 61 and transfers it to the personal computer 1. In step S 164, the CPU 11 of the personal computer 1 saves the music data transferred from the portable device 6 as a single file with a file name and stores the music data in the HDD 21. . This can be done, for example, by giving the location information of the file name (for example, the number of bytes from the beginning) as part of one file. In step S165, the CPU 53 reads the encrypted key of the selected music stored in the flash memory 61, decrypts it with its own storage key, and further encrypts it with the communication key. After that, it is transferred to the personal computer 1. This encryption key has been stored in the flash memory 61 in the process of step S67 in FIG. 12C, for example.

In step S166, when the CPU 11 of the personal computer 1 receives the transfer of the encryption key from the portable device 6, it decrypts it with the communication key and encrypts it with its own storage key. In step S167, the CPU 11 sends the file name of the music file saved in step S164, the song name entered by the user via the GUI, and the program in step S166. Register the encrypted encryption key etc. in the song data on HDD 21. Then, in step S168, the CPU 11 calculates the hash value of the entire song database. The calculation is made by the CPU 32 and the data is stored in the nonvolatile memory 34.

In step S169, the CPU 11 of the personal computer 1 notifies the portable device 6 that the encryption key has been stored, and requests deletion of the music data of the music. When the personal computer 1 requests deletion of music data of the music, the CPU 53 deletes the music data of the music stored in the flash memory 61 in step S170.

Next, the process of copying music data from the portable device 6 to the HDD 21 by the CPU 11 executing the content management program 11 1 and the CPU 53 executing the main program will be described with reference to FIG. This will be described with reference to the flowchart of FIG. The processing from step S 18 1 to step S 188 shown in FIG. 18 corresponds to the processing from step S 16 1 to step S 16 1 in the processing for moving music data from portable device 6 to HDD 21 in FIG. This processing is similar to the processing of S168. That is, in the case of the copy process, the process is basically the same as the process of the move, except that the processes of steps S169 and S170 in FIG. 17 are omitted. Is omitted. Next, referring to the flowchart of FIG. 19, the music data transferred from the EMD server 4 by the CPU 11 executing the EMD server 4 and the content management program 11 1 is copied to the HDD 21. The following describes the processing. In step S201, the CPU 11 controls the communication unit 25 and activates the network 2 when the user instructs the access to the EMD server 4 via the keyboard 18 or the mouse 19. To the EMD server 4 via In response to this access, the EMD server 4 responds to the access by Transfers information such as the issue, song title, and information to the personal computer 1 via the network 2. When the CPU 11 of the personal computer 1 acquires this information via the communication unit 25, it displays it on the display 20 via the interface 17. The user uses the GUI displayed on the display 20 to specify a song to be copied in step S202. This designation information is transferred to the EMD server 4 via the network 2. In step S203, the CPU 11 executes a mutual authentication process with the EMD server 4 via the network 2, and shares a communication key.

The mutual authentication process performed between the personal computer 1 and the EMD server 4 can be performed using, for example, a public key and a secret key defined in IS09798-3. In this case, the personal computer 1 has its own secret key and the public key of the EMD server 4 in advance, and the EMD server 4 has its own secret key, and the mutual authentication process is performed. The public key of the personal computer 1 is transferred from the EMD server 4, or a certificate distributed in advance to the personal computer 1 is transferred from the personal computer 1 to the EMD server 4, and the certificate is transferred to the EMD server 4. The EMD server 4 may confirm and obtain the public key. Further, in step S204, the CPU 11 executes processing related to charging with the EMD server 4. The details of the charging process will be described later with reference to the flowchart of FIG.

Next, in step S205, the EMD server 4 instructs the personal computer 1 to encrypt the song specified in step S202. The encrypted music data is transferred to the personal computer 1 via the network 2. At this time, the time information is also transferred appropriately. In step S206, the CPU 11 saves the transferred music file as one file with a file name in the HDD 21. In step S207, the EMD server 4 further encrypts the encryption key of the music using the communication key shared with the personal computer 1 in step S203, and transfers it to the personal computer 1.

In step S208, the CPU 11 decrypts the encryption key transferred from the EMD server 4 by itself or with the CPU 32 of the adapter 26 using the communication key, and obtains the decrypted encryption key. Encrypt the key with your own storage key. In step S209, CPU 1

1 registers the song file name, song information, song name entered by the user, and an encrypted encryption key in the song database of the HDD 21 as a set. Further, in step S210, the CPU 11 causes the CPU 32 to calculate the hash value of the entire song database, and stores the hash value in the nonvolatile memory 34.

In step S205, the EMD server 4 transmits the time data to the personal computer 1 together with the music data. This time is transferred from the personal computer 1 to the adapter 26. CPU 32 of adapter 26 is a personal computer

When the time data transferred from 1 is received, the time of the RTC 35 is corrected in step S211. In this way, the time information of the RTC 35 of the adapter 26 is corrected based on the time information obtained from the external device recognized as the correct device as a result of the mutual authentication. As a result, the adapter 26 can always hold correct time information.

Next, with reference to the flowchart in FIG. 20, the details of the processing related to charging in step S204 in FIG. 19 by the EMD server 4 and the CPU 11 executing the content management program 11 will be described. In step S221, the CPU 11 of the personal computer 1 reads the price information of the selected song specified in step S202 from the price information transmitted from the EMD server 4 in step S201. This is written in the accounting log on HDD 21. Figure 21 shows an example of such a billing log. In this example, the user has copied items 1 to 3 from the EMD server 4, the area for item 1 and item 2 is 50 yen, and the fee for item 3 is 60 yen. The hash value of the charging port at that time is also calculated by the CPU 32 and registered in the nonvolatile memory 34.

Next, in step S222, the CPU 11 of the personal computer 1 reads out the accounting log written in step S221 from the HDD 21 and transfers it to the EMD server 4 via the network 2. In step S223, the EMD server 4 performs a charging calculation process based on the charging log transferred from the personal computer 1. That is, the EMD server 4 additionally updates the built-in database with the accounting log transmitted from the user of the personal computer 1. Then, in step S224, the EMD server 4 determines whether or not to make an immediate decision on the billing log. 4 transfers the product name, amount, etc. necessary for the approval to the approval server (not shown). Then, in step S226, the decision making server executes a decision making process for the user of the personal computer 1. If it is determined in step S224 that the decision is not made immediately, the processing of steps S225 and S226 is skipped. That is, this process is performed periodically thereafter, for example, once a month.

Next, referring to the flowcharts shown in FIG. 22A and FIG. 22B, the CPU 11 executing the content management program 1 1 1 from the IEC 60958 terminal of the audio input / output interface 24 A process for copying the input music data from a CD player or the like (not shown) to the HDD 21 will be described. In step S241, the user connects the IEC 60958 output terminal of the CD player to the IEC60958 terminal of the audio input / output interface 24 of the personal computer 1. In step S242, the user operates the keyboard 18 or the mouse 19 to input the song name (or the number corresponding to the song) of the song to be copied from the CD player. Then, in step S243, the user operates a button of the CD player to start reproduction of the CD player. If a line for sending and receiving control signals is connected between the CD player and the personal computer 1, a playback start command is input via the keyboard 18 or the mouse 19 of the personal computer 1, and the CD is started. It is also possible to have the player start playing the CD.

When the CD player starts playing the CD, in step S244, the music data output from the CD player Transferred to personal computer 1 via C 609 58 terminal. In step S245, the CPU 11 reads the S CMS (Serial Copy) from the data input through the IEC 60958 terminal.

(Management System) This S CMS data includes copy information such as copy prohibition, copy only once, and copy free. Therefore, in step S246, the CPU 11 determines whether or not the S CMS data indicates copy prohibition, and if it indicates copy prohibition, the process proceeds to step S247, and the CPU proceeds to step S247.

11 displays a message such as "copying is prohibited" on the display 20, and ends the copy processing. That is, in this case, copying to the HDD 21 is prohibited.

If the CPU 11 determines in step S246 that the SCM S information read in step S245 does not indicate copy prohibition, the process proceeds to step S248 to read the warrior mark code and read the warrior mark. It is determined in step S249 whether or not indicates that copying is prohibited. When the war mark code indicates that copying is prohibited, the process proceeds to step S247, and a predetermined message is displayed as in the case described above, and the copying process ends.

If it is determined in step S249 that the war mark does not indicate that copying is prohibited, the process proceeds to step S250, where a time limit database check process is performed. If the selected song has already been registered as a result of the time limit database check, the process ends in steps S251 and S252. This processing is similar to the processing in steps S13 and S14 in FIG.

If the selected song is not registered in HDD 21 yet, In steps S 253 through S 258, the registration processing is executed. The processing in steps S253 to S258 is the same as that in step S1 in FIG. 7 except that in step S257, the S CMS information supplied from the IEC 60958 terminal is also registered in the music database. Since the processing is the same as the processing from step 9 to step S24, the description thereof is omitted.

Next, referring to the flowcharts shown in FIGS. 23A and 23B, the music data by the CPU 11 executing the content management program 11 1 is output from the HDD 21 to the IEC 60958 terminal ( The following describes the processing when playing back. In steps S271 to S273, the hash value of the entire song data is calculated as in steps S111 to S113 of FIG. It is determined whether or not the hash value matches the stored hash value, and the music data based tampering check process is performed. If it is determined that the song data base has not been tampered with, the process proceeds to step S274, where the CPU 11 accesses the song data base of the HDD 21 and is registered there. Read the song information and display it on the display 20 c The user looks at the display and operates the keyboard 18 or the mouse 19 as appropriate to select the song to be reproduced and output. In step S275, the CPU 11 executes a check process such as a reproduction condition of the selected music piece. The details of the check processing such as the reproduction conditions will be described later with reference to the flowchart of FIG.

Next, in step S276, the CPU 11 reads the encryption key of the music selected in step S274 from the music database, and decrypts it with the storage key. In step S277, the CPU 11 Read the S CMS information of the selected song from the song data base and determine the S CMS information output from the IEC 60958 terminal according to the rules of the S CMS system. For example, if the number of times of playback is limited, the number of times of playback is incremented by 1 and becomes new SCM S information _(in step S 278, CPU 11 further adds ISR C of the selected song). Read from song database.

Next, in step S279, the CPU 11 reads the selected music file name from the music database and reads the music data from the HDD 21 based on the file name. The CPU 11 further reads out the encryption key corresponding to the music data from the music data base, decrypts it with the storage key, and decrypts the encrypted music data using the decrypted encryption key. . The CPU 11 further decodes the compressed code of the music data. In step S280, the CPU 11 transmits the decoded digital music data together with the SCM information determined in step S277 and the I SRC information read out in step S278 in IEC 609 in step S279. Output from the IEC 60958 terminal according to the provisions of 58. Further, the digital music data is converted into an analog signal, which is output from the analog output terminal of the audio input / output interface 24.

In step S281, the CPU 11 increments the value of the reproduction count during the song data base by one. Then, in a step S282, it is determined whether or not a playback charging condition is added to the selected music piece. If the playback charging condition has been added, the process proceeds to step S283, in which the CPU 11 writes the corresponding fee in the charging log, and in step S284, the entire song data is collected. In step S282, if it is determined that the playback fee is not added to the selected song, the processing in step S283 and step S284 is performed. Skipped.

Next, with reference to the flowchart in FIG. 24, the details of the check processing such as the reproduction condition in step S275 in FIG. 23A by the CPU 11 executing the content management program 11 will be described. In step S301, the CPU 11 reads out various conditions of the music database. In step S302, the CPU 11 determines whether or not the number of times of reproduction has exceeded the limit in the read conditions. If the number of times has exceeded the limit, the process proceeds to step S303 to delete the selected song from the HDD 21. And delete the information of the selected song from the song list. In step S304, the CPU 11 further causes the CPU 32 to calculate a new hash value based on the song data, and stores the hash value in the nonvolatile memory 34. In this case, playback output is prohibited.

If it is determined in step S302 that the number of times of reproduction has not exceeded the limit number of times, the process proceeds to step S305, and the CPU 11 determines whether or not the reproduction end date and time is past the current date and time. If the playback end date and time is past the current date and time, the selected music is deleted from the HDD 21 and also deleted from the music data base in step S303 as in the case described above. Then, in step S304, the hash value of the new song database is calculated and stored. In this case, the reproduction output is also prohibited.

In step S305, the playback end date and time is past the current date and time. If it is determined that there is no such song, the process proceeds to step S306, and the CPU 32 determines whether or not a playback charging condition is added to the selected song. If the playback charging condition is added, step S 30

Proceeding to 7, the CPU 11 causes the display 20 to display a message indicating that the playback charging condition is added and the fee. Step S 3

If it is determined in step 06 that the playback charging condition has not been added, the process of step S307 is skipped.

Next, referring to the flow charts shown in FIG. 25A and FIG. 25B, the CPU 11 that executes the content management program 11 and the CPU 53 that executes the main program are used to transfer data from the HDD 21 to the portable device. A process for outputting (playing) music data via the device 6 will be described. In steps S321 to S325, the alteration check of the music database, the designation of the selected music, and the check processing such as the reproduction condition of the selected music are performed. This processing is the same as the processing from step S271 to step S275 in FIG. 23A, and a description thereof will be omitted.

In step S326, a mutual authentication process is performed between the portable device 6 and the personal computer 1, and a communication key is shared between the portable device 6 and the personal computer 1. In step S327, the CPU 11 of the personal convenience 1 instructs the portable device 6 to reproduce the encrypted audio data to be transmitted. Step S 3

At 28, the CPU 11 reads the file name of the selected song specified in step S324 from the song database, and reads out the music file with the file name from the HDD 21. CPU 11 is step S

At 329, the compression encoding method, encryption method, A process is performed to convert one map or the like to the one of the Poble Device 6 format. Then, in step S330, the CPU 11 encrypts the music data converted in step S329 with a communication key and transfers the encrypted music data to the portable device 6.

In step S331, the CPU 53 of the portable device 6 decrypts the transferred data with the communication key in step S327 in response to the instruction transferred from the personal computer 1. And output it for playback. In step S3332, CPU 11 increments the number-of-plays count of the music database by one. Further, in step S333, the CPU 11 determines whether or not a playback charging condition has been added to the selected song. If so, in step S333, the CPU 11 reduces the fee. It is written into the billing log, and in step S335, the CPU 32 causes the CPU 32 to newly calculate the hash value of the entire music data base and store it. If the charging condition for reproduction is not added to the selected music, the processing of steps S334 and S335 is skipped.

In the present invention, various measures have been taken to prevent unauthorized duplication of music data. For example, a program for operating the CPU 11 is a so-called tamper resistant software in which the execution order changes every time.

Further, as described above, a part of the function of the CPU 11 is shared by the adapter 26 as hardware, and the two cooperate to execute various processes. This has made it possible to further enhance safety.

For example, as described above, the hash value of the song database is Instead of being stored in the overnight base itself, it is stored in the non-volatile memory 34 of the adapter 26. That is, in the comparison processing with the previously stored hash values such as steps S32 and S33 in FIG. 8, the past hash values to be compared are stored in the nonvolatile memory 34. It is assumed. Thus, for example, before copying or moving the music data stored on the HDD 21 to another recording medium, the recorded contents of the HDD 21 are backed up and the HDD 21 is stored there. After copying or moving the music data stored in the HDD 21 to another recording medium, the data backed up to the HDD 21 is restored again, so that the copy or move It is possible to prevent a single blow.

For example, as shown in FIG. 26, when songs 8 and B are stored in 110021, the non-volatile memory 34 stores hash values corresponding to information on the songs A and B. In this state, it is assumed that the recording data of the HDD 21 is backed up to another recording medium 251. After that, if song A is moved to another recording medium 252 out of song A and song B stored on HDD 21, the song recorded on HDD 21 at that time is Since there is only B, the hash value of the non-volatile memory 34 is also changed to the hash value corresponding to song B.

Therefore, after that, even if the contents of the HDD 21 backed up to the recording medium 25 1 are restored to the HDD 21 and the music A and the music B are stored again in the HDD 21, the nonvolatile memory 34 stores the hash value calculated from the information of the song B, and does not store the hash value calculated from the information of the song A and the song B. As a result, based on the songs A and B stored in the HDD 21 at that time, The hash value does not match the past hash value stored in the nonvolatile memory 34, and it is detected that the music data base has been tampered with. As a result, the use of the songs A and B stored in the HDD 21 is restricted thereafter.

Further, as described above, the adapter 26 has a built-in RTC 35, and the value of the RTC 35 is transferred from another device (for example, the EMD server 4) that has obtained a correct authentication result. The time information is corrected based on the received time data. At present, what is output by RTC 35 is used instead of the one managed by Personal Computer 1. Therefore, the user cannot deliberately correct the current time of the personal computer 1 to a past time and cannot escape determination of the reproduction end date and time as the reproduction condition.

The security of the adapter 26 is further enhanced by configuring the adapter 26 to decrypt and execute the program transferred in accordance with the program stored in the ROM 36 in advance. Next, this point will be described with reference to the flowchart of FIG. That is, when the personal computer 1 wants the adapter 26 to execute a predetermined process, in step S351, the program to be executed by the adapter 26 is stored in the RAM 13 in advance. The data is encrypted using the existing encryption key and transferred to the adapter 26. In the ROM 36 of the adapter 26, a program for decrypting and executing the encrypted program transferred from the personal computer 1 is stored in advance. The CPU 32 executes the encrypted program transferred from the personal computer 1 according to the program stored in the RQM 36 in step S 3 52 Decrypts. Then, in step S313, the CPU 32 loads the decrypted program into the RAM 33, and executes the program in step S354.

For example, as described above, when causing the adapter 26 to calculate the hash value based on the song data on the HDD 21, the CPU 11 of the personal computer 1 encrypts the song database data with the encryption key and uses the encryption key to calculate the hash value. Transfer to CPU 32 of 26. The CPU 32 calculates a hash value by applying a hash function to the transferred song data based on the song data. Then, the calculated hash value is stored in the nonvolatile memory 34. Alternatively, the CPU 32 compares the hash value with a past hash value stored in advance, and transfers the comparison result to the CPU 11 of the personal computer 1.

FIG. 28 shows a more specific configuration inside the adapter 26 _(the adapter 26 is formed as a semiconductor IC. The adapter 26 has the interface 31, CPU 32, RAM 33 shown in FIG. 3). In addition to the nonvolatile memory 34, the RTC 35, and the ROM 36, it has a RAM controller 261, which controls writing and reading to and from the RAM 33, and a logic circuit 262. The logic circuit 262 includes, for example, It is used for processing when the encrypted music data is decrypted and the decrypted data is output directly from the adapter 26. These interfaces 31 to ROM 36 and RAM controller The mouthpiece 26 1 and the logic circuit 262 are integrated into a semiconductor IC and are configured so that they cannot be disassembled from the outside.

The crystal oscillator 271 is used when the adapter 26 generates a reference clock when executing various processes. Oscillation circuit 272 is an oscillation circuit for operating the RTC 35. The battery 273 supplies power for backup to the oscillation circuit 272, the nonvolatile memory 34, and the RTC 35. The other circuits of the adapter 26 are supplied with power from the power supply circuit 281 of the personal computer 1.

The non-volatile memory 34 can be configured by a writable and erasable ROM. However, when the nonvolatile memory 34 is configured by a RAM that is backed up by a backup power supply from the battery 273, for example, FIG. As shown in FIG. 29B, a protective aluminum layer 291 is formed on the nonvolatile memory 34, and the battery 273 is transferred to the nonvolatile memory 34 so as to be on the same plane as the protective aluminum layer 291. A power supply pattern 292 for supplying the same power can be formed. In this way, for example, if the non-volatile memory 34 is to be falsified, and if the protection aluminum layer 291 is to be deleted, the power supply pattern 292 on the same plane is also deleted, and the power supply to the non-volatile memory 34 is reduced. If you do, the data stored inside will be erased. With this configuration, the tumbler resistance can be further improved.

Further, as shown in FIG. 30, the wirings 301-1 to 301-1-3 for writing or reading data to or from the non-volatile memory 34 may be overlapped in the vertical direction (depth) at the corresponding positions. It is formed in. As a result, in order to read data from the lower-layer wirings 301-1-3, the upper wirings 301-1-1, 101-2 must be removed, and a plurality of wirings 301-1-1, Data cannot be read simultaneously from 30 1-2 and 30 1-3. Furthermore, this distribution If the lines 301-1 to 301-3 are formed redundantly and directly probed, their additional capacity makes it difficult to analyze their contents.

In the above, the case where the portable device 6 is used as the recording medium has been described as an example. However, the present invention can also be applied to a case where data is transferred or copied to another recording medium. It is.

In addition to the music data, the data may be image data or other data.

As described above, according to the present invention, the following effects can be obtained.

(1) Since the data is encrypted and stored in the HDD 21 and the encryption key is also encrypted with the storage key and recorded on the HDD 21, the data is recorded on the HDD 21. Even if the music data is copied, it cannot be decrypted, so that it is possible to prevent a large number of copies from being distributed.

(2) When a certain song is copied once, the song and the recording date and time are recorded in a song date so that the song cannot be copied for a certain period of time (48 hours in the above example). Since registration is performed on the evening, it is possible to limit the number of copies and to prevent a large number of copies from being distributed.

Furthermore, every time the database is updated, the hash value of the data is calculated and stored, which makes it easier to prevent the database from being tampered with.

(3) When handing over music data to an external device, the music data on HDD 21 is deleted, so the original digital data is stored in HDD 21. No music data is left, which prevents a large number of copies from being distributed ₍

(4) Since a song data base is provided in the HDD 21 and the entire hash value is checked each time, the contents of the HDD 21 are backed up immediately before the move, and the data backed up immediately after the move Even if the data is restored to the HDD 21, it is possible to surely delete the source data.

(5) Mutual authentication processing is performed before the personal computer 1 passes data to an external device, thereby preventing data from being passed to an unauthorized device.

(6) Before handing over the data from the external device to the personal computer 1, the software of the personal computer 1 is checked by means of mutual authentication to determine whether it is legitimate. This prevents music data from being passed to Touae.

(7) The ISRC is used to determine the identity of songs, and when the ISRC cannot be obtained, the TOC is used.Thus, the identity of the songs can be determined even if the ISRC cannot be obtained. Becomes possible.

(8) Since a predetermined part of the software functions of the personal computer 1 is borne by the adapter 26 external to the personal computer 1, only the software of the personal computer 1 was analyzed. In this case, it is difficult to know what kind of processing is performed as a whole, so it is difficult to falsify the software so that it has the intended function.

The processing executed by the adapter 26 may be executed by the CPU 11 using a secure program. In this case, the par The Sonal computer 1 downloads the current time data from a specific server (for example, the EMD registration server 3) connected to the network 2 instead of the current time supplied by the RTC 35 of the adapter 26. And executes the judgment process based on the current time. In this case, the personal computer 1 stores the current time at predetermined time intervals, displays an error when a time earlier than the stored time is set, and accepts the time setting. You may not.

The series of processes described above can be executed by hardware, but can also be executed by software. When a series of processes are executed by software, the programs that make up the software can be installed on a computer that is built into dedicated hardware, or by installing various types of programs. It is installed from the program storage medium, for example, at a general-purpose personal computer where functions can be executed.

As shown in FIG. 3, a program storage medium for storing a program installed in a computer and made executable by the computer includes a magnetic disk 41 (including a floppy disk), an optical disk 42 (CD-ROM ( Package media consisting of Compact Disc-Read Only Memory), DVD (including Digital Versatile Disc), magneto-optical disk 43 (including MD (Mini-Disc)), semiconductor memory 44, etc. It is composed of ROM 12 and HDD 21 which are stored permanently. The program can be stored in the program storage medium via a local area network, if necessary, via an interface such as the communication unit 25. It is performed using a wired or wireless communication medium, such as a network 2 such as the Inuichi Network or digital satellite broadcasting.

In this specification, the steps of describing a program stored in a program storage medium are not limited to processing performed in chronological order in the order described, but are not necessarily performed in chronological order. It also includes processes that are executed individually or individually.

Also, in this specification, a system refers to an entire device configured by a plurality of devices.

According to the information processing apparatus, the information processing method, and the program storage medium according to the present invention, time information at the time of duplication is stored in association with the identification information of the content, so that the user's profit is greatly increased. It will be possible to substantially prohibit mass duplication without _loss.c

Claims

The scope of the claims

1. Identification information for identifying the content; and a storage unit for storing time information when the content is copied. Corresponding to the identification information. Acquisition unit for acquiring identification information of the content to be copied. A copy unit that copies the content in accordance with the identification information acquired by the acquisition unit and the time information stored in the storage unit;

An information processing apparatus comprising:

2. An identification information for identifying the content, and a storage step for storing time information when the content is copied, corresponding to the identification information,

An obtaining step of obtaining identification information of the content to be copied;

A duplication step of duplicating the content in accordance with the identification information acquired in the acquisition step and the time information stored in the storage step;

An information processing method comprising:

3. Identification information for identifying the content, and a storage step for storing time information when the content was copied, corresponding to the identification information,

An acquisition step for acquiring identification information of the content to be copied;

The identification information acquired in the acquisition step; and the storage step A duplication step of duplicating the content in accordance with the time information stored in the

A program storage medium storing a computer-readable program, characterized by comprising:

Claims of amendment

[May 26, 2000 (26.5.0.00) Accepted by the International Bureau: New Claims 4-1-14 added; other claims unchanged. (Page 4)]

1. Identification information for identifying the content, storage means for storing time information when the content is copied, and acquisition means for acquiring the identification information of the content to be copied, corresponding to the identification information; A copy unit that copies the content in accordance with the identification information acquired by the acquisition unit and the time information stored in the storage unit;

An information processing apparatus comprising:

A duplication step of duplicating the content in accordance with the identification information obtained in the obtaining step and the time information stored in the storage step;

An information processing method comprising:

An acquisition step of acquiring identification information of content to be copied;

The identification information obtained in the obtaining step;

Corrected paper (Article 19 of the Convention) A duplication step of duplicating the content in accordance with the time information stored in the

A program storage medium storing a computer-readable program, comprising:

4. (Addition) The information processing method according to claim 2, wherein the content is reproduced from an information storage medium.

5. (Addition) The information processing method according to claim 4, wherein the information storage medium is a compact disk for storing music information.

6. (Addition) The information processing method according to claim 2, wherein the identification information for identifying the content is an International Standard Recording Code (ISRC).

7. (Addition) The information processing method according to claim 2, wherein the identification information for identifying the content is TOC (Table 0 f Contents).

8. (Addition) In the storage step, an International Standard Recording Code (ISRC) is read from the information storage medium as identification information for identifying the content.

3. The information processing method according to claim 2, wherein when ISRC is not stored, data of TOC (Table Of Contents) is used as the identification information.

9. (Addition) The information processing method according to claim 2, wherein the identification information and the time information are stored in the expiration date database in a corresponding manner by the storing step.

1 0. (Addition) Check to check the data in the deadline database

Amended paper (Article 19 of the Convention) 10. The information processing method according to claim 9, further comprising a check step, wherein the check step uses a hash function to detect tampering.

11. (Addition) The duplication step further includes the step of: when it is detected that the identification information of the content acquired in the acquisition step is stored in the storage step in the past, 3. The information processing method according to claim 2, further comprising a determination step of comparing current time information with time information of the content and determining whether or not a predetermined time has elapsed.

12. (Addition) As a result of the determination in the above determination step, if it is determined that the predetermined time has not elapsed, duplication is prohibited. Information processing method.

13. (Addition) If it is determined in the determination step that the predetermined time has not elapsed, a watermark in the content is detected, and the copying process is performed based on the watermark. The information processing method according to claim 11, wherein the method is performed.

14. (Addition) An information processing method used in an information processing apparatus having a database in which an identification code for identifying content that has been copied in the past and a time data at which the content has been copied are stored in association with each other. And

An obtaining step of obtaining an identification code of the content to be copied from now on;

A determining step of determining whether or not the identification code obtained in the obtaining step is already stored in the database; and the determining step stores the identification code in the database.

Corrected paper (Article 19 of the Convention) When it is determined that the time code is stored, a comparing step of comparing time data stored in the database in association with the identification code with current time information;

A determining step of determining whether a current time has passed a predetermined time or more from the stored time data by the comparing step,

As a result of the determination step, when it is determined that the predetermined time has not elapsed, the duplication of the content is prohibited.

Corrected paper (Article 19 of the Convention)