Abstract: An information processing apparatus includes a data processing section for reproducing contents stored in a medium having a general purpose area in which encrypted contents and corresponding utilization controlling information are stored and a protected area including a plurality of blocks having access limitation set thereto and including a block having an encryption key for decrypting the encrypted contents stored therein.

Abstract: An information processing system includes: a client executing acquisition and reproduction of contents; a management server providing the client with content selection information applied for acquisition of contents; and a content providing server receiving the content selection information from the client and providing the content selected in accordance with the content selection information, wherein the content selection information includes content identifiers as identifiers of encrypted contents respectively encrypted by different encryption keys and range information indicating data areas of range data which is configuration data of respective encrypted contents, and the content providing server provides the client with an encrypted content formed by combining range data as partial data of the encrypted contents specified by the content identifiers and the range information.

Abstract: An information processing apparatus includes a data processing unit that verifies data recorded on a disk and reproduces content recorded on the disk if a verification condition is satisfied. The data processing unit verifies the validity of an ID inserter that has recorded, on the disk, an ID corresponding to the disk. The data processing unit acquires an ID inserter certificate containing an apparatus ID of the ID inserter that has recorded the ID corresponding to the disk on the disk and an ID inserter blacklist having apparatus IDs of invoked ID inserters registered therein, determines whether the apparatus ID contained in the ID inserter certificate is registered in the ID inserter blacklist so as to verify the validity of the ID inserter that has recorded the ID corresponding to the disk, and stops reproduction of the content if it is determined that the ID inserter is not valid.

Abstract: A data placement configuration which ensures seamless playback of contents having segment portions including multiple different variations of encrypted data is provided. With regard to contents having segment portions configured of multiple different variations of encrypted data to which individual segment keys have been applied, and non-segment portions serving as encrypted data to which a unit key has been applied, the placement of segment data and non-segment portion configuration data is determined such that the maximum jump distance executed at the time of playback processing is equal to or less than a maximum jump distance set beforehand. Data placement has been determined based on seek time, ECC block processing time, sequence key usage time which is key switchover time, and so forth.

Abstract: A virtual machine can be implemented by anyone because the interface and other information necessary for implementation are publicly available. Therefore, it is possible that by implementing the virtual machine illegitimately, programs run thereon on will be made to operate illegitimately instead of legitimately. A program compares secret information held by the virtual machine with verification information held by the program itself. The program thereby verifies whether the virtual machine that runs the program is implemented legitimately, and is able to reject an illegitimate virtual machine.

Abstract: An information processing apparatus, an information recording medium, an information processing method, and a computer program are provided. In an information recording medium storing many pieces of content, a configuration that allows use management on segmented content basis is provided. A plurality of content management units corresponding to title, index and other information are set by partitioning stored content in an information recording medium. Different unit keys that are encryption keys are allocated to different content management units. At least the content real data included in each content management unit is encrypted by use of the unit key and the encrypted data is stored. In content reproduction, units are identified and decryption is executed by use of a unit key corresponding to each unit for reproduction. In an information recording medium storing many pieces of content for example, each of segmented pieces of content may be managed.

Abstract: An information processing apparatus for controlling use of a content recorded on a disc. The information processing apparatus includes: in reference to a certificate revocation list including invalidation information of a content owner providing the content, a data verification section verifying whether content-owner identification recorded in a content-owner certificate recorded on the disc as a certificate corresponding to the content owner is included in the certificate revocation list, and if included, the data verification section comparing a content-certificate time stamp which is stored in the content certificate recorded on the disc as a certificate corresponding to the content and a CRL time stamp which is invalidation date-and-time information corresponding to the content owner stored in the certificate revocation list; and a content-use control section prohibiting or restricting use of the content if the content-certificate time stamp has date-and-time data not earlier than the CRL time stamp.

Abstract: An information recording medium manufacturing method includes the steps of: determining an encryption mode of each sector, which serves as an encrypt processing unit; generating encrypted data having different variations by using a plurality of cryptographic keys for a segment portion; generating encrypted data by using a single cryptographic key for a non-segment portion; and recording the encrypted data. In determining the encryption mode, a cryptographic key for each sector is specified on the basis of an auxiliary file including determination information indicating whether each sector is data of a segment portion or data of a non-segment portion and identification information for identifying a segment and a variation associated with the sector if the sector is found to be the data of a segment portion. In generating the encrypted data for the segment portion or for the non-segment portion, the encrypted data is generated by using the specified cryptographic key.

Abstract: To provide an apparatus, a recording medium and a method for effectively preventing unauthorized use of a content. A content containing broken data different from correct content member data is recorded on an information recording medium. Furthermore, transform data, as the correct member data, to be substituted for the broken data, and a fix-up table storing setting position information of the content are recorded on the information recording medium. During the content playback process, the transform data is substituted for the content member data in accordance with the fix-up table recorded on the information recording medium. With this arrangement, even if the encryption key corresponding to the encrypted content recorded on the information recording medium is leaked, an apparatus unable to acquire the transform data cannot play back the content. Unauthorized use of the content is thus controlled.

Abstract: To provide an apparatus, a recording medium and a method for effectively preventing unauthorized use of a content. A content containing broken data different from correct content member data is recorded on an information recording medium. Furthermore, transform data, as the correct member data, to be substituted for the broken data, and a fix-up table storing setting position information of the content are recorded on the information recording medium. During the content playback process, the transform data is substituted for the content member data in accordance with the fix-up table recorded on the information recording medium. With this arrangement, even if the encryption key corresponding to the encrypted content recorded on the information recording medium is leaked, an apparatus unable to acquire the transform data cannot play back the content. Unauthorized use of the content is thus controlled.

Abstract: An information processing apparatus includes a content usage control information analyzer configured to read content usage control information recorded on an information recording medium and to perform content usage processing according to the content usage control information. The content usage control information analyzer determines whether the usage of content corresponding to the content usage control information is allowed based on a value of a flag included in the content usage control information and device information whether the information processing apparatus is an extended device having an extended function or a basic device without an extended function.

Abstract: A method and apparatus for processing information, method and apparatus for manufacturing an information recording medium, an information recording medium, and a computer program are provided. An information processing apparatus for playing back a content recorded on an information recording medium and includes a data transform processor performing a substitution process on content member data recorded on the information recording medium. The data transform processor substitutes transform data as substitute data for the content member data in accordance with a fix-up table holding recording position information of the transform data.

Abstract: An information processing apparatus plays back content including a plurality of divided playback zones, a playlist being associated with each of the divided playback zones. The information processing apparatus includes a playlist selection information obtaining unit obtaining a plurality of pieces of playlist selection information including information concerning a playback sequence of play items which are set as content playback unit data, the plurality of pieces of playlist selection information being obtained in accordance with the number of playback zones included in the content, a playlist selector selecting a plurality of playlists on the basis of the plurality of pieces of playlist selection information obtained by the playlist selection information obtaining unit, a playlist integrating processor generating an integrated playlist by integrating the plurality of playlists selected by the playlist selector, and a content playback unit playing back the content on the basis of the integrated playlist.

Abstract: An information processor includes a data processing section that executes a processing of storing subsequently generated data, which is subsequently generated or acquired using information read from an information recording medium, onto a storage unit. The data processing section is configured to execute a processing of storing onto the storage unit encrypted subsequently generated data as encrypted data that is encrypted with a unit key as an encryption key corresponding to a content management unit to which the subsequently generated data belongs, and execute a processing of acquiring an encrypted bind unit key and storing the encrypted bind unit key onto the storage unit, the encrypted bind unit key being encrypted data of a bind unit key including as its constituent data the unit key and one of key information acquired from the information processor and identification information acquired from the information recording medium.

Abstract: A configuration is provided wherein usage restrictions of an application are determined in accordance with timestamps. A certificate revocation list (CRL) in which the revocation information of a content owner who is a providing entity of an application program recorded in a disc is recorded is referred to verify whether or not a content owner identifier recorded in an application certificate is included in the CRL, and in the case that the content owner identifier is included in the CRL, comparison between a timestamp stored in a content certificate and a CRL timestamp is executed, and in the case that the content certificate timestamp has date data equal to or later than the CRL timestamp, utilization processing of the application program is prohibited or restricted. According to the present configuration, a configuration is realized wherein an unrevoked application is not subjected to utilization restriction, and only a revoked application is subjected to utilization restriction.

Abstract: An information processing apparatus includes a data processing unit configured to perform data processing on data read from a data recordable disc. The data processing unit performs a physical mark verification process for verifying whether or not a physical mark that is identification data unique to each of mother discs used when the disc was manufactured has been recorded on the disc, and a signature verification process for obtaining, from the disc, a token containing an electronic signature generated on the basis of a medium ID that is an identifier unique to each disc by a content providing server that provided the recorded content of the disc and for performing signature verification, and reproduces recorded content of the disc under a condition in which the recording of a physical mark in the physical mark verification process has been confirmed and signature verification in the signature verification process holds true.

Abstract: In a process for manufacturing an information recording medium, a configuration is provided in which strict information management and an information recording medium manufacturing process are realized. In a configuration in which master data as original data of recording data for an information recording medium is generated and recording data for the information recording medium is generated on the basis of the master data, master data containing a dummy data area in a partial area of the master data is generated, and the dummy data area is identified and a process for setting significant information is performed on the basis of the stored information of an auxiliary file. Therefore, it is not necessary to obtain data of significant information when the master data is to be generated, and it becomes possible to generate the master data without obtaining specific information, such as an encrypted key block.

Abstract: An information processing apparatus and method are provided. The information processing apparatus and method provides an attribute of a component which executes a process of reading data from an information recording medium is confirmed so that severe authentication corresponding to contents can be achieved. In authentication of a component which attempts to perform a process of data read from an information recording medium, it is confirmed whether or not an attribute of the component has a data process permission component attribute set in advance. For example, it is confirmed through the attribute confirmation whether the component is a hardware component or a software component, and only when the component is a hardware component, a process of the contents is permitted.

Abstract: An information processing apparatus includes a data processing unit that verifies data recorded on a disk and reproduces content recorded on the disk if a verification condition is satisfied. The data processing unit verifies the validity of an ID inserter that has recorded, on the disk, an ID corresponding to the disk. The data processing unit acquires an ID inserter certificate containing an apparatus ID of the ID inserter that has recorded the ID corresponding to the disk on the disk and an ID inserter blacklist having apparatus IDs of invoked ID inserters registered therein, determines whether the apparatus ID contained in the ID inserter certificate is registered in the ID inserter blacklist so as to verify the validity of the ID inserter that has recorded the ID corresponding to the disk, and stops reproduction of the content if it is determined that the ID inserter is not valid.

Abstract: A configuration is provided which improves scrambling processing of content and eliminates unauthorized use of content. Scramble rules which differ for each content are used for content scrambling processing. For example, in the event of using shuffling processing, various shuffle states are specified as scramble rules. In the event of using Exclusive-OR processing, a value applicable to EXOR is specified as the scramble rule. Also, in the event of using rotation processing, a shift amount is specified as the scramble rule. In the event of using 32 shuffle elements in shuffling processing, 32! different shuffle states, that is to say, 32! different scramble rules can be specified. Also, the values for EXOR or the rotation shift amount can be set as various values, and many scramble rules can be set.