Abstract: A technology is provided to improve tamper resistance in encrypting data to be secured and inputting/outputting the data between a recording device and a host device. When the recording device issues an input/output command to a storage device to input/output data to be secured, the recording device attaches an ID to the command to identify to which cryptographic input/output processing the command belongs. Upon reception of a sequence command, the storage device receives the command if its ID has been allocated and the command is verified to have been issued in the correct sequence. The sequence ID is used to identify a process system while appropriately managing the steps of executing commands.

Abstract: A controller in a hard disk serving as a data storage device stores a license including a content key for decrypting encrypted content data E and others in a secure data storage portion. The license is managed in the secure data storage portion in accordance with a LBA, and the LBA for storing the license, which is being processed for transmission, is stored as a log in a log memory of the secure data storage portion. When a failure occurs during the transmission processing, the license, which was being processed for transmission, is specified based on the LBA stored in the log memory.

Abstract: A data transfer system. The data transfer system includes a first device and a second device. The first device is configured to encrypt a partial information group of the plurality of information groups and to transfer an encrypted information group to the second device, to generate an omission information group with information having a predetermined relation omitted from at least remaining information groups of the plurality of information groups, to encrypt and to transfer the omission information group to the second device, when a partial kind of information of the plurality of information groups has the predetermined relation. The second device is configured to decrypt the partial information group and the omission information group, to restore omitted information based on the omitted information having the predetermined relation included in a transferred partial information group, and to add the restored information to the transferred omission information group.

Abstract: A data storage device includes a secure data storage portion including a log memory. The log memory is formed of a plurality of banks, and stores history information in the plurality of banks in a ring-like fashion. The plurality of banks are designated by addresses (0?(N?1)), respectively. Each of the items of the history information respectively stored in the banks includes a management number region, a license ID (LID) region, a Ks2x region, an ST1 region, an ST2 region, a KPcmy region and a LBA region.

Abstract: Embodiments of the present invention allow encrypted data to restrict unlimited output of content data recorded in an area where reading can be performed by standard commands. According to one embodiment, a data storage area of a storage device is provided with an accessible area which can be accessed from the outside of an interface by specifying an address, and a hidden access area which can be accessed from the outside only in a specified case where an authentication condition is satisfied. In the hidden area, a table is recorded in which one entry includes an entry number and a field of a content identifier. An expansion area is provided in each sector of the accessible area, and data output control information and an entry number are recorded. The data output control information indicates information of one of (1) output is allowed only when there is information capable of decrypting the data, and (2) output is allowed without limitation.

Abstract: A user can watch desired content among a plurality of encrypted contents recorded in a storage apparatus having a large capacity recording medium when the user wants to watch. Usage Pass (UP) necessary for watching content and encrypted content are recorded in a rental storage apparatus. The UP is in an invalid state when the storage apparatus is rented, and processing for validating the corresponding UP is executed between the storage apparatus and a host apparatus through which content is watched to thereby make content watchable. A history that processing for validating the UP is executed is recorded in the storage apparatus. A service provider bills a content use fee to the user based on the history of the storage apparatus.

Abstract: Embodiments of the present invention provide a simplified authentication transaction for reconnecting a storage device to a host apparatus that has completed authentication in the past. According to one embodiment, an authentication log is recorded in the host. Plural units of this log information are recorded in the storage device. At the time of transferring a content decryption key and usage rules between the host and the storage device, the decryption key and usage rules are recorded into the host as a log for the transfer. The used authentication log is recorded into the storage device as RAPDI. If RAPDI indicates the authentication log in the simplified authentication transaction, recovery transaction is permitted. The host device deletes/invalidates or holds the log for the transfer in accordance with non-permission/permission. In the case of permission, the key and usage rules are recovered by using a log for the transfer prior to the simplified authentication transaction.

Abstract: An information recording apparatus is provided which can record broadcasting information so as to accurately identify and reproduce broadcasting information to be reduced while increasing convenience in reproducing the broadcasting information. Time control is performed during reproduction in allocation units ALU based on the receiving time of the first packet and the receiving time of the last packet in the allocation unit ALU included in the broadcasting information. The allocation unit ALU includes a plurality of packets. Time control is performed also in access units, each of which includes an I picture, based on the display time information or the receiving time information of the I picture included in the packet.

Abstract: A decryption processing unit decrypts encrypted content data using a license key Kc. When an elapsed time after reception of the license key (Kc) does not exceed a hold time at a time of the license key (Kc) included in reproduction control information (ACp), reproduction of encrypted content data continues. When the elapsed time exceeds the hold time at a time, the license key (Kc) is discarded, and a reproduction control unit again obtains a license key (Kc) from a memory card. Discarding and reobtaining license key (Kc) continues until an allowable output count of license key (Kc) from the memory card becomes zero. As a result, a reproduction time of encrypted content data can be controlled safely.

Abstract: An information editing apparatus is provided which can prevent a thumbnail image, which shows the contents of recorded information recorded on an information recording medium, from being accidentally changed by a misoperation of the user. The information editing apparatus includes a deciding device 8 for deciding whether a thumbnail image can be changed or not based on change permission information, which indicates whether a change can be made on the thumbnail image showing the contents of recorded information recorded on a recording medium 1. When the deciding device 8 decides that a change is not permitted, a change of the thumbnail image is prohibited.

Abstract: Embodiments of the present invention help to protect user data in its entirety from any unauthorized access, by making encryption key data used to encrypt the user data not available for reading, when a user having an authorized access right does not access an information recording medium for a predetermined length of time. According to one embodiment, through use of a magnetic disk in which a data losing time of an encryption key data recording area is shorter than a data losing time in a user data recording area, recording is performed to the magnetic disk while encrypting user data during recording, and encryption key data for use with encryption is recorded in the encryption data recording area.

Abstract: Embodiments of the invention provide methods and systems for transferring data. In one embodiment, a transfer processing method for transferring, in addition to key data for decryption of encrypted content data, required information inclusive of conditions for using the content data, from one device to another device, the transfer processing method comprising: conducting mutual authentication of validity between the two devices; encrypting the required information with one of the two devices with symmetric key data obtained during the authentication; selecting one of a plurality of predetermined processing modes provided to conduct data transfer between both of the two devices; and transferring the required information that has been encrypted with one of the two devices, to the other device in accordance with the selected mode of transfer processing.

Abstract: In one embodiment, a content data management system that handles control information on management of content data decryption includes a first device (a recorder/player) for recording/reproducing the content data, a second device (a magnetic disk drive) for storing the content data, and a host processor for controlling data transfer between the first and second devices.

Abstract: A magnetic disk drive is provided capable of reducing a processing load even in a mode of, for example, reproduction during recording. In one embodiment, a magnetic disk drive includes a storage unit for storing certificate information that relates to the magnetic disk drive and corresponds to a root key of a certification organization. The certificate information is used on the host side to perform authentication processing of the magnetic disk drive.

Abstract: The invention flexibly limits a terminal able to play content and prevents unfair utilization of the content. In one embodiment, an identifier proper to each terminal device is allocated to discriminate each playback equipment. The identifier of a terminal which is allowed to play the content is registered to this license. When the content is played, authentication is performed between the terminal device as a license transfer destination and a memory device as a license transfer source. The identifier of the terminal device itself is transmitted to the memory device as a transfer source at an authenticating time. The memory device collates the identifier sent from the terminal device with an identifier registered to the license. If these identifiers are the same identifier, the memory device transfers the license to the terminal device. In contrast to this, if these identifiers are different identifiers, the memory device stops the transfer of the license.

Abstract: A recording area of a hard disk is managed by units. Each unit comprises physically continuous recording regions having predetermined size, and usage status of the unit is stored in an allocation unit (AU) management table. Data requiring a real time processing is stored in each unit. When the usage status of the unit is changed or modified due to the recording or deletion of data, the AU management table is updated and then information indicative of the fact that the AU management table has been updated is recorded. An apparatus where the final change is made is detected at the time the hard disk is inserted or a file system is initialized. And if the apparatus which last made the change adopts the file system which does not use the AU management table, then the table is reconfigured so as to retain the consistency of the AU management table.

Abstract: A transfer source gives a challenge key, own public key, an ID for identifying the target data, and an encryption key type to a transfer destination that is authenticated by a certificate. In accordance with the given key type, the transfer destination generates a first session key (and a second session key), encrypts the first session key and own public key (or second session key) with the transfer source's public key, encrypts the resulting encrypted data with the challenge key, and transmits the data encrypted with the challenge key to the transfer source. The transfer source encrypts the target data with the second session key (or the transfer destination's public key) that is derived from the received data, encrypts the resulting encrypted data with the first session key, and transmits the data encrypted with the first session key to the transfer destination.

Abstract: A data storage device includes a secure data storage portion including a log memory. The log memory is formed of a plurality of banks, and stores history information in the plurality of banks in a ring-like fashion. The plurality of banks are designated by addresses (0-(N?1)), respectively. Each of the items of the history information respectively stored in the banks includes a management number region, a license ID (LID) region, a Ks2x region, an ST1 region, an ST2 region, a KPcmy region and a LBA region.

Abstract: A controller in a hard disk serving as a data storage device stores a license including a content key for decrypting encrypted content data E and others in a secure data storage portion. The license is managed in the secure data storage portion in accordance with a LBA, and the LBA for storing the license, which is being processed for transmission, is stored as a log in a log memory of the secure data storage portion. When a failure occurs during the transmission processing, the license, which was being processed for transmission, is specified based on the LBA stored in the log memory.

Abstract: An information recording apparatus is provided which can record broadcasting information so as to accurately identify and reproduce broadcasting information to be reduced while increasing convenience in reproducing the broadcasting information. Time control is performed during reproduction in allocation units ALU based on the receiving time of the first packet and the receiving time of the last packet in the allocation unit ALU included in the broadcasting information. The allocation unit ALU includes a plurality of packets. Time control is performed also in access units, each of which includes an I picture, based on the display time information or the receiving time information of the I picture included in the packet.