Encryption device, a decrypting device, a secret key generation device, a copyright protection system and a cipher communication device

Abstract

An encryption device, a decrypting device, a secret key generation device, a copyright protection system and a cipher communication device including: a CRL memory unit memorizing a CRL, a device key ring memory unit memorizing a specific device key KD_A in every IC card used in a decrypting device, a content key memory unit memorizing a content key Kc, which is a secret key for decrypting content, and a hashing function processing unit calculating a hashing value of the CRL memorized in the CRL memory unit. The devices further including an Ex-OR unit carrying out an exclusive OR between the hashing value and the device key KD_A memorized in the device key ring memory unit, and an Enc unit encrypting the content key Kc memorized in the content key memory unit using an output value of an Ex-OR unit.

1 - 83 . (canceled) 
   
   
       84 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a first secret key memory unit operable to memorize a first secret key which is used for the encryption of the digital production;   a second secret key memory unit operable to memorize a second secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the second secret key memorized in the second secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed second secret key;   a first encryption unit operable to encrypt the first secret key memorized in the first secret key memory unit with the transformed second secret key which is transformed by the transforming unit to generate an encrypted first secret key;   a second encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the first secret key memorized in the first secret key memory unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the encrypted first secret key encrypted by the first encryption unit and the digital production encrypted by the second encryption unit to the recording medium or the transmission medium,   wherein the decrypting device memorizes a third secret key that is specific to the decrypting device and that corresponds to the second secret key, and is operable to:   obtain the CRL, the encrypted first secret key and the encrypted digital production via the recording medium or the transmission medium;   calculate the attribute value based on the obtained CRL;   transform the memorized third secret key with the calculated attribute value to generate a transformed third secret key;   decrypt the obtained and encrypted first secret key with the transformed third secret key; and   a second decrypting unit operable to decrypt the obtained and encrypted digital production with the decrypted first secret key.   
   
   
       85 . The encryption device according to  claim 84  further comprising a confirmation data outputting unit operable to output a confirmation data which is to be a criterion for confirming whether the first secret key decrypted by the decrypting device is a qualified key or not. 
   
   
       86 . The encryption device according to  claim 85 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting a predetermined fixed-pattern data with the first secret key memorized in the first secret key memory unit, to the recording medium or the transmission medium. 
   
   
       87 . The encryption device according to  claim 85 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting the first secret key memorized in the first secret key memory unit with the first secret key, to the recording medium or the transmission medium. 
   
   
       88 . The encryption device according to  claim 84 , wherein the attribute value calculating unit calculates a hashing value of the CRL as the attribute value, and the transforming unit transforms the second secret key by carrying out an exclusive OR between the second secret key and the hashing value. 
   
   
       89 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a first secret key memory unit operable to memorize a first secret key which is used for the encryption of the digital production;   a second secret key memory unit operable to memorize a second secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   a first encryption unit operable to encrypt the first secret key memorized in the first secret key memory unit with the second secret key memorized in the second secret key memory unit to generate an encrypted first secret key;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the first secret key memorized in the first secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed first secret key;   a second encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the transformed first secret key transformed by the transforming unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the first secret key encrypted by the first encryption unit and the digital production encrypted by the second encryption unit to the recording medium or the transmission medium,   wherein the decrypting device memorizes a third secret key that is specific to the decrypting device and that corresponds to the second secret key, and is operable to:   obtain the CRL, the encrypted first secret key and the encrypted digital production, via the recording medium or the transmission medium;   decrypt the obtained and encrypted first secret key with the memorized third secret key;   calculate the attribute value based on the obtained CRL;   transform the decrypted first secret key with the calculated attribute value to generate a transformed first secret key; and   decrypt the obtained and encrypted digital production with the transformed first secret key.   
   
   
       90 . The encryption device according to  claim 89  further comprising a confirmation data outputting unit operable to output a confirmation data which is to be a criterion for confirming whether the first secret key decrypted by the decrypting device is a qualified key or not. 
   
   
       91 . The encryption device according to  claim 90 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting a predetermined fixed-pattern data with the first secret key transformed by the transforming unit, to the recording medium or the transmission medium. 
   
   
       92 . The encryption device according to  claim 90 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting the first secret key transformed by the transforming unit with the first secret key, to the recording medium or the transmission medium. 
   
   
       93 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a medium identification information memory unit operable to memorize a medium identification information which is used for the encryption of the digital production;   a first secret key memory unit operable to memorize a first secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the first secret key memorized in the first secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed first secret key;   a function transformation unit operable to input the medium identification information memorized in the medium identification information memory unit and the first secret key transformed by the transforming unit into a one-way function to obtain a function value;   a second encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the function value obtained from the function transformation unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the medium identification information memorized in the medium identification information memory unit, and the digital production encrypted by the second encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a second secret key that is specific to the decrypting device and that corresponds to the first secret key, and is operable to:   obtain the CRL, the medium identification information and the encrypted digital production, via the recording medium or the transmission medium;   calculate the attribute value on the obtained CRL;   transform the memorized second secret key with the calculated attribute value;   input the obtained medium identification information and the transformed second secret key into a one-way function to calculate the function value; and   decrypt the obtained and encrypted digital production with the calculated function value.   
   
   
       94 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a medium identification information memory unit operable to memorize a medium Identification information which is used for the encryption of the digital production;   a first secret key memory unit operable to memorize a first secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   a function transformation unit operable to transform by inputting the medium identification information memorized in the medium identification information memory unit and the first secret key memorized in the first secret key memory unit into a one-way function to obtain a function value;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the function value obtained from the function transformation unit with the attribute value calculated by the attribute value calculating unit to generate a transformed function value;   a first encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the function value transformed by the transforming unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the medium identification information memorized in the medium identification information memory unit, and the digital production encrypted by the first encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a second secret key that is specific to the decrypting device and that corresponds to the first secret key, and is operable to:   obtain the CRL, the medium identification information and the encrypted digital production, via a recording medium or a transmission medium;   input the obtained medium identification information and the first secret key memorized in the first secret key memory unit into a one-way function to obtain the function value;   calculate the attribute value based on the obtained CRL;   transform the obtained function value with the calculated attribute value to generate the transformed function value; and   decrypt the obtained and encrypted digital production with the transformed function value.   
   
   
       95 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a first secret key memory unit operable to memorize a first secret key which is used for the encryption of the digital production;   a second secret key memory unit operable to memorize a second secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a third secret key memory unit operable to memorize a third secret key which is used for the encryption of the first secret key;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the second secret key memorized in the second secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed second secret key;   a first encryption unit operable to encrypt the third secret key memorized in the third secret key memory unit with the second secret key transformed by the transforming unit to generate an encrypted third secret key;   a second encryption unit operable to encrypt the first secret key memorized in the first secret key memory unit with the third secret key memorized in the third secret key memory unit;   a third encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the first secret key memorized in the first secret key memory unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the third secret key encrypted by the first encryption unit, the first secret key encrypted by the second encryption unit and the digital production encrypted by the third encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a fourth secret key that is specific to the decrypting device and that corresponds to the second secret key, and is operable to:   obtain the CRL, the encrypted second secret key, the encrypted first secret key, and the encrypted digital production, via the recording medium or the transmission medium;   calculate the attribute value based on the obtained CRL;   transform the memorized fourth secret key with the calculated attribute value;   decrypt the obtained and encrypted second secret key with the transformed fourth secret key;   decrypt the obtained and encrypted first secret key with the decrypted second secret key; and   decrypt the obtained and encrypted digital production with the decrypted first secret key.   
   
   
       96 . The encryption device according to  claim 95  further comprising a confirmation data outputting unit operable to output a confirmation data which is to be a criterion for confirming whether the third secret key decrypted by the decrypting device is a qualified key or not. 
   
   
       97 . The encryption device according to  claim 96 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting a predetermined fixed-pattern data with the third secret key memorized in the third secret key memory unit, to the recording medium or the transmission medium. 
   
   
       98 . The encryption device according to  claim 96 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting the third secret key memorized in the third secret key memory unit with the third secret key, to the recording medium or the transmission medium. 
   
   
       99 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a first secret key memory unit operable to memorize a first secret key which is used for the encryption of the digital production;   a second secret key memory unit operable to memorize a second secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a third secret key memory unit operable to memorize a third secret key which is used for the encryption of the first secret key;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   a first encryption unit operable to encrypt the third secret key memorized in the third secret key memory unit with the second secret key memorized in the second secret key memory unit;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the third secret key memorized in the third secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed third secret key;   a second encryption unit operable to encrypt the first secret key memorized in the first secret key memory unit with the transformed third secret key transformed by the transforming unit to generate an encrypted first secret key;   a third encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the first secret key memorized in the first secret key memory unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the third secret key encrypted by the first encryption unit, the first secret key encrypted by the second encryption unit and the digital production encrypted by the third encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a forth secret key that is specific to the decrypting device and that corresponds to the second secret key, and is operable to:   obtain the CRL, the encrypted third secret key, the encrypted first secret key and the encrypted digital production, via a recording medium or a transmission medium;   decrypt the obtained and encrypted third secret key with the memorized forth secret key;   calculate the attribute value based on the obtained CRL;   transform the decrypted third secret key with the calculated attribute value;   decrypt the obtained and encrypted first secret key with the transformed third secret key; and   decrypt the obtained and encrypted digital production with the decrypted first secret key.   
   
   
       100 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a first secret key memory unit operable to memorize a first secret key which is used for the encryption of the digital production;   a second secret key memory unit operable to memorize a second secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a third secret key memory unit operable to memorize a third secret key which is used for the encryption of the first secret key;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   a first encryption unit operable to encrypt the third secret key memorized in the third secret key memory unit with the second secret key memorized in the second secret key memory unit;   a second encryption unit operable to encrypt the first secret key memorized in the first secret key memory unit with the third secret key encrypted by the first secret key memory unit;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the first secret key memorized in the first secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed first secret key;   a third encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the first secret key transformed by the transforming unit to generate an encrypted digital production; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the third secret key encrypted by the first encryption unit, the first secret key encrypted by the second encryption unit and the digital production encrypted by the third encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a forth secret key that is specific to the decrypting device and that corresponds to the second secret key, and is operable to:   obtain the CRL, the encrypted third secret key, the encrypted first secret key and the encrypted digital production, via the recording medium or the transmission medium;   decrypt the obtained and encrypted third secret key with the memorized forth secret key;   decrypt the obtained and encrypted first secret key with the decrypted third secret key;   calculate the attribute value based on the obtained CRL;   transform the decrypted first secret key with the calculated attribute value; and   decrypt the obtained and encrypted digital production with the transformed first secret key.   
   
   
       101 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a medium identification information memory unit operable to memorize a medium identification information which is used for the encryption of the digital production;   a first secret key memory unit operable to memorize a first secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a second secret key memory unit operable to memorize a second secret key which is used for the encryption of the medium identification information;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the first secret key memorized in the first secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed first secret key;   a first encryption unit operable to encrypt the second secret key memorized in the second secret key memory unit with the first secret key transformed by the transforming unit to generate an encrypted second secret key;   a function transformation unit operable to input the medium Identification information memorized in the medium identification information unit and the second secret key memorized in the second secret key memory unit into a one-way function to calculate a function value;   a second encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the function value calculated by the function transformation unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the second secret key encrypted by the first encryption unit, the medium identification information memorized in the medium identification information memory unit, and the digital production encrypted by the third encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a third secret key that is specific to the decrypting device and that corresponds to the first secret key, and is operable to:   obtain the CRL, the encrypted second secret key, the medium identification information and the encrypted digital production, via the recording medium or the transmission medium;   calculate an attribute value based on the obtained CRL;   transform the memorized third secret key with the calculated attribute value to generate a transformed third secret key;   decrypt the obtained and encrypted second secret key with the transformed third secret key;   input the obtained medium identification information with the decrypted second secret key into a one-way function to calculate the function value; and   decrypt the obtained and encrypted digital production with the calculated function value.   
   
   
       102 . The encryption device according to  claim 101  further comprising a confirmation data outputting unit operable to output a confirmation data which is to be a criterion for confirming whether the second secret key decrypted by the decrypting device is a qualified key or not. 
   
   
       103 . The encryption device according to  claim 102 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting a predetermined fixed-pattern data with the second secret key memorized in the second secret key memory unit, to the recording medium or the transmission medium. 
   
   
       104 . The encryption device according to  claim 102 , wherein the confirmation data outputting unit outputs the confirmation data which is obtained by encrypting the second secret key memorized in the second secret key memory unit with the second secret key, to the recording medium or the transmission medium. 
   
   
       105 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a medium identification information memory unit operable to memorize a medium identification information which is used for an encryption of the digital production;   a first secret key memory unit operable to memorize a first secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a second secret key memory unit operable to memorize a second secret key which is used for the encryption of the medium identification information;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   a first encryption unit operable to encrypt the second secret key memorized in the second secret key memory unit with the first secret key memorized in the first secret key memory unit;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform the second secret key memorized in the second secret key memory unit with the attribute value calculated by the attribute value calculating unit to generate a transformed second secret key;   a function transformation unit operable to input the medium identification information memorized in the medium identification information memory unit and the second secret key transformed by the transforming unit into a one-way function to calculate a function value;   a second encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the function value calculated by the function transformation unit; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the second secret key encrypted by the first encryption unit, the medium identification information memorized in the medium identification information memory unit, and the digital production encrypted by the third encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a third secret key that is specific to the decrypting device and that corresponds to the first secret key, and is operable to:   obtain the CRL, the encrypted second secret key, the medium identification information and the encrypted digital production, via the recording medium or the transmission medium;   decrypt the obtained and encrypted second secret key with the memorized third secret key;   calculate the attribute value based on the obtained CRL;   transform the decrypted second secret key with the calculated attribute value;   input the obtained medium identification information and the transformed second secret key into a one-way function to obtain the function value; and   decrypt the obtained and encrypted digital production with the obtained function value.   
   
   
       106 . An encryption device that encrypts a digital production and outputs the digital production to a recording medium or a transmission medium, comprising:
 a digital production memory unit operable to memorize the digital production;   a medium identification information memory unit operable to memorize a medium identification information which is used for the encryption of the digital production;   a first secret key memory unit operable to memorize a first secret key corresponding to a decrypting device that decrypts the encrypted digital production;   a second secret key memory unit operable to memorize a second secret key which is used for the encryption of the medium identification information;   a Certificate Revocation List (CRL) memory unit operable to memorize a CRL which is an information list that specifies a revoked public key certificate;   a first encryption unit operable to encrypt the second secret key memorized in the second secret key memory unit with the first secret key memorized in the first secret key memory unit;   a function transformation unit operable to input the medium identification information memorized in the medium identification information memory unit and the second secret key memorized in the second secret key memory into a one-way function to calculate a function value;   an attribute value calculating unit operable to calculate an attribute value based on the CRL memorized in the CRL memory unit;   a transforming unit operable to transform a function value obtained from the function transformation unit with the attribute value calculated by the attribute value calculating unit to generate a transformed function value;   a second encryption unit operable to encrypt the digital production memorized in the digital production memory unit with the function value transformed by the function transformation unit to generate an encrypted digital production; and   an outputting unit operable to output the CRL memorized in the CRL memory unit, the second secret key encrypted by the first encryption unit, the medium identification information memorized in the medium identification information memory unit, and the digital production encrypted by the second encryption unit, to the recording medium or the transmission medium,   wherein the decrypting device memorizes a third secret key that is specific to the decrypting device and that corresponds to the first secret key, and is operable to:   obtain the CRL, the encrypted second secret key, the medium identification information and the encrypted digital production, via the recording medium or the transmission medium;   decrypt the obtained and encrypted second secret key with the memorized third secret key;   input the obtained medium identification information and the decrypted second secret key into a one-way function to obtain the function value;   calculate the attribute value based on the obtained CRL;   transform the obtained function value with the calculated attribute value; and   decrypt the obtained and encrypted digital production with the transformed function value.