Information recording apparatus

Abstract

An information recording apparatus has a drive unit to record digital information including digital contents; and a host unit to control reading and writing of the digital information for the drive unit. The host unit has a network processing unit to communicate with a server, a shadow determination unit to determine whether a shadow boot program to be executed prior to a boot program is executable, a shadow reading unit to read the shadow program from the drive unit when the shadow determination unit determines to be executable, a shadow execution unit to execute the shadow program, a server authentication unit to perform authentication with the server in accordance with a processing of the shadow program, and a password transmitter to transmit to the drive unit a password used for unlock of the drive unit when the authentication with the server is successful.

1 . An information recording apparatus comprising:
 a drive unit to record digital information including digital contents; and   a host unit to control reading and writing of the digital information for the drive unit, wherein:   the host unit comprises:   a network processing unit to communicate with a server;   a shadow determination unit to determine whether a shadow boot program to be executed prior to a boot program is executable;   a shadow reading unit to read the shadow program from the drive unit when the shadow determination unit determines to be executable;   a shadow execution unit to execute the shadow program;   a server authentication unit to perform authentication with the server in accordance with a processing of the shadow program; and   a password transmitter to transmit to the drive unit a password used for unlock of the drive unit when the authentication with the server is successful,   the drive unit comprises:   a shadow boot program storage to store the shadow boot program;   a boot program storage to store the boot program;   a user data storage to store user data including arbitrary digital data;   a password verification unit to determine whether the password transmitted from the host unit coincides with a password registered in advance; and   a lock controller to unlock the user data storage and to permit access to the user data storage when the password verification unit determines to coincide with the password.   
     
     
         2 . The apparatus of  claim 1 , wherein:
 the host unit comprises:   a password generator to generate the password;   a main memory to extract code information and data when the shadow boot program is executed;   an encryption processing unit to generate an encrypted password by encrypting the password by using a value at a specific position or a specific range of the main memory when the shadow boot program executes a specific instruction, or a value acquired from the server after the authentication with the server is successful; and   the lock controller locks the user data storage by using the password.   
     
     
         3 . The apparatus of  claim 1 , wherein
 the host unit comprises:   a password acquisition unit to acquire the password from the server after the authentication with the server is successful;   a main memory in which code information and data are extract when the shadow boot program is executed;   an encryption processing unit to generate the encrypted password by encrypting the password by using a value at a specific position or a specific range of the main memory when the shadow boot program executes a specific instruction, or by using a value acquired from the server after the authentication with the server is successful; and   the lock controller locks the user data storage by using the password.   
     
     
         4 . The apparatus of  claim 2 , further comprising an decryption processing unit to decrypt the encrypted password by using a value at a specific position or a specific range of the main memory after the authentication with the server is successful and when the shadow boot program executes the specific instruction, or by using a value acquired from the server after the authentication with the server is successful,
 wherein the lock controller unlocks the user data storage and permits access to the user data storage when the password verification unit determines that the password decrypted by the decryption processing unit coincides.   
     
     
         5 . The apparatus of  claim 2 , wherein:
 the user data storage is divided into a plurality of data areas;   the encryption processing unit generates the encrypted password unique to each of the plurality of data areas; and   the lock controller controls lock and unlock for each of the plurality of data areas.   
     
     
         6 . An information recording apparatus comprising:
 a drive unit to record a program; and   a host unit to execute the program,   wherein the shadow program includes a non-encrypted plaintext program and an encrypted encryption program,   the host unit comprises:   a shadow determination unit to determinate whether a shadow boot program to be executed prior to a boot program is executable;   a shadow reading unit to read the shadow boot program from the drive unit when the shadow determination unit determines to be executable;   an encryption data storage to store an encrypted program key;   a confidential information storage to store a unique key;   a hash calculation unit to calculate a hash value at a specific position or a specific range obtained by unfolding the shadow boot program of a main memory when a specific instruction is issued by the plaintext program in the shadow program;   a decryption processing unit to decrypt the encrypted private key stored in the encryption data storage by using the hash value stored in the confidential information storage and the unique key in the confidential information storage;   a program decryption unit to decrypt the encrypted encryption program in the shadow boot program by using the private key decrypted by decryption processing unit; and   a calculation processing unit to execute the shadow program.   
     
     
         7 . The apparatus of  claim 1 , wherein:
 the shadow boot program storage comprises:   an initial program storage to store an initial program which has been already installed on the drive unit and is firstly executed; and   a download storage to store a download program which is downloaded from the server when a predetermined condition is satisfied and is executed following to the initial program,   the user data storage comprising a first data area to store user data corresponding to the initial program and a second data area to store user data corresponding to the download program; and   the lock controller unlocking the first data area when the predetermined condition is satisfied due to that the shadow execution unit executes the initial program, and then the shadow execution unit executes the download program to unlock the second data area when the authentication with the server is successful.   
     
     
         8 . The apparatus of  claim 7 , wherein:
 the host unit comprises a main memory on which code information and data are extracted when the shadow boot program is executed;   the lock controller unlocks the first data area when the predetermined condition is satisfied due to that the shadow execution unit executes the initial program, and then when the shadow execution unit executes the download program and the specific position or the specific range of the memory coincides with an expected value and the authentication with the server is successful, unlocks the second data area.   
     
     
         9 . The apparatus of  claim 7 , wherein:
 the drive unit comprises an OS storage to store a program of an operating system; and   the lock controller unlocks the OS storage and the first data area when the predetermined condition is satisfied due to that the shadow execution unit executes the initial program.   
     
     
         10 . An information recording apparatus comprising:
 a drive unit to record digital information; and   a host unit to control recording and reading of the digital information for the drive unit, wherein:   the host unit comprises:   a network processing unit to communicate with a server;   a shadow determination unit to determine whether a shadow boot program to be executed prior to a boot program is executable;   a shadow reading unit to read the shadow boot program from the drive unit when the shadow determination unit determines to be executable;   a calculation processing unit to execute the shadow boot program;   a confidential key storage to store an encrypted private key;   a private key decryption unit to decrypt the private key by using encryption information generated by the calculation processing unit; and   a server authentication unit to perform authentication with the server by using the private key decrypted by the private key decryption unit, and   the calculation processing unit generates the encryption information by using a value at a specific position or a specific range in a main memory on which the shadow boot program is extracted when a specific instruction is issued by the shadow boot program.   
     
     
         11 . The apparatus of  claim 10 , wherein:
 the drive unit comprises:   a shadow boot program storage to store the shadow boot program; and   a boot program storage to store the boot program,   wherein the shadow boot program comprises a non-encrypted plaintext program and an encrypted encryption program, and   the host unit comprises a program decryption unit to decrypt the encryption program by using the encryption information.