Recording device, and content-data playback system
A recording device configured to store content data in an encrypted manner, the recording device comprises a memory unit which stores various data, and a controller which controls the memory unit. The controller possesses a controller key and unique identification information, and is configured to generate a controller-unique key unique for each controller in accordance with the controller key and the identification information. The memory unit stores an MKB generated by encrypting a medium key with a device key set that is a collection of a plurality of device keys, an encrypted device key set generated by encrypting the device key set with the controller-unique key, and a device-key-set index which uniquely identifies the device key set. The controller comprises a decryption unit which obtains a device key set by decrypting the encrypted device key set with the controller-unique key, an ID generating unit which generates a medium ID from the identification information and the device-key-set index, and an authentication unit which executes an authentication process with an exterior in accordance with the device key set, the medium ID and the MKB.
1. A memory device, comprising:
a storage; and
a controller, wherein the controller is embedded with controller key data and value data during a manufacturing process, the value data being unique to the controller,
the controller is configured to decrypt encrypted private key data using the controller key data, the encrypted private key data being generated by encrypting private key data using the controller key data outside the controller,
the controller is configured to generate the private key data by decrypting the encrypted private key data using the controller key data, encrypt the private key data using controller unique key data, and generate the controller unique key data by performing a calculation in which the value data and the controller key data are input to a one-way function,
the controller is configured to generate new encrypted private key data by encrypting the private key data using the controller unique key data, and write the new encrypted private key data in the storage,
the controller is configured to receive the private key data from outside of the controller in a key data set as a group of key data provided as a private key,
the private key data is encrypted by a first vendor using the controller key data,
the controller key data is embedded in the controller by a second vendor that manufactures the controller, the second vendor being different from the first vendor, and
the value data and the encrypted private key data are inputted to the controller.
2. The memory device according to claim 1 , wherein the controller is configured to write the new encrypted private key data to the storage together with information specifying the private key data uniquely.
3. The memory device according to claim 2 , wherein the controller is configured to certify information obtained from outside the memory device.
4. A memory device, comprising:
a controller; and
a storage, wherein
the controller is embedded with controller key data and value data during a manufacturing process,
the controller is configured to decrypt encrypted private key data using the controller key data, the encrypted private key data being generated by encrypting private key data using the controller key data outside the controller,
the controller is configured to generate the private key data by decrypting the encrypted private key data using the controller key data, encrypt the private key data using controller unique key data, and generate the controller unique key data by performing a function calculation using the value data and the controller key data as inputs,
the controller is configured to generate new encrypted secret key data by encrypting in the controller the private key data using the controller unique key data, and write the new encrypted secret key data in the storage,
the private key data is encrypted by a first vendor using the controller key data,
the controller key data is embedded to the controller by a second vendor that manufactures the controller, the second vendor being different from the first vendor, and
the value data and the encrypted private key data are inputted to the controller.
5. The memory device according to claim 4 , wherein the controller is configured to generate the controller unique key data by performing a calculation in which the value data and the controller key data are input to a one-way function.
6. The memory device according to claim 4 , wherein the controller is configured to receive information from the second vendor, the information being key data set information as a group of key data provided as a private key, and
the key data set information is provided to the controller after being generated in the second vendor.
7. A memory device, comprising:
a storage; and
a controller, wherein
the controller is embedded with controller key data and value data unique to the controller, and
the storage is written with encrypted private key data, the encrypted private key data being generated by encrypting private key data using the controller key data outside the controller, decrypting the private key data in the controller, and then encrypting the private key data using unique key data that is based on the controller unique key data and the value data,
the private key data is encrypted by a first vendor using the controller key data,
the controller key data is embedded to the controller by a second vendor that manufactures the controller, the second vendor being different from the first vendor,
the value data and the encrypted private key data are inputted to the controller,
the unique key data is generated by performing a calculation in which the value data and the controller key data are input to a one-way function, and
the encrypted private key data generated by using the unique key data is written in the storage together with information specifying the private key data uniquely.