Information processing apparatus and method for managing grouped devices in an encrypted environment

1. An information processing apparatus, comprising:

means for acquiring at least one certificate from each of a plurality of devices belonging to a group, each certificate including identification data allocated to a respective one of the plurality of grouped devices and a public key associated with the respective device;

means for storing each of the certificates as a certificate group directly corresponding to the group of devices;

means for authenticating the certificates for the group of devices when a content request from one of the plurality of devices is obtained by the acquiring means, including using tags based on leaf identifiers included in each of the certificates to trace associated enabling key blocks to eliminate any revoked certificates;

means for encrypting an encryption key using the public keys of each of the authenticated certificates from the plurality of grouped devices to obtain encrypted data composed of a set of encrypted encryption keys associated with each valid device in the group, the encryption key encrypting requested content; and

means for providing the encrypted requested content together with the encrypted encryption key to each of the valid devices in the group, wherein the encrypted requested content is configured to be decrypted by each of the devices using a decrypted version of the encrypted encryption key.

2. An information processing apparatus according to claim 1 , wherein the set of data is either a content or a license.

3. An information processing apparatus according to claim 1 , wherein the identification data is a leaf identifier.

4. An information processing apparatus according to claim 1 , wherein the encryption means encrypts the encrytion key with the public keys associated with respective devices for which the certificates have not been revoked.

5. An information processing method, comprising:

acquiring at least one certificate from a plurality of devices belonging to a group, each certificate including identification data allocated to a respective one of the plurality of grouped devices and a public key associated with the respective device;

storing each of the certificates as a certificate group directly corresponding to the group of devices;

authenticating the certificates for the grouped devices when a content request from one of the plurality of devices is received, including tracing an enabling key block using tags based on leaf identifiers included in each of the certificates of the plurality of devices to eliminate any revoked certificates;

encrypting an encryption key using the public keys of each of the authenticated certificates from the plurality of grouped devices to obtain encrypted data composed of a set of encryption keys associated with each valid device in the group, wherein the encryption key encrypts requested content; and

providing the encrypted encryption key to each of the valid devices in the group together with the encrypted requested content, wherein the encrypted requested content is configured to be decrypted using a decrypted version of the encrypted encryption key.

6. A storage medium recorded with a computer-readable program for use by a processor, the program comprising the steps of:

acquiring at least one certificate from a plurality of devices belonging to a group, each certificate including identification data allocated to a respective one of the plurality of grouped devices and a public key associated with the respective device;

storing each of the certificates as a certificate group directly corresponding to the group of devices;

authenticating the certificates for the grouped devices when a content request from one of the plurality of devices is received, including tracing an enabling key block using tags based on leaf identifiers included in each of the certificates of the plurality of devices to eliminate any revoked certificates;

encrypting an encryption key using the public keys of each of the authenticated certificates from the plurality of grouped devices to obtain encrypted data composed of a set of encryption keys associated with each valid device in the group, wherein the encryption key encrypts requested content; and

providing the encrypted encryption key to each of the valid devices in the group along with the encrypted requested content, wherein the encrypted requested content is configured to be decrypted using a decrypted version of the encrypted encryption key.

7. An information processing method, comprising:

authenticating a plurality of certificates belonging to a plurality of devices which comprise a group to identify whether any of the plurality of certificates has been revoked, including tracing an enabling key block using tags based on leaf identifiers included in each of the certificates of the plurality of devices to eliminate any revoked certificates;

selecting all of the plurality of certificates that have not been revoked;

encrypting a key using each of the selected certificates to obtain encrypted data composed of a set of encryption keys associated with each valid device in the group; and

providing encrypted content data together with the encrypted key to the valid devices of the group, wherein the encrypted content data is configured to be decrypted using a decrypted version of the encrypted key.

8. An information processing method according to claim 7 , wherein the key comprises a content key and the data comprises content.

9. An information processing method according to claim 7 , wherein the key comprises a license key and the data comprises a license.